last executing test programs: 1m50.261491339s ago: executing program 2 (id=868): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140)=0x9, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x40004, 0x25dfdbfe, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0xe, @in6={0xa, 0x4e22, 0xea5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}}, @sadb_sa={0x2, 0x1, 0x5, 0x0, 0x0, 0x7, 0x2, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x200000f4}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}]}, 0x78}}, 0x8810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040000}, 0x20000014) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000480)="b38cc1bedc4d76672a1de9508aa27d4f0e9c2241057036d578e957e0c5332a84be255dbd9862f0d90c7d4172bc602e6b5766a8c562054603b692f5fcdc48ed183da482986041345e18", 0x49}) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ptrace$getregs(0x1a, r3, 0xfffffffffffffff4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x1, 0x7, 0xa, 0x8, 0xfffffffffffffff0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000180)={0x19980330, r3}, &(0x7f0000000040)={0x0, 0x0, 0xccb3, 0x0, 0x8}) r6 = shmget$private(0x0, 0x13000, 0x78000000, &(0x7f0000feb000/0x13000)=nil) write$UHID_INPUT(r5, &(0x7f00000005c0)={0x8, {"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", 0x1000}}, 0x1006) shmctl$IPC_STAT(r6, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000190a010200000000000000"], 0x2c}}, 0x0) 1m49.498527744s ago: executing program 2 (id=871): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000e00)={'sit0\x00', 0x0, 0x700, 0x1, 0x0, 0xdf, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x84, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x26}}}}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x2000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000780)={0x50, 0x0, r5, {0x7, 0x1f, 0xb, 0x202, 0x4, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x2b, 0xffffffff, 0xffffffff80a04000, 0x0, 0xfe00, 0x5, 0x9, 0x0, 0x0, 0x4, 0x6}}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) 1m49.024837805s ago: executing program 2 (id=874): syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000f90109022d00010000000009040000030b0800e209058da203002a000009050505000000000009058b3ebd2e0b257916915ea5a89ee44cc60e5281ce6a33bb9853e5d24e56ade57864fe22488a3c959109d5f6c811ef137e33380b9c7c8943f364ab7178421937af1ce3b9915ec965b8aae0e34ef8405805c746be8b5e05515bbba3ab9022cbe88f13881137babe9127c49a17"], 0x0) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) sendmmsg(r0, &(0x7f0000008d40)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000380)="c07bfe3a5540767bfaed601e7bf306a15c859b5fde7ee7887b5642438f8265931f2b5e9d88a59bfabf38b5da2e240aac120a10cfdd30e6ff0eadebcba1db8780673caa43cc340bfa6b46796a4f753a229f6681aa19f12baed429f3b2f6c53cac7a188510802fb51affcb9fe34777eba96cc434103dc397674a6682887889bdac2b89cb88be660a204f22b1d8de3bebfcb5cd4d0fa77a702bf0f0063eddad524f7fb682", 0xa3}, {&(0x7f0000000440)="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", 0x38f}], 0x2}}], 0x1, 0x20000001) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async, rerun: 32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x119d00, 0x0) (rerun: 32) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000001c0)={0x8057}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x8, 0x6, 0x201, 0x0, 0x0, {0xc1d2eee3e5e0f38b}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 1m48.807481302s ago: executing program 2 (id=876): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3ca, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000040)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 1m48.681565773s ago: executing program 4 (id=877): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x8, 0xd0, 0x1f, 0x2, 0x9, 0xffff}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000810000000200000009"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r3, 0x500}, 0x38) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="d1000c000800000085100000f9ffffff180100002020782500000000002020207b1af8ff00000000bfa10000f8ffffffb702000008000000b7030000030000008500000006000000bd2440001500000018010000202075"], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000830000c0"]) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0xc000001) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) 1m48.471439417s ago: executing program 4 (id=879): syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000140)={0x20, 0x5, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000140)={0x20, 0x5, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x6]}, 0x8) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x2, 0x0, &(0x7f00000001c0)=""/19, &(0x7f0000000200)=""/170, &(0x7f00000002c0)=""/115, 0xd000}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_usb_connect(0x4, 0xf18, &(0x7f0000001800)={{0x12, 0x1, 0x201, 0x8d, 0x25, 0x96, 0x8, 0x499, 0x1053, 0x42d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf06, 0x3, 0x9, 0x0, 0xc0, 0x3, [{{0x9, 0x4, 0x39, 0x2, 0xd, 0xff, 0xf1, 0xe4, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x7f0a, 0xb}, [@selector_unit={0x9, 0x24, 0x5, 0x6, 0xff, "67df521a"}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0xc, "e865e4d7"}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x1, "e3f99f"}]}], [{{0x9, 0x5, 0xa, 0xf036d572e92e0c83, 0x20, 0x9, 0xf7, 0x10, [@generic={0xee, 0xe, "e05584f97be8fa5634325d853ced9f31c55e070aad700b7a096df213fed4bcb2612fb1aa9fac59df7fe6ad4ee561ca420754269a3a90a2c98bd1a4fe9a3777eed9c6ea880593aa6d62c6613374956f55f0ff6bfaa0b7812a18a60212dad80f0f607de86d20acf400a1a835e12d17af441a63af4843f27d873cbba7fad2842ef9bc146650b1169337095107ca20240394dd9dc4163ffb352fc044cfb4149f819e58a23cde0ffdbc653a404055e743324891933b2961f28fda547050f7e784dce81e86cdce8bbe79b003ad2a7e168bda611ea637a8971a7d0ef6205bf4d51f251a4a000b4304c6c0856c03335f"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x9, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x80, 0x81, 0x1, [@generic={0xca, 0x8, "a4333e4453e5a9e2b3760f050a4b67f40ca0dece0027fa7dfeeeff70325f4ca3924d9a13c02f6d984c6419e5cd092c68a39c19b434e4d9071477853c2b132234e077e58b0608d2362775da27f02785478fc093580dada31ab9db83183fafb3c3b17a1dbbd85a35d855410dcaa406706c9921899dae8772e55272342b5612fa2bc26383136e5e06ee747dc7c4f8b9d5e5119f4da25b04b76583c5cdf1520fa2874bac23177403e723f640ff25bb123964e696dea5cba5d012e4610681305ba04e4be4d964b1b03dd0"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xffff}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x88, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xe, 0xffff}, @generic={0x34, 0x30, "13ab13748c3d32256d51ae56abf4f8e7e856a465bcd2df80edcbd91e377846bc7094ee3afb40677858cc15639683a6c0d064"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x1, 0x87, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x1, 0xff80}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x8, 0x7, 0x3, [@generic={0x4c, 0x21, "b0b8f512c8fe63f1762fe600e1ee7885187cfe6ee2ae22e21e6bbb719bf6368e1722f644ec66316a86f2e985406cd4f388dcfa5d2c996ef7b3c85ae5f5b7e031fbc9a535c3a5713dd419"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x1, 0x4, 0x40, [@generic={0xd8, 0xc, "492edffc85ff1a9876572bd96924c8a28de942054992f93df7bae94518e89a62de602d9696cd0a34a37f3d89c2d166a35885950c3c3de3e47fbc22ef1bb6d825bf9638a92b51961a1fbeb950c7a9a334d25baaa21870139592f290410fb3ac1f6026647cd73384578b3b9348ee3228533d6619d0ff0834c30c8eeb7686fbf0904beedcf4028a23e49ab298b4ae67c8e7c62b88132bea1e3f70bb1a36566c7b100222c70471533421560d747eb69c5e5ab9a28680fc3360e4f92e7fabbf6b520c2195e4e0b1c2af5e3be806d8fd6c416304496fcd8d58"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x10, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x5, 0x10, 0x61, [@generic={0x53, 0x31, "44d12d227aab653bf72bcf967b59e9fe9210448e551f497d0376621f0c9a8923219e34c8d991b6cf0527e0ca3d4f1b24782c3bc8135bd94528f0f7a50a5f4c6a9565f974006d79ecdab042ad420adcb8c7"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x0, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x9, 0x6, [@generic={0xaa, 0x1, "6a15b113bd3e81958bbcab5da1498f0d8045bd6bcdfc12234ad29aec86b274ae177a6a059dff6eb2b75f66ac0567a1602133c406db3b5022c889da6d8ab76a13599e2b089375f22f9ed16145bc3007735a78b554c1d923de9b6eb6df258ba1d6f983d4623d5eaee302f91dd0ebd6012aaf0bbb23dc3665cdfb536a894b94c3ea69bc322c710dca8e6fb8c0d52f4fcc43d43d160d64a47d5bd3cead8aee6cf9b2d7b1f985a5c3d295"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x8, 0xe, 0x2, [@generic={0x70, 0x22, "2f24dcf54868c8726a7cdbf0d0edf1f51d92e9ad18ebf91413a517f825f9a8e56e1cd4c8a4efe5329f8652cf60c20e7156cac0b52efc216ed6b65cf7de6e9e74fb50f49211b652dbdd9cd16a6cb3cb2c6777d7a0fc889047e032d16d66586c29a7610568110c71340c8b1dfba113"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xd9, 0x64c}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x16, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x2}]}}]}}, {{0x9, 0x4, 0x29, 0x10, 0x10, 0xcf, 0xc6, 0x5b, 0x4, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "d79c"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x29, 0x200, 0x10, 0xc4}, {0x6, 0x24, 0x1a, 0x2, 0x14}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x8a, 0x3, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x7, 0xc, 0xfb, 0x81, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8d, 0x17, 0x6c}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x7, [0x2, 0x0, 0x40, 0x3]}, @obex={0x5, 0x24, 0x15, 0xb}]}], [{{0x9, 0x5, 0x80, 0x3, 0x40, 0xad, 0x3, 0xf7, [@generic={0x20, 0x6, "431a671896af0c26c0a63056115f58e5c2601bed9bddf9b7653b47d51303"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0x7, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3e}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x3, 0x2, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x83, 0x65, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x2, 0x7, 0x25, [@generic={0xe2, 0xd, "77f9fa4a3f66a6fa12884978bae138e46508ac446d5478314662798fbad89f71be1b451d744660172efa392e0770c7e46c321e66aa5a34fc59bcaf617ed462474a671c727e2ccfd7b716c869f234952879b9d89aca0194dc02c52a9c20d9ea1a1ca1267bc755ce509503324fd04cc285f87b7b28f7283fd7fc018c506ef714099e26748ae3d8d0ffa39aefbebd3e5e95b01b5060c7c2d784a54475b55333ce84b2f61303cd9c4a48b6fdefbc63fcfa813111c087ce1d80a5ebcd7e31280e300e2cbd88f43c688cec7e1ae5d2f3c188706c199af1ce2f30905663a7d806c6720c"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x8, 0xec, 0x9, [@generic={0xfc, 0x4, "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"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x9db41a390fc575da, 0x4, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x5, 0x24, 0x1, [@generic={0x4c, 0xa, "35cb3e36779dfa8588c7b62cd59dd57e1d3e43b9ed41d906350da1039ca4a81c7853b0a2d2731ad6c2991af13dba6c2c9fc3ae781d15c9fb63ce30e05cc103ba8955575a1c65648964e1"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x10, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfffc}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0x4, 0x4, [@generic={0x7f, 0x3, "cb891e15e37a904195bb6252c8f5933d8dacef610de06c13148ccdecdc7a2d8db5699ec85a601c28b1f7cf7b63d94f660f06a0322092ac0174e573e1c19502741daf50c3c1a5e8c51415a3ecb79c6257d8d17359167c0e0cc3f6d0fad0e64fe8439c3c70c1bddb9809220f5345be988d04ef030c61852b3ace1a70648a"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x4, 0xa1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xfffa}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x9, 0x7f, 0xdb, [@generic={0xf9, 0x5, "9d8ddbdd97deffb2ff98ccada0064148ba21e9c13369028066a497e79ea492ca23d6ce3c42fdc8b49f02feeeedc609d035bca68ab43f8e18edd68d7fc5c25e10ab214621d02f790ff835391753e4e31da4cedd3122bf1734fe441ee8d5779769afa046000e58f0691d51bdf1a475d68cf56d8a88d80616d6a86f84cad2838b21f6a5dda4c6ad05addd15e4ba974e939f92693dc0a7feb6cb2306e2d1af05e7878754cc5325ba9f9dda126ee2466f1590c7aa907ee252eacfc3cbece621e71a2aae6d0d0353e5e63e11b262d4136219827ece1f27d73b55d9f519d4e46899d759e2c5288bab9229abdb8b2a163442c78a5caae96850aa82"}, @generic={0x84, 0x31, "768f7cc67152b6a6eadf0019f5ffa6ed704f09b97ba145561cc8c8932f7bd1e69e0abedc73178bc31fe5ca2dfbc93268096ff0f5274f181a9415a0eee6e6142b7bb6e9be4c3c01832bcf1dc127307792300be04fc978b4c62da6d3df8d044b632ee942c852c198f42ec1c1fd6083d02f97284129997b8fc7df3929df897ac38ab907"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x4, 0x0, 0x9, [@generic={0x1c, 0x23, "92eeb877791aa5726df2d75037081a33564139989c6132dc868b"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x4df, 0x9, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xa1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x400}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xba, 0x9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x7ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x5, 0x6, [@generic={0xdd, 0x22, "c4195bd258a89b04169b526df67e6b97434467e13817cc508493c076ad10635fd25345b559bb71d3d5d290ba49848821aaa392186122f67e0754bbbcdddfb4adcfab785ec35b43696fb9e7a86134659a2a02b9b2f0cd2a0068242845c03849aba95ce711f0f0f44942b737d58461407e00d1bdcd081b32f404ef64457d1a0e2700b2b2a17a6056debbf32d8eab6125b145b8d0c6e80aae19727170c8035d66935583ff510650a12bdc30a85134944846313e62183c64c91c90807a493cf329899743558f62125a688858456df1eb4ac290f6a3dfef886cfc5e094e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xc0}]}}]}}, {{0x9, 0x4, 0x8d, 0x8, 0x7, 0x80, 0xd3, 0x45, 0x20, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "a2fd5179e4"}, {0x5, 0x24, 0x0, 0x32b}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x40, 0x5, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x8, 0x4}, @country_functional={0x10, 0x24, 0x7, 0x9, 0x5, [0xffff, 0x7, 0xf29, 0x9, 0x6]}]}], [{{0x9, 0x5, 0xb, 0x2, 0x20, 0x5, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7, 0xea, 0x6, [@generic={0x37, 0x3, "f7ef2574cb07376c0dd664cb068e6b26e963c2b3e3d419ef6cc0d3b0653d101831dbe3363be5c60ec237526de89165b94470cc4799"}, @generic={0x80, 0x5, "8e0644f8d725158d12bc14b35c1e704c6c3ccb5d19db21406f80f08bf1288bc4a4c98b75215c802753fbb421adff7b5dac664fd3a9715dbaebf0bfa994c545bf0edd4d1e43f22c0476bddf7b24fa93f849a1d14c6a25e6c5a54ff697c3c52ff0ba74a4ad9dbde677816dd50085110180ec6666fdd0c5e1f627f6aeeb74d8"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0xf7, 0x80, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x25}]}}, {{0x9, 0x5, 0x5, 0x0, 0x640, 0xc, 0x7, 0x9, [@generic={0x53, 0x22, "54b13dedbe8c3dc2cad355448d19a0ba3c50e2b4929ad61e890b58d7f6b258be15447f8bd233e48a434add75b6b9efedbc0491b3b9929e7b2d76563feb5dff006ad52d1cb44d3b0de004836fda90dc53f9"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xff, 0x9, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xbb}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x3, 0xae, 0x0, [@generic={0x97, 0xe, "3e45cccbf5ccd20cbc234cf9acb403ca183c426730a1161d547f15c10ff24911a7027dfcc433fd94dabc9f9d51d43e60666eae42253e6b4540e9cffaebec54c364002694238347d606562371ddc5e27c1f4226a93f70d159df9d7135ac260e1d4ee4caf76789a9c0442d571af0e3c17c342f64c89d35d04f4fe87d093657cc733bfea365367d277cbe05db7969bea97dee25fcc421"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x18}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0xfa, 0x5, 0x0, [@generic={0x5a, 0xf, "7a722dc91a56a032f94f8b675c880b3f9dfaf8d9328de9aa42147b5cfecc58a72e2a2fbb1eb3df7e1d0073580e0583563ff4d7808b0544843eaa7e749706510f620e86fdc008b51dc0f0c688c51cad8e70b71f9279a9190e"}, @generic={0xa2, 0x3, "2cb37ef669ca7f7d02020ec6b4e9fb40ba6f6333cb66561459221bcc7bfd387ab2ba6ee64a1d90e64cbe6de2db8725dda060f4bcf4b8b9a901beac5f87689656476c90968c2e650cab79c45a15c3627546d03571369724952bd038327f57140ff1d7e4b0cf4178a57233cd8fff7a1707bfe3597e28bec8ddc9df1fe7da1bd1619d3e4ace0f11ec0ca11cfe2c431f978731413d08c9d8f55cdbee6e008e215249"}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x5, 0x81, 0x9, 0x8, 0xb7}, 0x10b, &(0x7f0000000400)={0x5, 0xf, 0x10b, 0x2, [@generic={0xff, 0x10, 0x3, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x3, 0x5}]}, 0x8, [{0x60, &(0x7f0000000540)=@string={0x60, 0x3, "48f8161f5c6a6477fa8aa300dbcbe5dea251dc013f214656b8c6fb22c992b8b1e4d26638c36c671194397d5dcb81cc1439164cfc9019924da5129580370993a7234d77cb4f5c9c261b28f6df8fa1a11bc9023c90f1940ed41360964dc8a4"}}, {0xeb, &(0x7f00000005c0)=@string={0xeb, 0x3, "183662abea303a7176cb71db27b05ff4f41d8aa1b03af29e78c30e56041a8e5da779929c8be2719b6e599df4b5f102ac3267d758d71100af27e0f187526aa131c963bb6c4efe93c0d7925a96aa94332a5daba49564edfba73849b43382d25510083787985a968b1afd37abb7e84bc22170f7a89352a645edaf2c4c9c39d57e15a97fe0f4885de4b78a553846ea942a1e2cc537462d946951d39fe0a2eb350f20ac949df53bd6b9c6afe86089650e0146d955404b92ebe50edbdbc56b57cff3ba9374128b2aabdeeb749ab87822eb299071c457f1ae485a88c64fa70dd10ba608b2b409efa07f65bbae"}}, {0x58, &(0x7f00000006c0)=@string={0x58, 0x3, "3c32db4e5a2388b92bd143d134dbc201de7c6e42917ea01ea99f7b0a7527fb6bfaa513997f1a1d0030d617b1f35301d6947ee7ee075ec8e3b348751579a297b961ccd0e8e8682b48fdb9beb066e0abe9b101340cf5e4"}}, {0xdc, &(0x7f0000000740)=@string={0xdc, 0x3, "570e018826b8347311df8b53abec4f122b654c64f79c7c6c8439012364d548f8d96b70bde875210debc71d9e8d6a951028c43932f3b8d7d1cb706138624c953d8e520819aa92f1da86bb526b684277ff05dc89da364e44b9a2426a141551fde70236c5aa0e85c871b7a9cad72cc172797249a809ce82a760111350d585f44251434b66288e484f7a46576865e73fa0f92b5ae28ef0c752a9ed38969fa1f973f66377850107abe7c173d6e293b659a2deaa9b637fe229a03449faabc48800b3b67544acffc0a0a42f586f82b3c4f6d76f9a9dd307e0ad4fcc0b4b"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x81a}}, {0x2d, &(0x7f00000008c0)=@string={0x2d, 0x3, "0faacae47f20f11589c6ddf64c83363fddae449b384404516325b09d3f0781c6b2b43ec5fd8af28754e3c0"}}, {0x49, &(0x7f0000000900)=@string={0x49, 0x3, "d9ec198b4841363edb26c089f7d6278ca7fb7161a2c3a3d39ec8e7719d79c7c202047fb56559ba2a70db317e81612de7e4bb84043348ba0f744d45656f44906c143323a3ea76be"}}]}) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) landlock_restrict_self(r6, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r5, 0x8) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000a80)={0x14, &(0x7f0000000a00)={0x40, 0xd, 0x1c, {0x1c, 0x11, "4ca51f4bebf92de0dad979ee316232c24c8d76a9f560f21a45c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000ac0)={0x0, 0x1b, 0x82, "838092297884f170d5b26fddcc3662c4ca035728ed3dba086d0773d7cf8c13698d92fbede4f12ae60d9e3af65773e5c1915109185790935ec2cc810ede70d5c3e434564c2acbd6df3dd0a24e99cb891d31a31c8b462cbb185d7eed6ec1707a45743c5863dc7272b8fd9ebfc0fe3023a6f7e47802095f4321f7cf449da89c26cfee36"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x1}}) (async) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000a80)={0x14, &(0x7f0000000a00)={0x40, 0xd, 0x1c, {0x1c, 0x11, "4ca51f4bebf92de0dad979ee316232c24c8d76a9f560f21a45c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000ac0)={0x0, 0x1b, 0x82, "838092297884f170d5b26fddcc3662c4ca035728ed3dba086d0773d7cf8c13698d92fbede4f12ae60d9e3af65773e5c1915109185790935ec2cc810ede70d5c3e434564c2acbd6df3dd0a24e99cb891d31a31c8b462cbb185d7eed6ec1707a45743c5863dc7272b8fd9ebfc0fe3023a6f7e47802095f4321f7cf449da89c26cfee36"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x1}}) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) socket$inet(0x2, 0x1, 0x0) (async) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e24, @multicast2}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m48.413445256s ago: executing program 3 (id=880): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3523, &(0x7f0000000080)={0x0, 0x2822c, 0x4, 0x2, 0x1d0}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f00000001c0)='\x00', 0x40, 0xd9eee7ebbf796f94, &(0x7f0000000380)={0x1, 0xfffffffffffffffc, 0x5, 0x7}) mq_notify(r5, &(0x7f0000000440)={0x0, 0x2b, 0x2, @thr={&(0x7f00000003c0)="68e1c18cc43c756d9e139bf109679ca21dce86bd6dec3ea9a12e43e468d3b5c6df4852dc74f8994a0f3f24aacd0284c3658556211adb1f27b6096143", &(0x7f0000000400)="d9b5a529e0e6e3893daa8a1fe9ec274a608a03cbcfc49eb85ea97f6588e0b47fee01150a8be138fad3a24b828e3ac1b6b26b2e3460"}}) timer_delete(r4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="5000000011000100000000000040000007000000", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r7 = socket(0x1, 0x803, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0xa3, &(0x7f0000000000), 0x0) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x2b, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40844}, 0x4051844) dup(0xffffffffffffffff) 1m48.060720238s ago: executing program 3 (id=881): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10, 0x80c00) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000340)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x0, 0x6, 0x8, 0xe065, 0x3], 0x3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) mknodat(r3, &(0x7f0000000000)='./file0\x00', 0x10, 0xfffffff6) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x59033, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10001, 0x0, &(0x7f0000006680)) rt_sigaction(0x16, 0x0, 0x0, 0x8, &(0x7f0000000180)) 1m47.256765725s ago: executing program 1 (id=884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r3], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) 1m46.959151708s ago: executing program 1 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000b80)={0x40, 0xe, 0x3, "72cc59"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 64) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000580)={0x2, 0x4e20}, 0x10) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m46.782620761s ago: executing program 3 (id=886): r0 = msgget$private(0x0, 0x2) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000100"], 0x8, 0x800) (async) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8291bb5b8b4f0200000020000000"], 0x8, 0x800) msgrcv(r0, &(0x7f0000000380)={0x0, ""/114}, 0x7a, 0x3, 0x2000) (async) msgrcv(r0, &(0x7f0000000200)={0x0, ""/70}, 0x4e, 0x1, 0x2800) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r1) msgrcv(r0, &(0x7f0000000740)={0x0, ""/139}, 0x93, 0x3, 0x1000) (async) unshare(0x2c020400) (async, rerun: 64) msgget$private(0x0, 0x29) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYBLOB="e4000000410007010000000007000000017c00000400fc80cc0001"], 0xe4}}, 0x4010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, r3, 0x2) (async) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000003040)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000011c0)="99", 0x1}], 0x1}}], 0x1, 0x80) shutdown(r6, 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x8, @vbi={0x0, 0x9, 0x4, 0x30314742, [0x0, 0xffff0000], [0x10001, 0x7f], 0x3}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x9}, &(0x7f00000001c0)=0x8) fcntl$addseals(r4, 0x409, 0x1) 1m46.720904973s ago: executing program 3 (id=887): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="6c78ae90fa02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200ecf01000030"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001300)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m46.60464515s ago: executing program 2 (id=888): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000000000000040d1284b3799c64f848982c89e7b547ff207908bdef5cf4ef0bb7956271829a3ca0a8237a70c490e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$evdev(r0, &(0x7f0000000000), 0x100000008) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x27}, 0x1, r3}) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1f1181, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0) futex(&(0x7f0000000180), 0x80000000000b, 0x2, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000240)=r7) 1m45.633629567s ago: executing program 1 (id=890): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) futex(&(0x7f000000cffc)=0x3, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x2) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x12, 0x7, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="19c9", 0x538}], 0x1}}], 0x1, 0x0) (async) ptrace(0x4206, r0) (async) tkill(r0, 0x38) (async) ptrace(0x4208, r0) (async) wait4(r0, 0x0, 0x40000000, &(0x7f00000002c0)) (async) mincore(&(0x7f00003ce000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/226) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0xfd2d, 0x4) 1m45.188693974s ago: executing program 1 (id=891): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)="5587a7d4a4fa69f3fb618fa67051b138d77b0cc4376923af8b540b5bb3cbb8a2ed5ef9c9ae3bc4580f744ed29bd564d371dce83b8bd7aa8ef2bab3000adc87df543026738f379b777e6b78dc49e8f2b73109cc513834059774", &(0x7f0000000080)="8e94f8db8febe7ccf922892aece661294d66f240509f4820f044163ec9e8463489abf2752a71306a7ace4d76843229e23dea63dc58cd18e59d0312680bb2e4111e1ede369a569d95fabb4397b61a88f69c2096160723d21e24316947a5756630d603355ab57cd4dc4e50383b37d09e7ca7630e5dc0f11b", 0x59, 0x77}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x420040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) lseek(r8, 0x6, 0x3) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000b0000040"]) mlock(&(0x7f0000b37000/0x4000)=nil, 0x4000) 1m45.058702792s ago: executing program 4 (id=892): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c09000008002700090000000800b700"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 64) socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x3c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) (async) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) (async, rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) (async, rerun: 32) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000}) (async) sendmsg$WG_CMD_SET_DEVICE(r7, 0x0, 0x0) (async) r9 = syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x7, 0x0, 0x1) 1m44.774224773s ago: executing program 0 (id=894): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x14000577) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x0) openat$tcp_congestion(0xffffff9c, &(0x7f0000000340), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x4e5b, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0xc0189436, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socket$inet(0x2, 0x80001, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x8}}, 0x24, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000280)={&(0x7f0000000380)={{@host, 0x3c4}, {@my=0x1, 0x8}, 0x400, "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"}, 0x418, 0x3}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x5, 0x2}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) 1m44.754935396s ago: executing program 4 (id=895): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff, 0x1, 0x0, 0x10000}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x13, 0x3, 0x14, 0x0, 0xffffca21}}}]}, 0x78}}, 0x14) read$watch_queue(0xffffffffffffffff, &(0x7f00000000c0)=""/177, 0xb1) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xfc, 0xee, 0x33, 0x40, 0x203e, 0x8888, 0xa871, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x85, 0x0, 0x2, 0x8, 0x3, 0x0, 0x0, [], [{{0x9, 0x5, 0x8, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff, 0x1, 0x0, 0x10000}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x13, 0x3, 0x14, 0x0, 0xffffca21}}}]}, 0x78}}, 0x14) (async) read$watch_queue(0xffffffffffffffff, &(0x7f00000000c0)=""/177, 0xb1) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xfc, 0xee, 0x33, 0x40, 0x203e, 0x8888, 0xa871, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x85, 0x0, 0x2, 0x8, 0x3, 0x0, 0x0, [], [{{0x9, 0x5, 0x8, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x5e}}]}}]}}]}}, 0x0) (async) 1m44.5817618s ago: executing program 0 (id=896): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xd, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc058560f, &(0x7f0000000080)={0xfffffffd, 0xd, 0x3, 0x0, 0xfc}) syz_open_dev$vim2m(&(0x7f0000000040), 0xd, 0x2) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc058560f, &(0x7f0000000080)={0xfffffffd, 0xd, 0x3, 0x0, 0xfc}) (async) 1m44.533782423s ago: executing program 0 (id=897): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d, 0xfffffffffffffffe}}], 0x48}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async, rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async, rerun: 32) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async, rerun: 32) socket(0x1e, 0x5, 0x0) (async, rerun: 32) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xce4, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x102) (async) landlock_restrict_self(0xffffffffffffffff, 0x5) (async) truncate(0x0, 0xa) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m44.432924443s ago: executing program 0 (id=898): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r5, &(0x7f0000000280)='./file0\x00', 0x200) rmdir(&(0x7f0000000100)='./file0\x00') io_uring_enter(r2, 0xc7, 0x41df, 0x42, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x3}) 1m44.317416051s ago: executing program 1 (id=899): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x21, 0x2, 0x2) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x230}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38cf, &(0x7f0000000200)={0x0, 0x1fffff, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) inotify_init1(0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0', [{0x20, '+!:}\\['}], 0xa, "9b47ad4d6168ad712344c1a2d56935b06c"}, 0x23) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x80004178, 0x400, 0x8000002, 0x3d6}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) 1m37.141162564s ago: executing program 3 (id=900): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000003580)={&(0x7f0000001fc0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f0000000000000002900000034"], 0x108}, 0x2000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="00000000000b0000240012800b0001006272696467650000140002800800080088a8"], 0x44}}, 0x0) 1m37.063271457s ago: executing program 0 (id=901): ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000340)={0x18, 0x0, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000380)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000003c0)={0x18}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) (async) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r0, 0x0, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000500)={0x18, r0, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000540)={0x8, r0}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000580)={0x18}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000640)={0x20, 0x0, 0x0, 0x0, &(0x7f0000000680)}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000640)={0x20, 0x0, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, 0x0, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000900)={0x18, 0x0, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000940)={0x8, r1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r3, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r3, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r3, 0x0, r4}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x6, 0x0, 0x0, r4}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x6, 0x0, 0x0, r4}) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4d5d, 0x10, 0x2, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) 1m37.062572717s ago: executing program 2 (id=902): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sync() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45", 0x15}], 0x1) sync() sync() rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x40, 0x4, 0x3, 0x3ff}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000200)=[{0x4, 0xffff}, {0x0, 0x1, 0x1800}, {0x1, 0x0, 0x800}, {0x1}, {0x4, 0x1}, {0x2, 0x8000, 0x1000}], 0x6, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000600)="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", 0x146, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='logon\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r7}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{r3, r4+60000000}, {r1, r2+10000000}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) listen(0xffffffffffffffff, 0x8000007) lseek(r0, 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) utimes(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000ac0)={{0x77359400}, {r8, r9/1000+10000}}) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) 1m36.941878933s ago: executing program 4 (id=903): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0x4, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000280)="5596dc33e5575cd793aa2cbd9a0d455c2a1cc63f8918139602c46d445f1583a76d8d78841084168796a2e34d2848a1e00328bcfc4610b1238d6cb02ceae47b2d88360029de13a35545eae20cfb8857a3734c7dc0b589420152ed8144a675f4643053dcfc3dd4d8d8ec53d331f1178fd7fd75c68c93784b5ea5673b733e2206e1e0c3e5d72f894f26ec0087049a3c4466f011c6951c883dfd48bf26b569fc", &(0x7f00000003c0)=""/4096}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x8, 0x2, 0x2, 0x1000, 0x363, 0x7}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x200}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4011}, 0x2000400c) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @multicast1, 0xa, 0x5}}) 1m36.870286864s ago: executing program 1 (id=904): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x5, 0x3, 0x4, 0x5}}}, 0x0) 1m36.026076295s ago: executing program 0 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x40000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffe0, 0x20000}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async, rerun: 64) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) creat(&(0x7f0000004780)='./file0\x00', 0x200) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r5], 0x0, 0x0, 0x0) (async) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x4}}, 0x28) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) (async) unshare(0x400) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) 1m35.981318577s ago: executing program 3 (id=907): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x841, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x417, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x126}, &(0x7f0000000bc0)=0x0, &(0x7f0000000280)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @none}, 0x80, 0x0, 0x0, &(0x7f0000000840)=""/47, 0x2f}, 0x1}, {{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}], 0x2}, 0x2}], 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write$sysctl(r6, &(0x7f0000000000)='5\x00', 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000040)=""/17, 0x11}], 0x3, &(0x7f0000000340)=""/11, 0xb}, 0x2}, {{&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/225, 0xe1}], 0x3, &(0x7f00000006c0)=""/255, 0xff}, 0x2}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/188, 0xbc}, {&(0x7f0000000940)=""/96, 0x60}], 0x2, &(0x7f0000001c00)=""/216, 0xd8}, 0x10000}, {{&(0x7f0000000a00)=@tipc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000001d00)=""/249, 0xf9}, {&(0x7f0000001e00)=""/252, 0xfc}, {&(0x7f0000001f00)=""/236, 0xec}, {&(0x7f0000002000)=""/226, 0xe2}], 0x4, &(0x7f0000002100)=""/132, 0x84}, 0x3ff}, {{&(0x7f00000021c0)=@nl=@unspec, 0x80, &(0x7f0000002300)=[{&(0x7f0000002240)=""/166, 0xa6}, {&(0x7f0000000b00)=""/15, 0xf}], 0x2, &(0x7f0000002340)}, 0x2}], 0x5, 0x4, &(0x7f00000024c0)) 1m20.039360574s ago: executing program 32 (id=904): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x5, 0x3, 0x4, 0x5}}}, 0x0) 1m19.834029072s ago: executing program 33 (id=902): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sync() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45", 0x15}], 0x1) sync() sync() rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x40, 0x4, 0x3, 0x3ff}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000200)=[{0x4, 0xffff}, {0x0, 0x1, 0x1800}, {0x1, 0x0, 0x800}, {0x1}, {0x4, 0x1}, {0x2, 0x8000, 0x1000}], 0x6, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000600)="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", 0x146, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='logon\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r7}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{r3, r4+60000000}, {r1, r2+10000000}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) listen(0xffffffffffffffff, 0x8000007) lseek(r0, 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) utimes(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000ac0)={{0x77359400}, {r8, r9/1000+10000}}) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) 1m14.69128218s ago: executing program 34 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x40000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffe0, 0x20000}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000280)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @none}, 0x80, 0x0, 0x0, &(0x7f0000000840)=""/47, 0x2f}, 0x1}, {{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}], 0x2}, 0x2}], 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write$sysctl(r6, &(0x7f0000000000)='5\x00', 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000040)=""/17, 0x11}], 0x3, &(0x7f0000000340)=""/11, 0xb}, 0x2}, {{&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/225, 0xe1}], 0x3, &(0x7f00000006c0)=""/255, 0xff}, 0x2}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/188, 0xbc}, {&(0x7f0000000940)=""/96, 0x60}], 0x2, &(0x7f0000001c00)=""/216, 0xd8}, 0x10000}, {{&(0x7f0000000a00)=@tipc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000001d00)=""/249, 0xf9}, {&(0x7f0000001e00)=""/252, 0xfc}, {&(0x7f0000001f00)=""/236, 0xec}, {&(0x7f0000002000)=""/226, 0xe2}], 0x4, &(0x7f0000002100)=""/132, 0x84}, 0x3ff}, {{&(0x7f00000021c0)=@nl=@unspec, 0x80, &(0x7f0000002300)=[{&(0x7f0000002240)=""/166, 0xa6}, {&(0x7f0000000b00)=""/15, 0xf}], 0x2, &(0x7f0000002340)}, 0x2}], 0x5, 0x4, &(0x7f00000024c0)) 1m9.400796482s ago: executing program 36 (id=906): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async, rerun: 64) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) creat(&(0x7f0000004780)='./file0\x00', 0x200) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r5], 0x0, 0x0, 0x0) (async) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x4}}, 0x28) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) (async) unshare(0x400) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) 27.574553046s ago: executing program 8 (id=911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 27.227748714s ago: executing program 8 (id=913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @mcast1={0xff, 0x5}, 0x0, 0x4, 0x0, 0x600, 0xfc8, 0x20c200a2}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120101026e668840711b0230bfe2010203010902120001fa03100809049610009782c80080d6da00563d68e6dc76163a83c13f9566491bad1721fedb9cad655d207b2ac32f3ca295eb8025d97dd7b36315344c16e94768e81089a5fe4405ffe32f92d32fda8f2563d0e1068456063036c6022fa812fb5395c830766462d30c1eadf37ce2bd1629eb81c56f3e58"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0xffc2}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6e, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r5], 0x1c}}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 23.939492071s ago: executing program 7 (id=910): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='fscache_cache\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv6_newrule={0x58, 0x20, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x14, 0x20, 0x9, 0x7, 0x0, 0x0, 0x8, 0x12}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x5ba9}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x58}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x4058534c, &(0x7f0000000000)={0x80, 0x0, 0x2, 0xe05, 0xe3, 0x4}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$int_in(r11, 0x5452, &(0x7f0000000000)=0x4ef8) 170.437375ms ago: executing program 37 (id=910): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='fscache_cache\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv6_newrule={0x58, 0x20, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x14, 0x20, 0x9, 0x7, 0x0, 0x0, 0x8, 0x12}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x5ba9}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x58}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x4058534c, &(0x7f0000000000)={0x80, 0x0, 0x2, 0xe05, 0xe3, 0x4}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$int_in(r11, 0x5452, &(0x7f0000000000)=0x4ef8) 0s ago: executing program 38 (id=913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @mcast1={0xff, 0x5}, 0x0, 0x4, 0x0, 0x600, 0xfc8, 0x20c200a2}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120101026e668840711b0230bfe2010203010902120001fa03100809049610009782c80080d6da00563d68e6dc76163a83c13f9566491bad1721fedb9cad655d207b2ac32f3ca295eb8025d97dd7b36315344c16e94768e81089a5fe4405ffe32f92d32fda8f2563d0e1068456063036c6022fa812fb5395c830766462d30c1eadf37ce2bd1629eb81c56f3e58"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0xffc2}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6e, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r5], 0x1c}}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) kernel console output (not intermixed with test programs): bcdDevice=6c.b9 [ 287.260369][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.280298][ T5884] usb 3-1: Product: syz [ 287.290383][ T5884] usb 3-1: Manufacturer: syz [ 287.296502][ T5884] usb 3-1: SerialNumber: syz [ 287.346339][ T5887] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 287.379515][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 287.401979][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 287.430472][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.454083][ T5886] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.484729][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.501786][ T5886] usb 4-1: config 0 descriptor?? [ 287.518209][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.542914][ T5887] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 287.555250][ T5887] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 287.571416][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.604130][ T5887] usb 1-1: config 0 descriptor?? [ 287.632656][ T5887] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 287.640573][ T5884] usb 3-1: selecting invalid altsetting 0 [ 287.654819][ T5884] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 287.663547][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 287.678650][ T5884] usb 3-1: No valid video chain found. [ 287.691646][ T5887] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 287.739566][ T5884] usb 3-1: selecting invalid altsetting 0 [ 287.742694][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 287.747282][ T5887] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 287.772333][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 287.772969][ T5884] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 287.796830][ T5887] usb 1-1: media controller created [ 287.805162][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.831518][ T8878] dvb-usb: bulk message failed: -22 (3/0) [ 287.838598][ T5884] usb 3-1: USB disconnect, device number 62 [ 287.854553][ T5886] usb 4-1: USB disconnect, device number 63 [ 287.866241][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 287.875466][ T5887] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 287.880920][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.791'. [ 287.910175][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 287.954187][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 287.992655][ T5887] dvb-usb: schedule remote query interval to 150 msecs. [ 288.005912][ T5887] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 288.125571][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 288.158808][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 288.177991][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 288.186467][ T5884] dvb-usb: error while querying for an remote control event. [ 288.485771][ T5889] usb 1-1: USB disconnect, device number 55 [ 288.569747][ T5889] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 288.586028][ T5886] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 288.766088][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 288.793807][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.843883][ T5886] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 288.896790][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.905219][ T5886] usb 3-1: Product: syz [ 288.926752][ T5886] usb 3-1: Manufacturer: syz [ 288.931419][ T5886] usb 3-1: SerialNumber: syz [ 288.976097][ T5889] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 289.014512][ T5886] usb 3-1: config 0 descriptor?? [ 289.034725][ T5886] smsusb:smsusb_probe: board id=2, interface number 0 [ 289.053088][ T5886] smsusb:smsusb_probe: Device initialized with return code -19 [ 289.126272][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 289.145201][ T5889] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 289.154527][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.176417][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.191874][ T5889] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.201385][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.210049][ T5889] usb 1-1: Product: syz [ 289.214374][ T5889] usb 1-1: Manufacturer: syz [ 289.219147][ T5889] usb 1-1: SerialNumber: syz [ 289.431484][ T5889] usb 1-1: 0:2 : does not exist [ 289.543123][ T5886] usb 3-1: USB disconnect, device number 63 [ 289.834811][ T8926] loop2: detected capacity change from 0 to 7 [ 289.875238][ T8926] Dev loop2: unable to read RDB block 7 [ 289.881085][ T8926] loop2: unable to read partition table [ 289.892235][ T8926] loop2: partition table beyond EOD, truncated [ 289.917101][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 289.946384][ T8926] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 290.078220][ T5889] usb 1-1: USB disconnect, device number 56 [ 290.097482][ T5887] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 290.140003][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.169308][ T5202] Dev loop2: unable to read RDB block 7 [ 290.193810][ T5202] loop2: unable to read partition table [ 290.203224][ T5202] loop2: partition table beyond EOD, truncated [ 290.246193][ T5884] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 290.296241][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 290.310284][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 290.417562][ T5887] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 290.430621][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.452396][ T5884] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 290.464339][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.480000][ T5887] usb 2-1: Product: syz [ 290.484330][ T5884] usb 5-1: Product: syz [ 290.496039][ T5887] usb 2-1: Manufacturer: syz [ 290.515016][ T5884] usb 5-1: Manufacturer: syz [ 290.521818][ T5887] usb 2-1: SerialNumber: syz [ 290.527290][ T5884] usb 5-1: SerialNumber: syz [ 290.534256][ T5887] usb 2-1: config 0 descriptor?? [ 290.548719][ T5884] usb 5-1: config 0 descriptor?? [ 290.558835][ T8928] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.572145][ T5884] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 290.583837][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.798248][ T5887] usb 2-1: USB disconnect, device number 63 [ 290.881245][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 290.881265][ T30] audit: type=1326 audit(1745787666.336:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 291.214205][ T30] audit: type=1326 audit(1745787666.336:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 291.231202][ T5884] gspca_sunplus: reg_w_riv err -71 [ 291.250001][ T5884] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 291.250249][ T30] audit: type=1326 audit(1745787666.336:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 291.360253][ T5884] usb 5-1: USB disconnect, device number 61 [ 291.410981][ T30] audit: type=1326 audit(1745787666.336:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 291.499816][ T30] audit: type=1326 audit(1745787666.336:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 291.522458][ T30] audit: type=1326 audit(1745787666.336:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 291.546157][ T30] audit: type=1326 audit(1745787666.336:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 291.573959][ T30] audit: type=1326 audit(1745787666.336:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 291.597113][ T30] audit: type=1326 audit(1745787666.436:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 291.639481][ T30] audit: type=1326 audit(1745787666.436:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6358e969 code=0x7ffc0000 [ 292.081247][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.092629][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.185999][ T5886] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 292.314170][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.811'. [ 292.526257][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 292.533482][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 292.545014][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 292.575370][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.628068][ T5886] usb 4-1: config 0 descriptor?? [ 292.635275][ T5886] hub 4-1:0.0: USB hub found [ 292.854519][ T5886] hub 4-1:0.0: 1 port detected [ 292.991990][ T5889] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 293.214130][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 293.231210][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.243260][ T5889] usb 2-1: config 4 has an invalid interface number: 146 but max is 0 [ 293.267501][ T5889] usb 2-1: config 4 has no interface number 0 [ 293.273897][ T5889] usb 2-1: config 4 interface 146 has no altsetting 0 [ 293.322219][ T5889] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 293.332266][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.340692][ T5889] usb 2-1: Product: syz [ 293.375646][ T5889] usb 2-1: Manufacturer: syz [ 293.396665][ T5889] usb 2-1: SerialNumber: syz [ 293.556950][ T8994] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 293.780297][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 293.977582][ T5888] usb 4-1: USB disconnect, device number 64 [ 294.012096][ T5886] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 294.920258][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.821'. [ 295.350027][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.820'. [ 296.090046][ T5889] comedi comedi0: could not set alternate setting 3 in high speed [ 296.131009][ T5889] usbduxsigma 2-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 296.264127][ T5889] usbduxsigma 2-1:4.146: probe with driver usbduxsigma failed with error -71 [ 296.313728][ T5889] usb 2-1: USB disconnect, device number 64 [ 296.326059][ T5888] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 296.521689][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.545894][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.568257][ T5888] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 296.581715][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.604039][ T5888] usb 5-1: config 0 descriptor?? [ 296.646038][ T5884] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 296.706657][ T5889] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 296.808653][ T5884] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 296.817309][ T5884] usb 3-1: config 0 has no interface number 0 [ 296.830113][ T5884] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 296.865284][ T5884] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 296.890108][ T5889] usb 2-1: config 0 has no interfaces? [ 296.907663][ T5889] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 296.927221][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.940149][ T5889] usb 2-1: Product: syz [ 296.944352][ T5889] usb 2-1: Manufacturer: syz [ 296.955564][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.980234][ T5889] usb 2-1: SerialNumber: syz [ 297.004698][ T5889] usb 2-1: config 0 descriptor?? [ 297.075244][ T5888] hid-generic 0003:04F3:0754.000E: failed to start in urb: -90 [ 297.098116][ T5884] usb 3-1: Product: syz [ 297.168881][ T5884] usb 3-1: Manufacturer: syz [ 297.229600][ T5888] hid-generic 0003:04F3:0754.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.4-1/input0 [ 297.243437][ T5884] usb 3-1: SerialNumber: syz [ 297.252755][ T5884] usb 3-1: config 0 descriptor?? [ 297.430872][ T9064] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 297.447304][ T5888] usb 5-1: USB disconnect, device number 63 [ 297.476096][ T5884] usb 3-1: ignoring: probably an ADSL modem [ 297.796432][ T3079] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 297.817996][ T5884] cxacru 3-1:0.8: usbatm_usb_probe: bind failed: -19! [ 297.836775][ T5884] usb 3-1: USB disconnect, device number 64 [ 297.936988][ T3079] usb 1-1: device descriptor read/64, error -71 [ 298.295943][ T3079] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 298.612750][ T3079] usb 1-1: device descriptor read/64, error -71 [ 298.735703][ T3079] usb usb1-port1: attempt power cycle [ 298.746056][ T5884] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 298.902105][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 298.913239][ T5884] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 298.923826][ T5884] usb 5-1: config 0 has no interface number 0 [ 298.935937][ T975] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 298.944694][ T5884] usb 5-1: config 0 interface 184 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 298.968571][ T5884] usb 5-1: config 0 interface 184 has no altsetting 0 [ 298.981363][ T5884] usb 5-1: New USB device found, idVendor=413c, idProduct=8116, bcdDevice=61.a3 [ 298.992065][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.004599][ T5884] usb 5-1: Product: syz [ 299.010127][ T5884] usb 5-1: Manufacturer: syz [ 299.015062][ T5884] usb 5-1: SerialNumber: syz [ 299.028614][ T5884] usb 5-1: config 0 descriptor?? [ 299.042967][ T5884] option 5-1:0.184: GSM modem (1-port) converter detected [ 299.086026][ T3079] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 299.096459][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 299.116718][ T3079] usb 1-1: device descriptor read/8, error -71 [ 299.124780][ T975] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 299.137888][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.154483][ T975] usb 3-1: Product: syz [ 299.158927][ T975] usb 3-1: Manufacturer: syz [ 299.163568][ T975] usb 3-1: SerialNumber: syz [ 299.171831][ T975] usb 3-1: config 0 descriptor?? [ 299.184706][ T975] gspca_main: se401-2.14.0 probing 047d:5003 [ 299.355994][ T3079] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 299.376539][ T3079] usb 1-1: device descriptor read/8, error -71 [ 299.388180][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.398019][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.487096][ T3079] usb usb1-port1: unable to enumerate USB device [ 299.586167][ T5886] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 299.608573][ T975] gspca_se401: Wrong descriptor type [ 299.766175][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 299.772919][ T5886] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 299.781235][ T5886] usb 4-1: config 0 has no interface number 0 [ 299.790423][ T5886] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 299.799665][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.807753][ T5886] usb 4-1: Product: syz [ 299.815365][ T975] usb 3-1: USB disconnect, device number 65 [ 299.822004][ T5886] usb 4-1: Manufacturer: syz [ 299.828372][ T5886] usb 4-1: SerialNumber: syz [ 299.840154][ T5886] usb 4-1: config 0 descriptor?? [ 299.851408][ T5886] smsc95xx v2.0.0 [ 299.997823][ T5884] usb 2-1: USB disconnect, device number 65 [ 300.242005][ T9092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.839'. [ 300.251298][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.839'. [ 300.261095][ T5886] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 300.271260][ T9092] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 300.282185][ T9092] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (1073741824) [ 300.305937][ T5886] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 300.707844][ T9105] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 300.735000][ T5886] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 300.771419][ T9107] netlink: 'syz.2.842': attribute type 5 has an invalid length. [ 300.789595][ T5886] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 300.805096][ T9109] netlink: 'syz.2.842': attribute type 5 has an invalid length. [ 300.848762][ T5886] usb 4-1: USB disconnect, device number 65 [ 301.416017][ T3079] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 301.509177][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 301.509194][ T30] audit: type=1326 audit(1745787676.986:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53678e969 code=0x7ffc0000 [ 301.541824][ T30] audit: type=1326 audit(1745787676.986:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53678e969 code=0x7ffc0000 [ 301.564961][ T30] audit: type=1326 audit(1745787676.986:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fc53678e969 code=0x7ffc0000 [ 301.588005][ T30] audit: type=1326 audit(1745787676.986:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53678e969 code=0x7ffc0000 [ 301.591671][ T3079] usb 1-1: device descriptor read/64, error -71 [ 301.611801][ T30] audit: type=1326 audit(1745787676.986:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53678e969 code=0x7ffc0000 [ 301.641495][ T30] audit: type=1326 audit(1745787677.016:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc53678d2d0 code=0x7ffc0000 [ 301.664346][ T30] audit: type=1326 audit(1745787677.016:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53678e969 code=0x7ffc0000 [ 301.686991][ T5886] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 301.726558][ T30] audit: type=1326 audit(1745787677.016:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53678e969 code=0x7ffc0000 [ 301.773683][ T30] audit: type=1326 audit(1745787677.016:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc53678e969 code=0x7ffc0000 [ 301.828038][ T30] audit: type=1326 audit(1745787677.016:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53678e969 code=0x7ffc0000 [ 301.885986][ T3079] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 301.886035][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 301.901494][ T5886] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.913199][ T5886] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.985933][ T5886] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.052011][ T5886] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.059139][ T5886] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 302.068962][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.090765][ T9126] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 302.110615][ T5886] usb 4-1: config 0 descriptor?? [ 302.126541][ T3079] usb 1-1: device descriptor read/64, error -71 [ 302.276632][ T5889] usb 5-1: USB disconnect, device number 64 [ 302.294828][ T5889] option 5-1:0.184: device disconnected [ 302.338490][ T3079] usb usb1-port1: attempt power cycle [ 302.387312][ T9134] input: syz1 as /devices/virtual/input/input26 [ 302.412621][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 302.421967][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 302.444006][ T9134] geneve2: entered promiscuous mode [ 302.449491][ T9134] geneve2: entered allmulticast mode [ 302.579676][ T5887] IPVS: starting estimator thread 0... [ 302.686119][ T9135] IPVS: using max 30 ests per chain, 72000 per kthread [ 302.741204][ T5886] waltop 0003:172F:0501.000F: unknown main item tag 0x0 [ 302.776337][ T5918] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 302.786080][ T3079] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 302.838345][ T5886] waltop 0003:172F:0501.000F: unknown main item tag 0x0 [ 302.866254][ T5886] waltop 0003:172F:0501.000F: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0 [ 302.880218][ T3079] usb 1-1: device descriptor read/8, error -71 [ 302.936267][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 302.961361][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.975178][ T5918] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 302.984791][ T5918] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 302.992012][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.995589][ T5918] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 303.012743][ T5889] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 303.028713][ T5918] usb 3-1: config 128 has no interface number 0 [ 303.035673][ T5918] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 303.047600][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.063447][ T5918] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.075969][ T5918] usb 3-1: config 128 interface 127 has no altsetting 0 [ 303.117793][ T5918] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 303.127067][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.135631][ T5918] usb 3-1: Product: syz [ 303.139862][ T5918] usb 3-1: Manufacturer: syz [ 303.144455][ T5918] usb 3-1: SerialNumber: syz [ 303.156063][ T3079] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 303.178598][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 303.187013][ T3079] usb 1-1: device descriptor read/8, error -71 [ 303.187013][ T5889] usb 5-1: can't read configurations, error -61 [ 303.296728][ T3079] usb usb1-port1: unable to enumerate USB device [ 303.346377][ T5889] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 303.498351][ T9141] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 303.532120][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 303.555630][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 303.555630][ T5889] usb 5-1: can't read configurations, error -61 [ 303.565013][ T5889] usb usb5-port1: attempt power cycle [ 303.585538][ T3079] usb 4-1: USB disconnect, device number 66 [ 303.810980][ T9143] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 303.838931][ T9143] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 303.891721][ T9141] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 303.914910][ T9141] bond3 (unregistering): Released all slaves [ 303.946313][ T5889] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 304.193985][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 304.224543][ T5889] usb 5-1: can't read configurations, error -61 [ 304.366131][ T5889] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 304.433872][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 304.433914][ T5889] usb 5-1: can't read configurations, error -61 [ 304.434305][ T5889] usb usb5-port1: unable to enumerate USB device [ 304.495940][ T5884] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 304.645949][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 304.647665][ T5884] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 304.647686][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.650605][ T5884] usb 1-1: config 0 descriptor?? [ 304.862811][ T5884] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 305.306940][ T5884] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 305.319373][ T5884] asix 1-1:0.0: probe with driver asix failed with error -61 [ 305.365939][ T5889] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 305.439651][ T5918] usb 3-1: USB disconnect, device number 66 [ 305.466796][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.529066][ T5889] usb 2-1: device descriptor read/64, error -71 [ 305.766217][ T5889] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 305.786221][ T5918] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 305.798997][ T5886] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 305.906029][ T5889] usb 2-1: device descriptor read/64, error -71 [ 305.946547][ T5886] usb 4-1: device descriptor read/64, error -71 [ 305.970103][ T5918] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 305.979376][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.987945][ T5918] usb 3-1: Product: syz [ 305.992164][ T5918] usb 3-1: Manufacturer: syz [ 305.997369][ T5918] usb 3-1: SerialNumber: syz [ 306.005007][ T5918] usb 3-1: config 0 descriptor?? [ 306.014655][ T5918] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 306.021489][ T5889] usb usb2-port1: attempt power cycle [ 306.095983][ T5887] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 306.196100][ T5886] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 306.256148][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 306.268469][ T5887] usb 5-1: config 143 has too many interfaces: 181, using maximum allowed: 32 [ 306.279551][ T5887] usb 5-1: config 143 has 1 interface, different from the descriptor's value: 181 [ 306.289069][ T5887] usb 5-1: config 143 has no interface number 0 [ 306.295401][ T5887] usb 5-1: config 143 interface 8 altsetting 0 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 306.307205][ T5887] usb 5-1: config 143 interface 8 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 306.320358][ T5887] usb 5-1: config 143 interface 8 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 306.326933][ T5886] usb 4-1: device descriptor read/64, error -71 [ 306.332646][ T5887] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 306.346305][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 306.354473][ T5887] usb 5-1: Product: syz [ 306.358769][ T5887] usb 5-1: SerialNumber: syz [ 306.376218][ T5889] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 306.406809][ T5889] usb 2-1: device descriptor read/8, error -71 [ 306.446450][ T5886] usb usb4-port1: attempt power cycle [ 306.580213][ T9163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.591660][ T9163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.608674][ T5887] cm109 5-1:143.8: invalid payload size 0, expected 4 [ 306.623616][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.635726][ T5887] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:143.8/input/input27 [ 306.650003][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.658011][ T5889] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 306.663652][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.674480][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.681990][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.687555][ T5889] usb 2-1: device descriptor read/8, error -71 [ 306.689406][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.702892][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.710291][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.719890][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.728374][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.735790][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.743360][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 306.759632][ T5887] usb 5-1: USB disconnect, device number 69 [ 306.759693][ C1] cm109 5-1:143.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 306.777143][ T5887] cm109 5-1:143.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 306.796231][ T5886] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 306.814199][ T5889] usb usb2-port1: unable to enumerate USB device [ 306.865476][ T5886] usb 4-1: device descriptor read/8, error -71 [ 307.116172][ T5886] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 307.149532][ T5886] usb 4-1: device descriptor read/8, error -71 [ 307.206150][ T5887] usb 1-1: USB disconnect, device number 65 [ 307.276713][ T5886] usb usb4-port1: unable to enumerate USB device [ 307.339481][ T9176] netlink: 44 bytes leftover after parsing attributes in process `syz.4.862'. [ 307.434435][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.442777][ T9178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.471352][ T9178] netlink: 32 bytes leftover after parsing attributes in process `syz.0.861'. [ 307.926032][ T5889] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 308.090087][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 308.125196][ T5889] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.143882][ T5889] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 308.163150][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.205597][ T5889] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 308.225055][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.285654][ T5889] usb 5-1: config 0 descriptor?? [ 308.487147][ T5884] usb 3-1: USB disconnect, device number 67 [ 308.835969][ T5887] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 308.885987][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.868'. [ 308.970644][ T5889] razer 0003:1532:011B.0010: unknown main item tag 0x0 [ 308.991534][ T5889] razer 0003:1532:011B.0010: unknown main item tag 0x0 [ 309.020957][ T5887] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 309.050945][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.066126][ T5889] razer 0003:1532:011B.0010: unknown main item tag 0x0 [ 309.074620][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.095962][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.105106][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.120293][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.141591][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.171956][ T5889] razer 0003:1532:011B.0010: unknown main item tag 0x0 [ 309.192089][ T5889] razer 0003:1532:011B.0010: unknown main item tag 0x0 [ 309.217167][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.229804][ T5889] razer 0003:1532:011B.0010: hidraw0: USB HID v0.05 Device [HID 1532:011b] on usb-dummy_hcd.4-1/input0 [ 309.248881][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.301961][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.334194][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.345531][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.365111][ T5884] usb 5-1: USB disconnect, device number 70 [ 309.400623][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.435040][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.460243][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.502546][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.524955][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.544781][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.581429][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.605280][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.619481][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.638986][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.657801][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.671554][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.683858][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.699750][ T5887] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 309.710222][ T5887] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 309.719252][ T5887] usb 2-1: Product: syz [ 309.723675][ T5887] usb 2-1: Manufacturer: syz [ 309.728811][ T5887] usb 2-1: SerialNumber: syz [ 309.758901][ T5887] usb 2-1: config 0 descriptor?? [ 309.781742][ T5887] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 309.998766][ T5884] usb 2-1: USB disconnect, device number 70 [ 310.022561][ T5884] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 310.156154][ T5889] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 310.175314][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.877'. [ 310.245710][ T9243] fuse: Bad value for 'group_id' [ 310.250988][ T9243] fuse: Bad value for 'group_id' [ 310.321176][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.336282][ T5887] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 310.337973][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.366325][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 310.384485][ T5889] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 310.398443][ T5889] usb 1-1: can't read configurations, error -22 [ 310.515553][ T5887] usb 3-1: too many configurations: 202, using maximum allowed: 8 [ 310.539136][ T5887] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 310.550756][ T5884] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 310.566375][ T5889] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 310.571086][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.590066][ T5887] usb 3-1: Product: syz [ 310.594505][ T5887] usb 3-1: Manufacturer: syz [ 310.600230][ T5887] usb 3-1: SerialNumber: syz [ 310.619828][ T5887] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 310.658897][ T3079] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 310.728220][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 310.728934][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 310.751071][ T5884] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 310.776835][ T5889] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 310.791079][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.806931][ T5889] usb 1-1: can't read configurations, error -22 [ 310.834509][ T5889] usb usb1-port1: attempt power cycle [ 310.857576][ T5884] usb 5-1: config 0 descriptor?? [ 311.163023][ T5884] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 311.274607][ T5889] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 311.326369][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 311.451533][ T5889] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 311.461078][ T5889] usb 1-1: can't read configurations, error -22 [ 311.618756][ T5889] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 311.634623][ T5886] usb 3-1: USB disconnect, device number 68 [ 311.668904][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 311.678848][ T5889] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 311.688822][ T5889] usb 1-1: can't read configurations, error -22 [ 311.695636][ T5889] usb usb1-port1: unable to enumerate USB device [ 311.719641][ T9264] netlink: 36 bytes leftover after parsing attributes in process `syz.1.884'. [ 311.947517][ T3079] usb 3-1: Service connection timeout for: 256 [ 311.953835][ T3079] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 311.969515][ T3079] ath9k_htc: Failed to initialize the device [ 311.979294][ T5886] usb 3-1: ath9k_htc: USB layer deinitialized [ 312.226053][ T5887] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 312.307113][ T47] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 312.386090][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 312.393025][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 312.404604][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.423260][ T5887] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 312.433135][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.441474][ T3079] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 312.449164][ T5887] usb 2-1: Product: syz [ 312.454663][ T5887] usb 2-1: Manufacturer: syz [ 312.459934][ T5887] usb 2-1: SerialNumber: syz [ 312.467458][ T5887] usb 2-1: config 0 descriptor?? [ 312.475960][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 312.483330][ T5887] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 312.492997][ T5887] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 312.502955][ T47] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 312.512320][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.524088][ T47] usb 4-1: config 0 descriptor?? [ 312.607850][ T3079] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 312.618046][ T3079] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 312.627254][ T3079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.650465][ T3079] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 312.946739][ T5887] em28xx 2-1:0.0: chip ID is em28178 [ 313.017065][ T5887] usb 2-1: USB disconnect, device number 71 [ 313.034199][ T5887] em28xx 2-1:0.0: Disconnecting em28xx [ 313.047965][ T5887] em28xx 2-1:0.0: Freeing device [ 313.139102][ T5884] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.150025][ T5884] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 313.172273][ T5884] asix 5-1:0.0: probe with driver asix failed with error -71 [ 313.196641][ T5884] usb 5-1: USB disconnect, device number 71 [ 313.306124][ T5886] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 313.455939][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 313.467915][ T5886] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 313.488904][ T5886] usb 1-1: config 0 has no interface number 0 [ 313.497978][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 313.507562][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.515589][ T5886] usb 1-1: Product: syz [ 313.524260][ T5886] usb 1-1: Manufacturer: syz [ 313.529417][ T5886] usb 1-1: SerialNumber: syz [ 313.548435][ T5886] usb 1-1: config 0 descriptor?? [ 313.565412][ T5886] smsc95xx v2.0.0 [ 313.841321][ T5886] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 313.878547][ T5886] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 313.916402][ T5886] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 313.938327][ T5886] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 313.977234][ T5886] usb 1-1: USB disconnect, device number 70 [ 314.356139][ T978] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 314.518074][ T978] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 314.528450][ T978] usb 5-1: config 0 has no interface number 0 [ 314.670278][ T978] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 320.585854][ C0] sched: DL replenish lagged too much [ 320.617919][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.624281][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.734707][ T978] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 320.966073][ T5886] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 321.474670][ T5918] usb 3-1: USB disconnect, device number 69 [ 321.506062][ T47] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 321.623229][ T978] usb 5-1: string descriptor 0 read error: -71 [ 321.736164][ T978] usb 5-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 321.745297][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.759826][ T47] asix 4-1:0.0: probe with driver asix failed with error -71 [ 322.038380][ T47] usb 4-1: USB disconnect, device number 71 [ 322.333155][ T978] usb 5-1: config 0 descriptor?? [ 322.393170][ T978] usb 5-1: can't set config #0, error -71 [ 322.454457][ T978] usb 5-1: USB disconnect, device number 72 [ 322.470604][ T9329] netlink: 'syz.3.900': attribute type 8 has an invalid length. [ 322.548601][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 322.826250][ T5918] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 323.027122][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 334.703517][ T978] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 341.546094][ T5918] usb 2-1: device descriptor read/all, error -110 [ 367.047034][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.064015][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.072770][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.081331][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.102702][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.270841][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.286878][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.306708][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.314899][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.323434][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.404087][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.414079][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 367.423438][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 367.434082][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.443642][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.366624][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.377588][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.387074][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.395161][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.407261][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.587004][ T7615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 369.598245][ T7615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 369.621288][ T7615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 369.876795][ T7615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 369.884563][ T7615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 371.947588][ T5831] Bluetooth: hci8: command tx timeout [ 372.186198][ T5831] Bluetooth: hci1: command tx timeout [ 372.192478][ T5831] Bluetooth: hci7: command tx timeout [ 372.198277][ T5833] Bluetooth: hci6: command tx timeout [ 372.204434][ T5833] Bluetooth: hci5: command tx timeout [ 372.518225][ T9367] chnl_net:caif_netlink_parms(): no params data found [ 372.743309][ T9365] chnl_net:caif_netlink_parms(): no params data found [ 373.445389][ T9368] chnl_net:caif_netlink_parms(): no params data found [ 373.577983][ T9360] chnl_net:caif_netlink_parms(): no params data found [ 373.593952][ T9363] chnl_net:caif_netlink_parms(): no params data found [ 373.625737][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.639453][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.647333][ T9367] bridge_slave_0: entered allmulticast mode [ 373.655223][ T9367] bridge_slave_0: entered promiscuous mode [ 373.798562][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.805750][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.830641][ T9367] bridge_slave_1: entered allmulticast mode [ 373.850212][ T9367] bridge_slave_1: entered promiscuous mode [ 374.002016][ T9365] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.013400][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.026734][ T5831] Bluetooth: hci8: command tx timeout [ 374.032490][ T9365] bridge_slave_0: entered allmulticast mode [ 374.060783][ T9365] bridge_slave_0: entered promiscuous mode [ 374.276180][ T5831] Bluetooth: hci7: command tx timeout [ 374.281678][ T5831] Bluetooth: hci5: command tx timeout [ 374.283302][ T5833] Bluetooth: hci6: command tx timeout [ 374.287523][ T7615] Bluetooth: hci1: command tx timeout [ 374.453796][ T9365] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.463268][ T9365] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.479646][ T9365] bridge_slave_1: entered allmulticast mode [ 374.499959][ T9365] bridge_slave_1: entered promiscuous mode [ 374.593575][ T9367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.767059][ T9365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.789185][ T9367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.037922][ T9365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.588438][ T9367] team0: Port device team_slave_0 added [ 375.787827][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.795181][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.816484][ T9368] bridge_slave_0: entered allmulticast mode [ 375.830560][ T9368] bridge_slave_0: entered promiscuous mode [ 375.866343][ T9365] team0: Port device team_slave_0 added [ 375.961536][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.975144][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.985548][ T9363] bridge_slave_0: entered allmulticast mode [ 376.002711][ T9363] bridge_slave_0: entered promiscuous mode [ 376.017909][ T9367] team0: Port device team_slave_1 added [ 376.039049][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.074787][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.094090][ T9360] bridge_slave_0: entered allmulticast mode [ 376.103320][ T9360] bridge_slave_0: entered promiscuous mode [ 376.112624][ T5833] Bluetooth: hci8: command tx timeout [ 376.129141][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.137361][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.145423][ T9360] bridge_slave_1: entered allmulticast mode [ 376.155102][ T9360] bridge_slave_1: entered promiscuous mode [ 376.163289][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.171296][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.179750][ T9368] bridge_slave_1: entered allmulticast mode [ 376.188387][ T9368] bridge_slave_1: entered promiscuous mode [ 376.197773][ T9365] team0: Port device team_slave_1 added [ 376.204468][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.215709][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.237842][ T9363] bridge_slave_1: entered allmulticast mode [ 376.257144][ T9363] bridge_slave_1: entered promiscuous mode [ 376.349719][ T5831] Bluetooth: hci1: command tx timeout [ 376.355191][ T5831] Bluetooth: hci7: command tx timeout [ 376.364423][ T5833] Bluetooth: hci5: command tx timeout [ 376.426384][ T5833] Bluetooth: hci6: command tx timeout [ 377.069419][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.084984][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.124666][ T9367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.245305][ T9360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.282326][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.305484][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.471624][ T9363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.500049][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.514763][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.555536][ T9367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.618940][ T9360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.804756][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.824320][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.865524][ T9365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.010759][ T9363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.182834][ T9360] team0: Port device team_slave_0 added [ 378.189309][ T5833] Bluetooth: hci8: command tx timeout [ 378.293252][ T9368] team0: Port device team_slave_0 added [ 378.311818][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.331014][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.366223][ T9365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.428351][ T5833] Bluetooth: hci5: command tx timeout [ 378.433842][ T5833] Bluetooth: hci7: command tx timeout [ 378.440702][ T5831] Bluetooth: hci1: command tx timeout [ 378.498498][ T9360] team0: Port device team_slave_1 added [ 378.509151][ T9368] team0: Port device team_slave_1 added [ 378.525960][ T5833] Bluetooth: hci6: command tx timeout [ 378.632792][ T9363] team0: Port device team_slave_0 added [ 378.662311][ T9363] team0: Port device team_slave_1 added [ 378.677726][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.684084][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.113182][ T9367] hsr_slave_0: entered promiscuous mode [ 379.124658][ T9367] hsr_slave_1: entered promiscuous mode [ 379.142534][ T9367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.161383][ T9367] Cannot create hsr debugfs directory [ 379.393767][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.406963][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.444164][ T9360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.595378][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.612396][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.659397][ T9368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.764616][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.781933][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.819882][ T9363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.850719][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.865239][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.909876][ T9360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.940924][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.956099][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.991118][ T9368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.113232][ T9365] hsr_slave_0: entered promiscuous mode [ 380.132115][ T9365] hsr_slave_1: entered promiscuous mode [ 380.143618][ T9365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.166686][ T9365] Cannot create hsr debugfs directory [ 380.173256][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.190144][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.225319][ T9363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.775607][ T9360] hsr_slave_0: entered promiscuous mode [ 380.803513][ T9360] hsr_slave_1: entered promiscuous mode [ 380.822035][ T9360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.835723][ T9360] Cannot create hsr debugfs directory [ 381.318973][ T9368] hsr_slave_0: entered promiscuous mode [ 381.328680][ T9368] hsr_slave_1: entered promiscuous mode [ 381.346143][ T9368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.353760][ T9368] Cannot create hsr debugfs directory [ 381.392107][ T9363] hsr_slave_0: entered promiscuous mode [ 381.413667][ T9363] hsr_slave_1: entered promiscuous mode [ 381.424325][ T9363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.432706][ T9363] Cannot create hsr debugfs directory [ 383.289098][ T9367] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.369945][ T9367] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 383.475612][ T9367] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 383.545644][ T9367] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 383.692471][ T9365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 383.768899][ T9365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 383.847093][ T9365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 383.915745][ T9365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 384.171714][ T9360] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 384.286990][ T9360] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 384.405948][ T9360] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 384.437546][ T9360] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 384.755421][ T9367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.789207][ T9363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.880025][ T9363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.994582][ T9363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.076303][ T9367] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.110567][ T9363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.169097][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.176321][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.325135][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.332392][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.510420][ T9365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.630018][ T9368] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 385.765119][ T9368] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 385.867058][ T9368] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 385.918600][ T9368] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 385.993546][ T9365] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.079373][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.138442][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.145630][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.185537][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.192858][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.297941][ T9360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.474693][ T9367] veth0_vlan: entered promiscuous mode [ 386.634724][ T9360] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.675364][ T9363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.731228][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.738483][ T7928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.866698][ T9367] veth1_vlan: entered promiscuous mode [ 386.883593][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.890826][ T7928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.972654][ T9363] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.115506][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.122813][ T7938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.224981][ T9365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.294968][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.302222][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.362378][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.406540][ T9367] veth0_macvtap: entered promiscuous mode [ 387.569391][ T9367] veth1_macvtap: entered promiscuous mode [ 387.709467][ T9368] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.757077][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.777654][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.803635][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.824557][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.851665][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.873625][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.892438][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.905108][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.927765][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.965394][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.979255][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.052995][ T9365] veth0_vlan: entered promiscuous mode [ 388.071515][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.095411][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.106974][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.130886][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.147307][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.171961][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.192465][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.212458][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.237727][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.261636][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.293402][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.322678][ T8075] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.329942][ T8075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.389526][ T9367] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.418082][ T9367] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.440212][ T9367] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.463088][ T9367] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.527352][ T9360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.547176][ T9365] veth1_vlan: entered promiscuous mode [ 388.674664][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.681918][ T8075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.053817][ T9363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.340290][ T9365] veth0_macvtap: entered promiscuous mode [ 389.403751][ T9365] veth1_macvtap: entered promiscuous mode [ 389.459967][ T9368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.562689][ T8075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.603538][ T8075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.677575][ T9363] veth0_vlan: entered promiscuous mode [ 389.780006][ T9360] veth0_vlan: entered promiscuous mode [ 389.833982][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.852257][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.885927][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.905035][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.917053][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.935910][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.945779][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.976321][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.006972][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.025855][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.035758][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.063148][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.088223][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.177315][ T9363] veth1_vlan: entered promiscuous mode [ 390.230442][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.251844][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.265053][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.293122][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.313186][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.350345][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.369733][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.390095][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.404428][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.424849][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.436199][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.459038][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.483870][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.508451][ T9360] veth1_vlan: entered promiscuous mode [ 390.533407][ T9365] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.545104][ T6309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.575651][ T6309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.595764][ T9365] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.604934][ T9365] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.623532][ T9365] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.740608][ T9368] veth0_vlan: entered promiscuous mode [ 390.941040][ T9363] veth0_macvtap: entered promiscuous mode [ 390.958944][ T9368] veth1_vlan: entered promiscuous mode [ 391.090124][ T9363] veth1_macvtap: entered promiscuous mode [ 391.161220][ T9360] veth0_macvtap: entered promiscuous mode [ 391.394584][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.430694][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.464473][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.501303][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.552834][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.604983][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.642051][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.686122][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.734975][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.757504][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.776533][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.834531][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.856059][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.877045][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.905098][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.956962][ T9360] veth1_macvtap: entered promiscuous mode [ 391.985478][ T7928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.022784][ T7928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.031039][ T5890] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 392.057230][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.118445][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.150652][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.172451][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.197453][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.219717][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.238054][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.257995][ T5890] usb 9-1: unable to get BOS descriptor or descriptor too short [ 392.276705][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.296744][ T5890] usb 9-1: config 250 has an invalid interface number: 150 but max is 0 [ 392.305143][ T5890] usb 9-1: config 250 has no interface number 0 [ 392.326200][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.345471][ T5890] usb 9-1: config 250 interface 150 has no altsetting 0 [ 392.363747][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.389768][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.390572][ T5890] usb 9-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=e2.bf [ 392.416272][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.446861][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.465540][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.474320][ T5890] usb 9-1: Product: syz [ 392.486510][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.507088][ T5890] usb 9-1: Manufacturer: syz [ 392.512044][ T5890] usb 9-1: SerialNumber: syz [ 392.530611][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.640369][ T9363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.685877][ T9363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.705979][ T9363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.726992][ T9363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.843504][ T9368] veth0_macvtap: entered promiscuous mode [ 392.939876][ T5890] usb 9-1: USB disconnect, device number 2 [ 393.062067][ T9368] veth1_macvtap: entered promiscuous mode [ 393.197553][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.219020][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.254689][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.268189][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.288385][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.315375][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.329038][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.356429][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.378106][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.409056][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.428543][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.444902][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.472874][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.492187][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.504432][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.523482][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.541260][ T9360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.587066][ T6309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.644990][ T6309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.717836][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.765732][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.796317][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.815655][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.828070][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.848519][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.882817][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.912181][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.928285][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.949536][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.977265][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.999559][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.025240][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.068219][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.088618][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.109141][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.140114][ T9360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.185664][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.231044][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.264884][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.302596][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.322737][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.349140][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.369538][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.394514][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.407597][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.428692][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.453682][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.485636][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.505557][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.528068][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.547400][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.570563][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.594812][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.613430][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.647239][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.756742][ T9360] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.765513][ T9360] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.837784][ T9360] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.877042][ T9360] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.655704][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.057400][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.186018][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.316127][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.446198][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.575927][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.715909][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.836081][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.956358][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.086382][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.210518][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.320411][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.439238][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.459586][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.479677][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.487173][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.519587][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.528012][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.646099][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.733918][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.798928][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.826095][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.858737][ T7615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.868052][ T7615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.890797][ T7615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.898498][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.906823][ T7615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.930547][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.969130][ T7615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.978775][ T7615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.990363][ T7615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 422.035984][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.116268][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.196255][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.253023][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.264071][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.273337][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.281890][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.290343][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.300893][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.352569][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 422.363031][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 422.374205][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 422.388054][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 422.414242][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 424.512354][ T55] Bluetooth: hci0: command tx timeout [ 424.666289][ T55] Bluetooth: hci3: command tx timeout [ 424.906383][ T55] Bluetooth: hci2: command tx timeout [ 424.986579][ T5833] Bluetooth: hci4: command tx timeout [ 425.004064][ T55] Bluetooth: hci9: command tx timeout [ 426.592639][ T55] Bluetooth: hci0: command tx timeout [ 426.750886][ T55] Bluetooth: hci3: command tx timeout [ 426.987775][ T55] Bluetooth: hci2: command tx timeout [ 427.066726][ T55] Bluetooth: hci9: command tx timeout [ 427.072220][ T55] Bluetooth: hci4: command tx timeout [ 428.083042][ T9432] chnl_net:caif_netlink_parms(): no params data found [ 428.140126][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 428.328440][ T9428] chnl_net:caif_netlink_parms(): no params data found [ 428.676486][ T55] Bluetooth: hci0: command tx timeout [ 428.779902][ T9431] chnl_net:caif_netlink_parms(): no params data found [ 428.836731][ T55] Bluetooth: hci3: command tx timeout [ 428.893592][ T9436] chnl_net:caif_netlink_parms(): no params data found [ 429.066401][ T55] Bluetooth: hci2: command tx timeout [ 429.148214][ T55] Bluetooth: hci4: command tx timeout [ 429.153686][ T55] Bluetooth: hci9: command tx timeout [ 429.927322][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.934525][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.961010][ T9432] bridge_slave_0: entered allmulticast mode [ 429.978417][ T9432] bridge_slave_0: entered promiscuous mode [ 430.105609][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.126152][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.133743][ T9435] bridge_slave_0: entered allmulticast mode [ 430.168395][ T9435] bridge_slave_0: entered promiscuous mode [ 430.298383][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.305585][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.327036][ T9428] bridge_slave_0: entered allmulticast mode [ 430.347454][ T9428] bridge_slave_0: entered promiscuous mode [ 430.468944][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.496425][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.504058][ T9432] bridge_slave_1: entered allmulticast mode [ 430.539358][ T9432] bridge_slave_1: entered promiscuous mode [ 430.650848][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.668309][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.675688][ T9435] bridge_slave_1: entered allmulticast mode [ 430.696847][ T9435] bridge_slave_1: entered promiscuous mode [ 430.752457][ T55] Bluetooth: hci0: command tx timeout [ 430.855170][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.876323][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.883713][ T9428] bridge_slave_1: entered allmulticast mode [ 430.907105][ T55] Bluetooth: hci3: command tx timeout [ 430.918393][ T9428] bridge_slave_1: entered promiscuous mode [ 431.128994][ T9432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.150718][ T55] Bluetooth: hci2: command tx timeout [ 431.228456][ T5833] Bluetooth: hci4: command tx timeout [ 431.233951][ T55] Bluetooth: hci9: command tx timeout [ 431.419328][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.436994][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.451321][ T9431] bridge_slave_0: entered allmulticast mode [ 431.480861][ T9431] bridge_slave_0: entered promiscuous mode [ 431.510058][ T9432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.537821][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.570481][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.923809][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.944547][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.954540][ T9431] bridge_slave_1: entered allmulticast mode [ 431.984742][ T9431] bridge_slave_1: entered promiscuous mode [ 432.399002][ T9428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.429731][ T9428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.473252][ T9436] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.482548][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.501923][ T9436] bridge_slave_0: entered allmulticast mode [ 432.536567][ T9436] bridge_slave_0: entered promiscuous mode [ 432.557449][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.564636][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.603027][ T9436] bridge_slave_1: entered allmulticast mode [ 432.618365][ T9436] bridge_slave_1: entered promiscuous mode [ 432.905199][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.978520][ T9432] team0: Port device team_slave_0 added [ 432.994245][ T9435] team0: Port device team_slave_0 added [ 433.274433][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.408795][ T9432] team0: Port device team_slave_1 added [ 433.418400][ T9435] team0: Port device team_slave_1 added [ 433.529150][ T9428] team0: Port device team_slave_0 added [ 433.539688][ T9436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.571437][ T9436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.748036][ T9431] team0: Port device team_slave_0 added [ 434.011761][ T9428] team0: Port device team_slave_1 added [ 434.587863][ T9431] team0: Port device team_slave_1 added [ 434.594791][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.608161][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.652938][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.900604][ T9436] team0: Port device team_slave_0 added [ 435.140354][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.156252][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.202435][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.260535][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.276191][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.323282][ T9432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.349161][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.374777][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.417277][ T9428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.447199][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.454211][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.504289][ T9428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.538926][ T9436] team0: Port device team_slave_1 added [ 435.568075][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.575083][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.620559][ T9431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.661984][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.684996][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.755943][ T9432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.190030][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.197588][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.244104][ T9431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.293129][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.314800][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.362223][ T9436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.814117][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.832641][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.889084][ T9436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.958145][ T9428] hsr_slave_0: entered promiscuous mode [ 436.977017][ T9428] hsr_slave_1: entered promiscuous mode [ 436.996281][ T9428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.003907][ T9428] Cannot create hsr debugfs directory [ 437.040662][ T9435] hsr_slave_0: entered promiscuous mode [ 437.087298][ T9435] hsr_slave_1: entered promiscuous mode [ 437.093808][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.113974][ T9435] Cannot create hsr debugfs directory [ 437.371098][ T9431] hsr_slave_0: entered promiscuous mode [ 437.397064][ T9431] hsr_slave_1: entered promiscuous mode [ 437.416947][ T9431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.426876][ T9431] Cannot create hsr debugfs directory [ 437.780853][ T9432] hsr_slave_0: entered promiscuous mode [ 437.807202][ T9432] hsr_slave_1: entered promiscuous mode [ 437.831375][ T9432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.846753][ T9432] Cannot create hsr debugfs directory [ 438.289910][ T9436] hsr_slave_0: entered promiscuous mode [ 438.314191][ T9436] hsr_slave_1: entered promiscuous mode [ 438.335699][ T9436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.356488][ T9436] Cannot create hsr debugfs directory [ 440.124902][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.131666][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.409514][ T9432] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.997136][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 483.026519][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 483.036940][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 483.045113][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 483.055351][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 483.341874][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 483.367095][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 483.375710][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 483.384932][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 483.396415][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.510747][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 483.521819][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 483.534771][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 483.546219][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 483.554551][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 483.786321][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 483.810550][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 483.820612][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 483.831208][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 483.848293][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 484.080454][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 484.095537][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 484.105129][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 484.130143][ T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 484.141770][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 485.159834][ T55] Bluetooth: hci1: command tx timeout [ 485.171543][ T9476] chnl_net:caif_netlink_parms(): no params data found [ 485.466108][ T55] Bluetooth: hci5: command tx timeout [ 485.626354][ T55] Bluetooth: hci6: command tx timeout [ 485.847211][ T9482] chnl_net:caif_netlink_parms(): no params data found [ 485.946560][ T55] Bluetooth: hci8: command tx timeout [ 486.267074][ T55] Bluetooth: hci10: command tx timeout [ 486.409685][ T9481] chnl_net:caif_netlink_parms(): no params data found [ 486.762685][ T9484] chnl_net:caif_netlink_parms(): no params data found [ 486.831243][ T9476] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.856728][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.864222][ T9476] bridge_slave_0: entered allmulticast mode [ 486.894828][ T9476] bridge_slave_0: entered promiscuous mode [ 486.937485][ T9476] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.948086][ T9476] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.955483][ T9476] bridge_slave_1: entered allmulticast mode [ 486.982838][ T9476] bridge_slave_1: entered promiscuous mode [ 487.064850][ T9486] chnl_net:caif_netlink_parms(): no params data found [ 487.229066][ T55] Bluetooth: hci1: command tx timeout [ 487.546196][ T55] Bluetooth: hci5: command tx timeout [ 487.706020][ T55] Bluetooth: hci6: command tx timeout [ 487.812197][ T9476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.840429][ T9476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.977062][ T9482] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.984254][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.011242][ T9482] bridge_slave_0: entered allmulticast mode [ 488.026483][ T55] Bluetooth: hci8: command tx timeout [ 488.039686][ T9482] bridge_slave_0: entered promiscuous mode [ 488.059752][ T9482] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.077118][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.084503][ T9482] bridge_slave_1: entered allmulticast mode [ 488.137803][ T9482] bridge_slave_1: entered promiscuous mode [ 488.350177][ T55] Bluetooth: hci10: command tx timeout [ 489.013712][ T9476] team0: Port device team_slave_0 added [ 489.040358][ T9476] team0: Port device team_slave_1 added [ 489.206474][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.213681][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.246957][ T9481] bridge_slave_0: entered allmulticast mode [ 489.266989][ T9481] bridge_slave_0: entered promiscuous mode [ 489.298942][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.307147][ T55] Bluetooth: hci1: command tx timeout [ 489.312828][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.336139][ T9481] bridge_slave_1: entered allmulticast mode [ 489.356396][ T9481] bridge_slave_1: entered promiscuous mode [ 489.489693][ T9482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.524049][ T9482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.626528][ T55] Bluetooth: hci5: command tx timeout [ 489.791506][ T55] Bluetooth: hci6: command tx timeout [ 490.106643][ T55] Bluetooth: hci8: command tx timeout [ 490.426834][ T55] Bluetooth: hci10: command tx timeout [ 490.552699][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.591488][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.617551][ T9476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.624724][ T9476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.695953][ T9476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.729542][ T9476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.746443][ T9476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.815450][ T9476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.842687][ T9482] team0: Port device team_slave_0 added [ 490.869015][ T9482] team0: Port device team_slave_1 added [ 490.875404][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.902625][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.926845][ T9484] bridge_slave_0: entered allmulticast mode [ 490.946100][ T9484] bridge_slave_0: entered promiscuous mode [ 490.967689][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.974879][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.997207][ T9484] bridge_slave_1: entered allmulticast mode [ 491.036954][ T9484] bridge_slave_1: entered promiscuous mode [ 491.049576][ T9486] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.057849][ T9486] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.065302][ T9486] bridge_slave_0: entered allmulticast mode [ 491.086209][ T9486] bridge_slave_0: entered promiscuous mode [ 491.386567][ T5833] Bluetooth: hci1: command tx timeout [ 491.630582][ T9486] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.648121][ T9486] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.666721][ T9486] bridge_slave_1: entered allmulticast mode [ 491.696314][ T9486] bridge_slave_1: entered promiscuous mode [ 491.707649][ T5833] Bluetooth: hci5: command tx timeout [ 491.877474][ T5833] Bluetooth: hci6: command tx timeout [ 492.119649][ T9481] team0: Port device team_slave_0 added [ 492.186675][ T5833] Bluetooth: hci8: command tx timeout [ 492.360617][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.375902][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.422167][ T9482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.451793][ T9484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.506596][ T5833] Bluetooth: hci10: command tx timeout [ 492.645252][ T9481] team0: Port device team_slave_1 added [ 492.780919][ T9476] hsr_slave_0: entered promiscuous mode [ 492.804281][ T9476] hsr_slave_1: entered promiscuous mode [ 492.827605][ T9476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.835226][ T9476] Cannot create hsr debugfs directory [ 492.858052][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.865139][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.934633][ T9482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.967983][ T9484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.393856][ T5833] Bluetooth: hci7: command 0x0406 tx timeout [ 493.723449][ T9486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.751777][ T9486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.252158][ T9484] team0: Port device team_slave_0 added [ 494.612813][ T9484] team0: Port device team_slave_1 added [ 494.719185][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.737283][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.803916][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.831765][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.845857][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.912883][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.412285][ T9486] team0: Port device team_slave_0 added [ 495.532373][ T9482] hsr_slave_0: entered promiscuous mode [ 495.567908][ T9482] hsr_slave_1: entered promiscuous mode [ 495.586973][ T9482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.594612][ T9482] Cannot create hsr debugfs directory [ 495.754223][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.776140][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.836258][ T9484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.872162][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.896758][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.943268][ T9484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.970306][ T9486] team0: Port device team_slave_1 added [ 498.280986][ T9484] hsr_slave_0: entered promiscuous mode [ 498.301195][ T9484] hsr_slave_1: entered promiscuous mode [ 498.328800][ T9484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.377373][ T9484] Cannot create hsr debugfs directory [ 498.590116][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.626550][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.758612][ T9486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.828449][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.835466][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.978377][ T9486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.368878][ T9481] hsr_slave_0: entered promiscuous mode [ 499.413300][ T9481] hsr_slave_1: entered promiscuous mode [ 499.485044][ T9481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.521967][ T9481] Cannot create hsr debugfs directory [ 500.899429][ T9486] hsr_slave_0: entered promiscuous mode [ 500.916953][ T9486] hsr_slave_1: entered promiscuous mode [ 500.936204][ T9486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.944447][ T9486] Cannot create hsr debugfs directory [ 501.561286][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.569975][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.661048][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 542.683229][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 542.696119][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 542.704600][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 542.722233][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 543.134355][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 543.145105][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 543.170903][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 543.233828][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 543.244284][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 544.582661][ T9531] chnl_net:caif_netlink_parms(): no params data found [ 544.613339][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 544.756894][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 544.767878][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 544.778138][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 544.803023][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 544.811745][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 544.827617][ T5833] Bluetooth: hci7: command tx timeout [ 545.045288][ T5833] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 545.076886][ T5833] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 545.089110][ T5833] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 545.102188][ T5833] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 545.116136][ T5833] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 545.250755][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 545.266605][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 545.275524][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 545.289731][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 545.298318][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 545.314448][ T5842] Bluetooth: hci11: command tx timeout [ 545.892020][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.905977][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.913392][ T9531] bridge_slave_0: entered allmulticast mode [ 545.949448][ T9531] bridge_slave_0: entered promiscuous mode [ 545.978034][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.985233][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.016658][ T9531] bridge_slave_1: entered allmulticast mode [ 546.024783][ T9531] bridge_slave_1: entered promiscuous mode [ 546.494928][ T9531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.543160][ T9531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.663422][ T9535] chnl_net:caif_netlink_parms(): no params data found [ 546.906891][ T5833] Bluetooth: hci12: command tx timeout [ 546.913351][ T5833] Bluetooth: hci7: command tx timeout [ 547.226325][ T5833] Bluetooth: hci13: command tx timeout [ 547.386787][ T5833] Bluetooth: hci14: command tx timeout [ 547.393272][ T5833] Bluetooth: hci11: command tx timeout [ 548.274344][ T9531] team0: Port device team_slave_0 added [ 548.502714][ T9531] team0: Port device team_slave_1 added [ 548.939873][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.956155][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.998265][ T5833] Bluetooth: hci7: command tx timeout [ 549.003744][ T5833] Bluetooth: hci12: command tx timeout [ 549.026522][ T9531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.058770][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.075848][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.135586][ T9531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.306752][ T5837] Bluetooth: hci13: command tx timeout [ 549.466558][ T5837] Bluetooth: hci11: command tx timeout [ 549.472138][ T5837] Bluetooth: hci14: command tx timeout [ 549.648242][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.674769][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.696264][ T9535] bridge_slave_0: entered allmulticast mode [ 549.710925][ T9558] Bluetooth: hci4: command 0x0406 tx timeout [ 549.718612][ T9558] Bluetooth: hci3: command 0x0406 tx timeout [ 549.724679][ T9558] Bluetooth: hci2: command 0x0406 tx timeout [ 549.730898][ T5833] Bluetooth: hci9: command 0x0406 tx timeout [ 549.757406][ T9535] bridge_slave_0: entered promiscuous mode [ 549.814440][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.846292][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.853743][ T9535] bridge_slave_1: entered allmulticast mode [ 549.906400][ T9535] bridge_slave_1: entered promiscuous mode [ 550.428823][ T9543] chnl_net:caif_netlink_parms(): no params data found [ 550.578327][ T9531] hsr_slave_0: entered promiscuous mode [ 550.597038][ T9531] hsr_slave_1: entered promiscuous mode [ 550.606824][ T9531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.614439][ T9531] Cannot create hsr debugfs directory [ 550.650938][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.697450][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.066701][ T7615] Bluetooth: hci12: command tx timeout [ 551.072305][ T5842] Bluetooth: hci7: command tx timeout [ 551.386329][ T7615] Bluetooth: hci13: command tx timeout [ 551.457725][ T9535] team0: Port device team_slave_0 added [ 551.489398][ T9535] team0: Port device team_slave_1 added [ 551.552612][ T7615] Bluetooth: hci14: command tx timeout [ 551.559908][ T5842] Bluetooth: hci11: command tx timeout [ 551.688641][ T9545] chnl_net:caif_netlink_parms(): no params data found [ 552.131205][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.156392][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.216423][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.256961][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 552.437720][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.444755][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.515432][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.147629][ T7615] Bluetooth: hci12: command tx timeout [ 553.466729][ T7615] Bluetooth: hci13: command tx timeout [ 553.626698][ T7615] Bluetooth: hci14: command tx timeout [ 557.030836][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.060306][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.072070][ T9543] bridge_slave_0: entered allmulticast mode [ 557.090787][ T9543] bridge_slave_0: entered promiscuous mode [ 557.268484][ T9535] hsr_slave_0: entered promiscuous mode [ 557.296704][ T9535] hsr_slave_1: entered promiscuous mode [ 557.316448][ T9535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.324077][ T9535] Cannot create hsr debugfs directory [ 557.475237][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.499051][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.526493][ T9543] bridge_slave_1: entered allmulticast mode [ 557.546947][ T9543] bridge_slave_1: entered promiscuous mode [ 558.321999][ T9543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.461315][ T9545] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.476374][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.483823][ T9545] bridge_slave_0: entered allmulticast mode [ 558.526227][ T9545] bridge_slave_0: entered promiscuous mode [ 558.658261][ T9543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.036093][ T9545] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.043291][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.076976][ T9545] bridge_slave_1: entered allmulticast mode [ 559.097077][ T9545] bridge_slave_1: entered promiscuous mode [ 559.219981][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.238631][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.256102][ T9541] bridge_slave_0: entered allmulticast mode [ 559.294724][ T9541] bridge_slave_0: entered promiscuous mode [ 559.423743][ T9543] team0: Port device team_slave_0 added [ 559.558546][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.567389][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.574823][ T9541] bridge_slave_1: entered allmulticast mode [ 559.606766][ T9541] bridge_slave_1: entered promiscuous mode [ 559.791605][ T9543] team0: Port device team_slave_1 added [ 559.933739][ T9545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.309452][ T9545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.458377][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.491039][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.661793][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.674316][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.743390][ T9543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.900928][ T9545] team0: Port device team_slave_0 added [ 561.218723][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.236415][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.301242][ T9543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.344198][ T9545] team0: Port device team_slave_1 added [ 561.732306][ T9541] team0: Port device team_slave_0 added [ 561.994404][ T9541] team0: Port device team_slave_1 added [ 562.126936][ T9543] hsr_slave_0: entered promiscuous mode [ 562.148238][ T9543] hsr_slave_1: entered promiscuous mode [ 562.166450][ T9543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.174076][ T9543] Cannot create hsr debugfs directory [ 562.202603][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.226177][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.281896][ T9545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.623285][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.646129][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.706680][ T9545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.768520][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.775524][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.838396][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.010165][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.030896][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.135066][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.144358][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.206317][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.397558][ T9545] hsr_slave_0: entered promiscuous mode [ 563.426928][ T9545] hsr_slave_1: entered promiscuous mode [ 563.446307][ T9545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.453925][ T9545] Cannot create hsr debugfs directory [ 564.038021][ T9541] hsr_slave_0: entered promiscuous mode [ 564.056887][ T9541] hsr_slave_1: entered promiscuous mode [ 564.087811][ T9541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.095436][ T9541] Cannot create hsr debugfs directory [ 572.587301][ T31] INFO: task syz-executor:9360 blocked for more than 143 seconds. [ 572.595186][ T31] Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 [ 572.667368][ T31] Blocked by coredump. [ 572.672034][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 572.727730][ T31] task:syz-executor state:D stack:21944 pid:9360 tgid:9360 ppid:1 task_flags:0x40054c flags:0x00004006 [ 572.789974][ T31] Call Trace: [ 572.793338][ T31] [ 572.815820][ T31] __schedule+0x16e2/0x4cd0 [ 572.820432][ T31] ? __lock_acquire+0xaac/0xd20 [ 572.825335][ T31] ? schedule+0x165/0x360 [ 572.886465][ T31] ? __pfx___schedule+0x10/0x10 [ 572.891429][ T31] ? schedule+0x91/0x360 [ 572.916176][ T31] schedule+0x165/0x360 [ 572.920438][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.026190][ T31] __mutex_lock+0x724/0xe80 [ 573.030785][ T31] ? __mutex_lock+0x51b/0xe80 [ 573.035504][ T31] ? rcu_barrier+0x4c/0x570 [ 573.134373][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.146410][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 573.152149][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.176150][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 573.181349][ T31] rcu_barrier+0x4c/0x570 [ 573.196539][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 573.201733][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 573.240450][ T31] netdev_run_todo+0x327/0xea0 [ 573.245306][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 573.253629][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 573.267124][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 573.272490][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.296995][ T31] ? netdev_state_change+0x1ca/0x220 [ 573.302371][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 573.316502][ T31] tun_chr_close+0x13c/0x1c0 [ 573.321170][ T31] __fput+0x449/0xa70 [ 573.325209][ T31] task_work_run+0x1d1/0x260 [ 573.349309][ T31] ? __pfx_task_work_run+0x10/0x10 [ 573.354513][ T31] ? kmem_cache_free+0x192/0x3f0 [ 573.376277][ T31] do_exit+0x8d6/0x2550 [ 573.380527][ T31] ? do_raw_spin_lock+0x121/0x290 [ 573.385592][ T31] ? __pfx_do_exit+0x10/0x10 [ 573.426410][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 573.431887][ T31] do_group_exit+0x21c/0x2d0 [ 573.446058][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.451335][ T31] get_signal+0x125e/0x1310 [ 573.466067][ T31] arch_do_signal_or_restart+0x95/0x780 [ 573.485947][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 573.492197][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 573.517019][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 573.522652][ T31] do_syscall_64+0x103/0x210 [ 573.536942][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.543171][ T31] ? clear_bhb_loop+0x45/0xa0 [ 573.569431][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.584797][ T31] RIP: 0033:0x7f22ecf907fc [ 573.596209][ T31] RSP: 002b:00007f22ed2df670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 573.604710][ T31] RAX: 0000000000000028 RBX: 00007f22edce4620 RCX: 00007f22ecf907fc [ 573.636478][ T31] RDX: 0000000000000028 RSI: 00007f22edce4670 RDI: 0000000000000003 [ 573.644532][ T31] RBP: 0000000000000000 R08: 00007f22ed2df6c4 R09: 000000000000000c [ 573.669049][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 573.696321][ T31] R13: 0000000000000000 R14: 00007f22edce4670 R15: 0000000000000000 [ 573.704409][ T31] [ 573.727584][ T31] INFO: task syz-executor:9363 blocked for more than 144 seconds. [ 573.735464][ T31] Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 [ 573.766445][ T31] Blocked by coredump. [ 573.771106][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.800947][ T31] task:syz-executor state:D stack:20856 pid:9363 tgid:9363 ppid:1 task_flags:0x40054c flags:0x00004006 [ 573.867111][ T31] Call Trace: [ 573.870470][ T31] [ 573.873439][ T31] __schedule+0x16e2/0x4cd0 [ 573.899696][ T31] ? __lock_acquire+0xaac/0xd20 [ 573.904646][ T31] ? schedule+0x165/0x360 [ 573.919424][ T31] ? __pfx___schedule+0x10/0x10 [ 573.924383][ T31] ? schedule+0x91/0x360 [ 573.935904][ T31] schedule+0x165/0x360 [ 573.940158][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.945665][ T31] __mutex_lock+0x724/0xe80 [ 573.976137][ T31] ? __mutex_lock+0x51b/0xe80 [ 573.980905][ T31] ? rcu_barrier+0x4c/0x570 [ 573.995865][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.000975][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 574.025785][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 574.031851][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.058548][ T31] rcu_barrier+0x4c/0x570 [ 574.062989][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.075772][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.090336][ T31] netdev_run_todo+0x327/0xea0 [ 574.095183][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 574.119281][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 574.124639][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 574.146705][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.151989][ T31] ? netdev_state_change+0x1ca/0x220 [ 574.168415][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.173616][ T31] tun_chr_close+0x13c/0x1c0 [ 574.197999][ T31] __fput+0x449/0xa70 [ 574.202087][ T31] task_work_run+0x1d1/0x260 [ 574.226507][ T31] ? __pfx_task_work_run+0x10/0x10 [ 574.231721][ T31] ? kmem_cache_free+0x192/0x3f0 [ 574.245929][ T31] do_exit+0x8d6/0x2550 [ 574.250196][ T31] ? do_raw_spin_lock+0x121/0x290 [ 574.255259][ T31] ? __pfx_do_exit+0x10/0x10 [ 574.278449][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.283921][ T31] do_group_exit+0x21c/0x2d0 [ 574.308419][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.313697][ T31] get_signal+0x125e/0x1310 [ 574.336712][ T31] arch_do_signal_or_restart+0x95/0x780 [ 574.342343][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 574.366396][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 574.372384][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 574.388111][ T31] do_syscall_64+0x103/0x210 [ 574.405823][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 574.412147][ T31] ? clear_bhb_loop+0x45/0xa0 [ 574.442299][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.448995][ T31] RIP: 0033:0x7f06e89907fc [ 574.453452][ T31] RSP: 002b:00007f06e8cdfe80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 574.486093][ T31] RAX: 0000000000000024 RBX: 00007f06e96e4620 RCX: 00007f06e89907fc [ 574.508242][ T31] RDX: 0000000000000024 RSI: 00007f06e96e4670 RDI: 0000000000000003 [ 574.528454][ T31] RBP: 0000000000000000 R08: 00007f06e8cdfed4 R09: 000000000000000c [ 574.546097][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 574.554136][ T31] R13: 0000000000000000 R14: 00007f06e96e4670 R15: 0000000000000000 [ 574.583765][ T31] [ 574.598493][ T31] INFO: task syz-executor:9365 blocked for more than 145 seconds. [ 574.618017][ T31] Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 [ 574.636056][ T31] Blocked by coredump. [ 574.640698][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.666625][ T31] task:syz-executor state:D stack:20328 pid:9365 tgid:9365 ppid:1 task_flags:0x40054c flags:0x00004006 [ 574.701278][ T31] Call Trace: [ 574.704634][ T31] [ 574.718320][ T31] __schedule+0x16e2/0x4cd0 [ 574.722932][ T31] ? __lock_acquire+0xaac/0xd20 [ 574.746774][ T31] ? schedule+0x165/0x360 [ 574.751206][ T31] ? __pfx___schedule+0x10/0x10 [ 574.759142][ T31] ? schedule+0x91/0x360 [ 574.763465][ T31] schedule+0x165/0x360 [ 574.786261][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.791826][ T31] __mutex_lock+0x724/0xe80 [ 574.816112][ T31] ? __mutex_lock+0x51b/0xe80 [ 574.820882][ T31] ? rcu_barrier+0x4c/0x570 [ 574.825421][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.845974][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 574.851699][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 574.876340][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.881537][ T31] rcu_barrier+0x4c/0x570 [ 574.896551][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.901742][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.928535][ T31] netdev_run_todo+0x327/0xea0 [ 574.933390][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 574.956153][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 574.961521][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 574.978530][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.983812][ T31] ? netdev_state_change+0x1ca/0x220 [ 575.008448][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 575.013650][ T31] tun_chr_close+0x13c/0x1c0 [ 575.036489][ T31] __fput+0x449/0xa70 [ 575.040585][ T31] task_work_run+0x1d1/0x260 [ 575.045221][ T31] ? __pfx_task_work_run+0x10/0x10 [ 575.068499][ T31] ? kmem_cache_free+0x192/0x3f0 [ 575.073537][ T31] do_exit+0x8d6/0x2550 [ 575.096364][ T31] ? do_raw_spin_lock+0x121/0x290 [ 575.101476][ T31] ? __pfx_do_exit+0x10/0x10 [ 575.116059][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 575.131327][ T31] do_group_exit+0x21c/0x2d0 [ 575.146345][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.151624][ T31] get_signal+0x125e/0x1310 [ 575.167173][ T31] arch_do_signal_or_restart+0x95/0x780 [ 575.172818][ T31] ? kmem_cache_free+0x301/0x3f0 [ 575.198810][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 575.205061][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 575.228757][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 575.234389][ T31] do_syscall_64+0x103/0x210 [ 575.256217][ T31] ? clear_bhb_loop+0x45/0xa0 [ 575.260991][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.276984][ T31] RIP: 0033:0x7f16e358d37c [ 575.281471][ T31] RSP: 002b:00007f16e38dfd80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 575.308995][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f16e358d37c [ 575.336089][ T31] RDX: 0000000000000030 RSI: 00007f16e38dfe40 RDI: 00000000000000f9 [ 575.344137][ T31] RBP: 00007f16e38dfdec R08: 0000000000000000 R09: 0079746972756365 [ 575.378077][ T31] R10: 00007f16e37807e0 R11: 0000000000000246 R12: 0000000000000001 [ 575.395877][ T31] R13: 0000555558c60590 R14: 0000000000060683 R15: 00007f16e38dfe40 [ 575.403947][ T31] [ 575.426273][ T31] INFO: task syz-executor:9368 blocked for more than 146 seconds. [ 575.434157][ T31] Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 [ 575.457667][ T31] Blocked by coredump. [ 575.462323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.499346][ T31] task:syz-executor state:D stack:22008 pid:9368 tgid:9368 ppid:1 task_flags:0x40054c flags:0x00004006 [ 575.527700][ T31] Call Trace: [ 575.531054][ T31] [ 575.534016][ T31] __schedule+0x16e2/0x4cd0 [ 575.556440][ T31] ? __lock_acquire+0xaac/0xd20 [ 575.561395][ T31] ? schedule+0x165/0x360 [ 575.577858][ T31] ? __pfx___schedule+0x10/0x10 [ 575.582814][ T31] ? schedule+0x91/0x360 [ 575.606949][ T31] schedule+0x165/0x360 [ 575.611200][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.638111][ T31] __mutex_lock+0x724/0xe80 [ 575.642781][ T31] ? __mutex_lock+0x51b/0xe80 [ 575.656614][ T31] ? rcu_barrier+0x4c/0x570 [ 575.661187][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.677417][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 575.683230][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 575.709467][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 575.714681][ T31] rcu_barrier+0x4c/0x570 [ 575.736152][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 575.741355][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 575.755868][ T31] netdev_run_todo+0x327/0xea0 [ 575.760803][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 575.776338][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 575.781696][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 575.809433][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.814720][ T31] ? netdev_state_change+0x1ca/0x220 [ 575.846251][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 575.851482][ T31] tun_chr_close+0x13c/0x1c0 [ 575.866377][ T31] __fput+0x449/0xa70 [ 575.870458][ T31] task_work_run+0x1d1/0x260 [ 575.875089][ T31] ? __pfx_task_work_run+0x10/0x10 [ 575.897818][ T31] ? kmem_cache_free+0x192/0x3f0 [ 575.902849][ T31] do_exit+0x8d6/0x2550 [ 575.918733][ T31] ? do_raw_spin_lock+0x121/0x290 [ 575.923837][ T31] ? __pfx_do_exit+0x10/0x10 [ 575.946443][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 575.951916][ T31] do_group_exit+0x21c/0x2d0 [ 575.967784][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.973058][ T31] get_signal+0x125e/0x1310 [ 575.996292][ T31] arch_do_signal_or_restart+0x95/0x780 [ 576.001946][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 576.019144][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 576.025128][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 576.056573][ T31] do_syscall_64+0x103/0x210 [ 576.061245][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.077944][ T31] ? clear_bhb_loop+0x45/0xa0 [ 576.082706][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.106433][ T31] RIP: 0033:0x7f63065907fc [ 576.110921][ T31] RSP: 002b:00007f63068df630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 576.134033][ T31] RAX: 000000000000002c RBX: 00007f63072e4620 RCX: 00007f63065907fc [ 576.157001][ T31] RDX: 000000000000002c RSI: 00007f63072e4670 RDI: 0000000000000003 [ 576.165048][ T31] RBP: 0000000000000000 R08: 00007f63068df684 R09: 000000000000000c [ 576.196101][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 576.204174][ T31] R13: 0000000000000000 R14: 00007f63072e4670 R15: 0000000000000000 [ 576.238082][ T31] [ 576.249291][ T31] [ 576.249291][ T31] Showing all locks held in the system: [ 576.267828][ T31] 1 lock held by khungtaskd/31: [ 576.272749][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 576.298438][ T31] 6 locks held by kworker/u8:3/53: [ 576.316177][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 576.339885][ T31] #1: ffffc90000bf7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 576.368238][ T31] #2: ffffffff8f2e6c90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 576.396181][ T31] #3: ffff88805dfc00e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 576.416200][ T31] #4: ffff88805dfc1250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 576.447321][ T31] #5: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.478443][ T31] 2 locks held by kworker/1:2/3079: [ 576.483719][ T31] 2 locks held by getty/5589: [ 576.503604][ T31] #0: ffff8880342e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 576.536119][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 576.559234][ T31] 3 locks held by kworker/1:4/5884: [ 576.564519][ T31] 5 locks held by kworker/1:6/5887: [ 576.590778][ T31] 4 locks held by kworker/0:7/5918: [ 576.605778][ T31] #0: ffff8880307ca548 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 576.635777][ T31] #1: ffffc9000474fc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 576.725444][ T31] #2: ffff88805eda9308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 576.756533][ T31] #3: ffff88805deaf030 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 576.776256][ T31] 4 locks held by kworker/u8:13/7937: [ 576.781700][ T31] 1 lock held by syz-executor/9360: [ 576.817145][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.836075][ T31] 1 lock held by syz-executor/9363: [ 576.841330][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.876162][ T31] 1 lock held by syz-executor/9365: [ 576.881436][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.918681][ T31] 1 lock held by syz-executor/9368: [ 576.923947][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.953214][ T31] 1 lock held by syz.8.913/9412: [ 576.966219][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.987418][ T31] 2 locks held by kworker/1:8/9421: [ 576.992695][ T31] 4 locks held by syz-executor/9428: [ 577.012272][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.035784][ T31] #1: ffff8880684d5488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.045641][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.086159][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.106506][ T31] 4 locks held by syz-executor/9431: [ 577.111852][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.146805][ T31] #1: ffff8880310d6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.176080][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.196167][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.230985][ T31] 7 locks held by syz-executor/9432: [ 577.238016][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.267351][ T31] #1: ffff88806fa48488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.286129][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.306733][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.340155][ T31] #4: ffff88807fefb0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 577.358800][ T31] #5: ffff88807b704250 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 577.387606][ T31] #6: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.416105][ T31] 4 locks held by syz-executor/9435: [ 577.421456][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.450412][ T31] #1: ffff888031ca9888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.480053][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.506017][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.526504][ T31] 4 locks held by syz-executor/9436: [ 577.531855][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.569422][ T31] #1: ffff88805ea6b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.596291][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.618197][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.645778][ T31] 3 locks held by kworker/1:9/9464: [ 577.651049][ T31] 4 locks held by syz-executor/9476: [ 577.675216][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.699206][ T31] #1: ffff88808a085888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.725799][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.745807][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.765866][ T31] 4 locks held by syz-executor/9481: [ 577.786924][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.816417][ T31] #1: ffff88808c147088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.836209][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.856483][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.890181][ T31] 4 locks held by syz-executor/9482: [ 577.895541][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.920167][ T31] #1: ffff88808a086888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.947285][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.978137][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.995773][ T31] 4 locks held by syz-executor/9484: [ 578.001118][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.034646][ T31] #1: ffff88808c145488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.057348][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.082813][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.107059][ T31] 4 locks held by syz-executor/9486: [ 578.112407][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.146285][ T31] #1: ffff88806689a088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.176261][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.196207][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.229394][ T31] 4 locks held by syz-executor/9531: [ 578.234750][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.256676][ T31] #1: ffff88808d8e1c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.284610][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.306699][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.339406][ T31] 4 locks held by syz-executor/9535: [ 578.344755][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.375870][ T31] #1: ffff88808f1a5888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.406199][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.426869][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.459859][ T31] 4 locks held by syz-executor/9541: [ 578.465219][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.489580][ T31] #1: ffff888098d3f488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.515861][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.538224][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.569421][ T31] 4 locks held by syz-executor/9543: [ 578.574774][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.604506][ T31] #1: ffff888097ce7888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.636020][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.655885][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.687196][ T31] 4 locks held by syz-executor/9545: [ 578.695695][ T31] #0: ffff888034794420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.730497][ T31] #1: ffff88803532c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.755922][ T31] #2: ffff8881443a6788 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.776081][ T31] #3: ffffffff8eb943a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.806207][ T31] 3 locks held by kworker/1:11/9565: [ 578.811682][ T31] [ 578.814036][ T31] ============================================= [ 578.814036][ T31] [ 578.841961][ T31] NMI backtrace for cpu 0 [ 578.841991][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 578.842015][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 578.842027][ T31] Call Trace: [ 578.842035][ T31] [ 578.842043][ T31] dump_stack_lvl+0x189/0x250 [ 578.842074][ T31] ? __wake_up_klogd+0xd9/0x110 [ 578.842099][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.842128][ T31] ? __pfx__printk+0x10/0x10 [ 578.842160][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 578.842190][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 578.842214][ T31] ? _printk+0xcf/0x120 [ 578.842237][ T31] ? __pfx__printk+0x10/0x10 [ 578.842258][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 578.842281][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 578.842320][ T31] watchdog+0xfee/0x1030 [ 578.842347][ T31] ? watchdog+0x1de/0x1030 [ 578.842377][ T31] kthread+0x70e/0x8a0 [ 578.842400][ T31] ? __pfx_watchdog+0x10/0x10 [ 578.842423][ T31] ? __pfx_kthread+0x10/0x10 [ 578.842446][ T31] ? __pfx_kthread+0x10/0x10 [ 578.842467][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.842495][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.842514][ T31] ? __pfx_kthread+0x10/0x10 [ 578.842536][ T31] ret_from_fork+0x4b/0x80 [ 578.842556][ T31] ? __pfx_kthread+0x10/0x10 [ 578.842578][ T31] ret_from_fork_asm+0x1a/0x30 [ 578.842612][ T31] [ 578.842619][ T31] Sending NMI from CPU 0 to CPUs 1: [ 578.994277][ C1] NMI backtrace for cpu 1 [ 578.994294][ C1] CPU: 1 UID: 0 PID: 5884 Comm: kworker/1:4 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 578.994315][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 578.994328][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 578.994358][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 578.994386][ C1] Code: e8 7b db ae 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 cc 96 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 8c cd 7a 00 48 c7 c3 58 6b 76 92 49 03 1e 48 89 [ 578.994402][ C1] RSP: 0018:ffffc90000a08198 EFLAGS: 00000246 [ 578.994416][ C1] RAX: 1ffffffff1b2d983 RBX: 0000000000000001 RCX: d66851b9e1498f00 [ 578.994428][ C1] RDX: 0000000000000000 RSI: ffffffff8bc1cdc0 RDI: ffffffff8bc1cd80 [ 578.994439][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.994450][ C1] R10: 0000000000000000 R11: ffffffff817199f5 R12: 1ffff92000141051 [ 578.994462][ C1] R13: ffffc90000a082c0 R14: ffffffff8d96cc18 R15: dffffc0000000000 [ 578.994475][ C1] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 578.994488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.994500][ C1] CR2: 00007ffd04d7b208 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 578.994515][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 578.994525][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 578.994535][ C1] Call Trace: [ 578.994541][ C1] [ 578.994547][ C1] ? net_rx_action+0x6ea/0xdf0 [ 578.994574][ C1] ? unwind_next_frame+0xa5/0x2390 [ 578.994594][ C1] unwind_next_frame+0xd4/0x2390 [ 578.994616][ C1] ? unwind_next_frame+0xa5/0x2390 [ 578.994635][ C1] ? __napi_poll+0xc4/0x480 [ 578.994660][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 578.994678][ C1] arch_stack_walk+0x11c/0x150 [ 578.994702][ C1] ? net_rx_action+0x6ea/0xdf0 [ 578.994728][ C1] stack_trace_save+0x9c/0xe0 [ 578.994744][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 578.994762][ C1] ? stack_trace_save+0x9c/0xe0 [ 578.994781][ C1] kasan_save_track+0x3e/0x80 [ 578.994797][ C1] ? kasan_save_track+0x3e/0x80 [ 578.994813][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 578.994830][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 578.994850][ C1] ? kmem_cache_free+0x169/0x3f0 [ 578.994869][ C1] ? nf_conntrack_free+0x2f7/0x380 [ 578.994883][ C1] ? nf_conntrack_in+0xa24/0x1600 [ 578.994898][ C1] ? nf_hook_slow+0xc2/0x220 [ 578.994921][ C1] ? NF_HOOK+0x206/0x3a0 [ 578.994943][ C1] ? __netif_receive_skb+0x143/0x380 [ 578.994965][ C1] ? process_backlog+0x60e/0x14f0 [ 578.994989][ C1] ? __napi_poll+0xc4/0x480 [ 578.995010][ C1] ? net_rx_action+0x6ea/0xdf0 [ 578.995063][ C1] __kasan_kmalloc+0x93/0xb0 [ 578.995082][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 578.995102][ C1] ? kmem_cache_free+0x169/0x3f0 [ 578.995124][ C1] ? nf_conntrack_free+0x2f7/0x380 [ 578.995138][ C1] kmem_cache_free+0x169/0x3f0 [ 578.995157][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 578.995184][ C1] nf_conntrack_free+0x2f7/0x380 [ 578.995200][ C1] nf_conntrack_in+0xa24/0x1600 [ 578.995228][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 578.995250][ C1] ? ipt_do_table+0x2a3/0x1610 [ 578.995276][ C1] ? NF_HOOK+0x9a/0x3a0 [ 578.995300][ C1] ? NF_HOOK+0x9a/0x3a0 [ 578.995321][ C1] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 578.995340][ C1] ? ip_sabotage_in+0x57/0x270 [ 578.995363][ C1] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 578.995388][ C1] nf_hook_slow+0xc2/0x220 [ 578.995413][ C1] NF_HOOK+0x206/0x3a0 [ 578.995437][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 578.995459][ C1] ? NF_HOOK+0x9a/0x3a0 [ 578.995481][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 578.995501][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 578.995525][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 578.995553][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 578.995574][ C1] __netif_receive_skb+0x143/0x380 [ 578.995599][ C1] ? process_backlog+0x2d5/0x14f0 [ 578.995624][ C1] process_backlog+0x60e/0x14f0 [ 578.995657][ C1] ? __pfx_process_backlog+0x10/0x10 [ 578.995687][ C1] __napi_poll+0xc4/0x480 [ 578.995713][ C1] ? net_rx_action+0x447/0xdf0 [ 578.995739][ C1] net_rx_action+0x6ea/0xdf0 [ 578.995764][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.995787][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 578.995830][ C1] handle_softirqs+0x283/0x870 [ 578.995857][ C1] ? do_softirq+0xec/0x180 [ 578.995884][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 578.995912][ C1] ? kernel_fpu_end+0xc8/0x120 [ 578.995935][ C1] do_softirq+0xec/0x180 [ 578.995958][ C1] [ 578.995963][ C1] [ 578.995970][ C1] ? __pfx_do_softirq+0x10/0x10 [ 578.995999][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 578.996022][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 578.996053][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 578.996081][ C1] ? kernel_fpu_begin_mask+0x2af/0x360 [ 578.996107][ C1] kernel_fpu_end+0xd2/0x120 [ 578.996129][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 578.996151][ C1] ? __chacha20poly1305_decrypt+0x28d/0x300 [ 578.996177][ C1] blake2s_compress+0x5f/0xd0 [ 578.996200][ C1] blake2s_final+0x116/0x260 [ 578.996221][ C1] hmac+0x1c6/0x330 [ 578.996239][ C1] ? __pfx_hmac+0x10/0x10 [ 578.996270][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 578.996288][ C1] ? kdf+0x115/0x270 [ 578.996306][ C1] kdf+0x182/0x270 [ 578.996323][ C1] ? __pfx_kdf+0x10/0x10 [ 578.996340][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.996358][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 578.996386][ C1] ? wg_pubkey_hashtable_lookup+0x1e/0x360 [ 578.996409][ C1] ? wg_pubkey_hashtable_lookup+0x1e/0x360 [ 578.996435][ C1] wg_noise_handshake_consume_initiation+0x3ee/0x900 [ 578.996459][ C1] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 578.996477][ C1] ? kernel_fpu_end+0xd2/0x120 [ 578.996500][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 578.996522][ C1] ? wg_packet_encrypt_worker+0x167a/0x1720 [ 578.996546][ C1] ? preempt_schedule_common+0x83/0xd0 [ 578.996576][ C1] ? __asan_memset+0x22/0x50 [ 578.996598][ C1] ? __pfx_compute_mac1+0x10/0x10 [ 578.996619][ C1] ? preempt_schedule+0xae/0xc0 [ 578.996649][ C1] ? wg_cookie_validate_packet+0x208/0x320 [ 578.996670][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 578.996702][ C1] wg_packet_handshake_receive_worker+0x5f2/0xfb0 [ 578.996735][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 578.996760][ C1] ? register_lock_class+0x51/0x320 [ 578.996786][ C1] ? __lock_acquire+0xaac/0xd20 [ 578.996812][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 578.996841][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.996866][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 578.996891][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 578.996917][ C1] process_scheduled_works+0xadb/0x17a0 [ 578.996958][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.996992][ C1] worker_thread+0x8a0/0xda0 [ 578.997009][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 578.997044][ C1] ? __kthread_parkme+0x7b/0x200 [ 578.997065][ C1] kthread+0x70e/0x8a0 [ 578.997085][ C1] ? __pfx_worker_thread+0x10/0x10 [ 578.997100][ C1] ? __pfx_kthread+0x10/0x10 [ 578.997120][ C1] ? __pfx_kthread+0x10/0x10 [ 578.997138][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.997161][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.997177][ C1] ? __pfx_kthread+0x10/0x10 [ 578.997196][ C1] ret_from_fork+0x4b/0x80 [ 578.997211][ C1] ? __pfx_kthread+0x10/0x10 [ 578.997230][ C1] ret_from_fork_asm+0x1a/0x30 [ 578.997254][ C1] [ 579.894712][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 579.901632][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 579.913474][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 579.923564][ T31] Call Trace: [ 579.926869][ T31] [ 579.929828][ T31] dump_stack_lvl+0x99/0x250 [ 579.934460][ T31] ? __asan_memcpy+0x40/0x70 [ 579.939085][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.944322][ T31] ? __pfx__printk+0x10/0x10 [ 579.948956][ T31] panic+0x2db/0x790 [ 579.952907][ T31] ? __pfx_panic+0x10/0x10 [ 579.957467][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 579.962885][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 579.968288][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 579.974491][ T31] watchdog+0x102d/0x1030 [ 579.978863][ T31] ? watchdog+0x1de/0x1030 [ 579.983320][ T31] kthread+0x70e/0x8a0 [ 579.987425][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.992134][ T31] ? __pfx_kthread+0x10/0x10 [ 579.996841][ T31] ? __pfx_kthread+0x10/0x10 [ 580.001462][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.006699][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.011928][ T31] ? __pfx_kthread+0x10/0x10 [ 580.016553][ T31] ret_from_fork+0x4b/0x80 [ 580.021001][ T31] ? __pfx_kthread+0x10/0x10 [ 580.025623][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.030439][ T31] [ 580.033849][ T31] Kernel Offset: disabled [ 580.038189][ T31] Rebooting in 86400 seconds..