last executing test programs: 27m28.396685777s ago: executing program 32 (id=104): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) fanotify_mark(0xffffffffffffffff, 0x5, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004f00)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005400)={{{@in6=@initdev, @in6=@private0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000005500)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 26m40.198349423s ago: executing program 33 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x1, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}]}, 0xa0}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 20m38.122893323s ago: executing program 34 (id=713): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x22000000) read$msr(r4, &(0x7f0000019680)=""/102388, 0xfffffe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x1) 20m37.885199391s ago: executing program 35 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8100, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb02c, 0x8, 0xb, 0x3, 0x88d6, 0x80000001, 0x1007, 0xeffffffe, 0x1002, 0xffffffff, 0x7, 0x7, 0x10000004, 0x5, 0x6, 0xe969, 0x8, 0x6, 0xbcbd, 0x8e, 0x10d, 0x804005, 0x2, 0x80000001, 0x5, 0x0, 0x49, 0x12, 0xff, 0xfffffff1, 0x4000004]}) syz_usb_control_io(r2, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000304000000040316"], 0x0, 0x0, 0x0}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000840000000081400058008"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x7, @empty, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b0009008000", 0x2c}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="c40700002c000b0000000000ffdbdf2502000000f90204800c00480001000000000000000c00b400090000000000000014002d00fe8000000000000000000000000000aa30002a800c005b0009000000000000000c004f00ffffff7f000000000700d400292d00000400f4800800ab000100000065a8fb6fcd028fbf8f59d14d7c018055f1dc0e7d059140c7ef728a7fc47110208f9e82f5010caf7ec4964d80f3ca872ef722e96c021c4854a33ab73f868f5faa503366ff15d4e382cd9ee3f7a2e41511117a2060c94c27d6abfa0047800b14298e06cf746521abd2616d85acd66a45c12125a66d55e21ce210ccd40a237f4e90f5daa166cd1f389c0312d0ad7a04ab913c88c68b768b10a6f0e33207b87333ac9394b015077cbecc46a5c820ab789698c123dc53d05a9fce4a66580b4e4a2a23f9529c88ad1e139941a188f734ec2e076387033c65a0a5f97e481b9e91fb040087801400b5000000000000000000000000000000000112d52bca27195300ab9b1940c71e298e3a974d4f407cf9c173a1272c227a65e5f4b25b6c18a87a379012e80c743af71d56ea1ac877d47a7b78f9bfee8b641ecd80ac30e5195492a4075da9521ad4ca999c2447e958206947e3222527c900004301418004002d8008005f00ac1414bb3eff44aad627e8945022b583538c1de1dad38750c4c3f6ada0af5bee550d94cbfe6e8c4a15b134abeafc92a916013554401050555fb2892ec0955f03aeb1b976baefff83f7c964c99ee67c00d11b446ba56c5ef86e10e8f55f9b1ddc87df53d649be2955582bc529ffa6f4d337058b70bae2a0c3ed7e69d004cea0b1306aa7450c9ba0bb9016e1288d9d4a34c91cf2ad184fbabc015c5a78ab6c2480bc0ced5cacf159fddf612954e4e985b92aa7cb5fb7bfd2c9ffd34d8554c0c0cf90892d46a853e36d9612c85c316d38efc1fa49c86995fc397eac807dc6096927d6a8e7793b946023a57cbbcd1b9dc5cbf5e5b894175acdd7dfda76128914fa0615a0e429bdc4aa381db9b84dccb0635b48994d10de271bdf825fd486f21cf7aeb70a1e63a6ed5085c46cffcf2ef5954b9563f6f2b59a9b0000000065d16173dc18358f09c42559831ae3409bd6ee3d8b85ee4454d1e2eefd553879778277bda0ddd00001eafbc07b56e917b2ec6705648547efe0ceb7d5d0ef8926dbef79bf1d4e7651d9f5fa289d4a7469d1dbe33edecdbf7d0f607180f7d803a34017661cd111a15645af7a6e11ec0dad78f1f81b6410795c394401cf4d6232a057bba3355a40897f3c14feb9b8a5a76511791f3b94a74bc628e5c6256f07980216db4e4a7304ae3d019dd50eb75e56b96753a2a9edddbc8c4520e1a1c2cef932e39d5fef242a43d94b1ad29468732fc37de91a60a2b68498c481d885ce79e048759c2bf2173cd16efa572a6e7d0014801f8f68a9b314b6f0d1fc1a69552c1f285305d782050cf840a52a4aadc05035a769b9c21a28ea72fdd7d1dba8a3c8a85d00d0d728bfca3c466e6b418c2bee57f8908c7ac57562c89d9bb04e81d999f7d0ec2911ffd97c3aa202eedee4d55587a7b39e583a74edc8a548077cb43b7ee07bb5ec9c44629baf274f0000008ece4458f27f11d3c442da8d65d188fe6e0076413669a6e32c5e17fa0377fda6e403875856d7cfb8bf2bd73563dbdc090e53c3b93b621f088967992ec0b09a5b15817adcde13c554af4e9b46da9bed6f74c58a488724d9affd17aff7f442ac989f27552943bf4caa30c2b385231bab8ddd09f20668a243be64958714754f1a7ad4f1788c3d3a89ee51affaa7ecb9f30a8295bd55339f99cd4a082bcaf24930a232b168ffdd97a5f122fe6ad482ca7a088373191d1e62c13882dcffedbb2a039c2e501cc785dfcae99fed5cbb0c004500feffffffffffffff08005d00", @ANYRES32=0xee00, @ANYBLOB="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"], 0x7c4}}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20m37.745382642s ago: executing program 36 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180084001000000000008000200e0000002080007400000000014001880080002400000000008f6e7abb9c203bd"], 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180084001000000000008000200e0000002080007400000000014001880080002400000000008f6e7abb9c203bd"], 0x78}}, 0x0) r1 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000140)=""/213) socket$pppoe(0x18, 0x1, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'wg0\x00', {}, 0x273}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000280), &(0x7f0000000140)=r3}, 0x22) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) semget(0x2, 0x3, 0x9e) (async) r7 = semget(0x2, 0x3, 0x9e) semop(r7, 0x0, 0x0) (async) semop(r7, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x28b, 0x0, 0x200}]}) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f00000000c0)) (async) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f00000000c0)) semctl$GETPID(r7, 0x0, 0xb, &(0x7f0000000280)=""/242) (async) semctl$GETPID(r7, 0x0, 0xb, &(0x7f0000000280)=""/242) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002200), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000a01000000006f00002e005d4198751456f1927091c56a2c8d8666c71f3f091df8acb558e55517ce38847b65362adb109f68da887b9018a3f5e95e12903eaeb4e98d1f3369e8a597e546076e0cb8e2401a97b0ac8d4d5aa5b2ad682a21bcdbd320614b7f0d6ae2a002b1f18d700ec5f38a142bca476d7e175e26c8a2cc4b6c"], &(0x7f00000008c0)=""/37, 0x36, 0x25, 0x1, 0x4}, 0x28) write$binfmt_register(r11, &(0x7f0000002240)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x551ab5a6, 0x3a, 'lowerdir', 0x3a, ':ndex=on', 0x3a, './file0'}, 0x37) r12 = syz_usb_connect(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYRESDEC=r11], 0x0) syz_usb_control_io$cdc_ncm(r12, 0x0, &(0x7f0000000440)={0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00220f00000083ffc400000b93bf0280b37488dffc", @ANYRES64=r9, @ANYRES16], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) r14 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r14, 0x4802, 0x0) 16m49.682686206s ago: executing program 37 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) close(0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x38, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 14m31.3348092s ago: executing program 38 (id=1344): shutdown(0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd8686}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x695}, 0x20048040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r4], 0x54}}, 0x0) 14m30.233089766s ago: executing program 39 (id=1348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 13m46.812351173s ago: executing program 40 (id=1413): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000100)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x8100, 0x1, 0x80002}) 12m43.365287459s ago: executing program 9 (id=1500): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b799010203010902240001000000000904310002ff0107ff0905"], 0x0) 12m42.044622601s ago: executing program 9 (id=1501): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r8}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r9, 0x0, 0x118) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 12m40.157907802s ago: executing program 9 (id=1502): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 12m39.573058941s ago: executing program 9 (id=1503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x3328}], 0x1, 0x0, 0x0, 0x0) close(r1) 12m38.746084611s ago: executing program 9 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ocfs2\x00', 0x200040, &(0x7f0000000100)='barrier') socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r1, 0x90004) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) r5 = dup(r4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r1, 0x8760}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, 0x0, 0x0) 12m38.400247413s ago: executing program 9 (id=1505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 12m23.126686596s ago: executing program 41 (id=1505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 9m23.740819545s ago: executing program 2 (id=1789): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 9m20.585316079s ago: executing program 2 (id=1795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40000004}, 0x448d4) 9m16.004425385s ago: executing program 2 (id=1799): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00151f0000001f222b6c3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000884}, 0x20000000) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000300)={0x7ff, 0x80, 0xffff, 0xe}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 9m11.418267063s ago: executing program 2 (id=1806): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 9m9.882711121s ago: executing program 2 (id=1807): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x9) 9m6.861836229s ago: executing program 2 (id=1810): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x181100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2922782c6bd7b054, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) io_uring_setup(0x1a8, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000200)={0x2, r5, 0x9, 0x0, 0x4, 0x800008, 0x100000, 0x4, 0x3ffc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 8m51.37695139s ago: executing program 42 (id=1810): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x181100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2922782c6bd7b054, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) io_uring_setup(0x1a8, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000200)={0x2, r5, 0x9, 0x0, 0x4, 0x800008, 0x100000, 0x4, 0x3ffc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 8m33.247337704s ago: executing program 3 (id=1864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0xfe44, 0x3) 8m31.852934258s ago: executing program 3 (id=1867): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x9) 8m27.691480736s ago: executing program 3 (id=1872): ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0245628, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2b78, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000001140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x562c2) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 8m26.671658455s ago: executing program 3 (id=1874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 8m25.055036099s ago: executing program 3 (id=1875): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 8m24.962082719s ago: executing program 3 (id=1877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0xdddd0000, 0x102000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0xdddd0000, 0x103000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 8m9.754030667s ago: executing program 43 (id=1877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0xdddd0000, 0x102000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0xdddd0000, 0x103000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 7m20.515120204s ago: executing program 4 (id=1993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303001d000000000000001500"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 7m20.333958698s ago: executing program 4 (id=1994): syz_emit_ethernet(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, r8, 0x2f, 0x2034, r8}, 0x20) 7m18.001111356s ago: executing program 4 (id=1995): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, 0x0, 0x20040000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/80, 0x50}, {0x0}], 0x2) 7m17.541508326s ago: executing program 1 (id=1996): ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0245628, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2b78, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000001140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x562c2) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 7m13.363964657s ago: executing program 4 (id=1999): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x6c}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x4a, {"2e450f1c80c800000066bad004b875a90000ef0fc73bd9e1438074180db50f2106f2440f2d300f00960a000000c4817a2cd82ef3410f2b41b7"}}], 0x4a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m13.28139976s ago: executing program 1 (id=2000): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) 7m12.658035786s ago: executing program 4 (id=2001): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m12.357680384s ago: executing program 4 (id=2002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303001d000000000000001500"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 7m11.103671259s ago: executing program 1 (id=2005): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0xa, 0x7f, 0x0, 0x0, 0x6, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m8.584942293s ago: executing program 1 (id=2009): openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x7, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x3, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x5, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0xb068, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x202, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 7m6.320805997s ago: executing program 1 (id=2010): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m6.190846083s ago: executing program 1 (id=2011): r0 = socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000006001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6m56.836004219s ago: executing program 44 (id=2002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303001d000000000000001500"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 6m51.050899598s ago: executing program 45 (id=2011): r0 = socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000006001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 19.904531617s ago: executing program 6 (id=2508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='sched_switch\x00', r0, 0x0, 0x20}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x3ae9, 0xc7, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) mmap$xdp(&(0x7f0000771000/0x2000)=nil, 0x2000, 0x100000b, 0x10, 0xffffffffffffffff, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xf) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x11, 0x0, 0x0, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) 18.478030034s ago: executing program 8 (id=2510): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) prctl$PR_SVE_GET_VL(0x33, 0x197d) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @private2, 0x4}, 0xffffffffffffffb5, &(0x7f0000000180)=[{&(0x7f0000000680)="99da74b0cbdbafcad23fa4605c1c3f72555c6b7f90d56635c5d0fab072bffb3434f6e166467d9cec5d606f7083e1f7a57411641c2e2673d1c2dd3a46e87ec5383f6ce1ef6e699a6b6072b2f2d71e64965da0cbd9792e55892a67f7057fc59d4277b069bd07e38638cb679e7aef5e8cbb234eacc728355ac0903881097800cc9db994ec", 0x1}], 0x1}, 0x4c804) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000314000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) 17.089991408s ago: executing program 5 (id=2511): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009623130601ff93e7e036042a0008270200000083"], 0x0}, 0x0) 16.4735153s ago: executing program 8 (id=2512): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ocfs2\x00', 0x200040, 0x0) unshare(0x20000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) listen(r1, 0x90004) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) r5 = dup(r4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r1, 0x8760}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, 0x0, 0x0) 16.040996904s ago: executing program 6 (id=2514): syz_emit_ethernet(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, r7, 0x2f, 0x2034, r7}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) 15.384817755s ago: executing program 8 (id=2515): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xf00) 14.928762738s ago: executing program 0 (id=2517): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0'}, 0xb) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r8, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r8, 0x0) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 14.928346739s ago: executing program 8 (id=2518): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, 0x0, 0x20040000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/80, 0x50}, {0x0}], 0x2) 12.742104423s ago: executing program 5 (id=2519): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x4, 0x6, 0x1e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x700, 0x7fff, 0x4}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) 12.67009238s ago: executing program 0 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300d0000000ffffffffffff080211000000505050505050000000"], 0x44}}, 0x0) 10.368650715s ago: executing program 6 (id=2521): syz_emit_ethernet(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) 10.285100773s ago: executing program 5 (id=2522): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0xf) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x2d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000140)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r4 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x5ffffffff000, 0x1, 0x13, r4, 0x81000000) 9.456738996s ago: executing program 7 (id=2523): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='pvfs2\x00', 0x800004, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) 9.415440601s ago: executing program 5 (id=2524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='sched_switch\x00', r0, 0x0, 0x20}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x3ae9, 0xc7, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) mmap$xdp(&(0x7f0000771000/0x2000)=nil, 0x2000, 0x100000b, 0x10, 0xffffffffffffffff, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xf) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x11, 0x0, 0x0, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) 8.353391979s ago: executing program 7 (id=2525): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ocfs2\x00', 0x200040, 0x0) unshare(0x20000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) listen(r1, 0x90004) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) r5 = dup(r4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r1, 0x8760}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, 0x0, 0x0) 7.611014653s ago: executing program 8 (id=2526): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, 0x0, 0x0, 0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.404527503s ago: executing program 0 (id=2527): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x100a}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 5.500870906s ago: executing program 8 (id=2528): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 5.467628277s ago: executing program 7 (id=2529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x8000) 4.722461478s ago: executing program 7 (id=2530): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) 4.32936006s ago: executing program 6 (id=2531): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xfffffff7, 0x0, "05000801000000d510017b00000f3600", 0x0, 0x7ff}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/27, 0x64}], 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x0) 4.264301017s ago: executing program 0 (id=2532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 4.004317802s ago: executing program 0 (id=2533): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffffff8, 0x4) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x0) 3.45697638s ago: executing program 5 (id=2534): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x4, 0x6, 0x1e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x700, 0x7fff, 0x4}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) 2.120849201s ago: executing program 6 (id=2535): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='pvfs2\x00', 0x800004, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) 564.167265ms ago: executing program 5 (id=2536): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, 0x0, 0x20040000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/80, 0x50}, {0x0}], 0x2) 249.608796ms ago: executing program 7 (id=2537): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300d0000000ffffffffffff080211000000505050505050000000"], 0x44}}, 0x0) 60.722583ms ago: executing program 0 (id=2538): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) 23.082562ms ago: executing program 6 (id=2539): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ocfs2\x00', 0x200040, 0x0) unshare(0x20000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) listen(r1, 0x90004) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r1, 0x8760}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, 0x0, 0x0) 0s ago: executing program 7 (id=2540): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x6b0, 0xed}]}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)={0x51, "05484427093baa21b30e68aedf0a66dd3c0f677c1857883b4ddacc98d99d470e5d75edd349be162d5e297be32a6e96a22fc027601609f89d16e06b5261bf9781e845bdad698428bcbd9fa929054489541d"}) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000700)={0x2, 0x1, 0x7, 0x17, 0x1f, 0x0}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2000) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): 9] ieee802154 phy1 wpan1: encryption failed: -22 [ 1454.135528][ T8726] usb 1-1: Using ep0 maxpacket: 32 [ 1454.171662][ T8726] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1454.171695][ T8726] usb 1-1: config 0 has no interface number 0 [ 1454.171748][ T8726] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1454.181728][ T8726] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1454.181804][ T8726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.181863][ T8726] usb 1-1: Product: syz [ 1454.181906][ T8726] usb 1-1: Manufacturer: syz [ 1454.181957][ T8726] usb 1-1: SerialNumber: syz [ 1454.196403][ T8726] usb 1-1: config 0 descriptor?? [ 1454.276139][ T8726] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1454.276169][ T8726] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1454.756815][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.836426][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.861450][ T5936] bond0 (unregistering): Released all slaves [ 1454.951659][ T8726] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1455.575657][ T8726] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1455.575682][ T8726] em28xx 1-1:0.89: board has no eeprom [ 1455.703407][ T8726] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1455.703440][ T8726] em28xx 1-1:0.89: analog set to bulk mode. [ 1455.704630][T12259] em28xx 1-1:0.89: Registering V4L2 extension [ 1455.721732][ T8726] usb 1-1: USB disconnect, device number 24 [ 1455.728301][ T8726] em28xx 1-1:0.89: Disconnecting em28xx [ 1455.833110][T12259] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1455.833132][T12259] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1455.833144][T12259] em28xx 1-1:0.89: No AC97 audio processor [ 1455.837927][T12259] usb 1-1: Decoder not found [ 1455.837988][T12259] em28xx 1-1:0.89: failed to create media graph [ 1455.838076][T12259] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1455.873333][T12259] em28xx 1-1:0.89: Registering snapshot button... [ 1455.890550][T12259] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input44 [ 1455.892680][T12259] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1455.893205][ T8726] em28xx 1-1:0.89: Closing input extension [ 1455.893225][ T8726] em28xx 1-1:0.89: Deregistering snapshot button [ 1456.072323][ T8726] em28xx 1-1:0.89: Freeing device [ 1457.367016][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.426877][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.449167][ T5936] bond0 (unregistering): Released all slaves [ 1457.506969][T13315] warning: `syz.0.2056' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1458.090351][T13143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.137021][T13143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.169500][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.169739][ T6859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.205774][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.206588][ T6859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.006068][T13107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.639758][T13169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1461.987233][T13169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1462.087341][T13169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1462.473816][T13143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.483691][T13169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1462.892983][T13174] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1463.145652][ T5936] hsr_slave_0: left promiscuous mode [ 1463.206643][ T5936] hsr_slave_1: left promiscuous mode [ 1463.207550][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.286474][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.425586][ T5936] hsr_slave_0: left promiscuous mode [ 1463.445617][ T5936] hsr_slave_1: left promiscuous mode [ 1463.462465][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.462487][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.509172][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.509205][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.685751][ T5936] hsr_slave_0: left promiscuous mode [ 1463.725670][ T5936] hsr_slave_1: left promiscuous mode [ 1463.726991][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.727024][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.765624][T11595] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1463.767758][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.767791][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.915147][ T5936] veth1_macvtap: left promiscuous mode [ 1463.915225][ T5936] veth0_macvtap: left promiscuous mode [ 1463.927176][ T5936] veth1_vlan: left promiscuous mode [ 1463.927307][ T5936] veth0_vlan: left promiscuous mode [ 1463.947727][T11595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.947775][T11595] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1463.950950][T11595] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1463.950991][T11595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.951017][T11595] usb 1-1: Product: syz [ 1463.951034][T11595] usb 1-1: Manufacturer: syz [ 1463.951046][T11595] usb 1-1: SerialNumber: syz [ 1463.954754][T11595] usb 1-1: config 0 descriptor?? [ 1464.028888][T11595] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1464.032442][T11595] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1464.053366][T11595] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1464.053584][T11595] usb 1-1: media controller created [ 1464.097372][T11595] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1464.135540][ T5936] veth1_macvtap: left promiscuous mode [ 1464.135651][ T5936] veth0_macvtap: left promiscuous mode [ 1464.138667][ T5936] veth1_vlan: left promiscuous mode [ 1464.138806][ T5936] veth0_vlan: left promiscuous mode [ 1464.191907][T11595] DVB: Unable to find symbol tda10046_attach() [ 1464.191933][T11595] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1464.191951][T11595] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1464.882882][T12706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1464.960095][T12706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1464.964200][T12706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1464.981864][T12706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1464.996141][T12706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1465.250827][T11595] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1465.265715][T11595] usb 1-1: USB disconnect, device number 25 [ 1465.786181][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1466.166266][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1467.031755][T12706] Bluetooth: hci3: command tx timeout [ 1469.115467][T12706] Bluetooth: hci3: command tx timeout [ 1471.236778][T12706] Bluetooth: hci3: command tx timeout [ 1472.416430][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1472.706548][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1473.277073][T12706] Bluetooth: hci3: command tx timeout [ 1474.929219][T13411] ptrace attach of "./syz-executor exec"[11368] was attempted by ""[13411] [ 1476.889202][T11180] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1476.944396][T11180] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1476.970488][T11180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1476.973560][T11180] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1476.974711][T11180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1477.034565][T11595] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1477.265690][T11595] usb 1-1: Using ep0 maxpacket: 8 [ 1477.270082][T11595] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1477.272021][T11595] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1477.272064][T11595] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 0 [ 1477.272083][T11595] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1477.361871][T11595] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1477.361898][T11595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.361913][T11595] usb 1-1: Product: syz [ 1477.361925][T11595] usb 1-1: Manufacturer: syz [ 1477.361936][T11595] usb 1-1: SerialNumber: syz [ 1477.612175][T11595] usb 1-1: bad CDC descriptors [ 1477.622594][T11595] usb 1-1: USB disconnect, device number 26 [ 1479.600946][T12706] Bluetooth: hci6: command tx timeout [ 1481.676288][T12706] Bluetooth: hci6: command tx timeout [ 1483.314493][T11180] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1483.340491][T11180] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1483.342143][T11180] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1483.344687][T11180] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1483.356215][T11180] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1483.450497][T12706] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1483.453753][T12706] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1483.477810][T12706] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1483.551273][T11227] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1483.563490][T11227] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1483.765539][T11180] Bluetooth: hci6: command tx timeout [ 1485.366283][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1485.505651][T11180] Bluetooth: hci7: command tx timeout [ 1485.906609][T11227] Bluetooth: hci6: command tx timeout [ 1485.906632][T11180] Bluetooth: hci8: command tx timeout [ 1485.997808][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1487.585736][T11180] Bluetooth: hci7: command tx timeout [ 1487.986821][T11180] Bluetooth: hci8: command tx timeout [ 1489.689158][T11180] Bluetooth: hci7: command tx timeout [ 1490.066342][T11180] Bluetooth: hci8: command tx timeout [ 1490.209929][T13488] netlink: 'syz.0.2093': attribute type 1 has an invalid length. [ 1490.210001][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 1491.745858][T11180] Bluetooth: hci7: command tx timeout [ 1491.814597][T13174] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1492.145548][T11180] Bluetooth: hci8: command tx timeout [ 1495.439480][ T9507] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1495.625628][ T9507] usb 1-1: Using ep0 maxpacket: 8 [ 1495.640660][ T9507] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1495.641756][ T9507] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1495.641786][ T9507] usb 1-1: can't read configurations, error -71 [ 1498.936373][T13422] chnl_net:caif_netlink_parms(): no params data found [ 1498.954126][T13374] chnl_net:caif_netlink_parms(): no params data found [ 1498.982431][T13452] chnl_net:caif_netlink_parms(): no params data found [ 1500.642173][T13450] chnl_net:caif_netlink_parms(): no params data found [ 1502.937683][T13422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.939154][T13422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.939419][T13422] bridge_slave_0: entered allmulticast mode [ 1502.942340][T13422] bridge_slave_0: entered promiscuous mode [ 1502.986837][T13374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.986981][T13374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.987278][T13374] bridge_slave_0: entered allmulticast mode [ 1502.990155][T13374] bridge_slave_0: entered promiscuous mode [ 1503.021676][T13452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.022134][T13452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.022949][T13452] bridge_slave_0: entered allmulticast mode [ 1503.032117][T13452] bridge_slave_0: entered promiscuous mode [ 1503.039013][T13422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.039345][T13422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.039947][T13422] bridge_slave_1: entered allmulticast mode [ 1503.063714][T13422] bridge_slave_1: entered promiscuous mode [ 1503.075642][T13374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.075901][T13374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.076219][T13374] bridge_slave_1: entered allmulticast mode [ 1503.079541][T13374] bridge_slave_1: entered promiscuous mode [ 1503.082521][T13452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.083142][T13452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.084037][T13452] bridge_slave_1: entered allmulticast mode [ 1503.105642][T13452] bridge_slave_1: entered promiscuous mode [ 1503.762246][T13422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.782279][T13452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.900197][T13374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.917423][T13422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.920749][T13452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.056336][T13374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.227220][T13450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.227599][T13450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.227850][T13450] bridge_slave_0: entered allmulticast mode [ 1504.229861][T13450] bridge_slave_0: entered promiscuous mode [ 1504.628064][ T9507] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1504.678321][T13450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.678467][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.678700][T13450] bridge_slave_1: entered allmulticast mode [ 1504.681065][T13450] bridge_slave_1: entered promiscuous mode [ 1504.805828][ T9507] usb 1-1: Using ep0 maxpacket: 8 [ 1504.811825][T13452] team0: Port device team_slave_0 added [ 1504.815000][T13422] team0: Port device team_slave_0 added [ 1504.836822][ T9507] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1504.838760][ T9507] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1504.838801][ T9507] usb 1-1: can't read configurations, error -71 [ 1504.940385][T13374] team0: Port device team_slave_0 added [ 1504.943398][T13452] team0: Port device team_slave_1 added [ 1504.944409][ T5936] IPVS: stop unused estimator thread 0... [ 1504.951635][ T5936] IPVS: stop unused estimator thread 0... [ 1504.971594][T13422] team0: Port device team_slave_1 added [ 1505.118943][T13374] team0: Port device team_slave_1 added [ 1505.281039][T13450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.431412][T11595] libceph: connect (1)[c::]:6789 error -101 [ 1505.432043][T11595] libceph: mon0 (1)[c::]:6789 connect error [ 1505.457619][T13450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.458737][T13452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.458753][T13452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.458779][T13452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.539769][T11595] libceph: connect (1)[c::]:6789 error -101 [ 1505.540013][T11595] libceph: mon0 (1)[c::]:6789 connect error [ 1505.570913][T13547] ceph: No mds server is up or the cluster is laggy [ 1505.787536][T13422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.787557][T13422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.787591][T13422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.372593][T13452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.372669][T13452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.372738][T13452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.910335][T13374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.910355][T13374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.910389][T13374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.914768][T13422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.914786][T13422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.914819][T13422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.466839][T13374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.466861][T13374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.466895][T13374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.763242][T13450] team0: Port device team_slave_0 added [ 1508.103304][T13450] team0: Port device team_slave_1 added [ 1510.284839][T13452] hsr_slave_0: entered promiscuous mode [ 1510.294882][T13452] hsr_slave_1: entered promiscuous mode [ 1510.302465][T13452] debugfs: 'hsr0' already exists in 'hsr' [ 1510.302497][T13452] Cannot create hsr debugfs directory [ 1510.303666][T13450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.303682][T13450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.303714][T13450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.608092][T13450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.608114][T13450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.608150][T13450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.714240][T13374] hsr_slave_0: entered promiscuous mode [ 1510.718576][T13374] hsr_slave_1: entered promiscuous mode [ 1510.722944][T13374] debugfs: 'hsr0' already exists in 'hsr' [ 1510.723031][T13374] Cannot create hsr debugfs directory [ 1510.833974][T13422] hsr_slave_0: entered promiscuous mode [ 1510.841459][T13422] hsr_slave_1: entered promiscuous mode [ 1510.842429][T13422] debugfs: 'hsr0' already exists in 'hsr' [ 1510.842450][T13422] Cannot create hsr debugfs directory [ 1511.566008][ T9507] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1511.715568][ T9507] usb 1-1: Using ep0 maxpacket: 8 [ 1511.724088][ T9507] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1511.725152][ T9507] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1511.725181][ T9507] usb 1-1: can't read configurations, error -71 [ 1512.093294][T13450] hsr_slave_0: entered promiscuous mode [ 1512.094355][T13450] hsr_slave_1: entered promiscuous mode [ 1512.095071][T13450] debugfs: 'hsr0' already exists in 'hsr' [ 1512.095091][T13450] Cannot create hsr debugfs directory [ 1512.585531][ T9507] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1512.743024][ T9507] usb 1-1: Using ep0 maxpacket: 32 [ 1512.757297][ T9507] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1512.764411][ T9507] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1512.764520][ T9507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.764538][ T9507] usb 1-1: Product: syz [ 1512.764549][ T9507] usb 1-1: Manufacturer: syz [ 1512.764561][ T9507] usb 1-1: SerialNumber: syz [ 1512.779399][ T9507] usb 1-1: config 0 descriptor?? [ 1513.227360][ T9507] gs_usb 1-1:0.0: Configuring for 34 interfaces [ 1513.647998][ T9507] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1513.648654][ T9507] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1513.649335][ T9507] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 1513.689866][ T9507] usb 1-1: USB disconnect, device number 32 [ 1515.522715][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1515.522791][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1521.267978][T12259] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1521.422070][ T5936] bridge_slave_1: left allmulticast mode [ 1521.422104][ T5936] bridge_slave_1: left promiscuous mode [ 1521.422378][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.445474][T12259] usb 1-1: Using ep0 maxpacket: 16 [ 1521.452178][T12259] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1521.452212][T12259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.452228][T12259] usb 1-1: Product: syz [ 1521.452239][T12259] usb 1-1: Manufacturer: syz [ 1521.452251][T12259] usb 1-1: SerialNumber: syz [ 1521.526348][ T5936] bridge_slave_0: left allmulticast mode [ 1521.526380][ T5936] bridge_slave_0: left promiscuous mode [ 1521.534722][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.621453][ T5936] bridge_slave_1: left allmulticast mode [ 1521.621489][ T5936] bridge_slave_1: left promiscuous mode [ 1521.621812][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.663670][T12259] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1521.698800][T12259] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1521.699124][T12259] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1521.699163][T12259] usb 1-1: media controller created [ 1521.739916][T12259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1521.757229][ T5936] bridge_slave_0: left allmulticast mode [ 1521.757266][ T5936] bridge_slave_0: left promiscuous mode [ 1521.759257][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.851770][ T5936] bridge_slave_1: left allmulticast mode [ 1521.851809][ T5936] bridge_slave_1: left promiscuous mode [ 1521.852089][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.909579][T13588] overlayfs: overlapping lowerdir path [ 1521.937166][ T5936] bridge_slave_0: left allmulticast mode [ 1521.937233][ T5936] bridge_slave_0: left promiscuous mode [ 1521.937742][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.973352][T12259] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1522.018120][T12259] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1522.021027][T12259] usb 1-1: USB disconnect, device number 33 [ 1522.044427][ T5936] bridge_slave_1: left allmulticast mode [ 1522.044451][ T5936] bridge_slave_1: left promiscuous mode [ 1522.044667][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.106701][ T5936] bridge_slave_0: left allmulticast mode [ 1522.106728][ T5936] bridge_slave_0: left promiscuous mode [ 1522.106924][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.367520][T11227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1525.374532][T11227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1525.380042][T11227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1525.381998][T11227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1525.383161][T11227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1527.516331][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.578330][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.586291][T11180] Bluetooth: hci0: command tx timeout [ 1527.603054][ T5936] bond0 (unregistering): Released all slaves [ 1529.286366][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.426456][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1529.529227][ T5936] bond0 (unregistering): Released all slaves [ 1529.585798][ T9381] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1529.667178][T11180] Bluetooth: hci0: command tx timeout [ 1529.765962][ T9381] usb 1-1: Using ep0 maxpacket: 32 [ 1529.788439][ T9381] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1529.790565][ T9381] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1529.790589][ T9381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.790604][ T9381] usb 1-1: Product: syz [ 1529.790615][ T9381] usb 1-1: Manufacturer: syz [ 1529.790627][ T9381] usb 1-1: SerialNumber: syz [ 1529.811552][ T9381] usb 1-1: config 0 descriptor?? [ 1530.266639][ T9381] gs_usb 1-1:0.0: Configuring for 34 interfaces [ 1530.358676][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.436776][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.510226][ T5936] bond0 (unregistering): Released all slaves [ 1530.702761][ T9381] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1530.703225][ T9381] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1530.703492][ T9381] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 1530.744836][ T9381] usb 1-1: USB disconnect, device number 34 [ 1533.500457][T11180] Bluetooth: hci0: command tx timeout [ 1534.916669][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1534.977731][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.019337][ T5936] bond0 (unregistering): Released all slaves [ 1535.509593][T11227] Bluetooth: hci0: command tx timeout [ 1536.197044][ T8577] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1536.495555][ T8577] usb 1-1: Using ep0 maxpacket: 16 [ 1536.495850][ T5936] hsr_slave_0: left promiscuous mode [ 1536.560083][ T8577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.560110][ T8577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.560128][ T8577] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1536.560161][ T8577] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1536.560179][ T8577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.569517][ T8577] usb 1-1: config 0 descriptor?? [ 1536.595430][ T5936] hsr_slave_1: left promiscuous mode [ 1536.596515][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.625566][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.889138][ T5936] hsr_slave_0: left promiscuous mode [ 1536.965927][ T5936] hsr_slave_1: left promiscuous mode [ 1536.969857][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.047611][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.047656][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.047679][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.047701][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.047722][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.047743][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.047765][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.047786][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.047815][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.047853][ T8577] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 1537.052991][ T8577] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0030/input/input45 [ 1537.075765][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.274083][ T8577] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1537.289336][ T8577] usb 1-1: USB disconnect, device number 35 [ 1537.360218][T11180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1537.405158][T11180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1537.423664][ T5936] hsr_slave_0: left promiscuous mode [ 1537.424013][T11180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1537.442953][T11180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1537.443953][T11180] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1537.495950][ T5936] hsr_slave_1: left promiscuous mode [ 1537.496949][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.546535][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.705605][ T5936] hsr_slave_0: left promiscuous mode [ 1537.725616][ T5936] hsr_slave_1: left promiscuous mode [ 1537.726463][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.776897][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.045705][ T9381] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1538.215467][ T9381] usb 1-1: Using ep0 maxpacket: 32 [ 1538.217976][ T9381] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1538.220989][ T9381] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1538.221024][ T9381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.221039][ T9381] usb 1-1: Product: syz [ 1538.221051][ T9381] usb 1-1: Manufacturer: syz [ 1538.221062][ T9381] usb 1-1: SerialNumber: syz [ 1538.224698][ T9381] usb 1-1: config 0 descriptor?? [ 1538.729935][ T9381] gs_usb 1-1:0.0: Configuring for 34 interfaces [ 1538.932370][ T9381] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1538.932434][ T9381] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 1539.140500][ T9381] usb 1-1: USB disconnect, device number 36 [ 1539.376867][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1539.543521][T11227] Bluetooth: hci1: command tx timeout [ 1539.667296][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1541.620581][T11227] Bluetooth: hci1: command tx timeout [ 1542.122305][T13658] ptrace attach of "./syz-executor exec"[11368] was attempted by ""[13658] [ 1543.152599][T11180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1543.172287][T11180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1543.199761][T11180] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1543.201828][T11180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1543.202737][T11180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1543.665552][T11180] Bluetooth: hci1: command tx timeout [ 1543.812870][T11227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1543.839077][T11227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1543.840648][T11227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1543.896746][T11227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1543.897812][T11227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1545.279975][T11180] Bluetooth: hci4: command tx timeout [ 1545.786480][T11180] Bluetooth: hci1: command tx timeout [ 1546.504845][T11180] Bluetooth: hci5: command tx timeout [ 1548.072917][T11180] Bluetooth: hci4: command tx timeout [ 1548.549068][T11180] Bluetooth: hci5: command tx timeout [ 1550.044339][T13690] ptrace attach of "./syz-executor exec"[11368] was attempted by ""[13690] [ 1550.157555][T11180] Bluetooth: hci4: command tx timeout [ 1550.626066][T11180] Bluetooth: hci5: command tx timeout [ 1551.356366][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1551.556196][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1552.318377][T11180] Bluetooth: hci4: command tx timeout [ 1552.718272][T11180] Bluetooth: hci5: command tx timeout [ 1554.655925][ T8577] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1554.826747][ T8577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.826799][ T8577] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1554.826826][ T8577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.835033][ T8577] usb 1-1: config 0 descriptor?? [ 1555.109769][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1555.272252][ T8577] lenovo 0003:17EF:6047.0031: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 1555.326394][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1556.143428][ T8577] lenovo 0003:17EF:6047.0031: Sensitivity setting failed: -71 [ 1556.170594][ T8577] usb 1-1: USB disconnect, device number 37 [ 1557.138856][T13712] ptrace attach of "./syz-executor exec"[11368] was attempted by ""[13712] [ 1559.026392][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1559.596422][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1560.526696][T13726] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2154'. [ 1565.386822][T13739] ptrace attach of "./syz-executor exec"[11368] was attempted by ""[13739] [ 1566.043331][T13602] chnl_net:caif_netlink_parms(): no params data found [ 1568.558838][T13755] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2161'. [ 1570.259855][T13602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.260064][T13602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.260318][T13602] bridge_slave_0: entered allmulticast mode [ 1570.263556][T13602] bridge_slave_0: entered promiscuous mode [ 1570.326363][T13602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.326490][T13602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.326825][T13602] bridge_slave_1: entered allmulticast mode [ 1570.330052][T13602] bridge_slave_1: entered promiscuous mode [ 1570.872071][T13602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.872616][T13669] chnl_net:caif_netlink_parms(): no params data found [ 1570.899314][T13647] chnl_net:caif_netlink_parms(): no params data found [ 1570.920318][T13602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.145860][T13776] ptrace attach of "./syz-executor exec"[11368] was attempted by ""[13776] [ 1573.957823][T13602] team0: Port device team_slave_0 added [ 1573.958348][T13664] chnl_net:caif_netlink_parms(): no params data found [ 1574.025431][T13602] team0: Port device team_slave_1 added [ 1575.645777][T13602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.645795][T13602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.645818][T13602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.940130][T13602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.940150][T13602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.940182][T13602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.087346][T13647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.087577][T13647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.087869][T13647] bridge_slave_0: entered allmulticast mode [ 1576.099186][T13647] bridge_slave_0: entered promiscuous mode [ 1576.131730][T13669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.131872][T13669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.132161][T13669] bridge_slave_0: entered allmulticast mode [ 1576.138573][T13669] bridge_slave_0: entered promiscuous mode [ 1576.455487][T13647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.940798][T13647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.941102][T13647] bridge_slave_1: entered allmulticast mode [ 1576.962552][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.962627][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1577.383842][T13647] bridge_slave_1: entered promiscuous mode [ 1577.385697][T13669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.385810][T13669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.385994][T13669] bridge_slave_1: entered allmulticast mode [ 1577.421036][T13669] bridge_slave_1: entered promiscuous mode [ 1579.985870][T13810] ptrace attach of "./syz-executor exec"[11368] was attempted by ""[13810] [ 1580.867485][T13664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.875816][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.876116][T13664] bridge_slave_0: entered allmulticast mode [ 1580.879065][T13664] bridge_slave_0: entered promiscuous mode [ 1580.929838][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.972719][T13669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.865500][T13664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.865640][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.865941][T13664] bridge_slave_1: entered allmulticast mode [ 1581.868782][T13664] bridge_slave_1: entered promiscuous mode [ 1582.081805][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.099703][T13669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.118407][T13602] hsr_slave_0: entered promiscuous mode [ 1582.119996][T13602] hsr_slave_1: entered promiscuous mode [ 1584.844412][T13664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.951417][T13669] team0: Port device team_slave_0 added [ 1584.954412][T13647] team0: Port device team_slave_0 added [ 1584.968569][T13664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1585.013462][T13669] team0: Port device team_slave_1 added [ 1585.119167][T13647] team0: Port device team_slave_1 added [ 1586.644533][T13848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2183'. [ 1586.739832][T13664] team0: Port device team_slave_0 added [ 1586.881304][T13669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.881327][T13669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.881360][T13669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.883996][T11227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1586.903389][T11227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1586.924855][T11227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1586.929680][T11227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1586.930874][T11227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1587.259662][T13664] team0: Port device team_slave_1 added [ 1587.260755][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.260774][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.260807][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.264116][T13669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.264135][T13669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.264167][T13669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.490823][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.490845][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.490878][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.706717][T13664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.706738][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.706771][T13664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.728852][T13664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.728898][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.729002][T13664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.133469][T11180] Bluetooth: hci0: command tx timeout [ 1589.265683][T11180] Bluetooth: hci3: command 0x0406 tx timeout [ 1591.058303][T13647] hsr_slave_0: entered promiscuous mode [ 1591.059772][T13647] hsr_slave_1: entered promiscuous mode [ 1591.060805][T13647] debugfs: 'hsr0' already exists in 'hsr' [ 1591.060834][T13647] Cannot create hsr debugfs directory [ 1591.095563][T13669] hsr_slave_0: entered promiscuous mode [ 1591.096809][T13669] hsr_slave_1: entered promiscuous mode [ 1591.097576][T13669] debugfs: 'hsr0' already exists in 'hsr' [ 1591.097607][T13669] Cannot create hsr debugfs directory [ 1591.188702][T11227] Bluetooth: hci0: command tx timeout [ 1591.586012][T13664] hsr_slave_0: entered promiscuous mode [ 1591.587159][T13664] hsr_slave_1: entered promiscuous mode [ 1591.587917][T13664] debugfs: 'hsr0' already exists in 'hsr' [ 1591.587946][T13664] Cannot create hsr debugfs directory [ 1593.275630][T11227] Bluetooth: hci0: command tx timeout [ 1593.478482][T13850] chnl_net:caif_netlink_parms(): no params data found [ 1593.742660][T13669] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1593.790041][T13669] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1593.837036][ T5936] bridge_slave_1: left allmulticast mode [ 1593.837071][ T5936] bridge_slave_1: left promiscuous mode [ 1593.837333][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.907265][ T5936] bridge_slave_0: left allmulticast mode [ 1593.907292][ T5936] bridge_slave_0: left promiscuous mode [ 1593.907520][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.944917][T13868] orangefs_mount: mount request failed with -4 [ 1594.009876][ T5936] bridge_slave_1: left allmulticast mode [ 1594.009903][ T5936] bridge_slave_1: left promiscuous mode [ 1594.010369][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.096801][ T5936] bridge_slave_0: left allmulticast mode [ 1594.096828][ T5936] bridge_slave_0: left promiscuous mode [ 1594.097024][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.159004][ T5936] bridge_slave_1: left allmulticast mode [ 1594.159054][ T5936] bridge_slave_1: left promiscuous mode [ 1594.159291][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.216919][ T5936] bridge_slave_0: left allmulticast mode [ 1594.216953][ T5936] bridge_slave_0: left promiscuous mode [ 1594.217215][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.299499][ T5936] bridge_slave_1: left allmulticast mode [ 1594.299525][ T5936] bridge_slave_1: left promiscuous mode [ 1594.299714][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.367420][ T5936] bridge_slave_0: left allmulticast mode [ 1594.367447][ T5936] bridge_slave_0: left promiscuous mode [ 1594.367631][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.746418][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1594.846474][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.908491][ T5936] bond0 (unregistering): Released all slaves [ 1595.156831][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.246494][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.246762][T11512] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1595.307903][ T5936] bond0 (unregistering): Released all slaves [ 1595.345606][T11227] Bluetooth: hci0: command tx timeout [ 1595.415538][T11512] usb 1-1: Using ep0 maxpacket: 32 [ 1595.417643][T11512] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1595.420082][T11512] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1595.420124][T11512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.420140][T11512] usb 1-1: Product: syz [ 1595.420152][T11512] usb 1-1: Manufacturer: syz [ 1595.420163][T11512] usb 1-1: SerialNumber: syz [ 1595.423961][T11512] usb 1-1: config 0 descriptor?? [ 1595.656660][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.746571][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.817489][ T5936] bond0 (unregistering): Released all slaves [ 1595.856276][T11512] gs_usb 1-1:0.0: Configuring for 100 interfaces [ 1596.058849][T11512] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1596.058937][T11512] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 1596.156207][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.250076][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.266618][T11512] usb 1-1: USB disconnect, device number 38 [ 1596.311580][ T5936] bond0 (unregistering): Released all slaves [ 1596.373348][T13669] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1596.736836][T13669] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1596.908176][T13880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2191'. [ 1597.147218][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.147442][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.147750][T13850] bridge_slave_0: entered allmulticast mode [ 1597.151005][T13850] bridge_slave_0: entered promiscuous mode [ 1597.177115][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.177497][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.178279][T13850] bridge_slave_1: entered allmulticast mode [ 1597.258286][T13850] bridge_slave_1: entered promiscuous mode [ 1598.023714][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1598.057256][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1598.146024][ T5936] hsr_slave_0: left promiscuous mode [ 1598.169474][ T5936] hsr_slave_1: left promiscuous mode [ 1598.170353][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.213626][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1598.263116][T11180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1598.296710][T11180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1598.313108][T11180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1598.318458][T11180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1598.323743][T11180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1598.535446][ T5936] hsr_slave_0: left promiscuous mode [ 1599.921587][ T5936] hsr_slave_1: left promiscuous mode [ 1599.932729][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.966139][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.210390][ T5936] hsr_slave_0: left promiscuous mode [ 1600.255647][ T5936] hsr_slave_1: left promiscuous mode [ 1600.261016][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.304247][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.385549][T11227] Bluetooth: hci3: command tx timeout [ 1600.595497][ T5936] hsr_slave_0: left promiscuous mode [ 1600.645507][ T5936] hsr_slave_1: left promiscuous mode [ 1600.646337][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.676534][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.666287][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1601.856569][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1603.144516][T11227] Bluetooth: hci3: command tx timeout [ 1603.628123][T11180] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1603.633118][T11180] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1603.702778][T11180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1603.787751][T11180] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1603.794021][T11180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1604.560829][T11227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1604.653322][T11227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1604.670485][T11227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1604.685930][T11227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1604.686787][T11227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1605.185422][T11180] Bluetooth: hci3: command tx timeout [ 1605.306211][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1605.496314][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1605.835410][T11180] Bluetooth: hci6: command tx timeout [ 1608.358269][T11227] Bluetooth: hci3: command tx timeout [ 1608.358280][T12706] Bluetooth: hci6: command tx timeout [ 1608.358370][T11180] Bluetooth: hci7: command tx timeout [ 1610.193798][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1610.376021][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1610.420020][T11180] Bluetooth: hci6: command tx timeout [ 1610.420041][T12706] Bluetooth: hci7: command tx timeout [ 1611.705484][ T8726] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1611.885538][ T8726] usb 1-1: Using ep0 maxpacket: 16 [ 1611.920909][ T8726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1611.920950][ T8726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.920977][ T8726] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1611.921030][ T8726] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1611.921058][ T8726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.927740][ T8726] usb 1-1: config 0 descriptor?? [ 1612.006721][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1612.166462][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1612.340546][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.340573][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.340595][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.340615][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.340635][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.340656][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.340676][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.340704][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.340725][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.340746][ T8726] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1612.352968][ T8726] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0032/input/input46 [ 1612.440631][ T8726] microsoft 0003:045E:07DA.0032: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1612.483214][T11180] Bluetooth: hci7: command tx timeout [ 1612.483228][T12706] Bluetooth: hci6: command tx timeout [ 1612.541990][ T8726] usb 1-1: USB disconnect, device number 39 [ 1614.545858][T11180] Bluetooth: hci7: command tx timeout [ 1614.682506][T13850] team0: Port device team_slave_0 added [ 1615.015746][T13850] team0: Port device team_slave_1 added [ 1615.378945][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.378964][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.378991][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.534480][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.534501][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.534536][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.291264][T13850] hsr_slave_0: entered promiscuous mode [ 1617.293833][T13850] hsr_slave_1: entered promiscuous mode [ 1618.925722][T11595] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1619.098120][T11595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.098161][T11595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1619.098204][T11595] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1619.098231][T11595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.104135][T11595] usb 1-1: config 0 descriptor?? [ 1619.300938][T13894] chnl_net:caif_netlink_parms(): no params data found [ 1619.432896][T13910] chnl_net:caif_netlink_parms(): no params data found [ 1619.591868][T11595] arvo 0003:1E7D:30D4.0033: unknown main item tag 0x0 [ 1619.591898][T11595] arvo 0003:1E7D:30D4.0033: unknown main item tag 0x0 [ 1619.591919][T11595] arvo 0003:1E7D:30D4.0033: unknown main item tag 0x0 [ 1619.591939][T11595] arvo 0003:1E7D:30D4.0033: unknown main item tag 0x0 [ 1619.591958][T11595] arvo 0003:1E7D:30D4.0033: unknown main item tag 0x0 [ 1619.591978][T11595] arvo 0003:1E7D:30D4.0033: unknown main item tag 0x0 [ 1619.591998][T11595] arvo 0003:1E7D:30D4.0033: unknown main item tag 0x0 [ 1619.594385][T11595] arvo 0003:1E7D:30D4.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1619.699474][T13907] chnl_net:caif_netlink_parms(): no params data found [ 1619.797755][T11595] arvo 0003:1E7D:30D4.0033: couldn't init struct arvo_device [ 1619.797813][T11595] arvo 0003:1E7D:30D4.0033: couldn't install keyboard [ 1619.801495][T11595] arvo 0003:1E7D:30D4.0033: probe with driver arvo failed with error -71 [ 1619.829719][T11595] usb 1-1: USB disconnect, device number 40 [ 1621.996612][T13894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.996910][T13894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.997076][T13894] bridge_slave_0: entered allmulticast mode [ 1621.999169][T13894] bridge_slave_0: entered promiscuous mode [ 1622.326179][T13894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.335506][T13894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.335827][T13894] bridge_slave_1: entered allmulticast mode [ 1622.359884][T13894] bridge_slave_1: entered promiscuous mode [ 1622.491921][T13910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.492062][T13910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.492351][T13910] bridge_slave_0: entered allmulticast mode [ 1622.497510][T13910] bridge_slave_0: entered promiscuous mode [ 1622.620074][T13907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.620214][T13907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.620503][T13907] bridge_slave_0: entered allmulticast mode [ 1622.647189][T13907] bridge_slave_0: entered promiscuous mode [ 1622.649804][T13910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.649938][T13910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.650285][T13910] bridge_slave_1: entered allmulticast mode [ 1622.663890][T13910] bridge_slave_1: entered promiscuous mode [ 1622.776728][T13907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.776867][T13907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.777086][T13907] bridge_slave_1: entered allmulticast mode [ 1622.781280][T13907] bridge_slave_1: entered promiscuous mode [ 1622.931305][T13894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.192635][T13977] create_pit_timer: 2 callbacks suppressed [ 1623.192652][T13977] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1623.193451][T13977] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1623.193735][T13977] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 1623.194120][T13977] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 1623.194384][T13977] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 1623.194653][T13977] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 1623.194912][T13977] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 1623.274804][T13894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.292461][T13977] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 1623.294601][T13977] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 1623.294955][T13977] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 1623.572375][T13910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.601239][T13907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.681818][T13910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.845164][T13907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.248817][T13894] team0: Port device team_slave_0 added [ 1625.879247][T13894] team0: Port device team_slave_1 added [ 1626.162887][T13910] team0: Port device team_slave_0 added [ 1626.278699][T13907] team0: Port device team_slave_0 added [ 1626.404130][T13910] team0: Port device team_slave_1 added [ 1626.538925][T13907] team0: Port device team_slave_1 added [ 1626.687043][T13894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.687058][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.687081][T13894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.877837][T13894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.877858][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.877890][T13894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.157590][T13910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.157610][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.157643][T13910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.237616][T13907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.237635][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.237660][T13907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.241839][T13910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.241854][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.241879][T13910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.526958][T13907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.526978][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.527011][T13907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.527589][T13850] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1628.632865][T13850] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1628.778315][T13850] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1628.978737][T13850] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1630.650816][T13894] hsr_slave_0: entered promiscuous mode [ 1630.652563][T13894] hsr_slave_1: entered promiscuous mode [ 1630.653663][T13894] debugfs: 'hsr0' already exists in 'hsr' [ 1630.653688][T13894] Cannot create hsr debugfs directory [ 1630.877189][T13910] hsr_slave_0: entered promiscuous mode [ 1630.878921][T13910] hsr_slave_1: entered promiscuous mode [ 1630.880114][T13910] debugfs: 'hsr0' already exists in 'hsr' [ 1630.880143][T13910] Cannot create hsr debugfs directory [ 1631.457660][T13907] hsr_slave_0: entered promiscuous mode [ 1631.459398][T13907] hsr_slave_1: entered promiscuous mode [ 1631.460939][T13907] debugfs: 'hsr0' already exists in 'hsr' [ 1631.460972][T13907] Cannot create hsr debugfs directory [ 1638.227638][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.253219][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.271190][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.271416][ T8761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.284850][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.285076][ T8761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.692874][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1638.692950][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1639.297316][ T5936] bridge_slave_1: left allmulticast mode [ 1639.297351][ T5936] bridge_slave_1: left promiscuous mode [ 1639.297625][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.366525][ T5936] bridge_slave_0: left allmulticast mode [ 1639.366551][ T5936] bridge_slave_0: left promiscuous mode [ 1639.366765][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.438862][ T5936] bridge_slave_1: left allmulticast mode [ 1639.438889][ T5936] bridge_slave_1: left promiscuous mode [ 1639.439104][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.509169][ T5936] bridge_slave_0: left allmulticast mode [ 1639.509195][ T5936] bridge_slave_0: left promiscuous mode [ 1639.509377][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.578907][ T5936] bridge_slave_1: left allmulticast mode [ 1639.578933][ T5936] bridge_slave_1: left promiscuous mode [ 1639.579122][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.646832][ T5936] bridge_slave_0: left allmulticast mode [ 1639.646857][ T5936] bridge_slave_0: left promiscuous mode [ 1639.647138][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.820395][ T5936] bridge_slave_1: left allmulticast mode [ 1639.820447][ T5936] bridge_slave_1: left promiscuous mode [ 1639.820715][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.916891][ T5936] bridge_slave_0: left allmulticast mode [ 1639.916916][ T5936] bridge_slave_0: left promiscuous mode [ 1639.917103][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.306677][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.579607][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.627783][ T5936] bond0 (unregistering): Released all slaves [ 1642.702720][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1644.004757][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1644.092875][ T5936] bond0 (unregistering): Released all slaves [ 1644.606393][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1644.666459][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1644.734945][ T5936] bond0 (unregistering): Released all slaves [ 1645.016227][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1645.126197][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.188607][ T5936] bond0 (unregistering): Released all slaves [ 1645.337902][T14060] create_pit_timer: 10 callbacks suppressed [ 1645.337929][T14060] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1645.344376][T14060] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1645.344735][T14060] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 1645.345358][T14060] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 1645.345655][T14060] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 1645.345948][T14060] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 1645.346279][T14060] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 1645.417110][T14060] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 1645.427009][T14060] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 1645.427374][T14060] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 1645.673172][T13850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1646.606035][ T5936] hsr_slave_0: left promiscuous mode [ 1647.610287][ T5936] hsr_slave_1: left promiscuous mode [ 1647.611447][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.745110][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1647.915656][ T5936] hsr_slave_0: left promiscuous mode [ 1647.955424][ T5936] hsr_slave_1: left promiscuous mode [ 1647.956319][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.995480][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.125873][ T5936] hsr_slave_0: left promiscuous mode [ 1648.145873][ T5936] hsr_slave_1: left promiscuous mode [ 1648.146939][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.179100][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.183819][T12706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1648.220713][T12706] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1648.234359][T12706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1648.246870][T12706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1648.249819][T12706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1648.475419][ T5936] hsr_slave_0: left promiscuous mode [ 1648.535760][ T5936] hsr_slave_1: left promiscuous mode [ 1648.536799][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.755598][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.306122][T11180] Bluetooth: hci1: command tx timeout [ 1650.976213][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1651.146232][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1652.385412][T11180] Bluetooth: hci1: command tx timeout [ 1654.176016][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1654.446320][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1654.467554][T11180] Bluetooth: hci1: command tx timeout [ 1654.812428][ T9507] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1654.998765][ T9507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.998801][ T9507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.998825][ T9507] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1654.998869][ T9507] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1654.998902][ T9507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.003599][ T9507] usb 1-1: config 0 descriptor?? [ 1655.490487][ T9507] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1655.721648][T12119] usb 1-1: USB disconnect, device number 41 [ 1656.006581][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1656.176486][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1656.545493][T11180] Bluetooth: hci1: command tx timeout [ 1657.789392][ T9381] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1657.839231][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1657.975479][ T9381] usb 1-1: Using ep0 maxpacket: 16 [ 1657.978365][ T9381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.978401][ T9381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.978420][ T9381] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1657.978453][ T9381] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1657.978470][ T9381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.982911][ T9381] usb 1-1: config 0 descriptor?? [ 1658.088835][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1658.436617][T12706] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1658.441149][T12706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1658.443667][T12706] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1658.449306][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.449348][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.449379][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.449411][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.449442][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.449472][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.449503][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.449534][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.449564][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.449595][ T9381] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 1658.468197][ T9381] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0035/input/input48 [ 1658.473060][T12706] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1658.598684][T12706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1658.622087][ T9381] microsoft 0003:045E:07DA.0035: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1658.656650][ T9381] usb 1-1: USB disconnect, device number 42 [ 1660.716175][T11180] Bluetooth: hci4: command tx timeout [ 1662.565576][T14081] chnl_net:caif_netlink_parms(): no params data found [ 1662.646949][T13910] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1662.703362][T14124] chnl_net:caif_netlink_parms(): no params data found [ 1662.785674][T11180] Bluetooth: hci4: command tx timeout [ 1662.875671][T13910] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1663.124219][T13910] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1663.152223][T14157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2255'. [ 1663.454167][T13910] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1663.935500][T11512] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1664.095414][T11512] usb 1-1: Using ep0 maxpacket: 16 [ 1664.098523][T14081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.098722][T14081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.099024][T14081] bridge_slave_0: entered allmulticast mode [ 1664.102542][T14081] bridge_slave_0: entered promiscuous mode [ 1664.139216][T11512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.139257][T11512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1664.139286][T11512] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1664.139335][T11512] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1664.139372][T11512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.146980][T11512] usb 1-1: config 0 descriptor?? [ 1664.399459][T14081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.399714][T14081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.400108][T14081] bridge_slave_1: entered allmulticast mode [ 1664.445281][T14081] bridge_slave_1: entered promiscuous mode [ 1664.512280][T14124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.512477][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.512909][T14124] bridge_slave_0: entered allmulticast mode [ 1664.538360][T14124] bridge_slave_0: entered promiscuous mode [ 1664.593334][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.593390][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.593421][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.593453][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.593484][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.593514][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.593545][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.593575][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.593607][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.593639][T11512] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1664.657521][T12706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1664.671507][T12706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1664.673392][T11512] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0036/input/input49 [ 1664.689951][T12706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1664.692148][T12706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1664.693278][T12706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1664.749667][T11512] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1664.779459][T14124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.779803][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.780527][T14124] bridge_slave_1: entered allmulticast mode [ 1664.804198][T14124] bridge_slave_1: entered promiscuous mode [ 1664.841917][T11512] usb 1-1: USB disconnect, device number 43 [ 1664.865477][T11180] Bluetooth: hci4: command tx timeout [ 1665.091535][T14081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.231823][T14081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.254477][T14124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.410321][T14124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.921309][T12706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1665.927157][T12706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1665.936020][T12706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1665.952438][T12706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1665.958935][T12706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1666.198405][T14081] team0: Port device team_slave_0 added [ 1666.405647][T14081] team0: Port device team_slave_1 added [ 1666.410115][T14124] team0: Port device team_slave_0 added [ 1666.509946][T14124] team0: Port device team_slave_1 added [ 1666.673905][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.673925][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.673958][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.823389][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.823406][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.823431][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.868537][T11180] Bluetooth: hci0: command tx timeout [ 1666.890405][T14124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.890463][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.890550][T14124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.945444][T11180] Bluetooth: hci4: command tx timeout [ 1668.068455][T11180] Bluetooth: hci3: command tx timeout [ 1668.513494][T14124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.513515][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.513549][T14124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.945849][T11180] Bluetooth: hci0: command tx timeout [ 1669.274903][T14081] hsr_slave_0: entered promiscuous mode [ 1669.281508][T14081] hsr_slave_1: entered promiscuous mode [ 1669.282458][T14081] debugfs: 'hsr0' already exists in 'hsr' [ 1669.282478][T14081] Cannot create hsr debugfs directory [ 1669.400725][T14124] hsr_slave_0: entered promiscuous mode [ 1669.401881][T14124] hsr_slave_1: entered promiscuous mode [ 1669.402716][T14124] debugfs: 'hsr0' already exists in 'hsr' [ 1669.402736][T14124] Cannot create hsr debugfs directory [ 1670.145472][T11180] Bluetooth: hci3: command tx timeout [ 1670.225579][T12119] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1670.388888][T12119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1670.388933][T12119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1670.388977][T12119] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1670.389004][T12119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.442133][T12119] usb 1-1: config 0 descriptor?? [ 1670.857238][T12119] usbhid 1-1:0.0: can't add hid device: -71 [ 1670.857378][T12119] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1670.864132][T12119] usb 1-1: USB disconnect, device number 44 [ 1671.025857][T11180] Bluetooth: hci0: command tx timeout [ 1671.305096][T14174] chnl_net:caif_netlink_parms(): no params data found [ 1672.229847][T11180] Bluetooth: hci3: command tx timeout [ 1673.115596][T11180] Bluetooth: hci0: command tx timeout [ 1673.115615][T12259] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1673.285419][T12259] usb 1-1: Using ep0 maxpacket: 32 [ 1673.287859][T12259] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1673.290617][T12259] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1673.290651][T12259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.290673][T12259] usb 1-1: Product: syz [ 1673.290689][T12259] usb 1-1: Manufacturer: syz [ 1673.290705][T12259] usb 1-1: SerialNumber: syz [ 1673.294346][T12259] usb 1-1: config 0 descriptor?? [ 1673.349190][T12259] gs_usb 1-1:0.0: Required endpoints not found [ 1673.576908][T14180] chnl_net:caif_netlink_parms(): no params data found [ 1673.896664][T14174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.896817][T14174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.897058][T14174] bridge_slave_0: entered allmulticast mode [ 1673.899086][T14174] bridge_slave_0: entered promiscuous mode [ 1673.945778][T14174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.945901][T14174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.946111][T14174] bridge_slave_1: entered allmulticast mode [ 1673.948496][T14174] bridge_slave_1: entered promiscuous mode [ 1674.305530][T11180] Bluetooth: hci3: command tx timeout [ 1674.520715][T14174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.545129][T14174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.058539][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.058754][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.059044][T14180] bridge_slave_0: entered allmulticast mode [ 1675.061999][T14180] bridge_slave_0: entered promiscuous mode [ 1675.076116][T14174] team0: Port device team_slave_0 added [ 1675.096444][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.096989][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.097825][T14180] bridge_slave_1: entered allmulticast mode [ 1675.123803][T14180] bridge_slave_1: entered promiscuous mode [ 1675.133443][T14174] team0: Port device team_slave_1 added [ 1675.695656][T14180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.696690][T14174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.696708][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.696740][T14174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.703367][T14180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.913191][T11512] usb 1-1: USB disconnect, device number 45 [ 1675.977434][T14174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.977450][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.977474][T14174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.150254][T14180] team0: Port device team_slave_0 added [ 1676.154284][T14180] team0: Port device team_slave_1 added [ 1676.498886][T14180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.498908][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.498940][T14180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.556221][T14174] hsr_slave_0: entered promiscuous mode [ 1676.557370][T14174] hsr_slave_1: entered promiscuous mode [ 1676.558124][T14174] debugfs: 'hsr0' already exists in 'hsr' [ 1676.558144][T14174] Cannot create hsr debugfs directory [ 1676.622548][T14180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.622570][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.622603][T14180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.217271][T12259] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1677.249812][T14180] hsr_slave_0: entered promiscuous mode [ 1677.250900][T14180] hsr_slave_1: entered promiscuous mode [ 1677.251660][T14180] debugfs: 'hsr0' already exists in 'hsr' [ 1677.251680][T14180] Cannot create hsr debugfs directory [ 1677.315451][T14081] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1677.357519][T14081] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1677.391646][T12259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.391692][T12259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.391725][T12259] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1677.391743][T12259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.403208][T12259] usb 1-1: config 0 descriptor?? [ 1677.609887][ T5936] bridge_slave_1: left allmulticast mode [ 1677.609977][ T5936] bridge_slave_1: left promiscuous mode [ 1677.610229][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.668053][ T5936] bridge_slave_0: left allmulticast mode [ 1677.668098][ T5936] bridge_slave_0: left promiscuous mode [ 1677.668427][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.747993][ T5936] bridge_slave_1: left allmulticast mode [ 1677.748020][ T5936] bridge_slave_1: left promiscuous mode [ 1677.748284][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.800322][ T5936] bridge_slave_0: left allmulticast mode [ 1677.800349][ T5936] bridge_slave_0: left promiscuous mode [ 1677.805423][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.856771][T12259] usbhid 1-1:0.0: can't add hid device: -71 [ 1677.856885][T12259] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1677.859825][T12259] usb 1-1: USB disconnect, device number 46 [ 1677.941060][ T5936] bridge_slave_1: left allmulticast mode [ 1677.941092][ T5936] bridge_slave_1: left promiscuous mode [ 1677.941298][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.007326][ T5936] bridge_slave_0: left allmulticast mode [ 1678.007352][ T5936] bridge_slave_0: left promiscuous mode [ 1678.007538][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.070852][ T5936] bridge_slave_1: left allmulticast mode [ 1678.070878][ T5936] bridge_slave_1: left promiscuous mode [ 1678.071058][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.138053][ T5936] bridge_slave_0: left allmulticast mode [ 1678.138080][ T5936] bridge_slave_0: left promiscuous mode [ 1678.138322][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.826365][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.916384][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.984548][ T5936] bond0 (unregistering): Released all slaves [ 1679.277757][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1679.341602][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1679.422162][ T5936] bond0 (unregistering): Released all slaves [ 1679.716418][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1679.816527][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1679.897774][ T5936] bond0 (unregistering): Released all slaves [ 1680.297450][T12259] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1680.445492][T12259] usb 1-1: Using ep0 maxpacket: 32 [ 1680.492368][T12259] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1680.497672][T12259] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1680.497832][T12259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.497896][T12259] usb 1-1: Product: syz [ 1680.497939][T12259] usb 1-1: Manufacturer: syz [ 1680.497990][T12259] usb 1-1: SerialNumber: syz [ 1680.524271][T12259] usb 1-1: config 0 descriptor?? [ 1680.554348][T12259] gs_usb 1-1:0.0: Required endpoints not found [ 1681.896336][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.956255][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.988987][ T5936] bond0 (unregistering): Released all slaves [ 1682.031008][T14081] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1682.278661][T14081] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1683.099499][T12119] usb 1-1: USB disconnect, device number 47 [ 1683.172193][T14124] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1683.245816][T14124] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1683.515630][ T5936] hsr_slave_0: left promiscuous mode [ 1683.555936][ T5936] hsr_slave_1: left promiscuous mode [ 1683.556834][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.597674][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.795714][ T5936] hsr_slave_0: left promiscuous mode [ 1683.815847][ T5936] hsr_slave_1: left promiscuous mode [ 1683.816965][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.856333][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.918232][T14261] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2277'. [ 1684.045780][ T5936] hsr_slave_0: left promiscuous mode [ 1684.065649][ T5936] hsr_slave_1: left promiscuous mode [ 1684.066710][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.091731][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1684.265664][ T5936] hsr_slave_0: left promiscuous mode [ 1684.305596][ T5936] hsr_slave_1: left promiscuous mode [ 1684.313129][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.346592][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.369503][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1686.536662][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1688.036401][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1688.208799][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1688.579015][T14286] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2285'. [ 1690.806416][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1690.986126][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1693.977151][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1694.316414][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1697.287405][T14124] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1697.324586][T14124] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1699.454467][T14081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.511606][T14081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.588358][T14124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.621362][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.621474][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.855802][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1699.855878][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1699.959776][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.959924][ T9520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.017442][T14124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.450237][T13900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.450352][T13900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.528220][T13900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.528420][T13900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.577890][T14124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1702.599966][T14081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.302033][T14081] veth0_vlan: entered promiscuous mode [ 1703.329426][T14081] veth1_vlan: entered promiscuous mode [ 1703.800764][T14174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1703.873042][T14174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1703.952226][T14174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1704.159067][T14174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1704.192031][T14081] veth0_macvtap: entered promiscuous mode [ 1704.471878][T14081] veth1_macvtap: entered promiscuous mode [ 1704.636202][T14124] veth0_vlan: entered promiscuous mode [ 1704.787570][T14124] veth1_vlan: entered promiscuous mode [ 1704.790806][T14180] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1704.820276][T14362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2298'. [ 1704.846418][T14081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.894316][T14180] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1704.965795][T14180] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1705.075983][T14180] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1705.126730][T14081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1705.203086][T11553] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.220773][T11553] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.239560][T11553] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.258465][T11553] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.480558][T14124] veth0_macvtap: entered promiscuous mode [ 1705.561470][T14124] veth1_macvtap: entered promiscuous mode [ 1705.907265][T11553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.907298][T11553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.962252][T14174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1706.009798][T14124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.083770][T14124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.213385][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.213405][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.265827][ T3520] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.268086][ T3520] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.281550][T14174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1706.314434][ T3520] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.337601][T11553] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.494869][T11553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.494992][T11553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.951821][T11553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.952640][T11553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1707.348115][T14180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.438322][T11553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.438341][T11553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.683955][T14180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.835652][ T5936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.835678][ T5936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.914117][ T9520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.936497][ T9520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.370913][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.371055][ T9520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.659015][T14399] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2305'. [ 1710.344390][T14174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.611344][T14180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.144128][T14174] veth0_vlan: entered promiscuous mode [ 1712.394918][T14174] veth1_vlan: entered promiscuous mode [ 1712.679515][T14174] veth0_macvtap: entered promiscuous mode [ 1712.725520][T14174] veth1_macvtap: entered promiscuous mode [ 1712.836759][T14174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1712.906795][T14174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1713.127144][T13900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.127667][T13900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.128536][T13900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.128966][T13900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.033761][T11553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.033790][T11553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.385940][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.385965][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.392340][T14180] veth0_vlan: entered promiscuous mode [ 1714.488663][T14180] veth1_vlan: entered promiscuous mode [ 1714.679052][T14180] veth0_macvtap: entered promiscuous mode [ 1714.711782][T14180] veth1_macvtap: entered promiscuous mode [ 1714.804087][T14180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1714.847992][T14180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1714.872399][ T3520] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.874715][ T3520] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.874770][ T3520] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.874814][ T3520] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.088875][T14457] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2317'. [ 1717.143588][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.143613][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.425901][T11512] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1717.738475][T11512] usb 7-1: config 0 has no interfaces? [ 1717.801534][T11512] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1717.801558][T11512] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.801575][T11512] usb 7-1: Product: syz [ 1717.801586][T11512] usb 7-1: Manufacturer: syz [ 1717.801597][T11512] usb 7-1: SerialNumber: syz [ 1717.852360][T11512] usb 7-1: config 0 descriptor?? [ 1717.853396][T14451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.853420][T14451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.205759][T11512] usb 7-1: USB disconnect, device number 15 [ 1727.600078][ T9381] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1727.975437][ T9381] usb 6-1: config 0 has no interfaces? [ 1728.004152][ T9381] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1728.004185][ T9381] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.004349][ T9381] usb 6-1: Product: syz [ 1728.004369][ T9381] usb 6-1: Manufacturer: syz [ 1728.004386][ T9381] usb 6-1: SerialNumber: syz [ 1728.051089][ T9381] usb 6-1: config 0 descriptor?? [ 1728.297301][ T8577] usb 6-1: USB disconnect, device number 11 [ 1728.788218][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.966474][ T9381] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1731.137149][ T9381] usb 7-1: Using ep0 maxpacket: 16 [ 1731.152635][ T9381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1731.152674][ T9381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1731.152703][ T9381] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1731.152751][ T9381] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1731.152777][ T9381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.211829][ T9381] usb 7-1: config 0 descriptor?? [ 1733.026825][ T9381] usbhid 7-1:0.0: can't add hid device: -71 [ 1733.026965][ T9381] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1733.054561][ T9381] usb 7-1: USB disconnect, device number 16 [ 1736.426994][T11512] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1737.108544][T11512] usb 1-1: config 0 has no interfaces? [ 1737.147142][T11512] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1737.147230][T11512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.147254][T11512] usb 1-1: Product: syz [ 1737.147272][T11512] usb 1-1: Manufacturer: syz [ 1737.147289][T11512] usb 1-1: SerialNumber: syz [ 1737.196140][T11512] usb 1-1: config 0 descriptor?? [ 1737.245487][T14489] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1737.245755][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1737.385951][T14489] usb 9-1: device descriptor read/64, error -32 [ 1738.087117][ T8577] usb 1-1: USB disconnect, device number 48 [ 1738.475464][T14489] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1738.635495][T14489] usb 9-1: Using ep0 maxpacket: 16 [ 1738.664889][T14489] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.664967][T14489] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.665034][T14489] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1738.665122][T14489] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1738.665447][T14489] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.728781][T14489] usb 9-1: config 0 descriptor?? [ 1739.558094][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.558130][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.558151][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.558171][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.558192][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.558212][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.558233][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.558253][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.558274][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.558294][T14489] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 1739.562803][T14489] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0037/input/input50 [ 1739.710463][T14489] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1739.848125][T14489] usb 9-1: USB disconnect, device number 24 [ 1742.755725][T14611] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2372'. [ 1743.135406][ T8578] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1743.296484][ T8578] usb 9-1: device descriptor read/64, error -71 [ 1744.765285][ T8578] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1744.905387][ T8578] usb 9-1: device descriptor read/64, error -71 [ 1745.029573][ T8578] usb usb9-port1: attempt power cycle [ 1745.796181][ T8578] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1745.925882][ T8578] usb 9-1: device descriptor read/8, error -71 [ 1750.785495][T14672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2389'. [ 1760.574690][T14724] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2408'. [ 1761.301431][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1761.301771][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1766.489601][T14713] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1766.590881][T14764] fuse: Bad value for 'fd' [ 1766.657428][T14713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1766.657479][T14713] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1766.657507][T14713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.670376][T14713] usb 6-1: config 0 descriptor?? [ 1768.242285][T14713] usbhid 6-1:0.0: can't add hid device: -32 [ 1768.242425][T14713] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1770.014276][T14517] usb 6-1: USB disconnect, device number 12 [ 1771.960420][ T9507] IPVS: starting estimator thread 0... [ 1772.925471][T14796] IPVS: using max 8 ests per chain, 19200 per kthread [ 1773.585298][T12706] Bluetooth: hci1: command 0x0406 tx timeout [ 1773.675716][ T9020] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1774.805770][ T9020] usb 9-1: device descriptor read/64, error -71 [ 1775.850709][ T9020] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1776.965508][T14823] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2428'. [ 1784.399769][T12706] Bluetooth: hci4: command 0x0406 tx timeout [ 1787.696702][T11180] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1787.696738][T11180] CPU: 1 UID: 0 PID: 11180 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1787.696775][T11180] Tainted: [L]=SOFTLOCKUP [ 1787.696785][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1787.696803][T11180] Workqueue: hci0 hci_rx_work [ 1787.696835][T11180] Call Trace: [ 1787.696846][T11180] [ 1787.696858][T11180] dump_stack_lvl+0xe8/0x150 [ 1787.696935][T11180] sysfs_create_dir_ns+0x259/0x280 [ 1787.696973][T11180] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1787.697010][T11180] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1787.697052][T11180] ? rt_spin_unlock+0x161/0x200 [ 1787.697090][T11180] kobject_add_internal+0x6b1/0xcd0 [ 1787.697132][T11180] kobject_add+0x155/0x220 [ 1787.697167][T11180] ? __pfx_kobject_add+0x10/0x10 [ 1787.697204][T11180] ? get_device_parent+0x370/0x3a0 [ 1787.697239][T11180] device_add+0x408/0xb80 [ 1787.697272][T11180] hci_conn_add_sysfs+0xd5/0x210 [ 1787.697315][T11180] le_conn_complete_evt+0xf1d/0x1420 [ 1787.697361][T11180] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1787.697394][T11180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1787.697421][T11180] ? lockdep_hardirqs_on+0x7b/0x110 [ 1787.697450][T11180] ? skb_pull_data+0xfb/0x200 [ 1787.697494][T11180] hci_le_conn_complete_evt+0x187/0x480 [ 1787.697534][T11180] hci_event_packet+0x78f/0x1260 [ 1787.697563][T11180] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1787.697596][T11180] ? __pfx_hci_event_packet+0x10/0x10 [ 1787.697620][T11180] ? rt_spin_unlock+0x150/0x200 [ 1787.697665][T11180] ? hci_send_to_monitor+0xe2/0x590 [ 1787.697704][T11180] hci_rx_work+0x3ee/0x1060 [ 1787.697738][T11180] ? process_scheduled_works+0x9ef/0x1770 [ 1787.697770][T11180] process_scheduled_works+0xad1/0x1770 [ 1787.697832][T11180] ? __pfx_process_scheduled_works+0x10/0x10 [ 1787.697858][T11180] ? do_raw_spin_lock+0x121/0x290 [ 1787.697913][T11180] worker_thread+0x8a0/0xda0 [ 1787.697973][T11180] kthread+0x711/0x8a0 [ 1787.698012][T11180] ? __pfx_worker_thread+0x10/0x10 [ 1787.698041][T11180] ? __pfx_kthread+0x10/0x10 [ 1787.698072][T11180] ? rt_spin_unlock+0x150/0x200 [ 1787.698112][T11180] ? rt_spin_unlock+0x161/0x200 [ 1787.698144][T11180] ? __pfx_kthread+0x10/0x10 [ 1787.698181][T11180] ret_from_fork+0x510/0xa50 [ 1787.698211][T11180] ? __pfx_ret_from_fork+0x10/0x10 [ 1787.698236][T11180] ? __switch_to+0xc9e/0x1480 [ 1787.698279][T11180] ? __pfx_kthread+0x10/0x10 [ 1787.698315][T11180] ret_from_fork_asm+0x1a/0x30 [ 1787.698373][T11180] [ 1787.698410][T11180] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1787.698454][T11180] Bluetooth: hci0: failed to register connection device [ 1790.106136][T11227] Bluetooth: hci3: command 0x0406 tx timeout [ 1790.106513][T11227] Bluetooth: hci0: command 0x0406 tx timeout [ 1791.675806][ T8578] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1791.906743][ T8578] usb 7-1: Using ep0 maxpacket: 32 [ 1791.940402][ T8578] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1791.940436][ T8578] usb 7-1: config 0 has no interface number 0 [ 1791.940655][ T8578] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1792.228784][ T8578] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1792.229171][ T8578] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.229452][ T8578] usb 7-1: Product: syz [ 1792.229698][ T8578] usb 7-1: Manufacturer: syz [ 1792.230191][ T8578] usb 7-1: SerialNumber: syz [ 1792.373058][ T8578] usb 7-1: config 0 descriptor?? [ 1792.385097][ T8578] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1792.400749][ T8578] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1792.983883][ T8578] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1794.284873][T12706] Bluetooth: hci0: command 0x0406 tx timeout [ 1794.292231][ T8578] em28xx 7-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1794.292264][ T8578] em28xx 7-1:0.89: board has no eeprom [ 1794.345309][ T8578] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1794.345343][ T8578] em28xx 7-1:0.89: analog set to bulk mode. [ 1794.345759][T11943] em28xx 7-1:0.89: Registering V4L2 extension [ 1795.171406][ T8578] usb 7-1: USB disconnect, device number 17 [ 1795.174032][ T8578] em28xx 7-1:0.89: Disconnecting em28xx [ 1795.260027][T11943] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1795.260057][T11943] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1795.260073][T11943] em28xx 7-1:0.89: No AC97 audio processor [ 1795.263360][T11943] usb 7-1: Decoder not found [ 1795.263383][T11943] em28xx 7-1:0.89: failed to create media graph [ 1795.263418][T11943] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1795.322789][T11943] em28xx 7-1:0.89: Registering snapshot button... [ 1795.349252][T11943] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input51 [ 1795.380211][T11943] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1795.380284][ T8578] em28xx 7-1:0.89: Closing input extension [ 1795.380311][ T8578] em28xx 7-1:0.89: Deregistering snapshot button [ 1795.480983][ T8578] em28xx 7-1:0.89: Freeing device [ 1800.024243][T12706] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1800.024268][T12706] CPU: 0 UID: 0 PID: 12706 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1800.024292][T12706] Tainted: [L]=SOFTLOCKUP [ 1800.024298][T12706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1800.024309][T12706] Workqueue: hci4 hci_rx_work [ 1800.024329][T12706] Call Trace: [ 1800.024336][T12706] [ 1800.024344][T12706] dump_stack_lvl+0xe8/0x150 [ 1800.024370][T12706] sysfs_create_dir_ns+0x259/0x280 [ 1800.024395][T12706] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1800.024421][T12706] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1800.024448][T12706] ? rt_spin_unlock+0x161/0x200 [ 1800.024473][T12706] kobject_add_internal+0x6b1/0xcd0 [ 1800.024501][T12706] kobject_add+0x155/0x220 [ 1800.024524][T12706] ? __pfx_kobject_add+0x10/0x10 [ 1800.024549][T12706] ? get_device_parent+0x370/0x3a0 [ 1800.024572][T12706] device_add+0x408/0xb80 [ 1800.024593][T12706] hci_conn_add_sysfs+0xd5/0x210 [ 1800.024622][T12706] le_conn_complete_evt+0xf1d/0x1420 [ 1800.024652][T12706] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1800.024674][T12706] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1800.024691][T12706] ? lockdep_hardirqs_on+0x7b/0x110 [ 1800.024710][T12706] ? skb_pull_data+0xfb/0x200 [ 1800.024739][T12706] hci_le_conn_complete_evt+0x187/0x480 [ 1800.024766][T12706] hci_event_packet+0x78f/0x1260 [ 1800.024785][T12706] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1800.024807][T12706] ? __pfx_hci_event_packet+0x10/0x10 [ 1800.024823][T12706] ? rt_spin_unlock+0x150/0x200 [ 1800.024853][T12706] ? hci_send_to_monitor+0xe2/0x590 [ 1800.024878][T12706] hci_rx_work+0x3ee/0x1060 [ 1800.024900][T12706] ? process_scheduled_works+0x9ef/0x1770 [ 1800.024930][T12706] process_scheduled_works+0xad1/0x1770 [ 1800.024971][T12706] ? __pfx_process_scheduled_works+0x10/0x10 [ 1800.024988][T12706] ? do_raw_spin_lock+0x121/0x290 [ 1800.025020][T12706] worker_thread+0x8a0/0xda0 [ 1800.025049][T12706] ? __kthread_parkme+0x7b/0x200 [ 1800.025078][T12706] kthread+0x711/0x8a0 [ 1800.025103][T12706] ? __pfx_worker_thread+0x10/0x10 [ 1800.025175][T12706] ? __pfx_kthread+0x10/0x10 [ 1800.025204][T12706] ? rt_spin_unlock+0x150/0x200 [ 1800.025241][T12706] ? rt_spin_unlock+0x161/0x200 [ 1800.025271][T12706] ? __pfx_kthread+0x10/0x10 [ 1800.025304][T12706] ret_from_fork+0x510/0xa50 [ 1800.025332][T12706] ? __pfx_ret_from_fork+0x10/0x10 [ 1800.025356][T12706] ? __switch_to+0xc9e/0x1480 [ 1800.025398][T12706] ? __pfx_kthread+0x10/0x10 [ 1800.025432][T12706] ret_from_fork_asm+0x1a/0x30 [ 1800.025484][T12706] [ 1800.026104][T12706] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1800.026211][T12706] Bluetooth: hci4: failed to register connection device [ 1800.744721][ T8578] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1800.989390][ T8578] usb 9-1: Using ep0 maxpacket: 32 [ 1802.394812][ T8578] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1802.406344][ T8578] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1802.406370][ T8578] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.406386][ T8578] usb 9-1: Product: syz [ 1802.406398][ T8578] usb 9-1: Manufacturer: syz [ 1802.406409][ T8578] usb 9-1: SerialNumber: syz [ 1802.449864][ T8578] usb 9-1: config 0 descriptor?? [ 1802.866365][ T8578] gs_usb 9-1:0.0: Couldn't get device config: (err=-121) [ 1802.866416][ T8578] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -121 [ 1804.733893][ T8578] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1804.929163][T14815] usb 9-1: USB disconnect, device number 31 [ 1804.988215][ T8578] usb 7-1: Using ep0 maxpacket: 16 [ 1804.994487][ T8578] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.994532][ T8578] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.994585][ T8578] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1804.994733][ T8578] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.049693][ T8578] usb 7-1: config 0 descriptor?? [ 1805.552716][T15014] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2497'. [ 1806.491289][ T8578] usb 7-1: USB disconnect, device number 18 [ 1806.795733][T12706] Bluetooth: hci4: command 0x0406 tx timeout [ 1806.932723][T11180] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1806.932757][T11180] CPU: 0 UID: 0 PID: 11180 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1806.932793][T11180] Tainted: [L]=SOFTLOCKUP [ 1806.932803][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1806.932819][T11180] Workqueue: hci3 hci_rx_work [ 1806.932848][T11180] Call Trace: [ 1806.932859][T11180] [ 1806.932870][T11180] dump_stack_lvl+0xe8/0x150 [ 1806.932909][T11180] sysfs_create_dir_ns+0x259/0x280 [ 1806.932947][T11180] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1806.932986][T11180] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1806.933028][T11180] ? rt_spin_unlock+0x161/0x200 [ 1806.933065][T11180] kobject_add_internal+0x6b1/0xcd0 [ 1806.933106][T11180] kobject_add+0x155/0x220 [ 1806.933148][T11180] ? __pfx_kobject_add+0x10/0x10 [ 1806.933185][T11180] ? get_device_parent+0x370/0x3a0 [ 1806.933220][T11180] device_add+0x408/0xb80 [ 1806.933257][T11180] hci_conn_add_sysfs+0xd5/0x210 [ 1806.933301][T11180] le_conn_complete_evt+0xf1d/0x1420 [ 1806.933345][T11180] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1806.933378][T11180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1806.933405][T11180] ? lockdep_hardirqs_on+0x7b/0x110 [ 1806.933433][T11180] ? skb_pull_data+0xfb/0x200 [ 1806.933477][T11180] hci_le_conn_complete_evt+0x187/0x480 [ 1806.933517][T11180] hci_event_packet+0x78f/0x1260 [ 1806.933546][T11180] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1806.933580][T11180] ? __pfx_hci_event_packet+0x10/0x10 [ 1806.933610][T11180] ? rt_spin_unlock+0x150/0x200 [ 1806.933656][T11180] ? hci_send_to_monitor+0xe2/0x590 [ 1806.933694][T11180] hci_rx_work+0x3ee/0x1060 [ 1806.933727][T11180] ? process_scheduled_works+0x9ef/0x1770 [ 1806.933759][T11180] process_scheduled_works+0xad1/0x1770 [ 1806.933821][T11180] ? __pfx_process_scheduled_works+0x10/0x10 [ 1806.933846][T11180] ? do_raw_spin_lock+0x121/0x290 [ 1806.933894][T11180] worker_thread+0x8a0/0xda0 [ 1806.933952][T11180] kthread+0x711/0x8a0 [ 1806.933991][T11180] ? __pfx_worker_thread+0x10/0x10 [ 1806.934020][T11180] ? __pfx_kthread+0x10/0x10 [ 1806.934052][T11180] ? rt_spin_unlock+0x150/0x200 [ 1806.934091][T11180] ? rt_spin_unlock+0x161/0x200 [ 1806.934122][T11180] ? __pfx_kthread+0x10/0x10 [ 1806.934159][T11180] ret_from_fork+0x510/0xa50 [ 1806.934189][T11180] ? __pfx_ret_from_fork+0x10/0x10 [ 1806.934214][T11180] ? __switch_to+0xc9e/0x1480 [ 1806.934256][T11180] ? __pfx_kthread+0x10/0x10 [ 1806.934293][T11180] ret_from_fork_asm+0x1a/0x30 [ 1806.934350][T11180] [ 1806.934385][T11180] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1806.934428][T11180] Bluetooth: hci3: failed to register connection device [ 1811.995349][T14815] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1812.165262][T14815] usb 9-1: Using ep0 maxpacket: 32 [ 1812.168739][T14815] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1812.171409][T14815] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1812.171444][T14815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.171473][T14815] usb 9-1: Product: syz [ 1812.171484][T14815] usb 9-1: Manufacturer: syz [ 1812.171496][T14815] usb 9-1: SerialNumber: syz [ 1812.226015][T14815] usb 9-1: config 0 descriptor?? [ 1812.662065][T14815] gs_usb 9-1:0.0: Couldn't get device config: (err=-121) [ 1812.662118][T14815] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -121 [ 1814.827125][ T5947] usb 9-1: USB disconnect, device number 32 [ 1815.227202][T15053] fuse: Bad value for 'fd' [ 1816.949279][T15053] orangefs_mount: mount request failed with -4 [ 1817.105789][T11180] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1817.286661][T11595] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1817.639651][T11595] usb 6-1: Using ep0 maxpacket: 16 [ 1817.686893][T11595] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.686926][T11595] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1817.686971][T11595] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1817.687000][T11595] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.748229][T11595] usb 6-1: config 0 descriptor?? [ 1820.346913][ T9507] usb 6-1: USB disconnect, device number 13 [ 1822.732710][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1822.732974][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1824.108592][T15100] fuse: Bad value for 'fd' [ 1824.912566][T15100] orangefs_mount: mount request failed with -4 [ 1825.370740][T11180] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1832.718331][T15140] fuse: Bad value for 'fd' [ 1833.205388][T15001] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1833.209196][T15140] orangefs_mount: mount request failed with -4 [ 1833.365321][T15001] usb 9-1: Using ep0 maxpacket: 32 [ 1833.367924][T15001] usb 9-1: config 0 has no interfaces? [ 1833.371061][T15001] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1833.371096][T15001] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.371121][T15001] usb 9-1: Product: syz [ 1833.371139][T15001] usb 9-1: Manufacturer: syz [ 1833.371157][T15001] usb 9-1: SerialNumber: syz [ 1833.380401][T15001] usb 9-1: config 0 descriptor?? [ 1833.557562][T11180] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1833.557595][T11180] CPU: 0 UID: 0 PID: 11180 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1833.557633][T11180] Tainted: [L]=SOFTLOCKUP [ 1833.557643][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1833.557661][T[ 1833.557661][T11180] Workqueue: hci1 hci_rx_work [ 1833.557690][T11180] Call Trace: [ 1833.557701][T11180] [ 1833.557713][T11180] dump_stack_lvl+0xe8/0x150 [ 1833.557753][T11180] sysfs_create_dir_ns+0x259/0x280 [ 1833.557791][T11180] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1833.557830][T11180] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1833.557872][T11180] ? rt_spin_unlock+0x161/0x200 [ 1833.557909][T11180] kobject_add_internal+0x6b1/0xcd0 [ 1833.557951][T11180] kobject_add+0x155/0x220 [ 1833.557987][T11180] ? __pfx_kobject_add+0x10/0x10 [ 1833.558026][T11180] ? get_device_parent+0x370/0x3a0 [ 1833.558061][T11180] device_add+0x408/0xb80 [ 1833.558099][T11180] hci_conn_add_sysfs+0xd5/0x210 [ 1833.558144][T11180] le_conn_complete_evt+0xf1d/0x1420 [ 1833.558190][T11180] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1833.558224][T11180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1833.558251][T11180] ? lockdep_hardirqs_on+0x7b/0x110 [ 1833.558280][T11180] ? skb_pull_data+0xfb/0x200 [ 1833.558325][T11180] hci_le_conn_complete_evt+0x187/0x480 [ 1833.558365][T11180] hci_event_packet+0x78f/0x1260 [ 1833.558503][T11180] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1833.558551][T11180] ? __pfx_hci_event_packet+0x10/0x10 [ 1833.558626][T11180] ? rt_spin_unlock+0x150/0x200 [ 1833.558678][T11180] ? hci_send_to_monitor+0xe2/0x590 [ 1833.558718][T11180] hci_rx_work+0x3ee/0x1060 [ 1833.558757][T11180] ? process_scheduled_works+0x9ef/0x1770 [ 1833.558793][T11180] process_scheduled_works+0xad1/0x1770 [ 1833.558861][T11180] ? __pfx_process_scheduled_works+0x10/0x10 [ 1833.558891][T11180] ? do_raw_spin_lock+0x121/0x290 [ 1833.558941][T11180] worker_thread+0x8a0/0xda0 [ 1833.558994][T11180] kthread+0x711/0x8a0 [ 1833.559034][T11180] ? __pfx_worker_thread+0x10/0x10 [ 1833.559067][T11180] ? __pfx_kthread+0x10/0x10 [ 1833.559098][T11180] ? rt_spin_unlock+0x150/0x200 [ 1833.559139][T11180] ? rt_spin_unlock+0x161/0x200 [ 1833.559175][T11180] ? __pfx_kthread+0x10/0x10 [ 1833.559211][T11180] ret_from_fork+0x510/0xa50 [ 1833.559240][T11180] ? __pfx_ret_from_fork+0x10/0x10 [ 1833.559265][T11180] ? __switch_to+0xc9e/0x1480 [ 1833.559310][T11180] ? __pfx_kthread+0x10/0x10 [ 1833.559343][T11180] ret_from_fork_asm+0x1a/0x30 [ 1833.559408][T11180] [ 1833.559623][T11180] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1833.559679][T11180] Bluetooth: hci1: failed to register connection device [ 1833.635277][T11180] ================================================================== [ 1833.635298][T11180] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1833.635345][T11180] Read of size 8 at addr ffff8880241937b0 by task kworker/u9:1/11180 [ 1833.635366][T11180] [ 1833.635384][T11180] CPU: 0 UID: 0 PID: 11180 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1833.635417][T11180] Tainted: [L]=SOFTLOCKUP [ 1833.635427][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1833.635442][T11180] Workqueue: hci1 hci_rx_work [ 1833.635468][T11180] Call Trace: [ 1833.635478][T11180] [ 1833.635487][T11180] dump_stack_lvl+0xe8/0x150 [ 1833.635522][T11180] print_report+0xca/0x240 [ 1833.635549][T11180] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1833.635586][T11180] kasan_report+0x118/0x150 [ 1833.635625][T11180] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1833.635669][T11180] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1833.635711][T11180] l2cap_connect_cfm+0x367/0x10e0 [ 1833.635751][T11180] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1833.635785][T11180] ? lockdep_hardirqs_on+0x7b/0x110 [ 1833.635809][T11180] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1833.635835][T11180] ? mutex_lock_nested+0x154/0x1d0 [ 1833.635867][T11180] ? hci_connect_cfm+0x2c/0x140 [ 1833.635893][T11180] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1833.635927][T11180] hci_connect_cfm+0x95/0x140 [ 1833.635955][T11180] le_conn_complete_evt+0xf65/0x1420 [ 1833.635989][T11180] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1833.636016][T11180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1833.636038][T11180] ? lockdep_hardirqs_on+0x7b/0x110 [ 1833.636059][T11180] ? skb_pull_data+0xfb/0x200 [ 1833.636098][T11180] hci_le_conn_complete_evt+0x187/0x480 [ 1833.636144][T11180] hci_event_packet+0x78f/0x1260 [ 1833.636170][T11180] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1833.636198][T11180] ? __pfx_hci_event_packet+0x10/0x10 [ 1833.636221][T11180] ? rt_spin_unlock+0x150/0x200 [ 1833.636260][T11180] ? hci_send_to_monitor+0xe2/0x590 [ 1833.636292][T11180] hci_rx_work+0x3ee/0x1060 [ 1833.636319][T11180] ? process_scheduled_works+0x9ef/0x1770 [ 1833.636349][T11180] process_scheduled_works+0xad1/0x1770 [ 1833.636468][T11180] ? __pfx_process_scheduled_works+0x10/0x10 [ 1833.636503][T11180] ? do_raw_spin_lock+0x121/0x290 [ 1833.636541][T11180] worker_thread+0x8a0/0xda0 [ 1833.636584][T11180] kthread+0x711/0x8a0 [ 1833.636621][T11180] ? __pfx_worker_thread+0x10/0x10 [ 1833.636650][T11180] ? __pfx_kthread+0x10/0x10 [ 1833.636664][T15143] 9p: Bad value for 'wfdno' [ 1833.636682][T11180] ? rt_spin_unlock+0x150/0x200 [ 1833.636721][T11180] ? rt_spin_unlock+0x161/0x200 [ 1833.636753][T11180] ? __pfx_kthread+0x10/0x10 [ 1833.636787][T11180] ret_from_fork+0x510/0xa50 [ 1833.636815][T11180] ? __pfx_ret_from_fork+0x10/0x10 [ 1833.636837][T11180] ? __switch_to+0xc9e/0x1480 [ 1833.636877][T11180] ? __pfx_kthread+0x10/0x10 [ 1833.636913][T11180] ret_from_fork_asm+0x1a/0x30 [ 1833.636961][T11180] [ 1833.636972][T11180] [ 1833.636978][T11180] Allocated by task 11180: [ 1833.636992][T11180] kasan_save_track+0x3e/0x80 [ 1833.637027][T11180] __kasan_kmalloc+0x93/0xb0 [ 1833.637062][T11180] __kmalloc_noprof+0x23e/0x7e0 [ 1833.637097][T11180] sk_prot_alloc+0xe7/0x220 [ 1833.637125][T11180] sk_alloc+0x3a/0x390 [ 1833.637164][T11180] bt_sock_alloc+0x3b/0x310 [ 1833.637188][T11180] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 1833.637227][T11180] l2cap_connect_cfm+0x367/0x10e0 [ 1833.637260][T11180] hci_connect_cfm+0x95/0x140 [ 1833.637287][T11180] le_conn_complete_evt+0xf65/0x1420 [ 1833.637317][T11180] hci_le_conn_complete_evt+0x187/0x480 [ 1833.637342][T11180] hci_event_packet+0x78f/0x1260 [ 1833.637362][T11180] hci_rx_work+0x3ee/0x1060 [ 1833.637383][T11180] process_scheduled_works+0xad1/0x1770 [ 1833.637407][T11180] worker_thread+0x8a0/0xda0 [ 1833.637433][T11180] kthread+0x711/0x8a0 [ 1833.637462][T11180] ret_from_fork+0x510/0xa50 [ 1833.637484][T11180] ret_from_fork_asm+0x1a/0x30 [ 1833.637517][T11180] [ 1833.637523][T11180] Freed by task 15157: [ 1833.637533][T11180] kasan_save_track+0x3e/0x80 [ 1833.637563][T11180] kasan_save_free_info+0x46/0x50 [ 1833.637590][T11180] __kasan_slab_free+0x5c/0x80 [ 1833.637621][T11180] kfree+0x1bd/0x900 [ 1833.637650][T11180] __sk_destruct+0x626/0x880 [ 1833.637677][T11180] l2cap_sock_cleanup_listen+0xe0/0x450 [ 1833.637711][T11180] l2cap_sock_release+0x6e/0x270 [ 1833.637743][T11180] sock_close+0xc3/0x240 [ 1833.637774][T11180] __fput+0x45b/0xa80 [ 1833.637798][T11180] task_work_run+0x1d4/0x260 [ 1833.637831][T11180] do_exit+0x694/0x22f0 [ 1833.637863][T11180] do_group_exit+0x21c/0x2d0 [ 1833.637896][T11180] get_signal+0x125d/0x1310 [ 1833.637916][T11180] arch_do_signal_or_restart+0x9a/0x7a0 [ 1833.637952][T11180] exit_to_user_mode_loop+0x87/0x4e0 [ 1833.637988][T11180] do_syscall_64+0x2c1/0xf80 [ 1833.638009][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.638030][T11180] [ 1833.638037][T11180] The buggy address belongs to the object at ffff888024193000 [ 1833.638037][T11180] which belongs to the cache kmalloc-2k of size 2048 [ 1833.638058][T11180] The buggy address is located 1968 bytes inside of [ 1833.638058][T11180] freed 2048-byte region [ffff888024193000, ffff888024193800) [ 1833.638084][T11180] [ 1833.638092][T11180] The buggy address belongs to the physical page: [ 1833.638120][T11180] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24190 [ 1833.638150][T11180] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1833.638184][T11180] anon flags: 0x80000000000040(head|node=0|zone=1) [ 1833.638210][T11180] page_type: f5(slab) [ 1833.638232][T11180] raw: 0080000000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 1833.638254][T11180] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1833.638278][T11180] head: 0080000000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 1833.638300][T11180] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1833.638323][T11180] head: 0080000000000003 ffffea0000906401 00000000ffffffff 00000000ffffffff [ 1833.638345][T11180] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1833.638358][T11180] page dumped because: kasan: bad access detected [ 1833.638375][T11180] page_owner tracks the page as allocated [ 1833.638385][T11180] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6173, tgid 6173 (kworker/1:9), ts 468536400301, free_ts 468535326957 [ 1833.638429][T11180] post_alloc_hook+0x234/0x290 [ 1833.638462][T11180] get_page_from_freelist+0x28c0/0x2960 [ 1833.638486][T11180] __alloc_frozen_pages_noprof+0x181/0x370 [ 1833.638509][T11180] alloc_pages_mpol+0xd1/0x380 [ 1833.638528][T11180] allocate_slab+0x86/0x3b0 [ 1833.638555][T11180] ___slab_alloc+0xb10/0x13e0 [ 1833.638578][T11180] __slab_alloc+0xc6/0x1f0 [ 1833.638600][T11180] __kmalloc_node_track_caller_noprof+0x2bf/0x810 [ 1833.638635][T11180] kmalloc_reserve+0x136/0x290 [ 1833.638663][T11180] __alloc_skb+0x204/0x3a0 [ 1833.638687][T11180] mld_newpack+0x13c/0xc40 [ 1833.638709][T11180] add_grhead+0x5a/0x2a0 [ 1833.638727][T11180] add_grec+0x1452/0x1740 [ 1833.638745][T11180] mld_ifc_work+0x6ed/0xd60 [ 1833.638780][T11180] process_scheduled_works+0xad1/0x1770 [ 1833.638804][T11180] worker_thread+0x8a0/0xda0 [ 1833.638829][T11180] page last free pid 7749 tgid 7749 stack trace: [ 1833.638844][T11180] __free_frozen_pages+0xfe1/0x1170 [ 1833.638878][T11180] __put_partials+0x149/0x170 [ 1833.638903][T11180] __slab_free+0x2af/0x330 [ 1833.638929][T11180] qlist_free_all+0x97/0x100 [ 1833.638959][T11180] kasan_quarantine_reduce+0x148/0x160 [ 1833.638991][T11180] __kasan_slab_alloc+0x22/0x80 [ 1833.639025][T11180] kmem_cache_alloc_lru_noprof+0x193/0x6c0 [ 1833.639057][T11180] sock_alloc_inode+0x28/0xc0 [ 1833.639076][T11180] alloc_inode+0x6a/0x1b0 [ 1833.639095][T11180] __sock_create+0x12d/0x9d0 [ 1833.639115][T11180] __sys_socket+0xd7/0x1b0 [ 1833.639226][T11180] __x64_sys_socket+0x7a/0x90 [ 1833.639258][T11180] do_syscall_64+0xec/0xf80 [ 1833.639281][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.639305][T11180] [ 1833.639312][T11180] Memory state around the buggy address: [ 1833.639325][T11180] ffff888024193680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1833.639342][T11180] ffff888024193700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1833.639359][T11180] >ffff888024193780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1833.639372][T11180] ^ [ 1833.639386][T11180] ffff888024193800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1833.639403][T11180] ffff888024193880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1833.639415][T11180] ================================================================== [ 1833.646137][T11180] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1833.646178][T11180] CPU: 0 UID: 0 PID: 11180 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1833.646216][T11180] Tainted: [L]=SOFTLOCKUP [ 1833.646226][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1833.646245][T11180] Workqueue: hci1 hci_rx_work [ 1833.646274][T11180] Call Trace: [ 1833.646285][T11180] [ 1833.646295][T11180] vpanic+0x1e0/0x670 [ 1833.646336][T11180] panic+0xb9/0xc0 [ 1833.646369][T11180] ? __pfx_panic+0x10/0x10 [ 1833.646403][T11180] ? preempt_schedule_thunk+0x16/0x30 [ 1833.646433][T11180] ? preempt_schedule_thunk+0x16/0x30 [ 1833.646460][T11180] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1833.646500][T11180] check_panic_on_warn+0x89/0xb0 [ 1833.646537][T11180] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1833.646574][T11180] end_report+0x6f/0x140 [ 1833.646609][T11180] kasan_report+0x129/0x150 [ 1833.646647][T11180] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1833.646689][T11180] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1833.646732][T11180] l2cap_connect_cfm+0x367/0x10e0 [ 1833.646771][T11180] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1833.646805][T11180] ? lockdep_hardirqs_on+0x7b/0x110 [ 1833.646830][T11180] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1833.646855][T11180] ? mutex_lock_nested+0x154/0x1d0 [ 1833.646888][T11180] ? hci_connect_cfm+0x2c/0x140 [ 1833.646916][T11180] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1833.646950][T11180] hci_connect_cfm+0x95/0x140 [ 1833.646980][T11180] le_conn_complete_evt+0xf65/0x1420 [ 1833.647017][T11180] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1833.647049][T11180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1833.647075][T11180] ? lockdep_hardirqs_on+0x7b/0x110 [ 1833.647100][T11180] ? skb_pull_data+0xfb/0x200 [ 1833.647141][T11180] hci_le_conn_complete_evt+0x187/0x480 [ 1833.647223][T11180] hci_event_packet+0x78f/0x1260 [ 1833.647249][T11180] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1833.647280][T11180] ? __pfx_hci_event_packet+0x10/0x10 [ 1833.647302][T11180] ? rt_spin_unlock+0x150/0x200 [ 1833.647341][T11180] ? hci_send_to_monitor+0xe2/0x590 [ 1833.647382][T11180] hci_rx_work+0x3ee/0x1060 [ 1833.647410][T11180] ? process_scheduled_works+0x9ef/0x1770 [ 1833.647438][T11180] process_scheduled_works+0xad1/0x1770 [ 1833.647485][T11180] ? __pfx_process_scheduled_works+0x10/0x10 [ 1833.647510][T11180] ? do_raw_spin_lock+0x121/0x290 [ 1833.647546][T11180] worker_thread+0x8a0/0xda0 [ 1833.647585][T11180] kthread+0x711/0x8a0 [ 1833.647614][T11180] ? __pfx_worker_thread+0x10/0x10 [ 1833.647635][T11180] ? __pfx_kthread+0x10/0x10 [ 1833.647658][T11180] ? rt_spin_unlock+0x150/0x200 [ 1833.647686][T11180] ? rt_spin_unlock+0x161/0x200 [ 1833.647715][T11180] ? __pfx_kthread+0x10/0x10 [ 1833.647741][T11180] ret_from_fork+0x510/0xa50 [ 1833.647763][T11180] ? __pfx_ret_from_fork+0x10/0x10 [ 1833.647782][T11180] ? __switch_to+0xc9e/0x1480 [ 1833.647812][T11180] ? __pfx_kthread+0x10/0x10 [ 1833.647838][T11180] ret_from_fork_asm+0x1a/0x30 [ 1833.647874][T11180] [ 1833.651394][T11180] Kernel Offset: disabled