last executing test programs: 4m44.231001909s ago: executing program 1 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x10}}}, 0x0, 0x0, 0x0, 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r2, 0x0, 0x32, 0x0, &(0x7f0000003f00)) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 4m44.101810696s ago: executing program 1 (id=247): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r2 = dup3(r1, r0, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 4m43.555379984s ago: executing program 1 (id=248): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$setown(r1, 0x8, r2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) read(r1, &(0x7f0000000200)=""/78, 0x4e) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r5 = dup3(r4, r3, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000300)={0x0, 0x4}, 0x2) 4m33.753317427s ago: executing program 1 (id=249): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001fc35510e1050804315901020301090212000100000000090400e5f701"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r2, 0xdb8e088763a185e8, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x80000000}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x73}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'caif0\x00'}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'macvlan1\x00'}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x2}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x100}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x2}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x48000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002c00038014000180080001000000000008000200ac1414200c00028004000100000000000600034000010000040001"], 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0xf000}) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@updsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in=@dev, @in=@private}, {}, @in=@multicast2}}, 0xf0}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2d0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x4, @default, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x7, 0x1, 0x7fff, 0x5}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x5}, {0x3, 0x7}, {0x5, 0x8}, {0x1, 0x3}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x2}, {0x4, 0x4}, {0x3, 0xa}, {0x2, 0x7}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x2}, {0x2, 0x9}, {0x2, 0x6}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x2}, {0x4}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x3, 0x8}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x2}, {0x7, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x4, 0x0, 0xc, 0x1, 0x627]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0xe, 0x8, 0x6, 0x6, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x4}, {0x1}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x6, 0x5}, {0x5, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x1d}, {0x1}, {0x6, 0x4}, {0x7, 0x4}, {0x7}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x2}, {0x6}, {0x0, 0x5}, {0x2, 0x1}, {0x4, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x7}, {0x5, 0x1}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0x8}, {0x5, 0x7}, {0x5, 0x8}, {0x3, 0x1}, {0x6}, {}, {0x1, 0x4}, {0x6}, {0x5, 0x6}, {0x5, 0x9}, {0x6, 0x8}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0x3}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x36, 0x6, 0x9, 0x4, 0x5, 0x16, 0x4, 0x36, 0x36, 0x18]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x3, 0x8, 0x84d9, 0x2, 0x400, 0x1, 0x5a]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4a1, 0x3, 0x2, 0x3, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x400, 0x8, 0x3, 0xffff, 0x0, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x48, 0x1, 0x30, 0x6, 0x4, 0x3, 0x60, 0x48, 0x30, 0x36, 0x12, 0x4, 0xd181a712c09004d5, 0x12, 0x36, 0x16, 0x4, 0x1, 0x18, 0x30, 0x24]}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x88, 0x5, 0x2, 0x200, 0x6, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x3}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x8}, {0x1, 0x4}, {0x2, 0x9}, {0x4, 0x2}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x6}, {0x6, 0xa}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x4}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x7}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x6}, {0x3, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0x2, 0x8, 0x0, 0x6, 0x6, 0xfa56]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x8}, {0x3, 0xa}, {0x1, 0x7}, {0x7, 0x5}, {0x3, 0x5}, {0x4}, {0x0, 0x8}, {0x4, 0xa}, {}, {0x4, 0x4}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x3, 0x1}, {0x6, 0x9}, {0x3, 0x9}, {0x5, 0x1}, {0x4, 0xa}, {0x7, 0x7}, {0x4, 0x3}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x8}, {}, {0x6, 0x9}, {0x3, 0x2}, {0x5, 0x2}, {0x3, 0x7}, {0x5, 0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x8}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x30, 0x18, 0x24, 0x48, 0x30, 0x6c, 0x6, 0xc, 0x18, 0x24, 0x16, 0x18, 0x3, 0x4, 0x5, 0x12, 0x8b, 0x0, 0x60, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xc11c, 0x1, 0x6, 0x8, 0x8, 0x7, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x4, 0x5, 0x6, 0x800, 0xf, 0xffff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2d0}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001fc35510e1050804315901020301090212000100000000090400e5f701"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r2, 0xdb8e088763a185e8, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x80000000}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x73}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'caif0\x00'}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'macvlan1\x00'}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x2}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x100}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x2}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x48000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002c00038014000180080001000000000008000200ac1414200c00028004000100000000000600034000010000040001"], 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0xf000}) (async) dup(r5) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@updsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in=@dev, @in=@private}, {}, @in=@multicast2}}, 0xf0}}, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2d0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x4, @default, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x7, 0x1, 0x7fff, 0x5}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x5}, {0x3, 0x7}, {0x5, 0x8}, {0x1, 0x3}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x2}, {0x4, 0x4}, {0x3, 0xa}, {0x2, 0x7}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x2}, {0x2, 0x9}, {0x2, 0x6}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x2}, {0x4}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x3, 0x8}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x2}, {0x7, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x4, 0x0, 0xc, 0x1, 0x627]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0xe, 0x8, 0x6, 0x6, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x4}, {0x1}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x6, 0x5}, {0x5, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x1d}, {0x1}, {0x6, 0x4}, {0x7, 0x4}, {0x7}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x2}, {0x6}, {0x0, 0x5}, {0x2, 0x1}, {0x4, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x7}, {0x5, 0x1}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0x8}, {0x5, 0x7}, {0x5, 0x8}, {0x3, 0x1}, {0x6}, {}, {0x1, 0x4}, {0x6}, {0x5, 0x6}, {0x5, 0x9}, {0x6, 0x8}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0x3}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x36, 0x6, 0x9, 0x4, 0x5, 0x16, 0x4, 0x36, 0x36, 0x18]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x3, 0x8, 0x84d9, 0x2, 0x400, 0x1, 0x5a]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4a1, 0x3, 0x2, 0x3, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x400, 0x8, 0x3, 0xffff, 0x0, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x48, 0x1, 0x30, 0x6, 0x4, 0x3, 0x60, 0x48, 0x30, 0x36, 0x12, 0x4, 0xd181a712c09004d5, 0x12, 0x36, 0x16, 0x4, 0x1, 0x18, 0x30, 0x24]}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x88, 0x5, 0x2, 0x200, 0x6, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x3}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x8}, {0x1, 0x4}, {0x2, 0x9}, {0x4, 0x2}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x6}, {0x6, 0xa}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x4}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x7}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x6}, {0x3, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0x2, 0x8, 0x0, 0x6, 0x6, 0xfa56]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x8}, {0x3, 0xa}, {0x1, 0x7}, {0x7, 0x5}, {0x3, 0x5}, {0x4}, {0x0, 0x8}, {0x4, 0xa}, {}, {0x4, 0x4}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x3, 0x1}, {0x6, 0x9}, {0x3, 0x9}, {0x5, 0x1}, {0x4, 0xa}, {0x7, 0x7}, {0x4, 0x3}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x8}, {}, {0x6, 0x9}, {0x3, 0x2}, {0x5, 0x2}, {0x3, 0x7}, {0x5, 0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x8}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x30, 0x18, 0x24, 0x48, 0x30, 0x6c, 0x6, 0xc, 0x18, 0x24, 0x16, 0x18, 0x3, 0x4, 0x5, 0x12, 0x8b, 0x0, 0x60, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xc11c, 0x1, 0x6, 0x8, 0x8, 0x7, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x4, 0x5, 0x6, 0x800, 0xf, 0xffff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2d0}}, 0x0) (async) 4m32.459089176s ago: executing program 1 (id=276): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) write$binfmt_misc(r1, &(0x7f00000012c0), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000000000030000000000000000000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4m31.577374394s ago: executing program 1 (id=281): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7, 0x4}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r8, 0x2, 0x4}, &(0x7f0000000280)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = socket$inet6(0xa, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f00000000c0)={@loopback, r11}, 0x14) connect$inet6(r9, &(0x7f0000000440)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000440)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000200)=0x1, 0x12) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$EXT4_IOC_MIGRATE(r1, 0xff04) (async) ioctl$EXT4_IOC_MIGRATE(r1, 0xff04) 9.546652672s ago: executing program 0 (id=1059): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000400), 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @pix_mp={0x80, 0x8, 0x32314d4e, 0x4, 0xb, [{0x40, 0x800}, {0x3, 0x7}, {0x0, 0x10}, {0x0, 0xfffffff9}, {0x2, 0xffffffff}, {0x6, 0xfffffffd}, {0x3, 0xffffffff}, {0x1ff, 0xfffffffd}], 0xe, 0xf9, 0x3, 0x0, 0x6}}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="0e000000000000008108"], 0x10) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x800}]}, 0x60}}, 0x0) ioctl$SNAPSHOT_FREE(r9, 0x3305) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000040)={0x10000, 0x3000, 0x1, 0x3f, 0x7f}) 9.129328949s ago: executing program 3 (id=1084): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x110, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x8}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000270001"], 0x13c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r4, 0x3, 0x401, 0x7, 0x7, 0x6}, &(0x7f0000000140)=0x14) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4002d0c, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}, 0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect$cdc_ncm(0x0, 0xa5, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002020000202505a1a44000010203010902930002010040000904000001020d00000b2406000143b2bc6d84c705240000000d240f010200f0ff030000000006241a00001d052401030805240100ff2724"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0019"], 0x34}}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @multicast, @mcast1, @random="02bb6e17912a", @mcast2}}}}, 0x0) 7.915497533s ago: executing program 0 (id=1087): unshare(0x2000400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) shmctl$SHM_LOCK(0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf0ff}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.698893296s ago: executing program 0 (id=1088): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000040da074d1048e5000203010902"], &(0x7f0000000440)={0x0, 0x0, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="010f"]}) (async) socket(0x10, 0x3, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%-5lx \x00'}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) (async) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) fadvise64(r2, 0x0, 0x0, 0x3) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002000010000000000000000000a00000000010000000000001404000000ecff00006700"/48], 0x30}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x408, @vifc_lcl_ifindex=r8, @dev}, 0x10) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000200001801400020073797a5f74756e00000000000000000008000100", @ANYRES32=r9, @ANYBLOB], 0x34}}, 0x0) (async) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f00000000c0)={0x2, 0x3, 0x0, {0x80, 0x0, 0x6}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) r12 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r12, 0x2008002) sendfile(r10, r12, 0x0, 0x80000001) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x38, 0x0, 0x101, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbeb5, 0xc}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x7c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x81}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x6ac, 0x80000000, 0x2, 0x2840, r0, 0x1ff, '\x00', r9, r10, 0x3, 0x4, 0x3, 0xd, @void, @value, @void, @value}, 0x48) 7.295629438s ago: executing program 0 (id=1090): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="9802000016000100000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe88000000e5ffffffffffffff0000010000000033000000ffffffff00000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000005"], 0x298}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003340)="a5d3b26367b9576854ff7bdc3f6fea67", 0x10) sendmmsg$alg(r2, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001740)="415b66934845e42acb83a6dbd1b12a2745576c45be86eeff2575833567f96eb9dd4a5ef3ffce4ea4f15804e73b945754a8a4fb4cd667072489d4a839397d9e8aca8717d2102305e397b04050046dd6c0361f79a35f0a9371975687164fb5207aa57f62531a2feac47a0da785a74e89", 0x6f}], 0x1, &(0x7f0000002b80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000700)}, 0x7}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f00000009c0)=""/220, 0xdc}, {&(0x7f0000000ac0)=""/225, 0xe1}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000001400)=""/212, 0xd4}, {&(0x7f0000000cc0)=""/228, 0xe4}], 0x7, &(0x7f00000007c0)=""/178, 0xb2}, 0xfe87}, {{&(0x7f0000000580)=@llc, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001240)=""/168, 0xa8}, 0x84}, {{&(0x7f0000000f80)=@nl=@unspec, 0x80, &(0x7f0000000300)=[{&(0x7f0000005380)=""/4107, 0x100b}, {&(0x7f0000001000)=""/110, 0x6e}, {&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001300)=""/233, 0xe9}], 0x4, &(0x7f0000001080)=""/141, 0x8d}, 0x8}], 0x4, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000080)="02", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) shutdown(r4, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c006324c56b85b82554845b75703ff9e0377aacc6701c5504b2cbfd75fc80de44f74a1f21140d2eac0ac912910979b28f70e5dc0e6a6ba09243ee26e4db446e9bf200a648dd1ac3347a88853895861bd44cdf537a07472020c891452d5639162537020459adf951b0c9679e46ce03883538bf434ea19430ee1f22e300"/150]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000a400)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9a7e5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c64e2645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fa421a39943513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b70fa8eae6fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x26, 0x0, 0x11100}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x5, 0x20000000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x0, 0x0, r8}}, {0x0, 0x13}}}, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x181843, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0), 0x14) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.111194064s ago: executing program 3 (id=1091): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 7.031475212s ago: executing program 3 (id=1093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x2000c855}, 0x800) 6.941854588s ago: executing program 3 (id=1095): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a227536350102f0010902120001000000000904"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000097b000/0x3000)=nil, 0x3000, 0xa8672ac0c6e06cea, 0x100010, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2051, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="d4000004", @ANYRES16=0x0, @ANYRESOCT=r1], 0xd4}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff}, 0xffffffffffffff84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000f8000000000000000000000000000f00"], 0x48) openat$cgroup_ro(r5, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x400000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccb000/0x2000)=nil, 0x800000}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.69379599s ago: executing program 2 (id=1097): syz_usb_connect(0x3, 0xf38, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = memfd_secret(0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x80402, 0x0) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000780)='K', 0x1}], 0x1, 0x0, 0x0) socket(0x22, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_secret(0x0) r4 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0xd63a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(r1, &(0x7f0000000340)={[0x8]}, 0x8, 0x100800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a80008000400104004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x74}]}}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.684927845s ago: executing program 4 (id=1067): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x42, &(0x7f00000014c0)=ANY=[@ANYRES8=r0], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x8, &(0x7f0000000600)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0xa8c7, 0xfffffffe, "00207d2000000000201b14700c1e0ac7cf430000001200a3dd0000090000fbff"}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0)) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) stat(0x0, &(0x7f0000000340)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x14}, 0x48, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0x1) keyctl$chown(0x4, r3, 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="e86b10df", 0x4, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000580)=0xb1a, 0x4) 6.484995774s ago: executing program 4 (id=1098): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x9725}, {0x6}]}, 0x10) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)={0x28}, 0xfdef) 6.375252064s ago: executing program 4 (id=1099): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x9725}, {0x6}]}, 0x10) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)={0x28}, 0xfdef) 6.355183237s ago: executing program 4 (id=1100): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x5162d99a10a68ca, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(0x0) r2 = socket$kcm(0x10, 0x5, 0x10) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000002180)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYBLOB="2c7a6f6f746d6f64653d30303030303030303030303030303030303034303030302c757365945f69643d2e91f2fb7121f27dd57d3d9d1c62059876f6635a5cd86091839936886bb4ba8e930ac3d3d08128a59b2265c9e7719a63b878c3577093246cc5c71e74cb1d3ffb06ea4b73a149244800a8526225b3a33fe69044241febe2a371187c2c8bbb28a107f6547eff630a9c2cddd747041325ae44c56e3498caedb9bec9ba0cce35708e9a61dbbc0e74c55c9c2bfbe5dfb89bc1f7dea47e6833a576ca3d52f557", @ANYRES16=r0, @ANYBLOB=',group_id=', @ANYRES16=r2, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x22) read$FUSE(r1, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000021c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20040841}, 0x40) getpriority(0x2, 0x0) uname(&(0x7f0000002300)=""/4096) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0xfffffffffffffff5, 0x0, {0x2009, 0x4, 0x80003ff}}, 0xffffffffffffffcc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000003340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8000, @mcast2, 0x6}, {0xa, 0x4e24, 0xe, @empty, 0x2}, 0xffffffffffffffff, 0x3ff}}, 0x48) open(&(0x7f00000003c0)='./file0\x00', 0x62040, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r6, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) 5.206301574s ago: executing program 2 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, 0x0, 0x300) r3 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x0) ftruncate(r0, 0x8) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xfff, 0x0, 0x59455247, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x2, 0x1, 0x1}}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x3e}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x14, r4, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.235241585s ago: executing program 2 (id=1102): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 4.220326022s ago: executing program 2 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80000000102010100000000000000000200000ae40001800c000280050001002f00000006000340000000002c00018014000300fc02000000000000000000000000000014000400fe8800000000000000000000000001011400018008000100e000000108000200e00000011400018008000100e0000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c855}, 0x800) 4.103707512s ago: executing program 2 (id=1104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x0, "a4746da7"}, @main=@item_4={0x3, 0x0, 0x0, "61d8ab6e"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x89, {0x89, 0x7, "554f91a93a2efe13bd856d6f3cda5a888fb7b95a66ece3ec40fda7b8ae539c87ee8de60a6fe76d4104e731e77738caee959380fdd618a663d83a931002f574dda141e222c57242bfcc09fed719a510cf7f69d4a1662adec2083eb83d5b6ac9bfb2eadd0c6b3b6240116fde060439b6b920cf16876f4e236462ec156c817f05b9c3bf8d8985aedf"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc6f}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x0, 0x80, 0x2, "e6809dd1", "56d4debc"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x10, 0x4, 0x1, 0x7, 0x114, 0x6491}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0xd, 0x75, "d8bcc44aca522812a02d9841587adcf949c97955633b266e9b2b7a36d77a9e84069ff54e7a121ccbfd82b66c3a2b0767eb4ecc518cf89edefbb054f43431b4196bef3c7da68cf8a4e6448430cb41bd0f137c732206c99fcb63ef7a35820bd5fde49a9a8d7cf516510dfb340716911c70ce52fe8a06"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4, 0x2}}, &(0x7f0000000440)={0x40, 0x7, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "cea6"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="7d10b4116a8d"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "fcd6"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7}}) 4.004050482s ago: executing program 0 (id=1105): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000090a010400000000000000000100e60008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f180011800e000100636f6ee6b4696d6974000000040002800c00098008000140000050"], 0xa8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000060000000000000000000000282000005f9409a2f6d14cb9decbb9f97daec94c8d42a7043cbb022c3fa03d3d9a5a0fa0c64d585bf4c05c51a48fbeed3051", @ANYRES32=r4, @ANYBLOB="71d300"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000001000000010000000800"/28], 0x48) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r6 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@ipv4_newroute={0x118, 0x18, 0x1, 0x70bd2c, 0x25dfdbfb, {0x2, 0x20, 0x14, 0x4, 0x0, 0x3, 0xc8, 0x6, 0xd00}, [@RTA_UID={0x8}, @RTA_METRICS={0xdb, 0x8, 0x0, 0x1, "7bb194da9a23af585956e72a90e935ff95c5f5e9530732b67707723759cf1f644f6f9c15bd4c180d8c134aa34672c5aeb5bd18405942f72b1b1b2e6657e20475c4d437778d4f74b9a2ed5a5637ca131f47a58aa8cb128d11a893e0caa4613f38f5c5a8cd5d0d44afd2679d7f3926bd4ad42c8e6fb062c61d417518c00ad54918937f1b82eb577ea19cc17b08d86f29b0d399cc8a34f09b8174fb5a3b49c36d4f6ce20efaf2920c4874d04a2445490d7ba89e23c2ea8dac7882e0c6e1a13d1ef668c3c17b3b51d43a703f8eebc633b022ad072afa8dab1e"}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_NH_ID={0x8, 0x1e, 0x80000001}, @RTA_OIF={0x8, 0x4, r1}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605020a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c0007800800084000000020060004400000000006000540"], 0x64}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x50, r8, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) 3.719185178s ago: executing program 0 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000200000b70200000000fd008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.717082798s ago: executing program 3 (id=1107): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000000)=0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0x84, 0x9d, 0x20, 0x1d6f, 0x10, 0xaa7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xef, 0x4, 0x1}}]}}]}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x2e0542) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000200)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/cgroup\x00') setns(r4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000000180)={0x1, 0x2, 0x8}) bind$netlink(r5, &(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r7, 0x0, 0x0, 0xc080) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7ffc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120150020008003e7d220907400001020301090224000101100000090400000003010000092100000001220099000000000200000001"], &(0x7f0000000a00)={0x0, 0x0, 0x121, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 3.239522236s ago: executing program 4 (id=1109): socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000700)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x0) r1 = socket$isdn(0x22, 0x2, 0x26) bind$isdn(r1, &(0x7f0000000080), 0x6) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1, 0x0, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="0002330100000000fc0141828048b9072a077e1d35b4237c36007d1cab35cd000000000000f2ff"], 0x18) r8 = fanotify_init(0x2, 0x101000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r8, 0x101, 0x20, r9, 0x0) r10 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r10, 0x6611, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001600010a0000000000000058a5b2410704000080"], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14}}}}) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_OWNER(r11, 0xaf01, 0x0) 1.196968717s ago: executing program 4 (id=1110): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0x182d, 0x2, 0x3, 0x2a3}, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r5 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x1, 0x0, 0x0, {[@window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}]}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={@loopback, @private=0xa010101, 0xf}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') read$FUSE(r9, &(0x7f0000000180)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r7], 0x3c}}, 0x0) 978.91527ms ago: executing program 2 (id=1111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x8, 0x0, 0x100000}, 0x20) unshare(0x2a020400) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80000, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a8435001406fffe8000000000000000000000000000bbfe8000000000000000770f77f60d559474000000", @ANYRESDEC=r2, @ANYRES32=0x41424344, @ANYBLOB="500000009078003d42cb445f462431fc9ce00000"], 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x0, {{0xf}}}, 0x28) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)=0x60) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) r7 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/30, 0x1e, 0x1, 0x1c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) fsopen(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000200b06010000000000000109022400010000000009040000010300000009210000000122050009058103a00000000efb78bc108f02"], 0x0) 0s ago: executing program 3 (id=1112): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): 3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12157dff9 code=0x7ffc0000 [ 375.982424][ T2635] usb 3-1: config 0 descriptor?? [ 376.003186][ T29] audit: type=1326 audit(1728125167.651:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12157dff9 code=0x7ffc0000 [ 376.029026][ T29] audit: type=1326 audit(1728125167.681:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12157dff9 code=0x7ffc0000 [ 376.051139][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.077503][ T29] audit: type=1326 audit(1728125167.681:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12157dff9 code=0x7ffc0000 [ 376.100954][ T29] audit: type=1326 audit(1728125167.681:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12157dff9 code=0x7ffc0000 [ 376.139238][ T29] audit: type=1326 audit(1728125167.711:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb12157dff9 code=0x7ffc0000 [ 376.166206][ T29] audit: type=1326 audit(1728125167.711:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12157dff9 code=0x7ffc0000 [ 376.188374][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.200429][ T29] audit: type=1326 audit(1728125167.711:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12157dff9 code=0x7ffc0000 [ 376.223552][ T29] audit: type=1326 audit(1728125167.731:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12157ff17 code=0x7ffc0000 [ 376.228090][ T2635] radio-si470x 3-1:0.35: this is not a si470x device. [ 376.253829][ T29] audit: type=1326 audit(1728125167.731:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb12157fe8c code=0x7ffc0000 [ 376.311305][ T2635] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 376.325877][ T5286] usb 5-1: USB disconnect, device number 87 [ 376.372030][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'. [ 376.401663][ T938] usbhid 1-1:0.0: can't add hid device: -71 [ 376.407816][ T938] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 376.432496][ T938] usb 1-1: USB disconnect, device number 62 [ 376.514143][ T2635] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 376.538473][ T2635] radio-raremono 3-1:0.35: V4L2 device registered as radio32 [ 376.560169][ T2635] usb 3-1: USB disconnect, device number 71 [ 376.566793][ T2635] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 377.165182][ T9848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.250114][ T9848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.931'. [ 377.318197][ T9850] hub 9-0:1.0: USB hub found [ 377.341319][ T9850] hub 9-0:1.0: 8 ports detected [ 377.443989][ T9859] syz.4.936 uses obsolete (PF_INET,SOCK_PACKET) [ 378.009087][ T9850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.017979][ T9850] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 378.044044][ T9850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 378.056143][ T9850] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 378.073604][ T9850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 378.080783][ T9850] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 378.093890][ T9850] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 378.100377][ T9850] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 378.111881][ T9850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.117898][ T9850] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 378.469667][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 378.592853][ T9893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.942'. [ 378.639686][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 378.650513][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.671449][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.715016][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 378.744599][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.773366][ T9] usb 5-1: config 0 descriptor?? [ 378.793883][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 378.839340][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.846874][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.371051][ T5286] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 379.408805][ T5282] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 379.546336][ T5286] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.565526][ T5286] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 379.576368][ T5286] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.592283][ T5282] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.616007][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.632679][ T5282] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 379.667844][ T5282] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.683081][ T9913] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 379.690520][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.712966][ T5286] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.721086][ T9900] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 379.836117][ T5282] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.165278][ T5282] usb 3-1: USB disconnect, device number 72 [ 380.206822][ T938] usb 1-1: USB disconnect, device number 63 [ 381.027643][ T25] usb 5-1: USB disconnect, device number 88 [ 381.369747][ T2635] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 381.404581][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 381.438251][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 381.471049][ T9975] netlink: 'syz.2.954': attribute type 10 has an invalid length. [ 381.495228][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.502749][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.542389][ T9975] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.549599][ T9975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.557017][ T25] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 381.557030][ T9975] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.557119][ T9975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.564832][ T2635] usb 1-1: Using ep0 maxpacket: 16 [ 381.586995][ T9975] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 381.609411][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 381.611224][ T2635] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 381.639832][ T2635] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 381.645875][ T9979] bridge_slave_1: left allmulticast mode [ 381.659243][ T2635] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.678868][ T2635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.687102][ T9979] bridge_slave_1: left promiscuous mode [ 381.687660][ T2635] usb 1-1: Product: syz [ 381.703942][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.707550][ T2635] usb 1-1: Manufacturer: syz [ 381.717071][ T2635] usb 1-1: SerialNumber: syz [ 381.735407][ T2635] usb 1-1: config 0 descriptor?? [ 381.747899][ T9979] bridge_slave_0: left allmulticast mode [ 381.750152][ T2635] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.767331][ T9979] bridge_slave_0: left promiscuous mode [ 381.770664][ T25] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 381.782448][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.797894][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.800023][ T2635] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 381.820499][ T25] usb 5-1: config 0 descriptor?? [ 381.831303][ T25] cp210x 5-1:0.0: cp210x converter detected [ 381.865354][ T9979] bond0: (slave bridge0): Releasing backup interface [ 382.034494][ T25] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 382.049590][ T25] cp210x 5-1:0.0: querying part number failed [ 382.066341][ T25] usb 5-1: cp210x converter now attached to ttyUSB0 [ 382.366848][ T2635] em28xx 1-1:0.0: unknown em28xx chip ID (61) [ 382.569792][ T2635] em28xx 1-1:0.0: Config register raw data: 0x3d [ 382.596610][ T2635] em28xx 1-1:0.0: I2S Audio (5 sample rate(s)) [ 382.604870][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 382.610594][ T2635] em28xx 1-1:0.0: No AC97 audio processor [ 383.430207][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 383.538031][ T25] usb 1-1: USB disconnect, device number 64 [ 384.001103][ T25] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 384.162459][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 384.187227][ T25] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 384.215754][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.244111][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.248066][ T5282] usb 5-1: USB disconnect, device number 89 [ 384.253895][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.269038][ T5282] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 384.300677][ T25] usb 3-1: Product: syz [ 384.305002][ T25] usb 3-1: Manufacturer: syz [ 384.306015][ T5282] cp210x 5-1:0.0: device disconnected [ 384.315125][ T25] usb 3-1: SerialNumber: syz [ 384.519895][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 384.671504][ T5282] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 384.753683][ T25] usb 3-1: 0:2 : does not exist [ 384.829597][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 384.842835][ T5282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.869597][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.882900][ T5282] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 384.893629][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.930613][ T5282] usb 5-1: config 0 descriptor?? [ 384.943845][ T5282] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 384.972045][T10000] netlink: 32 bytes leftover after parsing attributes in process `syz.2.957'. [ 384.987666][ T2635] usb 3-1: USB disconnect, device number 73 [ 385.206400][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 385.206417][ T29] audit: type=1326 audit(1728125176.881:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02657dff9 code=0x7fc00000 [ 385.579770][ T25] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 385.767223][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.969962][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 386.003856][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 386.013155][ T25] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 386.022603][ T25] usb 1-1: Product: syz [ 386.033787][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.044207][ T25] usb 1-1: Manufacturer: syz [ 386.048914][ T25] usb 1-1: SerialNumber: syz [ 386.072013][ T25] usb 1-1: config 0 descriptor?? [ 386.080870][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 386.165928][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.288914][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.319198][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.331665][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.345722][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.354583][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.363636][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.371474][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.399790][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.412181][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.422148][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.432542][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.442386][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.455460][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.493887][T10016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.521630][T10016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.813220][ T25] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 387.365338][ T5286] usb 5-1: USB disconnect, device number 90 [ 387.495310][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.518624][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.541024][ T66] bond0 (unregistering): Released all slaves [ 387.827265][T10042] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.834824][T10042] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.861033][T10042] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.868305][T10042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.876622][T10042] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.883883][T10042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.937795][T10042] team0: Port device bridge0 added [ 388.007601][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.967'. [ 388.078023][ T66] hsr_slave_0: left promiscuous mode [ 388.102947][ T66] hsr_slave_1: left promiscuous mode [ 388.141441][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.236419][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.268570][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.302670][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.378942][ T25] usb 1-1: USB disconnect, device number 65 [ 388.432959][ T66] veth1_macvtap: left promiscuous mode [ 388.470586][ T66] veth0_macvtap: left promiscuous mode [ 388.492114][ T66] veth1_vlan: left promiscuous mode [ 388.497453][ T66] veth0_vlan: left promiscuous mode [ 388.509695][ T5237] Bluetooth: hci2: command tx timeout [ 389.452045][ T66] team0 (unregistering): Port device team_slave_1 removed [ 389.505409][ T66] team0 (unregistering): Port device team_slave_0 removed [ 390.161529][T10057] tc_dump_action: action bad kind [ 390.211226][T10021] chnl_net:caif_netlink_parms(): no params data found [ 390.307012][T10078] netlink: 228 bytes leftover after parsing attributes in process `syz.4.973'. [ 390.530150][T10082] Cannot find map_set index 0 as target [ 390.579951][ T5237] Bluetooth: hci2: command tx timeout [ 390.727843][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 390.750796][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 390.767910][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 390.783999][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.791641][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 390.799021][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.909247][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.922896][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.931812][T10021] bridge_slave_0: entered allmulticast mode [ 390.941129][T10021] bridge_slave_0: entered promiscuous mode [ 390.961799][T10021] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.969039][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.984695][T10021] bridge_slave_1: entered allmulticast mode [ 391.000823][T10021] bridge_slave_1: entered promiscuous mode [ 391.059516][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.097883][T10109] netlink: 'syz.4.979': attribute type 29 has an invalid length. [ 391.120307][T10113] netlink: 'syz.4.979': attribute type 29 has an invalid length. [ 391.241858][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.270357][T10109] netlink: 'syz.4.979': attribute type 29 has an invalid length. [ 391.287304][T10021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.319305][T10122] netlink: 56 bytes leftover after parsing attributes in process `syz.0.980'. [ 391.354988][T10113] netlink: 'syz.4.979': attribute type 29 has an invalid length. [ 391.406778][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.458839][T10021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.543804][T10127] netlink: 'syz.4.981': attribute type 11 has an invalid length. [ 391.564850][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.599338][T10021] team0: Port device team_slave_0 added [ 391.616642][T10021] team0: Port device team_slave_1 added [ 391.689856][T10130] netlink: 228 bytes leftover after parsing attributes in process `syz.4.982'. [ 391.720756][T10021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.739328][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.777669][T10021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.815588][T10021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.846843][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.880495][T10021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.020475][T10021] hsr_slave_0: entered promiscuous mode [ 392.036692][T10021] hsr_slave_1: entered promiscuous mode [ 392.042889][T10021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.051819][T10021] Cannot create hsr debugfs directory [ 392.127954][ T66] bridge_slave_1: left allmulticast mode [ 392.134269][ T66] bridge_slave_1: left promiscuous mode [ 392.141201][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.152090][ T66] bridge_slave_0: left allmulticast mode [ 392.159953][ T66] bridge_slave_0: left promiscuous mode [ 392.166932][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.489715][ T5282] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 392.660143][ T5237] Bluetooth: hci2: command tx timeout [ 392.667538][ T5282] usb 5-1: config 0 has an invalid interface number: 245 but max is 0 [ 392.676724][ T5282] usb 5-1: config 0 has no interface number 0 [ 392.684983][ T5282] usb 5-1: config 0 interface 245 altsetting 12 endpoint 0xA has invalid maxpacket 13809, setting to 64 [ 392.698880][ T5282] usb 5-1: config 0 interface 245 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 392.723560][ T5282] usb 5-1: config 0 interface 245 altsetting 12 bulk endpoint 0xB has invalid maxpacket 8 [ 392.733794][ T5282] usb 5-1: config 0 interface 245 altsetting 12 bulk endpoint 0x5 has invalid maxpacket 1024 [ 392.754324][ T5282] usb 5-1: config 0 interface 245 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 392.787282][ T5282] usb 5-1: config 0 interface 245 altsetting 12 endpoint 0x6 has invalid maxpacket 511, setting to 64 [ 392.819059][ T5282] usb 5-1: config 0 interface 245 altsetting 12 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 392.832969][ T5282] usb 5-1: config 0 interface 245 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 392.850466][ T5282] usb 5-1: config 0 interface 245 altsetting 12 has a duplicate endpoint with address 0x6, skipping [ 392.863300][ T5282] usb 5-1: config 0 interface 245 altsetting 12 has a duplicate endpoint with address 0x8, skipping [ 392.877288][ T5282] usb 5-1: config 0 interface 245 has no altsetting 0 [ 392.887505][ T5282] usb 5-1: New USB device found, idVendor=0404, idProduct=034c, bcdDevice= 7.80 [ 392.912201][ T5237] Bluetooth: hci0: command tx timeout [ 392.929970][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.952692][ T5282] usb 5-1: Product: à¡¡ [ 392.956905][ T5282] usb 5-1: Manufacturer: Ѓ [ 392.961581][ T5282] usb 5-1: SerialNumber: syz [ 392.980440][ T5282] usb 5-1: config 0 descriptor?? [ 392.985988][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.995572][T10140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 393.008989][T10140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 393.032083][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.050163][ T66] bond0 (unregistering): Released all slaves [ 393.066392][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.984'. [ 393.229292][ T5282] cp210x 5-1:0.245: cp210x converter detected [ 393.242313][ T5282] cp210x 5-1:0.245: failed to get vendor val 0x370b size 1: -71 [ 393.250478][ T5282] cp210x 5-1:0.245: querying part number failed [ 393.263348][ T5282] usb 5-1: cp210x converter now attached to ttyUSB0 [ 393.330122][ T5282] usb 5-1: USB disconnect, device number 91 [ 393.357807][T10101] chnl_net:caif_netlink_parms(): no params data found [ 393.374583][ T5282] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 393.402461][ T5282] cp210x 5-1:0.245: device disconnected [ 393.623869][ T66] hsr_slave_0: left promiscuous mode [ 393.643961][ T66] hsr_slave_1: left promiscuous mode [ 393.657371][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.665523][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.675025][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.682606][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.708046][ T66] veth1_macvtap: left promiscuous mode [ 393.714487][ T66] veth0_macvtap: left promiscuous mode [ 393.720603][ T66] veth1_vlan: left promiscuous mode [ 393.725981][ T66] veth0_vlan: left promiscuous mode [ 394.423597][ T66] team0 (unregistering): Port device team_slave_1 removed [ 394.471467][ T66] team0 (unregistering): Port device team_slave_0 removed [ 394.742543][ T5237] Bluetooth: hci2: command tx timeout [ 394.979680][ T5237] Bluetooth: hci0: command tx timeout [ 394.999350][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.987'. [ 395.041027][T10101] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.058216][T10101] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.067811][T10101] bridge_slave_0: entered allmulticast mode [ 395.073240][T10172] netlink: 40 bytes leftover after parsing attributes in process `syz.0.989'. [ 395.074852][T10101] bridge_slave_0: entered promiscuous mode [ 395.091864][T10101] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.098978][T10101] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.106285][T10101] bridge_slave_1: entered allmulticast mode [ 395.113381][T10101] bridge_slave_1: entered promiscuous mode [ 395.144307][T10101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.199691][ T5282] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 395.206436][T10101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.310738][T10101] team0: Port device team_slave_0 added [ 395.332489][T10101] team0: Port device team_slave_1 added [ 395.360884][ T25] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 395.394222][ T5282] usb 5-1: not running at top speed; connect to a high speed hub [ 395.405347][ T5282] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 395.406259][T10101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.419567][ T5282] usb 5-1: config 95 has no interface number 0 [ 395.427098][ T5282] usb 5-1: config 95 interface 1 has no altsetting 0 [ 395.427699][T10101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.451351][ T5282] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 395.471024][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.476740][T10101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.479089][ T5282] usb 5-1: Product: syz [ 395.495843][ T5282] usb 5-1: Manufacturer: syz [ 395.503158][T10101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.510692][T10101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.536787][ T5282] usb 5-1: SerialNumber: syz [ 395.536796][ T25] usb 1-1: device descriptor read/64, error -71 [ 395.537586][T10101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.631790][T10101] hsr_slave_0: entered promiscuous mode [ 395.638054][T10101] hsr_slave_1: entered promiscuous mode [ 395.645825][T10101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.653606][T10101] Cannot create hsr debugfs directory [ 395.663217][T10021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.674046][T10021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.684715][T10021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.695789][T10021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.769781][ T25] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 395.808218][ T5282] usb 5-1: USB disconnect, device number 92 [ 395.896513][ T7122] udevd[7122]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.930608][ T25] usb 1-1: device descriptor read/64, error -71 [ 395.943167][T10021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.018814][T10021] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.038839][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.046006][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.063888][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.071075][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.085811][ T25] usb usb1-port1: attempt power cycle [ 396.131474][T10021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.218050][T10021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.225312][T10101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.243761][T10101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.263723][T10101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.282494][T10101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.298865][T10021] veth0_vlan: entered promiscuous mode [ 396.342002][T10021] veth1_vlan: entered promiscuous mode [ 396.420990][T10021] veth0_macvtap: entered promiscuous mode [ 396.429579][ T25] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 396.444283][T10021] veth1_macvtap: entered promiscuous mode [ 396.454050][ T29] audit: type=1326 audit(1728125188.131:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc171d7dff9 code=0x0 [ 396.503965][ T25] usb 1-1: device descriptor read/8, error -71 [ 396.514644][T10101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.523787][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.535482][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.545467][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.556484][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.566458][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.576927][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.588243][T10021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.603790][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.614442][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.625335][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.637285][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.647246][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.657746][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.669103][T10021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.691586][T10021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.702600][T10021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.712551][T10021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.721534][T10021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.743644][T10101] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.752605][ T25] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 396.785242][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.792423][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.800590][ T25] usb 1-1: device descriptor read/8, error -71 [ 396.822308][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.829406][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.865851][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.888263][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.910314][ T25] usb usb1-port1: unable to enumerate USB device [ 396.957631][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.966072][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.993654][T10101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.060405][ T5237] Bluetooth: hci0: command tx timeout [ 397.089672][T10101] veth0_vlan: entered promiscuous mode [ 397.118326][T10101] veth1_vlan: entered promiscuous mode [ 397.204240][T10101] veth0_macvtap: entered promiscuous mode [ 397.225775][T10101] veth1_macvtap: entered promiscuous mode [ 397.250657][T10101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.268358][T10101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.286227][T10101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.297382][T10101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.316270][T10101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.328965][T10101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.345973][T10101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.357080][T10101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.373001][T10101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.399836][T10101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.415794][T10101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.427552][T10101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.456818][T10101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.467649][T10101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.486800][T10101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.499248][T10101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.515998][T10101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.527716][T10101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.555702][T10101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.566574][T10101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.585643][T10101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.599582][T10101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.742250][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.768092][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.847429][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.895340][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.031781][T10239] loop8: detected capacity change from 0 to 7 [ 398.073927][T10239] Dev loop8: unable to read RDB block 7 [ 398.083156][T10239] loop8: unable to read partition table [ 398.088979][T10239] loop8: partition table beyond EOD, truncated [ 398.095411][T10239] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 398.095411][T10239] ) failed (rc=-5) [ 398.140742][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 398.172987][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 398.184456][T10240] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 398.226000][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.233608][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.247800][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.255069][T10240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.262556][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.269742][T10240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.284270][T10240] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 398.304058][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 398.317726][T10245] bridge_slave_1: left allmulticast mode [ 398.347065][T10245] bridge_slave_1: left promiscuous mode [ 398.362289][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.385787][T10245] bridge_slave_0: left allmulticast mode [ 398.398668][T10245] bridge_slave_0: left promiscuous mode [ 398.406286][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.461857][T10245] bond0: (slave bridge0): Releasing backup interface [ 398.669728][ T938] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 398.830456][ T938] usb 1-1: Using ep0 maxpacket: 8 [ 398.891613][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.009894][ T938] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 399.049965][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.060248][ T938] usb 1-1: config 0 descriptor?? [ 399.139683][ T5237] Bluetooth: hci0: command tx timeout [ 399.314837][ T938] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 400.006719][T10301] fuse: Bad value for 'blksize' [ 400.366356][ T29] audit: type=1326 audit(1728125192.031:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.4.1006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc171d7dff9 code=0x0 [ 400.477514][T10322] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.760938][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 400.930326][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 400.943345][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.962412][ T9] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 400.978113][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.991677][ T9] usb 4-1: Product: syz [ 400.998261][ T9] usb 4-1: Manufacturer: syz [ 401.006674][ T9] usb 4-1: SerialNumber: syz [ 401.019432][ T9] usb 4-1: config 0 descriptor?? [ 401.036867][ T9] gspca_main: t613-2.14.0 probing 17a1:0128 [ 401.164687][T10347] random: crng reseeded on system resumption [ 401.232967][ T9] gspca_t613: unknown sensor 0000 [ 401.248414][ T9] t613 4-1:0.0: probe with driver t613 failed with error -22 [ 401.291665][ T9] usb 4-1: USB disconnect, device number 60 [ 401.573132][ T9] usb 1-1: USB disconnect, device number 70 [ 401.594387][ T9] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 402.249684][ T2635] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 402.329673][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 402.349800][ T25] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 402.410137][ T2635] usb 5-1: too many configurations: 138, using maximum allowed: 8 [ 402.421561][ T2635] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 402.429338][ T2635] usb 5-1: can't read configurations, error -61 [ 402.479674][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 402.486357][ T9] usb 1-1: config 8 has an invalid interface number: 173 but max is 0 [ 402.502579][ T9] usb 1-1: config 8 has no interface number 0 [ 402.510459][ T25] usb 4-1: device descriptor read/64, error -71 [ 402.522876][ T9] usb 1-1: config 8 interface 173 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 402.539743][ T9] usb 1-1: config 8 interface 173 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 402.561945][ T9] usb 1-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=a0.b2 [ 402.577278][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.579593][ T2635] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 402.605540][ T9] usb 1-1: Product: syz [ 402.616838][ T9] usb 1-1: Manufacturer: syz [ 402.622495][ T9] usb 1-1: SerialNumber: syz [ 402.639846][T10381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 402.666077][ T9] em28xx 1-1:8.173: New device syz syz @ 480 Mbps (2013:024f, interface 173, class 173) [ 402.676079][ T9] em28xx 1-1:8.173: Video interface 173 found: bulk [ 402.779687][ T25] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 402.790814][ T2635] usb 5-1: too many configurations: 138, using maximum allowed: 8 [ 402.807626][ T2635] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 402.825784][ T2635] usb 5-1: can't read configurations, error -61 [ 402.833077][ T2635] usb usb5-port1: attempt power cycle [ 402.920039][ T9] em28xx 1-1:8.173: unknown em28xx chip ID (0) [ 402.929735][ T25] usb 4-1: device descriptor read/64, error -71 [ 403.012841][ T9] em28xx 1-1:8.173: reading from i2c device at 0xa0 failed (error=-5) [ 403.025406][ T9] em28xx 1-1:8.173: board has no eeprom [ 403.049858][ T25] usb usb4-port1: attempt power cycle [ 403.099643][ T9] em28xx 1-1:8.173: Identified as PCTV nanoStick T2 290e (card=78) [ 403.115605][ T9] em28xx 1-1:8.173: Currently, V4L2 is not supported on this model [ 403.129023][ T938] em28xx 1-1:8.173: Binding DVB extension [ 403.140969][ T938] em28xx 1-1:8.173: no endpoint for DVB mode and transfer type 0 [ 403.151657][ T9] usb 1-1: USB disconnect, device number 71 [ 403.192434][ T9] em28xx 1-1:8.173: Disconnecting em28xx [ 403.201012][ T2635] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 403.224670][ T938] em28xx 1-1:8.173: failed to pre-allocate USB transfer buffers for DVB. [ 403.240063][ T938] em28xx 1-1:8.173: Registering input extension [ 403.253108][ T2635] usb 5-1: too many configurations: 138, using maximum allowed: 8 [ 403.265197][ T9] em28xx 1-1:8.173: Closing input extension [ 403.266274][ T2635] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 403.287985][ T2635] usb 5-1: can't read configurations, error -61 [ 403.296195][ T9] em28xx 1-1:8.173: Freeing device [ 403.421517][ T2635] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 403.437172][ T25] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 403.466409][T10398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.480074][T10398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.480756][ T2635] usb 5-1: too many configurations: 138, using maximum allowed: 8 [ 403.497066][ T25] usb 4-1: device descriptor read/8, error -71 [ 403.509273][ T2635] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 403.517696][ T2635] usb 5-1: can't read configurations, error -61 [ 403.528727][ T2635] usb usb5-port1: unable to enumerate USB device [ 403.739583][ T25] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 403.759694][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 403.777737][ T25] usb 4-1: device descriptor read/8, error -71 [ 403.900362][ T25] usb usb4-port1: unable to enumerate USB device [ 403.909706][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 403.915446][ T9] usb 1-1: no configurations [ 403.929717][ T9] usb 1-1: can't read configurations, error -22 [ 404.059692][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 404.084344][T10401] team0: entered promiscuous mode [ 404.090222][T10401] team_slave_0: entered promiscuous mode [ 404.096091][T10401] team_slave_1: entered promiscuous mode [ 404.144255][T10401] loop2: detected capacity change from 0 to 7 [ 404.153522][T10401] Dev loop2: unable to read RDB block 7 [ 404.159654][T10401] loop2: unable to read partition table [ 404.169745][T10401] loop2: partition table beyond EOD, truncated [ 404.176029][T10401] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 404.189681][T10400] team0: left promiscuous mode [ 404.194472][T10400] team_slave_0: left promiscuous mode [ 404.211767][T10400] team_slave_1: left promiscuous mode [ 404.229686][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 404.250345][ T9] usb 1-1: no configurations [ 404.254982][ T9] usb 1-1: can't read configurations, error -22 [ 404.280014][ T9] usb usb1-port1: attempt power cycle [ 404.629598][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 404.680270][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 404.687217][ T9] usb 1-1: no configurations [ 404.700323][ T9] usb 1-1: can't read configurations, error -22 [ 404.839739][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 404.861004][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 404.869652][ T9] usb 1-1: no configurations [ 404.875291][ T9] usb 1-1: can't read configurations, error -22 [ 404.888177][ T9] usb usb1-port1: unable to enumerate USB device [ 404.919666][ T2635] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 405.101159][ T2635] usb 3-1: too many configurations: 57, using maximum allowed: 8 [ 405.119227][ T2635] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 405.128648][ T2635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.138785][ T2635] usb 3-1: Product: syz [ 405.143241][ T2635] usb 3-1: Manufacturer: syz [ 405.147843][ T2635] usb 3-1: SerialNumber: syz [ 405.156679][ T2635] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 405.174505][ T46] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 405.339653][ T9] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 405.449623][ T25] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 405.492613][ T9] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 405.508210][ T9] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 405.522043][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 405.533329][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 405.544231][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.552343][ T9] usb 4-1: Product: syz [ 405.556813][ T9] usb 4-1: Manufacturer: syz [ 405.561516][ T9] usb 4-1: SerialNumber: syz [ 405.602827][T10409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.612246][T10409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.620392][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 405.629025][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.640298][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.653233][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 405.663884][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.678535][ T25] hub 5-1:4.0: USB hub found [ 405.842105][ T29] audit: type=1326 audit(1728125197.521:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 405.864937][ T29] audit: type=1326 audit(1728125197.521:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 405.911076][ T25] hub 5-1:4.0: 2 ports detected [ 405.919980][ T25] usb 5-1: selecting invalid altsetting 1 [ 405.929179][ T29] audit: type=1326 audit(1728125197.521:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 405.951793][ T25] hub 5-1:4.0: Using single TT (err -22) [ 405.978320][ T29] audit: type=1326 audit(1728125197.551:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 406.007707][ T29] audit: type=1326 audit(1728125197.551:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 406.037327][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 406.042153][ T29] audit: type=1326 audit(1728125197.551:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 406.054579][ T9] usb 4-1: USB disconnect, device number 65 [ 406.072395][ T29] audit: type=1326 audit(1728125197.571:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 406.111873][ T9] usblp0: removed [ 406.115969][ T25] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 406.122864][ T25] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 406.160309][ T29] audit: type=1326 audit(1728125197.571:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 406.187508][ T29] audit: type=1326 audit(1728125197.571:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 406.224035][ T29] audit: type=1326 audit(1728125197.571:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbe57dff9 code=0x7ffc0000 [ 406.270932][ T46] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 406.278730][ T46] ath9k_htc: Failed to initialize the device [ 406.292773][ T938] usb 3-1: USB disconnect, device number 74 [ 406.309200][ T938] usb 3-1: ath9k_htc: USB layer deinitialized [ 406.584872][T10435] loop8: detected capacity change from 0 to 7 [ 406.591558][T10435] Dev loop8: unable to read RDB block 7 [ 406.597184][T10435] loop8: unable to read partition table [ 406.604332][T10435] loop8: partition table beyond EOD, truncated [ 406.610950][T10435] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 406.610950][T10435] ) failed (rc=-5) [ 406.679815][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 406.687492][ T938] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 406.839666][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 406.846489][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.858044][ T938] usb 3-1: Using ep0 maxpacket: 16 [ 406.863270][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.873206][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.887949][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.900563][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.910561][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 406.919708][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.927716][ T9] usb 4-1: Product: syz [ 406.931997][ T938] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 406.941149][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.949550][ T9] usb 4-1: Manufacturer: syz [ 406.954717][ T9] usb 4-1: SerialNumber: syz [ 406.961737][ T938] usb 3-1: config 0 descriptor?? [ 406.976203][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input29 [ 407.175987][T10426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.188689][T10426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.197844][ T4669] bcm5974 4-1:1.0: could not read from device [ 407.198022][ T25] usb 4-1: USB disconnect, device number 66 [ 407.219180][ T4669] bcm5974 4-1:1.0: could not read from device [ 407.229443][ T9887] bcm5974 4-1:1.0: could not read from device [ 407.254057][ T9887] udevd[9887]: Error opening device "/dev/input/event4": No such file or directory [ 407.266982][ T9887] udevd[9887]: Unable to EVIOCGABS device "/dev/input/event4" [ 407.274830][ T9887] udevd[9887]: Unable to EVIOCGABS device "/dev/input/event4" [ 407.284617][ T9887] udevd[9887]: Unable to EVIOCGABS device "/dev/input/event4" [ 407.293117][ T9887] udevd[9887]: Unable to EVIOCGABS device "/dev/input/event4" [ 407.381162][ T938] waltop 0003:172F:0037.0012: item fetching failed at offset 4/6 [ 407.397113][ T938] waltop 0003:172F:0037.0012: probe with driver waltop failed with error -22 [ 407.617667][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.639186][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.203478][ T25] usb 5-1: USB disconnect, device number 97 [ 408.280585][ T46] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 408.419880][ T46] usb 4-1: device descriptor read/64, error -71 [ 408.669723][ T46] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 408.809665][ T46] usb 4-1: device descriptor read/64, error -71 [ 408.929835][ T46] usb usb4-port1: attempt power cycle [ 409.114360][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 409.339654][ T46] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 409.372119][ T46] usb 4-1: device descriptor read/8, error -71 [ 409.401208][ T5282] usb 3-1: USB disconnect, device number 75 [ 409.625432][ T46] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 409.649578][ T25] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 409.666466][ T46] usb 4-1: device descriptor read/8, error -71 [ 409.682191][T10471] sctp: [Deprecated]: syz.2.1046 (pid 10471) Use of int in max_burst socket option deprecated. [ 409.682191][T10471] Use struct sctp_assoc_value instead [ 409.789913][ T46] usb usb4-port1: unable to enumerate USB device [ 409.799669][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 409.809669][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.827214][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.839387][ T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 409.854886][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.879645][ T25] usb 5-1: config 0 descriptor?? [ 410.375284][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.391130][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.419425][ T25] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 410.426797][ T25] cp2112 0003:10C4:EA90.0013: item fetching failed at offset 3/5 [ 410.436642][ T25] cp2112 0003:10C4:EA90.0013: parse failed [ 410.443497][ T25] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -22 [ 412.413045][ T46] usb 5-1: USB disconnect, device number 98 [ 412.573493][T10489] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1051'. [ 412.937442][ T5237] Bluetooth: Unexpected continuation frame (len 46) [ 413.810304][ T5282] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 413.970428][ T5282] usb 5-1: device descriptor read/64, error -71 [ 414.051962][ T5286] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 414.232570][ T5286] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 414.258992][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.278392][ T5286] usb 3-1: config 0 descriptor?? [ 414.429688][ T5282] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 414.508372][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.519330][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.527453][ T25] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 415.838389][ T5282] usb 5-1: device descriptor read/64, error -71 [ 419.159674][ T5282] usb usb5-port1: attempt power cycle [ 419.292405][ T5286] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 419.299417][ T5286] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 419.367966][ T5286] usb 3-1: USB disconnect, device number 76 [ 419.555293][T10526] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 419.625654][T10531] netlink: 'syz.3.1062': attribute type 10 has an invalid length. [ 419.635910][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 419.654584][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.664892][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.673175][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.682719][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.690648][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 419.697997][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.784350][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.860827][ T5286] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 419.871744][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.915380][T10535] chnl_net:caif_netlink_parms(): no params data found [ 419.962114][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.997418][T10535] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.005287][T10535] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.012834][T10535] bridge_slave_0: entered allmulticast mode [ 420.020182][T10535] bridge_slave_0: entered promiscuous mode [ 420.028180][ T5286] usb 3-1: config 0 has an invalid interface number: 171 but max is 0 [ 420.029138][T10535] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.036536][ T5286] usb 3-1: config 0 has no interface number 0 [ 420.050046][ T5286] usb 3-1: config 0 interface 171 has no altsetting 0 [ 420.050539][T10535] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.061955][ T5286] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 420.071595][T10535] bridge_slave_1: entered allmulticast mode [ 420.075127][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.086246][T10535] bridge_slave_1: entered promiscuous mode [ 420.086902][ T5286] usb 3-1: Product: syz [ 420.096908][ T5286] usb 3-1: Manufacturer: syz [ 420.101737][ T5286] usb 3-1: SerialNumber: syz [ 420.108171][ T5286] usb 3-1: config 0 descriptor?? [ 420.115061][ T5286] usb-storage 3-1:0.171: USB Mass Storage device detected [ 420.137633][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.170315][T10535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.192273][T10535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.231359][T10535] team0: Port device team_slave_0 added [ 420.240816][T10535] team0: Port device team_slave_1 added [ 420.264281][T10535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.271957][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.298969][T10535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.311580][T10535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.323420][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.349361][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.361971][ T25] usb 3-1: USB disconnect, device number 77 [ 420.375275][T10535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.467335][T10535] hsr_slave_0: entered promiscuous mode [ 420.474453][T10535] hsr_slave_1: entered promiscuous mode [ 420.483318][T10535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.491074][T10535] Cannot create hsr debugfs directory [ 420.506958][ T35] bridge_slave_1: left allmulticast mode [ 420.515310][ T35] bridge_slave_1: left promiscuous mode [ 420.526838][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.542928][ T35] bridge_slave_0: left allmulticast mode [ 420.553807][ T35] bridge_slave_0: left promiscuous mode [ 420.562540][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.944006][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.960787][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.978781][ T35] bond0 (unregistering): Released all slaves [ 421.325237][ T35] hsr_slave_0: left promiscuous mode [ 421.336061][ T35] hsr_slave_1: left promiscuous mode [ 421.346607][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.371078][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.390386][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.400327][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.453952][ T35] veth1_macvtap: left promiscuous mode [ 421.469729][ T35] veth0_macvtap: left promiscuous mode [ 421.475353][ T35] veth1_vlan: left promiscuous mode [ 421.494423][ T35] veth0_vlan: left promiscuous mode [ 421.771026][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.791722][ T54] Bluetooth: hci3: command tx timeout [ 421.794216][ T4621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.807812][ T4621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.841176][ T4621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.852014][ T4621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 421.860365][ T4621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.206968][ T4621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.232292][ T4621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.255639][ T4621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.287790][ T4621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.306352][ T4621] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 422.316253][ T4621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.774400][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.801790][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.810659][ T35] team0 (unregistering): Port device team_slave_1 removed [ 422.856642][ T35] team0 (unregistering): Port device team_slave_0 removed [ 422.999682][ T5271] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 423.159679][ T5271] usb 3-1: Using ep0 maxpacket: 32 [ 423.172557][ T5271] usb 3-1: unable to get BOS descriptor or descriptor too short [ 423.184159][ T5271] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.194816][ T5271] usb 3-1: config 0 has no interface number 0 [ 423.207418][ T5271] usb 3-1: New USB device found, idVendor=05c6, idProduct=7001, bcdDevice=5f.cd [ 423.217956][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.237270][ T5271] usb 3-1: Product: syz [ 423.241681][ T5271] usb 3-1: Manufacturer: syz [ 423.246323][ T5271] usb 3-1: SerialNumber: syz [ 423.255980][ T5271] usb 3-1: config 0 descriptor?? [ 423.464652][ T5271] qmi_wwan 3-1:0.1: probe with driver qmi_wwan failed with error -22 [ 423.497529][ T5271] usb 3-1: USB disconnect, device number 78 [ 423.824120][T10564] chnl_net:caif_netlink_parms(): no params data found [ 423.861632][ T4621] Bluetooth: hci3: command tx timeout [ 423.879808][ T2635] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 423.894734][T10571] chnl_net:caif_netlink_parms(): no params data found [ 423.937417][T10535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 423.944308][ T4621] Bluetooth: hci1: command tx timeout [ 423.968918][T10535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 424.050173][ T2635] usb 4-1: Using ep0 maxpacket: 8 [ 424.063065][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 424.063084][ T29] audit: type=1326 audit(1728125215.731:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.105253][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.105715][ T2635] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.126305][ T29] audit: type=1326 audit(1728125215.731:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.149340][ T2635] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 424.167219][ T2635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 424.171823][ T29] audit: type=1326 audit(1728125215.771:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.200469][T10535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 424.203021][ T2635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 424.209004][ T29] audit: type=1326 audit(1728125215.771:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.229180][T10535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.246476][ T29] audit: type=1326 audit(1728125215.771:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.269192][ T2635] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 424.285310][ T29] audit: type=1326 audit(1728125215.771:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.308915][ T29] audit: type=1326 audit(1728125215.771:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.310710][ T2635] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 424.333491][ T29] audit: type=1326 audit(1728125215.771:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.340816][ T25] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 424.365223][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.378718][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.386280][ T2635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 424.386518][T10564] bridge_slave_0: entered allmulticast mode [ 424.401877][ T2635] usb 4-1: Product: syz [ 424.402775][T10564] bridge_slave_0: entered promiscuous mode [ 424.406105][ T2635] usb 4-1: Manufacturer: syz [ 424.412077][ T29] audit: type=1326 audit(1728125215.771:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.412120][ T29] audit: type=1326 audit(1728125215.771:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3c97dff9 code=0x7ffc0000 [ 424.421947][ T2635] usb 4-1: SerialNumber: syz [ 424.439342][ T4621] Bluetooth: hci4: command tx timeout [ 424.464912][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.479448][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.487300][T10564] bridge_slave_1: entered allmulticast mode [ 424.495406][ T2635] usb 4-1: config 0 descriptor?? [ 424.502579][T10564] bridge_slave_1: entered promiscuous mode [ 424.534739][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.559776][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 424.566165][ T25] usb 3-1: no configurations [ 424.571134][ T25] usb 3-1: can't read configurations, error -22 [ 424.644311][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.664472][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.677993][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.707045][ T2635] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 424.714351][ T25] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 424.722462][ T2635] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 424.752418][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.760063][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.767359][T10571] bridge_slave_0: entered allmulticast mode [ 424.774916][T10571] bridge_slave_0: entered promiscuous mode [ 424.783935][T10571] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.791386][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.798602][T10571] bridge_slave_1: entered allmulticast mode [ 424.806125][T10571] bridge_slave_1: entered promiscuous mode [ 424.841923][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.862451][T10564] team0: Port device team_slave_0 added [ 424.871145][T10564] team0: Port device team_slave_1 added [ 424.896612][T10571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.907441][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 424.921488][ T2635] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 424.936365][ T25] usb 3-1: no configurations [ 424.941748][ T25] usb 3-1: can't read configurations, error -22 [ 424.951888][ T2635] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 424.966338][ T25] usb usb3-port1: attempt power cycle [ 424.972824][ T2635] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 424.981387][T10571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.027754][T10564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.034872][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.063908][T10564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.077052][T10564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.084977][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.111202][T10564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.129633][ T2635] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 425.149222][T10571] team0: Port device team_slave_0 added [ 425.174275][T10571] team0: Port device team_slave_1 added [ 425.238954][T10535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.280143][T10564] hsr_slave_0: entered promiscuous mode [ 425.287821][T10564] hsr_slave_1: entered promiscuous mode [ 425.304588][T10564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.317829][T10564] Cannot create hsr debugfs directory [ 425.343897][ T25] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 425.393374][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 425.399303][ T25] usb 3-1: no configurations [ 425.423564][ T25] usb 3-1: can't read configurations, error -22 [ 425.452305][T10571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.459294][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.486088][T10571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.572448][T10571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.591416][ T25] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 425.592117][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.637372][T10571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.637565][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 425.656153][ T25] usb 3-1: no configurations [ 425.664558][T10535] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.669534][ T25] usb 3-1: can't read configurations, error -22 [ 425.677818][ T25] usb usb3-port1: unable to enumerate USB device [ 425.724174][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.731359][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.828388][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.887939][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.895165][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.926612][T10571] hsr_slave_0: entered promiscuous mode [ 425.934572][T10571] hsr_slave_1: entered promiscuous mode [ 425.942341][ T4621] Bluetooth: hci3: command tx timeout [ 425.957613][ T2635] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 425.967291][T10571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.986010][T10571] Cannot create hsr debugfs directory [ 425.992054][ T2635] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 426.017210][ T2635] usb 4-1: USB disconnect, device number 72 [ 426.023368][ T4621] Bluetooth: hci1: command tx timeout [ 426.067817][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.147483][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.204726][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.311917][T10535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.438203][ T35] bridge_slave_1: left allmulticast mode [ 426.455845][ T35] bridge_slave_1: left promiscuous mode [ 426.465630][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.480562][ T35] bridge_slave_0: left allmulticast mode [ 426.486375][ T35] bridge_slave_0: left promiscuous mode [ 426.492741][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.502727][ T4621] Bluetooth: hci4: command tx timeout [ 426.510813][ T35] bridge_slave_1: left allmulticast mode [ 426.520766][ T35] bridge_slave_1: left promiscuous mode [ 426.527354][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.549028][ T35] bridge_slave_0: left allmulticast mode [ 426.554796][ T35] bridge_slave_0: left promiscuous mode [ 426.568418][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.949697][ T5320] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 427.123341][ T5320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.136740][ T5320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.150025][ T5320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.169403][ T5320] usb 4-1: Product: syz [ 427.173759][ T5320] usb 4-1: Manufacturer: syz [ 427.178389][ T5320] usb 4-1: SerialNumber: syz [ 427.215232][ T35] team0: Port device bridge0 removed [ 427.257425][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1075'. [ 427.404770][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.416194][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.428134][ T35] bond0 (unregistering): Released all slaves [ 427.577158][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.590525][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.601754][ T35] bond0 (unregistering): Released all slaves [ 427.614848][ T35] bond1 (unregistering): Released all slaves [ 427.708703][T10535] veth0_vlan: entered promiscuous mode [ 427.824983][T10535] veth1_vlan: entered promiscuous mode [ 428.029578][ T4621] Bluetooth: hci3: command tx timeout [ 428.055192][T10535] veth0_macvtap: entered promiscuous mode [ 428.101338][ T4621] Bluetooth: hci1: command tx timeout [ 428.107178][T10535] veth1_macvtap: entered promiscuous mode [ 428.115899][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.140726][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.153843][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.164733][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.176032][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.189346][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.200555][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.211287][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.223244][ T5320] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 428.230366][ T5320] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 428.231025][T10535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.237833][ T5320] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 428.259874][ T5286] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 428.303632][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.315721][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.327108][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.339120][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.361869][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.377151][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.389872][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.408037][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.422132][T10535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.444031][ T5286] usb 3-1: unable to get BOS descriptor or descriptor too short [ 428.457472][T10535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.467497][ T5286] usb 3-1: config 1 has an invalid descriptor of length 183, skipping remainder of the config [ 428.486053][T10535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.489852][ T5286] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.496063][T10535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.522891][T10535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.524563][ T5286] usb 3-1: string descriptor 0 read error: -22 [ 428.538235][ T5286] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.562621][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.590779][ T4621] Bluetooth: hci4: command tx timeout [ 428.600492][ T5286] usb 3-1: 0:2 : does not exist [ 428.726135][ T5320] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 428.913267][ T2635] usb 3-1: USB disconnect, device number 83 [ 429.008610][ T5320] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 429.066429][ T5320] usb 4-1: USB disconnect, device number 73 [ 429.080954][ T5320] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 429.182503][T10666] netlink: 'syz.3.1078': attribute type 10 has an invalid length. [ 429.206949][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 429.240556][ T35] hsr_slave_0: left promiscuous mode [ 429.256798][ T35] hsr_slave_1: left promiscuous mode [ 429.263827][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.271851][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.283218][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.291611][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.307144][ T35] hsr_slave_0: left promiscuous mode [ 429.313794][ T35] hsr_slave_1: left promiscuous mode [ 429.319995][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.327507][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.335513][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.343470][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.374745][ T35] veth1_macvtap: left promiscuous mode [ 429.383989][ T35] veth0_macvtap: left promiscuous mode [ 429.390061][ T35] veth1_vlan: left promiscuous mode [ 429.395437][ T35] veth0_vlan: left promiscuous mode [ 429.402131][ T35] veth1_macvtap: left promiscuous mode [ 429.407685][ T35] veth0_macvtap: left promiscuous mode [ 429.413641][ T35] veth1_vlan: left promiscuous mode [ 429.419028][ T35] veth0_vlan: left promiscuous mode [ 430.138650][ T35] team0 (unregistering): Port device team_slave_1 removed [ 430.189725][ T4621] Bluetooth: hci1: command tx timeout [ 430.197238][ T35] team0 (unregistering): Port device team_slave_0 removed [ 430.665468][ T4621] Bluetooth: hci4: command tx timeout [ 431.034710][ T35] team0 (unregistering): Port device team_slave_1 removed [ 431.082881][ T35] team0 (unregistering): Port device team_slave_0 removed [ 431.533957][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.543467][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.679790][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.687739][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.701346][T10571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.767232][T10571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.815192][T10571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.875598][T10571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.890462][T10679] random: crng reseeded on system resumption [ 432.012421][T10564] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.057927][T10564] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.076208][T10564] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.187658][T10564] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 432.359007][T10694] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1084'. [ 432.367867][T10571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.390087][T10694] unsupported nlmsg_type 40 [ 432.475392][T10571] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.511044][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.518216][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.548650][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.555858][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.644584][T10564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.704754][T10564] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.742267][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.749515][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.789726][ T5282] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 432.803390][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.810566][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.907970][T10571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.970065][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 433.006432][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.035492][ T5282] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 433.046167][T10564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.062206][ T5282] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.082729][ T5282] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.102238][T10571] veth0_vlan: entered promiscuous mode [ 433.111670][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.127165][ T5282] usb 4-1: Product: syz [ 433.139046][T10571] veth1_vlan: entered promiscuous mode [ 433.150599][ T5282] usb 4-1: Manufacturer: syz [ 433.155229][ T5282] usb 4-1: SerialNumber: syz [ 433.166727][ T5282] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 433.196880][T10564] veth0_vlan: entered promiscuous mode [ 433.207791][ T5282] cdc_ncm 4-1:1.0: bind() failure [ 433.237119][T10564] veth1_vlan: entered promiscuous mode [ 433.260849][T10571] veth0_macvtap: entered promiscuous mode [ 433.261955][ T4621] Bluetooth: hci2: unexpected cc 0x2027 length: 2 > 1 [ 433.297895][ T4621] Bluetooth: hci2: unexpected event 0x3d length: 7 < 14 [ 433.308690][T10571] veth1_macvtap: entered promiscuous mode [ 433.336967][T10564] veth0_macvtap: entered promiscuous mode [ 433.348566][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.359390][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.369894][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.381706][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.406583][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.418517][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.441506][T10571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.449410][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 433.466329][T10718] openvswitch: netlink: Actions may not be safe on all matching packets [ 433.495049][T10564] veth1_macvtap: entered promiscuous mode [ 433.512038][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.520639][ T938] usb 4-1: USB disconnect, device number 74 [ 433.551900][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.579831][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.596456][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.617099][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.629065][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.643921][T10571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.676687][T10571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.692649][T10571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.715804][T10571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.716071][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 433.716085][ T29] audit: type=1326 audit(1728125225.391:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 433.730364][T10571] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.737686][ T29] audit: type=1326 audit(1728125225.391:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 433.792370][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1088'. [ 433.795255][ T29] audit: type=1326 audit(1728125225.391:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 433.826826][T10733] pimreg: entered allmulticast mode [ 433.833084][ T29] audit: type=1326 audit(1728125225.391:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 433.863455][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.882431][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.895202][ T29] audit: type=1326 audit(1728125225.391:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 433.919216][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.932470][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.942726][ T29] audit: type=1326 audit(1728125225.391:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 433.965357][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.965781][ T29] audit: type=1326 audit(1728125225.391:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 433.976391][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.005549][ T29] audit: type=1326 audit(1728125225.391:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 434.010006][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.033003][ T29] audit: type=1326 audit(1728125225.391:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 434.078443][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.090615][T10564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.107901][ T29] audit: type=1326 audit(1728125225.391:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28877dff9 code=0x7ffc0000 [ 434.158564][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.178760][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.182468][T10742] netlink: 416 bytes leftover after parsing attributes in process `syz.0.1090'. [ 434.196005][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.209344][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.219644][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.231081][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.259885][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.276823][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.288420][T10564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.325191][T10564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.346268][T10564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.357173][T10564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.372782][T10564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.439277][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.468269][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.546625][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.554716][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.598073][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.616382][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.660297][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.669071][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.701710][ T25] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 434.769755][ T5297] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 434.869746][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 434.876738][ T25] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 434.885733][ T25] usb 1-1: config 0 has no interface number 0 [ 434.899547][ T25] usb 1-1: too many endpoints for config 0 interface 119 altsetting 111: 102, using maximum allowed: 30 [ 434.913382][ T25] usb 1-1: config 0 interface 119 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 434.927492][ T25] usb 1-1: config 0 interface 119 has no altsetting 0 [ 434.938846][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 434.950152][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.960481][ T5297] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 434.969665][ T5286] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 434.978320][ T5297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 434.988507][ T5297] usb 4-1: Product: syz [ 434.994104][ T25] usb 1-1: config 0 descriptor?? [ 435.006120][ T5297] usb 4-1: Manufacturer: syz [ 435.013793][ T5297] usb 4-1: SerialNumber: syz [ 435.033798][ T5297] usb 4-1: config 0 descriptor?? [ 435.048050][ T5297] ch341 4-1:0.0: ch341-uart converter detected [ 435.147218][ T5286] usb 3-1: Using ep0 maxpacket: 16 [ 435.156445][ T5286] usb 3-1: unable to get BOS descriptor or descriptor too short [ 435.167020][ T5286] usb 3-1: config 6 has an invalid interface number: 62 but max is 3 [ 435.175563][ T5286] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 435.185901][ T5286] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 435.195069][ T5286] usb 3-1: config 6 has no interface number 0 [ 435.201402][ T5286] usb 3-1: config 6 interface 62 altsetting 5 endpoint 0x8 has an invalid bInterval 250, changing to 11 [ 435.213167][ T5286] usb 3-1: config 6 interface 62 altsetting 5 bulk endpoint 0xB has invalid maxpacket 64 [ 435.225883][ T5286] usb 3-1: config 6 interface 62 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 435.236969][ T5286] usb 3-1: config 6 interface 62 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 435.249772][ T5286] usb 3-1: config 6 interface 62 altsetting 5 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.277094][ T5286] usb 3-1: config 6 interface 62 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.287613][ T5286] usb 3-1: config 6 interface 62 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 435.303142][ T5286] usb 3-1: config 6 interface 62 has no altsetting 0 [ 435.309689][ T5271] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 435.312511][ T5286] usb 3-1: New USB device found, idVendor=1199, idProduct=6809, bcdDevice=a9.a5 [ 435.329859][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.338014][ T5286] usb 3-1: Product: syz [ 435.342918][ T5286] usb 3-1: Manufacturer: syz [ 435.347619][ T5286] usb 3-1: SerialNumber: syz [ 435.357365][T10760] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 435.365503][T10760] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 435.437492][ T25] usb 1-1: string descriptor 0 read error: -32 [ 435.451276][ T25] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 435.493948][ T5271] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 435.509704][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.517748][ T5271] usb 5-1: Product: syz [ 435.531357][ T5271] usb 5-1: Manufacturer: syz [ 435.536086][ T5271] usb 5-1: SerialNumber: syz [ 435.543324][ T5271] usb 5-1: config 0 descriptor?? [ 435.552705][ T5271] usb 5-1: selecting invalid altsetting 3 [ 435.558481][ T5271] comedi comedi0: could not set alternate setting 3 in high speed [ 435.566368][ T5271] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 435.581376][ T5271] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 435.648744][ T5286] sierra 3-1:6.62: Sierra USB modem converter detected [ 435.662618][ T25] gspca_sonixj: reg_r err -32 [ 435.667755][ T25] sonixj 1-1:0.119: probe with driver sonixj failed with error -32 [ 435.678422][ T5286] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 435.701377][ T5286] usb 3-1: USB disconnect, device number 84 [ 435.717944][ T5286] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 435.733704][ T5286] sierra 3-1:6.62: device disconnected [ 436.110459][ T5297] usb 4-1: failed to receive control message: -110 [ 436.118576][ T5297] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 437.262806][T10780] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1103'. [ 437.299876][ T4621] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 437.309977][ T4621] Bluetooth: hci2: Injecting HCI hardware error event [ 437.319686][ T4621] Bluetooth: hci2: hardware error 0x00 [ 437.416448][ T938] usb 1-1: USB disconnect, device number 76 [ 437.540035][ T7082] usb 4-1: USB disconnect, device number 75 [ 437.546587][ T7082] ch341 4-1:0.0: device disconnected [ 437.609606][ T5282] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 437.724855][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.805553][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.836701][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.847276][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.862967][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.894812][ T5282] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 437.904050][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.917827][ T5282] usb 3-1: config 0 descriptor?? [ 438.020206][ T7082] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 438.049886][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.128291][ T5271] usb 5-1: USB disconnect, device number 102 [ 438.189734][ T7082] usb 4-1: Using ep0 maxpacket: 32 [ 438.199369][ T7082] usb 4-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 438.219768][ T7082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.228460][ T7082] usb 4-1: Product: syz [ 438.228540][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.233504][ T7082] usb 4-1: Manufacturer: syz [ 438.256782][ T7082] usb 4-1: SerialNumber: syz [ 438.285028][ T7082] usb 4-1: config 0 descriptor?? [ 438.299324][ T7082] usb 4-1: bad CDC descriptors [ 438.305212][ T7082] cp210x 4-1:0.0: cp210x converter detected [ 438.330698][ T5282] uclogic 0003:5543:0003.0014: item fetching failed at offset 5/7 [ 438.343762][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.348422][ T5282] uclogic 0003:5543:0003.0014: parse failed [ 438.358549][ T5282] uclogic 0003:5543:0003.0014: probe with driver uclogic failed with error -22 [ 438.360404][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.378372][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.421041][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.428970][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 438.443127][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.460114][ T146] bridge_slave_1: left allmulticast mode [ 438.465944][ T146] bridge_slave_1: left promiscuous mode [ 438.476228][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.490098][ T146] bridge_slave_0: left allmulticast mode [ 438.503821][ T146] bridge_slave_0: left promiscuous mode [ 438.511704][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.581493][ T5271] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 438.651924][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.665311][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.748105][ T5271] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 438.756825][ T5271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.779439][ T5271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.792338][ T5271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 438.803228][ T5271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.813272][ T5271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.824753][ T5271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 438.833450][ T5271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.842720][ T5271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.854069][ T5271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 438.862387][ T5271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.871611][ T5271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.883143][ T5271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 438.890783][ T5271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.902338][ T5271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.914053][ T5271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 438.923317][ T5271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.932514][ T5271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.943743][ T5271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 438.952951][ T5271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.962141][ T5271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.973220][ T5271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 438.982912][ T5271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.992237][ T5271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.003618][ T5271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 439.015231][ T5271] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 439.026439][ T5271] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 439.035976][ T5271] usb 5-1: Product: syz [ 439.040663][ T5271] usb 5-1: Manufacturer: syz [ 439.045330][ T5271] usb 5-1: SerialNumber: syz [ 439.070624][ T5271] usb 5-1: config 0 descriptor?? [ 439.088534][ T5271] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 439.154037][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.166649][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.180728][ T146] bond0 (unregistering): Released all slaves [ 439.321374][ T938] usb 5-1: USB disconnect, device number 103 [ 439.378371][ T938] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 439.390987][ T4621] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 439.607924][T10789] chnl_net:caif_netlink_parms(): no params data found [ 439.636153][T10786] delete_channel: no stack [ 439.714111][ T146] hsr_slave_0: left promiscuous mode [ 439.725167][ T146] hsr_slave_1: left promiscuous mode [ 439.733413][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.742540][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.751144][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.758772][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.780837][ T146] veth1_macvtap: left promiscuous mode [ 439.786455][ T146] veth0_macvtap: left promiscuous mode [ 439.792174][ T146] veth1_vlan: left promiscuous mode [ 439.797485][ T146] veth0_vlan: left promiscuous mode [ 439.911083][ T146] pimreg (unregistering): left allmulticast mode [ 440.270742][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.277192][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.459010][ T5271] usb 3-1: USB disconnect, device number 85 [ 440.502039][ T4621] Bluetooth: hci3: command tx timeout [ 440.635810][ T146] team0 (unregistering): Port device team_slave_1 removed [ 441.277850][ T7082] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 441.342351][ T7082] cp210x 4-1:0.0: querying part number failed [ 441.395171][ T7082] usb 4-1: cp210x converter now attached to ttyUSB0 [ 441.744618][ T7082] usb 4-1: USB disconnect, device number 76 [ 441.956188][ T146] team0 (unregistering): Port device team_slave_0 removed [ 457.559502][ C1] sched: DL replenish lagged too much [ 457.749614][ T4621] Bluetooth: hci3: command tx timeout [ 457.938194][ T7082] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 458.573498][ T7082] cp210x 4-1:0.0: device disconnected [ 459.780030][ T5237] Bluetooth: hci3: command tx timeout [ 460.850312][ T4621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.870678][ T4621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.882024][ T4621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.895489][ T4621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.919400][ T4621] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 460.926876][ T4621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.213430][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.227444][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.237196][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.249338][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.256452][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.265329][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.274679][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.284999][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.294379][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.302153][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 461.309503][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.316908][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.859744][ T5233] Bluetooth: hci3: command tx timeout [ 462.979830][ T5233] Bluetooth: hci2: command tx timeout [ 463.380136][ T5233] Bluetooth: hci1: command tx timeout [ 463.459932][ T5233] Bluetooth: hci0: command tx timeout [ 465.059836][ T5233] Bluetooth: hci2: command tx timeout [ 465.459730][ T5233] Bluetooth: hci1: command tx timeout [ 465.559634][ T5233] Bluetooth: hci0: command tx timeout [ 467.140615][ T5233] Bluetooth: hci2: command tx timeout [ 467.539787][ T5233] Bluetooth: hci1: command tx timeout [ 467.620230][ T5233] Bluetooth: hci0: command tx timeout [ 468.631117][T10789] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.646849][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.654884][T10789] bridge_slave_0: entered allmulticast mode [ 468.670635][T10789] bridge_slave_0: entered promiscuous mode [ 468.701172][T10789] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.708401][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.731528][T10789] bridge_slave_1: entered allmulticast mode [ 468.738643][T10789] bridge_slave_1: entered promiscuous mode [ 468.884320][T10789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.934748][T10789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.173104][T10789] team0: Port device team_slave_0 added [ 469.219870][ T5233] Bluetooth: hci2: command tx timeout [ 469.277145][T10789] team0: Port device team_slave_1 added [ 469.476570][T10789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.501361][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.578351][T10789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.619669][ T5233] Bluetooth: hci1: command tx timeout [ 469.700158][ T5233] Bluetooth: hci0: command tx timeout [ 469.762798][T10789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.796725][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.881396][T10789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.057396][T10836] chnl_net:caif_netlink_parms(): no params data found [ 470.244848][T10835] chnl_net:caif_netlink_parms(): no params data found [ 470.277221][T10789] hsr_slave_0: entered promiscuous mode [ 470.296797][T10789] hsr_slave_1: entered promiscuous mode [ 470.402041][T10832] chnl_net:caif_netlink_parms(): no params data found [ 470.804314][T10836] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.837505][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.856646][T10836] bridge_slave_0: entered allmulticast mode [ 470.875159][T10836] bridge_slave_0: entered promiscuous mode [ 470.915091][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.940034][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.947301][T10835] bridge_slave_0: entered allmulticast mode [ 470.990631][T10835] bridge_slave_0: entered promiscuous mode [ 471.073227][T10836] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.092460][T10836] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.129062][T10836] bridge_slave_1: entered allmulticast mode [ 471.160573][T10836] bridge_slave_1: entered promiscuous mode [ 471.168156][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.199311][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.208997][T10835] bridge_slave_1: entered allmulticast mode [ 471.240622][T10835] bridge_slave_1: entered promiscuous mode [ 471.282793][T10832] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.307259][T10832] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.346042][T10832] bridge_slave_0: entered allmulticast mode [ 471.364349][T10832] bridge_slave_0: entered promiscuous mode [ 471.551628][T10832] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.558829][T10832] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.620249][T10832] bridge_slave_1: entered allmulticast mode [ 471.651939][T10832] bridge_slave_1: entered promiscuous mode [ 471.754332][T10836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.796550][T10836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.822527][T10835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.946042][T10832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.069241][T10835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.111306][T10832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.229593][T10836] team0: Port device team_slave_0 added [ 484.131532][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.155936][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.169775][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.182697][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.190581][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 484.197919][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.259929][ T5233] Bluetooth: hci4: command tx timeout [ 488.339894][ T5233] Bluetooth: hci4: command tx timeout [ 490.419651][ T5233] Bluetooth: hci4: command tx timeout [ 492.507519][ T5233] Bluetooth: hci4: command tx timeout [ 495.984219][T10836] team0: Port device team_slave_1 added [ 496.078494][T10835] team0: Port device team_slave_0 added [ 496.092056][T10835] team0: Port device team_slave_1 added [ 499.172080][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.188525][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.199125][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.208802][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 499.217833][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 499.226708][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 500.477347][T10832] team0: Port device team_slave_0 added [ 501.302991][ T54] Bluetooth: hci5: command tx timeout [ 501.790127][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.796462][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.379808][ T54] Bluetooth: hci5: command tx timeout [ 505.460812][ T54] Bluetooth: hci5: command tx timeout [ 507.539612][ T54] Bluetooth: hci5: command tx timeout [ 521.649933][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 521.661772][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 521.670567][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 521.680408][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 521.700601][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 521.707969][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 521.918297][ T5233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 521.928525][ T5233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 521.938358][ T5233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 521.946907][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 521.955489][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 521.963395][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 522.118334][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 522.132659][ T5233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 522.140833][ T5233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 522.154031][ T5233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 522.162923][ T5233] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 522.172988][ T5233] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 523.780042][ T54] Bluetooth: hci6: command tx timeout [ 524.019935][ T54] Bluetooth: hci7: command tx timeout [ 524.259989][ T54] Bluetooth: hci8: command tx timeout [ 525.859775][ T54] Bluetooth: hci6: command tx timeout [ 526.099859][ T54] Bluetooth: hci7: command tx timeout [ 526.339972][ T54] Bluetooth: hci8: command tx timeout [ 527.939929][ T54] Bluetooth: hci6: command tx timeout [ 528.179845][ T54] Bluetooth: hci7: command tx timeout [ 528.419785][ T54] Bluetooth: hci8: command tx timeout [ 530.019838][ T54] Bluetooth: hci6: command tx timeout [ 530.259742][ T54] Bluetooth: hci7: command tx timeout [ 530.499954][ T54] Bluetooth: hci8: command tx timeout [ 545.975440][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 545.989675][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 545.997997][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 546.006161][ T5233] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 546.014776][ T5233] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 546.022418][ T5233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 548.099909][ T5233] Bluetooth: hci9: command tx timeout [ 550.179677][ T5233] Bluetooth: hci9: command tx timeout [ 552.259832][ T5233] Bluetooth: hci9: command tx timeout [ 554.339751][ T5233] Bluetooth: hci9: command tx timeout [ 560.917435][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 560.927885][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 560.939643][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 560.948374][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 560.959982][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 560.969886][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 563.059688][ T54] Bluetooth: hci10: command tx timeout [ 563.145308][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.151694][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.139965][ T5233] Bluetooth: hci10: command tx timeout [ 565.226753][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 567.219755][ T54] Bluetooth: hci10: command tx timeout [ 569.299876][ T54] Bluetooth: hci10: command tx timeout [ 582.620604][ T4621] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 582.631520][ T4621] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 582.639639][ T4621] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 582.649937][ T4621] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 582.657628][ T4621] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 582.666013][ T4621] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 582.680324][ T4621] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 582.690790][ T4621] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 582.698233][ T4621] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 582.708107][ T4621] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 582.719934][ T4621] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 582.727687][ T4621] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 582.875313][ T5233] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 582.890696][ T5233] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 582.899361][ T5233] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 582.908120][ T5233] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 582.915978][ T5233] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 582.930800][ T5233] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 584.839615][T10954] Bluetooth: hci11: command tx timeout [ 584.846324][T10954] Bluetooth: hci12: command tx timeout [ 584.979652][T10955] Bluetooth: hci13: command tx timeout [ 585.739635][T10955] Bluetooth: hci1: command 0x0406 tx timeout [ 585.746312][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 585.769582][ T5237] Bluetooth: hci0: command 0x0406 tx timeout [ 586.899804][ T54] Bluetooth: hci11: command tx timeout [ 586.906792][ T5233] Bluetooth: hci12: command tx timeout [ 587.059626][ T5233] Bluetooth: hci13: command tx timeout [ 588.979730][ T5233] Bluetooth: hci12: command tx timeout [ 588.985450][ T54] Bluetooth: hci11: command tx timeout [ 589.139982][ T54] Bluetooth: hci13: command tx timeout [ 591.059708][ T54] Bluetooth: hci11: command tx timeout [ 591.065259][ T54] Bluetooth: hci12: command tx timeout [ 591.219818][ T54] Bluetooth: hci13: command tx timeout [ 607.664306][ T5233] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 607.686875][ T5233] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 607.695630][ T5233] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 607.704206][ T5233] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 607.712003][ T5233] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 607.733579][ T5233] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 609.779802][ T54] Bluetooth: hci14: command tx timeout [ 611.306745][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 611.859722][ T5233] Bluetooth: hci14: command tx timeout [ 613.939639][ T5233] Bluetooth: hci14: command tx timeout [ 616.019792][ T5233] Bluetooth: hci14: command tx timeout [ 621.174867][T10956] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 621.185722][T10956] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 621.194050][T10956] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 621.202289][T10956] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 621.222734][T10956] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 621.230369][T10956] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 621.546360][T10956] Bluetooth: hci5: command 0x0406 tx timeout [ 623.299671][ T54] Bluetooth: hci15: command tx timeout [ 624.588002][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.609530][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.379777][ T54] Bluetooth: hci15: command tx timeout [ 627.459635][ T54] Bluetooth: hci15: command tx timeout [ 629.539618][ T54] Bluetooth: hci15: command tx timeout [ 643.707523][T10956] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 643.723298][T10956] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 643.731837][T10956] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 643.740210][T10956] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 643.747918][T10956] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 643.755447][T10956] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 643.780018][ T30] INFO: task kworker/u8:5:146 blocked for more than 143 seconds. [ 643.787791][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 643.904522][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.925614][ T54] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 643.947938][ T54] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 643.956956][ T54] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 643.968126][ T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 643.975998][ T54] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 643.986081][ T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 644.076221][ T30] task:kworker/u8:5 state:D stack:20024 pid:146 tgid:146 ppid:2 flags:0x00004000 [ 644.130194][ T30] Workqueue: netns cleanup_net [ 644.135042][ T30] Call Trace: [ 644.138339][ T30] [ 644.177970][ T30] __schedule+0x1895/0x4b30 [ 644.199775][ T30] ? __pfx___schedule+0x10/0x10 [ 644.204707][ T30] ? __pfx_lock_release+0x10/0x10 [ 644.249718][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 644.255327][ T30] ? kthread_data+0x52/0xd0 [ 644.295720][ T30] ? schedule+0x90/0x320 [ 644.316517][ T30] ? wq_worker_sleeping+0x66/0x240 [ 644.339522][ T30] ? schedule+0x90/0x320 [ 644.343835][ T30] schedule+0x14b/0x320 [ 644.348023][ T30] schedule_preempt_disabled+0x13/0x30 [ 644.405348][ T30] __mutex_lock+0x6a7/0xd70 [ 644.419896][ T30] ? __mutex_lock+0x52a/0xd70 [ 644.424637][ T30] ? gate_exit_net+0x30/0x100 [ 644.429352][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 644.465983][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 644.488554][ T30] gate_exit_net+0x30/0x100 [ 644.503650][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 644.508825][ T30] cleanup_net+0x89d/0xcc0 [ 644.538689][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 644.557590][ T30] ? process_scheduled_works+0x976/0x1850 [ 644.570983][ T30] process_scheduled_works+0xa63/0x1850 [ 644.576620][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 644.593101][ T30] ? assign_work+0x364/0x3d0 [ 644.597752][ T30] worker_thread+0x870/0xd30 [ 644.609576][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 644.615535][ T30] ? __kthread_parkme+0x169/0x1d0 [ 644.629510][ T30] ? __pfx_worker_thread+0x10/0x10 [ 644.634678][ T30] kthread+0x2f0/0x390 [ 644.643084][ T30] ? __pfx_worker_thread+0x10/0x10 [ 644.648242][ T30] ? __pfx_kthread+0x10/0x10 [ 644.658837][ T30] ret_from_fork+0x4b/0x80 [ 644.679689][ T30] ? __pfx_kthread+0x10/0x10 [ 644.684333][ T30] ret_from_fork_asm+0x1a/0x30 [ 644.689138][ T30] [ 644.712574][ T30] INFO: task dhcpcd:4898 blocked for more than 144 seconds. [ 644.729506][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 644.737194][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 644.762359][ T30] task:dhcpcd state:D stack:20352 pid:4898 tgid:4898 ppid:4897 flags:0x00000002 [ 644.781009][ T30] Call Trace: [ 644.784333][ T30] [ 644.787283][ T30] __schedule+0x1895/0x4b30 [ 644.799553][ T30] ? __pfx___schedule+0x10/0x10 [ 644.804465][ T30] ? __pfx_lock_release+0x10/0x10 [ 644.820485][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 644.826005][ T30] ? schedule+0x90/0x320 [ 644.847755][ T30] schedule+0x14b/0x320 [ 644.852150][ T30] schedule_preempt_disabled+0x13/0x30 [ 644.857644][ T30] __mutex_lock+0x6a7/0xd70 [ 644.874743][ T30] ? __mutex_lock+0x52a/0xd70 [ 644.883140][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 644.888047][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 644.899111][ T30] ? apparmor_capable+0x13b/0x1b0 [ 644.913346][ T30] ? bpf_lsm_capable+0x9/0x10 [ 644.918089][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 644.929012][ T30] ? get_user_ifreq+0x1bb/0x200 [ 644.938500][ T30] inet_ioctl+0x3d7/0x4f0 [ 644.948736][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 644.959074][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 644.969787][ T30] sock_do_ioctl+0x158/0x460 [ 644.974439][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 644.996717][ T30] ? __pfx_lock_release+0x10/0x10 [ 645.003410][ T30] sock_ioctl+0x626/0x8e0 [ 645.007797][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 645.021909][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 645.027950][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 645.042505][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 645.047424][ T30] __se_sys_ioctl+0xf9/0x170 [ 645.082241][ T30] do_syscall_64+0xf3/0x230 [ 645.086818][ T30] ? clear_bhb_loop+0x35/0x90 [ 645.103089][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.111638][ T30] RIP: 0033:0x7fc5ecf17d49 [ 645.116096][ T30] RSP: 002b:00007ffcae28cfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.129502][ T30] RAX: ffffffffffffffda RBX: 00007fc5ece496c0 RCX: 00007fc5ecf17d49 [ 645.149208][ T30] RDX: 00007ffcae29d198 RSI: 0000000000008914 RDI: 000000000000000e [ 645.167393][ T30] RBP: 00007ffcae2ad358 R08: 00007ffcae29d158 R09: 00007ffcae29d108 [ 645.176878][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.194450][ T30] R13: 00007ffcae29d198 R14: 0000000000000028 R15: 0000000000008914 [ 645.208704][ T30] [ 645.215258][ T30] INFO: task kworker/1:5:5286 blocked for more than 144 seconds. [ 645.230451][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 645.239051][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 645.256161][ T30] task:kworker/1:5 state:D stack:19920 pid:5286 tgid:5286 ppid:2 flags:0x00004000 [ 645.278620][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 645.288271][ T30] Call Trace: [ 645.298545][ T30] [ 645.302035][ T30] __schedule+0x1895/0x4b30 [ 645.306679][ T30] ? try_to_wake_up+0x971/0x1480 [ 645.319598][ T30] ? schedule+0x90/0x320 [ 645.323906][ T30] ? __pfx___schedule+0x10/0x10 [ 645.328787][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 645.346324][ T30] ? __pfx_lock_release+0x10/0x10 [ 645.361492][ T30] ? kick_pool+0x45c/0x620 [ 645.366357][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 645.380263][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 645.385518][ T30] ? schedule+0x90/0x320 [ 645.399337][ T30] schedule+0x14b/0x320 [ 645.403873][ T30] schedule_preempt_disabled+0x13/0x30 [ 645.409373][ T30] __mutex_lock+0x6a7/0xd70 [ 645.419510][ T30] ? __mutex_lock+0x52a/0xd70 [ 645.424230][ T30] ? reg_check_chans_work+0x99/0xfd0 [ 645.440111][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 645.446120][ T30] ? process_scheduled_works+0x976/0x1850 [ 645.459860][ T30] reg_check_chans_work+0x99/0xfd0 [ 645.465500][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 645.481181][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 645.487218][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 645.501808][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 645.508204][ T30] ? process_scheduled_works+0x976/0x1850 [ 645.519508][ T30] process_scheduled_works+0xa63/0x1850 [ 645.525216][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 645.540973][ T30] ? assign_work+0x364/0x3d0 [ 645.546522][ T30] worker_thread+0x870/0xd30 [ 645.560040][ T30] ? __kthread_parkme+0x169/0x1d0 [ 645.568061][ T30] ? __pfx_worker_thread+0x10/0x10 [ 645.579306][ T30] kthread+0x2f0/0x390 [ 645.588246][ T30] ? __pfx_worker_thread+0x10/0x10 [ 645.599292][ T30] ? __pfx_kthread+0x10/0x10 [ 645.607513][ T30] ret_from_fork+0x4b/0x80 [ 645.617764][ T30] ? __pfx_kthread+0x10/0x10 [ 645.626059][ T30] ret_from_fork_asm+0x1a/0x30 [ 645.638774][ T30] [ 645.642214][ T30] INFO: task kworker/u8:9:8119 blocked for more than 145 seconds. [ 645.659769][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 645.667437][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 645.687257][ T30] task:kworker/u8:9 state:D stack:23952 pid:8119 tgid:8119 ppid:2 flags:0x00004000 [ 645.700174][ T30] Workqueue: events_unbound linkwatch_event [ 645.706130][ T30] Call Trace: [ 645.709425][ T30] [ 645.729980][ T30] __schedule+0x1895/0x4b30 [ 645.734570][ T30] ? __pfx___schedule+0x10/0x10 [ 645.750402][ T30] ? __pfx_lock_release+0x10/0x10 [ 645.755498][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 645.769874][ T30] ? kthread_data+0x52/0xd0 [ 645.775255][ T30] ? schedule+0x90/0x320 [ 645.779877][ T4621] Bluetooth: hci16: command tx timeout [ 645.799735][ T30] ? wq_worker_sleeping+0x66/0x240 [ 645.804911][ T30] ? schedule+0x90/0x320 [ 645.809185][ T30] schedule+0x14b/0x320 [ 645.822856][ T30] schedule_preempt_disabled+0x13/0x30 [ 645.828380][ T30] __mutex_lock+0x6a7/0xd70 [ 645.840677][ T30] ? __mutex_lock+0x52a/0xd70 [ 645.845415][ T30] ? linkwatch_event+0xe/0x60 [ 645.859641][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 645.864729][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 645.879516][ T30] ? process_scheduled_works+0x976/0x1850 [ 645.885326][ T30] linkwatch_event+0xe/0x60 [ 645.900511][ T30] process_scheduled_works+0xa63/0x1850 [ 645.906151][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 645.919539][ T30] ? assign_work+0x364/0x3d0 [ 645.924187][ T30] worker_thread+0x870/0xd30 [ 645.928816][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 645.944287][ T30] ? __kthread_parkme+0x169/0x1d0 [ 645.949371][ T30] ? __pfx_worker_thread+0x10/0x10 [ 645.961555][ T30] kthread+0x2f0/0x390 [ 645.965674][ T30] ? __pfx_worker_thread+0x10/0x10 [ 645.975826][ T30] ? __pfx_kthread+0x10/0x10 [ 645.985764][ T30] ret_from_fork+0x4b/0x80 [ 645.995000][ T30] ? __pfx_kthread+0x10/0x10 [ 646.005477][ T30] ret_from_fork_asm+0x1a/0x30 [ 646.014099][ T30] [ 646.017324][ T30] INFO: task syz-executor:10835 blocked for more than 145 seconds. [ 646.036977][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 646.047280][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.063839][ T30] task:syz-executor state:D stack:21728 pid:10835 tgid:10835 ppid:1 flags:0x00000004 [ 646.083861][ T30] Call Trace: [ 646.087191][ T30] [ 646.096527][ T30] __schedule+0x1895/0x4b30 [ 646.107759][ T30] ? __pfx___schedule+0x10/0x10 [ 646.117662][ T30] ? __pfx_lock_release+0x10/0x10 [ 646.127398][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 646.136754][ T30] ? schedule+0x90/0x320 [ 646.149083][ T30] schedule+0x14b/0x320 [ 646.154817][ T30] schedule_preempt_disabled+0x13/0x30 [ 646.169058][ T30] __mutex_lock+0x6a7/0xd70 [ 646.175094][ T30] ? __mutex_lock+0x52a/0xd70 [ 646.193566][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 646.198745][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 646.212020][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 646.217006][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 646.229348][ T30] ? __lock_acquire+0x1384/0x2050 [ 646.238183][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.249547][ T30] netlink_rcv_skb+0x1e3/0x430 [ 646.254369][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.269381][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.275108][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.291440][ T30] netlink_unicast+0x7f6/0x990 [ 646.296279][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 646.309845][ T30] ? __virt_addr_valid+0x183/0x530 [ 646.315011][ T30] ? __check_object_size+0x48e/0x900 [ 646.329547][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 646.334376][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.349544][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 646.354624][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.369219][ T30] __sock_sendmsg+0x221/0x270 [ 646.375776][ T30] __sys_sendto+0x39b/0x4f0 [ 646.389986][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 646.395080][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 646.409118][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 646.416923][ T30] __x64_sys_sendto+0xde/0x100 [ 646.430844][ T30] do_syscall_64+0xf3/0x230 [ 646.435392][ T30] ? clear_bhb_loop+0x35/0x90 [ 646.448751][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.455045][ T30] RIP: 0033:0x7fb39eb7fe8c [ 646.467190][ T30] RSP: 002b:00007fb39ee5f650 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 646.479546][ T30] RAX: ffffffffffffffda RBX: 00007fb39f864620 RCX: 00007fb39eb7fe8c [ 646.488050][ T30] RDX: 000000000000006c RSI: 00007fb39f864670 RDI: 0000000000000003 [ 646.507278][ T30] RBP: 0000000000000000 R08: 00007fb39ee5f6a4 R09: 000000000000000c [ 646.519710][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 646.527722][ T30] R13: 0000000000000000 R14: 00007fb39f864670 R15: 0000000000000000 [ 646.544080][ T30] [ 646.547215][ T30] INFO: task syz-executor:10836 blocked for more than 146 seconds. [ 646.560902][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 646.568564][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.585151][ T30] task:syz-executor state:D stack:21728 pid:10836 tgid:10836 ppid:1 flags:0x00000004 [ 646.608024][ T30] Call Trace: [ 646.613864][ T30] [ 646.616831][ T30] __schedule+0x1895/0x4b30 [ 646.628283][ T30] ? __pfx___schedule+0x10/0x10 [ 646.635790][ T30] ? __pfx_lock_release+0x10/0x10 [ 646.647703][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 646.657008][ T30] ? schedule+0x90/0x320 [ 646.669613][ T30] schedule+0x14b/0x320 [ 646.674380][ T30] schedule_preempt_disabled+0x13/0x30 [ 646.686948][ T30] __mutex_lock+0x6a7/0xd70 [ 646.694441][ T30] ? __mutex_lock+0x52a/0xd70 [ 646.699182][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 646.710032][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 646.715111][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 646.728944][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 646.734487][ T30] ? __lock_acquire+0x1384/0x2050 [ 646.749541][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.755075][ T30] netlink_rcv_skb+0x1e3/0x430 [ 646.769121][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.775910][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.789432][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.794730][ T30] netlink_unicast+0x7f6/0x990 [ 646.808888][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 646.814504][ T30] ? __virt_addr_valid+0x183/0x530 [ 646.837890][ T30] ? __check_object_size+0x48e/0x900 [ 646.845031][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 646.859011][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.864483][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 646.876794][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.885126][ T30] __sock_sendmsg+0x221/0x270 [ 646.898411][ T30] __sys_sendto+0x39b/0x4f0 [ 646.909788][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 646.914879][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 646.930133][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 646.936279][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 646.952034][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 646.958427][ T30] __x64_sys_sendto+0xde/0x100 [ 646.969532][ T30] do_syscall_64+0xf3/0x230 [ 646.974089][ T30] ? clear_bhb_loop+0x35/0x90 [ 646.989516][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.996815][ T30] RIP: 0033:0x7f625397fe8c [ 647.009363][ T30] RSP: 002b:00007f6253c5f650 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 647.020833][ T30] RAX: ffffffffffffffda RBX: 00007f6254664620 RCX: 00007f625397fe8c [ 647.028843][ T30] RDX: 000000000000006c RSI: 00007f6254664670 RDI: 0000000000000003 [ 647.044995][ T30] RBP: 0000000000000000 R08: 00007f6253c5f6a4 R09: 000000000000000c [ 647.056009][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 647.072877][ T30] R13: 0000000000000000 R14: 00007f6254664670 R15: 0000000000000000 [ 647.086628][ T30] [ 647.094506][ T30] INFO: task syz-executor:10916 blocked for more than 146 seconds. [ 647.109109][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 647.121564][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 647.137170][ T30] task:syz-executor state:D stack:26400 pid:10916 tgid:10916 ppid:1 flags:0x00004004 [ 647.153310][ T4621] Bluetooth: hci6: command 0x0406 tx timeout [ 647.159403][ T4621] Bluetooth: hci7: command 0x0406 tx timeout [ 647.165561][T10954] Bluetooth: hci8: command 0x0406 tx timeout [ 647.179914][ T30] Call Trace: [ 647.189650][ T30] [ 647.192627][ T30] __schedule+0x1895/0x4b30 [ 647.197183][ T30] ? __pfx___schedule+0x10/0x10 [ 647.211663][ T30] ? __pfx_lock_release+0x10/0x10 [ 647.216749][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 647.232887][ T30] ? schedule+0x90/0x320 [ 647.237187][ T30] schedule+0x14b/0x320 [ 647.246183][ T30] schedule_preempt_disabled+0x13/0x30 [ 647.256403][ T30] __mutex_lock+0x6a7/0xd70 [ 647.266955][ T30] ? __mutex_lock+0x52a/0xd70 [ 647.276307][ T30] ? register_nexthop_notifier+0x84/0x290 [ 647.284432][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 647.298061][ T30] ? __asan_memset+0x23/0x50 [ 647.304379][ T30] register_nexthop_notifier+0x84/0x290 [ 647.319507][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 647.325370][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 647.340099][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 647.346318][ T30] ? __asan_memset+0x23/0x50 [ 647.360532][ T30] ops_init+0x31e/0x590 [ 647.364749][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 647.379353][ T30] setup_net+0x287/0x9e0 [ 647.384069][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 647.399513][ T30] ? __pfx_setup_net+0x10/0x10 [ 647.404344][ T30] copy_net_ns+0x33f/0x570 [ 647.419608][ T30] create_new_namespaces+0x425/0x7b0 [ 647.424963][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 647.439511][ T30] ksys_unshare+0x57d/0xa70 [ 647.444077][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 647.449123][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 647.465399][ T30] ? do_syscall_64+0x100/0x230 [ 647.475217][ T30] __x64_sys_unshare+0x38/0x40 [ 647.484696][ T30] do_syscall_64+0xf3/0x230 [ 647.489238][ T30] ? clear_bhb_loop+0x35/0x90 [ 647.499504][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.505446][ T30] RIP: 0033:0x7f57f1b7f7f7 [ 647.521034][ T30] RSP: 002b:00007f57f1e5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 647.538789][ T30] RAX: ffffffffffffffda RBX: 00007f57f1bf1a85 RCX: 00007f57f1b7f7f7 [ 647.573741][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 647.589532][ T30] RBP: 0000000000000000 R08: 00007f57f2867d60 R09: 0000000000000000 [ 647.599130][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 647.612382][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 647.630590][ T30] [ 647.637802][ T30] [ 647.637802][ T30] Showing all locks held in the system: [ 647.670259][ T30] 3 locks held by kworker/u8:1/12: [ 647.675420][ T30] #0: ffff88814b9bb948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 647.696036][ T30] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 647.727275][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 647.744268][ T30] 1 lock held by khungtaskd/30: [ 647.749159][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 647.765229][ T30] 6 locks held by kworker/u9:0/54: [ 647.774020][ T30] #0: ffff888011ec0148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 647.789644][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 647.813068][ T30] #2: ffff888053670d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 647.829791][ T30] #3: ffff888053670078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 647.849994][ T30] #4: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 647.867947][T10956] Bluetooth: hci16: command tx timeout [ 647.879589][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 647.901646][ T30] 4 locks held by kworker/u8:5/146: [ 647.906885][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 647.929776][ T30] #1: ffffc90002da7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 647.952449][ T30] #2: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 647.970701][ T30] #3: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: gate_exit_net+0x30/0x100 [ 647.987914][ T30] 5 locks held by kworker/1:2/2635: [ 647.996429][ T30] 1 lock held by dhcpcd/4898: [ 648.003181][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 648.021229][ T30] 2 locks held by getty/4983: [ 648.025954][ T30] #0: ffff88803397a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 648.044196][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 648.060583][ T30] 5 locks held by kworker/u9:4/5233: [ 648.065914][ T30] #0: ffff88808a006948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 648.085549][ T30] #1: ffffc90003807d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 648.101747][ T30] #2: ffff888074f74d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 648.119761][ T30] #3: ffff888074f74078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 648.140444][ T30] #4: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 648.159787][ T30] 3 locks held by kworker/1:5/5286: [ 648.165019][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 648.187927][ T30] #1: ffffc90003ee7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 648.202374][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 648.220870][ T30] 3 locks held by kworker/u8:9/8119: [ 648.226859][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 648.246693][ T30] #1: ffffc900096cfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 648.259835][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 648.269142][ T30] 8 locks held by syz-executor/10789: [ 648.279707][ T30] #0: ffff88802dad4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 648.288667][ T30] #1: ffff88807341ac88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 648.306802][ T30] #2: ffff88814338c1e8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 648.321418][ T30] #3: ffffffff8f56fb28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 648.341838][ T30] #4: ffff88806835a0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 648.360580][ T30] #5: ffff888022287250 (&devlink->lock_key#38){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 648.379507][ T30] #6: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 648.388501][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 648.409755][ T30] 1 lock held by syz-executor/10832: [ 648.415993][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 648.435725][ T30] 1 lock held by syz-executor/10835: [ 648.444713][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 648.461215][ T30] 1 lock held by syz-executor/10836: [ 648.466531][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 648.479503][ T30] 2 locks held by syz-executor/10894: [ 648.484988][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.504544][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 648.520431][ T30] 2 locks held by syz-executor/10916: [ 648.525841][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.545462][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.558230][ T30] 2 locks held by syz-executor/10924: [ 648.569502][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.578977][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.600840][ T30] 2 locks held by syz-executor/10926: [ 648.606337][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.626173][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.647537][ T30] 2 locks held by syz-executor/10928: [ 648.655513][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.669759][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.690108][ T30] 2 locks held by syz-executor/10933: [ 648.695514][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.714175][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.736480][ T30] 2 locks held by syz-executor/10938: [ 648.743955][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.763430][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.779362][ T30] 2 locks held by syz-executor/10949: [ 648.789567][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.799045][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.818495][ T30] 2 locks held by syz-executor/10950: [ 648.830098][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.848253][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.869523][ T30] 2 locks held by syz-executor/10953: [ 648.874941][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.893708][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.919650][ T30] 2 locks held by syz-executor/10961: [ 648.930686][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.945463][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 648.962474][ T30] 2 locks held by syz-executor/10967: [ 648.967884][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 648.986273][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 649.005283][ T30] 2 locks held by syz-executor/10973: [ 649.014140][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 649.029507][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 649.054035][ T30] [ 649.056401][ T30] ============================================= [ 649.056401][ T30] [ 649.076073][ T30] NMI backtrace for cpu 0 [ 649.080450][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 649.090968][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 649.101046][ T30] Call Trace: [ 649.104339][ T30] [ 649.107283][ T30] dump_stack_lvl+0x241/0x360 [ 649.112069][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.117286][ T30] ? __pfx__printk+0x10/0x10 [ 649.121994][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 649.126955][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 649.132436][ T30] ? _printk+0xd5/0x120 [ 649.136699][ T30] ? __pfx__printk+0x10/0x10 [ 649.141312][ T30] ? __wake_up_klogd+0xcc/0x110 [ 649.146185][ T30] ? __pfx__printk+0x10/0x10 [ 649.150805][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 649.155854][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 649.161863][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 649.167867][ T30] watchdog+0xff4/0x1040 [ 649.172140][ T30] ? watchdog+0x1ea/0x1040 [ 649.176581][ T30] ? __pfx_watchdog+0x10/0x10 [ 649.181280][ T30] kthread+0x2f0/0x390 [ 649.185367][ T30] ? __pfx_watchdog+0x10/0x10 [ 649.190067][ T30] ? __pfx_kthread+0x10/0x10 [ 649.194676][ T30] ret_from_fork+0x4b/0x80 [ 649.199221][ T30] ? __pfx_kthread+0x10/0x10 [ 649.204003][ T30] ret_from_fork_asm+0x1a/0x30 [ 649.208797][ T30] [ 649.212636][ T30] Sending NMI from CPU 0 to CPUs 1: [ 649.217876][ C1] NMI backtrace for cpu 1 [ 649.217890][ C1] CPU: 1 UID: 0 PID: 2635 Comm: kworker/1:2 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 649.217911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 649.217922][ C1] Workqueue: events nsim_dev_trap_report_work [ 649.217946][ C1] RIP: 0010:match_held_lock+0x0/0xb0 [ 649.217970][ C1] Code: 48 83 c4 10 5b 41 5e 41 5f c3 cc cc cc cc e8 07 f9 ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 53 bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 20 [ 649.217985][ C1] RSP: 0000:ffffc90000a17630 EFLAGS: 00000083 [ 649.218016][ C1] RAX: 0000000000000007 RBX: ffff88802e2ba980 RCX: 0000000080000102 [ 649.218029][ C1] RDX: ffff88802e2b9e00 RSI: ffffffff8e937de0 RDI: ffff88802e2ba980 [ 649.218042][ C1] RBP: 0000000000000004 R08: ffffffff898f9e64 R09: 1ffffffff2858b00 [ 649.218054][ C1] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: 0000000000000246 [ 649.218066][ C1] R13: ffff88802e2b9e00 R14: 00000000ffffffff R15: ffffffff8e937de0 [ 649.218080][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 649.218095][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.218107][ C1] CR2: 00007f6cbe85fcb8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 649.218122][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 649.218133][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 649.218149][ C1] Call Trace: [ 649.218156][ C1] [ 649.218163][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 649.218182][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 649.218204][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 649.218228][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 649.218247][ C1] ? nmi_handle+0x14f/0x5a0 [ 649.218263][ C1] ? nmi_handle+0x2a/0x5a0 [ 649.218280][ C1] ? __pfx_match_held_lock+0x10/0x10 [ 649.218300][ C1] ? default_do_nmi+0x63/0x160 [ 649.218317][ C1] ? exc_nmi+0x123/0x1f0 [ 649.218335][ C1] ? end_repeat_nmi+0xf/0x53 [ 649.218352][ C1] ? __skb_flow_dissect+0x634/0x7d00 [ 649.218370][ C1] ? __pfx_match_held_lock+0x10/0x10 [ 649.218390][ C1] ? __pfx_match_held_lock+0x10/0x10 [ 649.218410][ C1] ? __pfx_match_held_lock+0x10/0x10 [ 649.218431][ C1] [ 649.218437][ C1] [ 649.218443][ C1] lock_is_held_type+0xa9/0x190 [ 649.218464][ C1] ? __skb_flow_dissect+0x4f1/0x7d00 [ 649.218480][ C1] __skb_flow_dissect+0x63d/0x7d00 [ 649.218502][ C1] ? __pfx_validate_chain+0x10/0x10 [ 649.218524][ C1] ? __pfx___skb_flow_dissect+0x10/0x10 [ 649.218544][ C1] ? mark_lock+0x9a/0x360 [ 649.218562][ C1] ? mark_lock+0x9a/0x360 [ 649.218577][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.218599][ C1] ? __lock_acquire+0x1384/0x2050 [ 649.218624][ C1] ? mark_lock+0x9a/0x360 [ 649.218640][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.218662][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.218685][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 649.218704][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 649.218724][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 649.218744][ C1] ? rt_set_nexthop+0x664/0xa50 [ 649.218765][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 649.218785][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.218805][ C1] ? ip_route_output_key_hash_rcu+0x17d2/0x2390 [ 649.218831][ C1] __xfrm_decode_session+0xc2/0xf70 [ 649.218853][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 649.218875][ C1] ? __pfx___xfrm_decode_session+0x10/0x10 [ 649.218895][ C1] ? kthread+0x2f0/0x390 [ 649.218914][ C1] ? ip_route_output_flow+0xd8/0x140 [ 649.218933][ C1] ip_route_me_harder+0xa5c/0x1300 [ 649.218956][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 649.218975][ C1] ? trace_kmalloc+0x1f/0xd0 [ 649.218993][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 649.219021][ C1] synproxy_send_tcp+0x356/0x6c0 [ 649.219043][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 649.219067][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 649.219088][ C1] ? synproxy_pernet+0x45/0x270 [ 649.219109][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 649.219131][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 649.219156][ C1] ? sched_clock_cpu+0x76/0x490 [ 649.219175][ C1] ? nf_ip_checksum+0x13a/0x500 [ 649.219198][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 649.219220][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 649.219242][ C1] ? __pfx_validate_chain+0x10/0x10 [ 649.219263][ C1] nft_do_chain+0x4ad/0x1da0 [ 649.219288][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 649.219308][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 649.219336][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 649.219354][ C1] nft_do_chain_inet+0x418/0x6b0 [ 649.219375][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 649.219394][ C1] ? ipt_do_table+0x312/0x1860 [ 649.219419][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 649.219438][ C1] nf_hook_slow+0xc3/0x220 [ 649.219460][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 649.219477][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 649.219493][ C1] NF_HOOK+0x29e/0x450 [ 649.219509][ C1] ? NF_HOOK+0x9a/0x450 [ 649.219523][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 649.219539][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 649.219557][ C1] ? ip_rcv_finish+0x406/0x560 [ 649.219574][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 649.219590][ C1] NF_HOOK+0x3a4/0x450 [ 649.219604][ C1] ? __lock_acquire+0x1384/0x2050 [ 649.219625][ C1] ? NF_HOOK+0x9a/0x450 [ 649.219640][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 649.219657][ C1] ? ip_rcv_core+0x801/0xd10 [ 649.219675][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 649.219696][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 649.219713][ C1] __netif_receive_skb+0x2bf/0x650 [ 649.219734][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 649.219757][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 649.219775][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.219796][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.219817][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 649.219841][ C1] process_backlog+0x662/0x15b0 [ 649.219862][ C1] ? process_backlog+0x33b/0x15b0 [ 649.219883][ C1] ? __pfx_process_backlog+0x10/0x10 [ 649.219901][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.219923][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.219944][ C1] __napi_poll+0xcb/0x490 [ 649.219963][ C1] net_rx_action+0x89b/0x1240 [ 649.219989][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 649.220009][ C1] ? sched_clock+0x4a/0x70 [ 649.220033][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.220057][ C1] handle_softirqs+0x2c5/0x980 [ 649.220077][ C1] ? do_softirq+0x11b/0x1e0 [ 649.220097][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 649.220119][ C1] do_softirq+0x11b/0x1e0 [ 649.220137][ C1] [ 649.220148][ C1] [ 649.220154][ C1] ? __pfx_do_softirq+0x10/0x10 [ 649.220173][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 649.220195][ C1] ? rcu_is_watching+0x15/0xb0 [ 649.220213][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 649.220232][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 649.220251][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 649.220270][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 649.220290][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 649.220308][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 649.220331][ C1] ? process_scheduled_works+0x976/0x1850 [ 649.220352][ C1] process_scheduled_works+0xa63/0x1850 [ 649.220380][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 649.220403][ C1] ? assign_work+0x364/0x3d0 [ 649.220423][ C1] worker_thread+0x870/0xd30 [ 649.220445][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 649.220466][ C1] ? __kthread_parkme+0x169/0x1d0 [ 649.220488][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.220507][ C1] kthread+0x2f0/0x390 [ 649.220522][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.220541][ C1] ? __pfx_kthread+0x10/0x10 [ 649.220557][ C1] ret_from_fork+0x4b/0x80 [ 649.220577][ C1] ? __pfx_kthread+0x10/0x10 [ 649.220592][ C1] ret_from_fork_asm+0x1a/0x30 [ 649.220617][ C1] [ 650.020629][ T5233] Bluetooth: hci16: command tx timeout [ 650.078121][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 650.085019][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 650.095626][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 650.105714][ T30] Call Trace: [ 650.109013][ T30] [ 650.111958][ T30] dump_stack_lvl+0x241/0x360 [ 650.116656][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.121873][ T30] ? __pfx__printk+0x10/0x10 [ 650.126482][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 650.132490][ T30] ? vscnprintf+0x5d/0x90 [ 650.136841][ T30] panic+0x349/0x880 [ 650.140758][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 650.146933][ T30] ? __pfx_panic+0x10/0x10 [ 650.151367][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 650.156757][ T30] ? __irq_work_queue_local+0x137/0x410 [ 650.162334][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 650.167725][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 650.173898][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 650.180072][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 650.186253][ T30] watchdog+0x1033/0x1040 [ 650.190608][ T30] ? watchdog+0x1ea/0x1040 [ 650.195046][ T30] ? __pfx_watchdog+0x10/0x10 [ 650.199744][ T30] kthread+0x2f0/0x390 [ 650.203828][ T30] ? __pfx_watchdog+0x10/0x10 [ 650.208521][ T30] ? __pfx_kthread+0x10/0x10 [ 650.213124][ T30] ret_from_fork+0x4b/0x80 [ 650.217735][ T30] ? __pfx_kthread+0x10/0x10 [ 650.222341][ T30] ret_from_fork_asm+0x1a/0x30 [ 650.227138][ T30] [ 650.230445][ T30] Kernel Offset: disabled [ 650.234766][ T30] Rebooting in 86400 seconds..