last executing test programs: 20m52.52549606s ago: executing program 0 (id=129): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r2, 0x0, &(0x7f0000045000/0x4000)=nil, 0x4000, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xf3}) 20m52.316544463s ago: executing program 0 (id=131): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$BLKTRACESETUP(r1, 0xc0401273, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x83d, 0x200}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000048cc96c419506a1fa3b5"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/wakeup_count', 0x80142, 0x20) write$cgroup_int(r4, &(0x7f0000000000)=0x3, 0x12) 20m50.41397737s ago: executing program 0 (id=132): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010008800000000002000100000000000000070c0000ffff05000500000000000a004e23000000fffe800000000000000000"], 0x98}, 0x1, 0x7}, 0x0) 20m50.17268642s ago: executing program 0 (id=135): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000380)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 20m49.938515558s ago: executing program 2 (id=136): r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) close_range(r0, 0xffffffffffffffff, 0x0) 20m49.644421143s ago: executing program 2 (id=137): write$nci(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb0300ed030109021b000100000000090400000198dc4a000905", @ANYRES32], 0x0) 20m48.617518709s ago: executing program 1 (id=140): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd) 20m47.31278271s ago: executing program 2 (id=141): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, r0, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000240)}, 0x20) 20m47.178232311s ago: executing program 1 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) socket$kcm(0x2b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000c579e42bd7"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440), 0xc) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0xd) accept4(r3, 0x0, 0x0, 0x80800) 20m47.022590684s ago: executing program 2 (id=145): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010008800000000002000100000000000000070c0000ffff05000500000000000a004e23000000fffe800000000000000000"], 0x98}, 0x1, 0x7}, 0x0) 20m44.072883328s ago: executing program 0 (id=147): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x800004) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3f, 0xb, 0x0, 0x0, {0x3}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}]}, 0x2c}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$FIONREAD(r6, 0x40082104, 0x0) 20m44.07002594s ago: executing program 2 (id=148): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 20m43.812663667s ago: executing program 1 (id=150): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300", @ANYRES8], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 20m43.514103708s ago: executing program 1 (id=151): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r2, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) 20m43.416329913s ago: executing program 0 (id=152): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x19}, &(0x7f0000000280)=""/215, 0xd7, &(0x7f00000001c0)=""/26, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58) r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x8000000000000001, &(0x7f0000000480)=""/211) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r2) 20m43.27975233s ago: executing program 2 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c9b41, 0x8) setfsuid(0xee00) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) fstat(r2, &(0x7f0000000340)) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x100, "9a9c01d78e8a02e5ebf73d3a7cf26c7ed280337eedc1e26eff5b96f8a8a5db4d", 0xffff, 0x8, 0xfffffffffffff840, 0x0, 0x4, 0x8, 0xa6, 0x7ff, [0xd2e4, 0x1, 0x4, 0x4]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x1e8, 0x98, 0x0, 0x1e8, 0x150, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xd14bdc4, {0x8}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x70}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xff, 0x0, 'syzkaller0\x00', 'geneve1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) ioctl$SIOCSIFHWADDR(r1, 0x8947, &(0x7f00000002c0)={'vlan0\x00', @local}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 20m43.26915671s ago: executing program 1 (id=154): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$BLKTRACESETUP(r1, 0xc0401273, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x83d, 0x200}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000048cc96c419506a1fa3b5"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/wakeup_count', 0x80142, 0x20) write$cgroup_int(r4, &(0x7f0000000000)=0x3, 0x12) 20m43.106825923s ago: executing program 1 (id=155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f00000005c0), 0x0) read$snapshot(r4, 0x0, 0xffffffbf) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r6, r6, 0x0, 0x4800000009) 20m29.604896927s ago: executing program 32 (id=146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x84000000, 0x7, 0x4d, 0x80000000, 0x1ff, 0x8, 0x9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[], 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 20m28.065958909s ago: executing program 33 (id=152): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x19}, &(0x7f0000000280)=""/215, 0xd7, &(0x7f00000001c0)=""/26, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58) r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x8000000000000001, &(0x7f0000000480)=""/211) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r2) 20m27.889809898s ago: executing program 34 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c9b41, 0x8) setfsuid(0xee00) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) fstat(r2, &(0x7f0000000340)) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x100, "9a9c01d78e8a02e5ebf73d3a7cf26c7ed280337eedc1e26eff5b96f8a8a5db4d", 0xffff, 0x8, 0xfffffffffffff840, 0x0, 0x4, 0x8, 0xa6, 0x7ff, [0xd2e4, 0x1, 0x4, 0x4]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x1e8, 0x98, 0x0, 0x1e8, 0x150, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xd14bdc4, {0x8}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x70}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xff, 0x0, 'syzkaller0\x00', 'geneve1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) ioctl$SIOCSIFHWADDR(r1, 0x8947, &(0x7f00000002c0)={'vlan0\x00', @local}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 20m27.068091827s ago: executing program 35 (id=155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f00000005c0), 0x0) read$snapshot(r4, 0x0, 0xffffffbf) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r6, r6, 0x0, 0x4800000009) 19m26.555048509s ago: executing program 8 (id=259): socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_io_uring_setup(0x10ab, &(0x7f0000000200)={0x0, 0x2007099, 0x0, 0x1, 0x411001f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x351a, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea", 0x81) 19m25.171578167s ago: executing program 8 (id=263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f00000005c0), 0x0) read$snapshot(r4, 0x0, 0xffffffbf) read$FUSE(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r5, r5, 0x0, 0x4800000009) 19m21.93023868s ago: executing program 8 (id=265): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x800004) 19m21.515743245s ago: executing program 8 (id=268): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000080)={0x8}) 19m20.748091658s ago: executing program 8 (id=272): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 19m17.305268629s ago: executing program 8 (id=280): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x3f}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 19m2.125762279s ago: executing program 36 (id=280): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x3f}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 16m24.265483021s ago: executing program 9 (id=840): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r4, 0x4b4d, 0x0) r5 = openat$vimc0(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000001a80)={0x980928, 0x110, "24fda14159736271bafb743f2b1079afa7b627a26ba7d770a9caef734c515259", 0x8, 0xe118, 0x0, 0x8000, 0xd, 0x3, 0x1857, 0xfffff49b, [0x100, 0x5, 0x7, 0x5]}) 16m21.84281718s ago: executing program 9 (id=845): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e", 0x4c}, {&(0x7f0000001400)="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", 0xf07}], 0x2}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m21.414391629s ago: executing program 9 (id=847): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) socket$kcm(0x2b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000c579e42bd7"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0xd) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) 16m9.424690925s ago: executing program 9 (id=877): ioprio_get$pid(0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2fad8, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e6", 0xb2}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000b40)=""/84, 0x54}], 0x2}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000280)={0x7fff, 0x5}) 16m8.166820988s ago: executing program 9 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x810) 16m5.241050838s ago: executing program 9 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) socket$kcm(0x2b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000c579e42bd7"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0xd) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) 15m49.213492349s ago: executing program 37 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) socket$kcm(0x2b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000c579e42bd7"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0xd) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) 2m35.649926625s ago: executing program 6 (id=3849): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) write$nci(r0, &(0x7f0000000dc0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x6, {0x0, 0xf01, "4689952e91dd9e174e03bee5f7f728c3ca2f86f1ff945eeb455c0885544e94280cea8e48355c15ff7d9a0321e2050242b68c8fe1207c2713ebd3f621854847d6080da7e8a7bffb64b9976a1020ce81e8cf334deb912d8892af698d191ff1f82bea2160c4e92e9d4f4c3360d7b873cd2361b7b0984b92ec50cb97d7562817cf57cd4723dc6723c6bbe8897da4a9d7f3987f06340bcfce49b5ddff335a13191cb3148cedef0d9da1585dc4e212e6f9d23f7f8cd9afaad60c5f09fba5a5481dc197797f4a9d043a139b86d143c4f6cde0f75b9f8855ae75d8444a7e4f4a2a33535967ca05d159600e687b9c51df1dee69ecce90be06f99a922c4e9c938c195627fd1243284fb492025fd438b9803be15fdbe683e3682e5262471df21797b3bda9669f4969ff39624d8756cdde7271c83ffa1d3d81af9440cdf04be4ad6dc02b0a71c8645e8950ecd37a9d51c45ceacd2e198b918ede395d956358d59ea2711da35ca98a559096422451a4b32a6a58d374b83bee85a96f1ea2c45a548addec1728c83af47f73a684951adb4e43be07b450737db4ded7d6df0adce9c28e7ccc314023b125f21a1da2a7897cf6da5aaf1b990bd533bde84c65a8895433ebfe2c78110b8fe208fc9d4eafd0f6e30ce88126823b87c840137206136a6ea4ebd7d15523e28044e9477ccb05c091ffdc0e92bb74d2eeebe7479b304c153e932bb84792f44bf438d22f46277f6d706e47002bd8a7dcb78861456b59c3ac0d5a1396ae74d1c0edcf0a900cdf4b31e6575f9aa0fdea16180143f0f3fbb09c9bb74132baf8c3a3528d466bcfe0c618e477a9688bcf1d2496a9ff450a81fe9eabb5b025237e0374a321c01fbcd875e46617ba969999e06e8b2f7b5524f42e6aadac397fb8edfb81a3ca36bb05851e205e5d756ce3ee59df54cad6a0f0ce9881eed270c8074f8a5980249c8596d143c47454d3af4a4d190f57fe108348a53556f20a10fa4ba847842c36f8a616e9b5f4bdb50ba371f99c73c2407b548e899e7b67cd393500507d4f83aba4a83638c1fbf4ec4994afc5eea3e8b54fb815c581e2bfc559ef28ae6e895edbdaf5e53c89a9da20a511b11ad274d7cde77d06528688681613901eec70215b0125667f7ef5497e501f09648f6c2d5f7524b805e42495af35a18acef35751e11dd29d5002642c39ed975f2023e4913311943f05610d14b47704c2bfb2cd3067bef8b3d80de0d2d66435ec078259eaf8868aef721e2092d77eaf6d5343007fb8f52fb5b7727c84378c1faa47f8e718bf2479cbfbd37569040ccb3698ee5f2143b253268cc34835d2b32e5a96356916eb0e03d6e22c359b9912f644cceeaac29aad8ea6c66cf6d90a1d7468cdc0618272b2df67c5b9ae0f484793f7ba9ac1d76742b422d924a479caab8b40e951c3fa0361837a874115abbd836815c5efe99fc9dacf6c5abd4efed89a1f090ac2ba44bc1bc4275a8dc6ddddc51ed28ac3256157dfc985cbb6237c6c75ff95b6a027f8e99c15986d93e963ed6a28f15f8871ed7149bda1840aa4b6948b43344643c5453cc8656dce9c18a2c065a6def2156ed9ca0640da6785ce7e82fc782f9b678e84b9c903630c9bbaee2de9fbe461d84246ba021696cebd4f06ea37194f6b3e5a1881fbe522b1680e173b79bed9a30a9c3aa6059048acc1ec59e1ae755605b512f6ca42f85ea88a62f4eb83d852d899aa0c37ab2ebfaf57119cb354a890dead5c35f21602b39bf4d6a486439c2d56c941044ca96de5ece4da0d6cbeb476e5137915a13ee3a4f171a5924b3a74929073aa441fa0e71a4cca058aff9132b263dfff409ed95e17128f134108e9946ab15147e77bb4c2db110f818393e86990cb2736e8a2d234580f6a318b4aa5aaffe534efaaa38d444cd02e8fdd4f37fed7b74e2b5aa2c101d36605ec647bee7a6ce2b5cc242117bd4aaa5746f3c2657758f9c48945a6b184472ded0e3694968c961b0b88ea86df3083e102e5383e4df35f73cd05a2bcdebb1c7af253fe3b8bc2e742c28f3b365399362515954805d3d8defc879cd04b3a4595aab9d6a1d1e5703408d3e67ab4c3f5d16b895d3859206fe0d43284a293c29aa0ddcfeae81a62c2fcd3de2d142b21cbb92517780d30a5eee4263de10029c57568b9614ddf1a37f44c654534bcc8f56470683aa778457a940ac8f98a95522277ca4781669f9df6d5ffa00da299ed2c80248309691e5e7d51622a13d3ba995a1c8894c01ec9ca26df232a8cfe9e2b56f50e7db3e4fb36d6e69350a92ef30c2707cb8de6da4d61b74dc4c7a0eef535712e5b90b504c5fe9af7852e9df98940e63f17d7713523b8e137011b1e26e025703750fd516a7aab932b4237430371869c779d17ca65d2a3673f52e7e4ba77eb79803f261ea8e88a7fbf082b0808cc039bc167d33eb755adabb1caf46b6066d68c15ac1b7938599d49150c9b97589f44b826026d25778b225404d0b816783fa5aa58695e2cd6d42033b22d3a2df7ae1010447d22342fb486ee7e92eec2788805b90e212aa6bb2e8d8f8efa02773bfffec1540dfaca2e92fc1ecc6da47305c24181e12622581d1af34586b4acfd4394afefdf1b185aadef62fbaaa82b6c1720630740086c6fcd8b887e9dc537a4a2a0dc0efbe68023463035aa687607faed4e93f34153969370d9de936ab0a4c6e08cce938940eba4f60cae9305a9d77584743d03c1502759f4c80b217203285107c8b35ac946ba2edcb5205692117626eea7ffcbe847cca6a8b40aa23ef6a1133f5c38ec4de645138224d604eba2bdf72c2ae3c1e66cbe1a317aba2403aa8f7db107185bd4439929afccf02ae031172382df7e743c0804525eb6d915b4789ebeb9351e60c6d25cb12b1260e21bf5f0ca682e01a9476a92b77d34875fcd7b198a92c3c34a4fb9db01478c14fec396cde8f1f0c2f493c096580387b36bfea19f28159884db22bef60c41377db5425992da116eb67ba905329167dd9451dfd1e60d6c41e6d870f96aba4ee7c27ccb020a6b606b95417e6420279c8babc9b43170919040700abd88d5fd330dcfb3930bbe465fceb84fb70d4954c2558900f530bcab2f1dcf5a8b55114523bfeeeb459c9027f0321fa86847f99e29128b07e9e3bba519face0797762ea7f30a6c576605968f0874ce6648dd9b49d881bfce891a3fb7806d1022d9beddf33de95cf2261ec9b55ed7774fabd19404a35b601c6c17741b95097bf51253d36925021d18689b5d5835a4af9e9fedf10599b59120eb46fef9966ccac3111ba84a0c2ae03929c1e67af16950d8f76a32135ae5d62a0a5f2e258836a9e9f600e60de425dcb83cb7b71868ba42dc4580ebcde1616b2fe37d878a88227efbf8cc396246eecc13e3ce945e9572faf5fa9ba026e9db775076cd79466b5f2cea4e792e4eba98aa783658a47554d1c15131e0e0f21726535668400801db0fbe986ad067f643255134a8219dd4cb93251063f8c5ded1ab3e8bb17c4132c7cd411b8fe86a3fcf5fbdf47ef0dea8f3adee105b2d0a9e80d19dd7080acc771bd70857a7338192568714c4776190c32cbe70d2730017d1bc490bcef54f70d17e11314195650071b9c3b2f32de33e63c294d4633ddffa7c1e2fa45c0e09af9cb56e90fc84e500732970ba7dc3a83e2a247a2db02fcf35d9c4c74fe3e4b93f988109c5241c9094e2df4a0fb65b2282b00406aae6f1fb5244c4bd3b9030da76704d861a09afa13217df42438625d347f0b88accc6658a84b697ce4d9a8efd59272258bd4aaed59ce7b3feda3be743b66b372d54bfaae5d231d66e03a919d681ba0ed8ade31027ed212a94dc96affa1a1a6f928a689d9d62cfd4d87630058f2e0915b16c9509cdb313c69327098ebbe8a19e5d0ec07fb01006cb7a287125ee826ee863b8ac98302b3dac508531e2c6512c46d426c065f18844e8df8709f5330cc0e1fc18fc2884463b91aa35516b857661049eba9a888f042a8444cb9bd6e989575e919b6bda6c86ed868b870b62a599b81183d5d9d9202ed9f4e83e44980360be98359d066f0cc372c321b97602ae6e9d6ff95870f6b195373e40667cced03d18ba7ffcbd3ac5657847e1d6a42c8e33ac15fd24baf6a0a6cccd71632ecd23cdde5c834edde10dd490e17707775c75774a907231b4b5e0e8f6cd8928e49a16693ea1e1164bc090f2b657b2274060d1eee97551b5f264fbf4cf8395c4c0133785a33cee8d8234d7ffa8bda0eb59ff99edc37c0fa66630aaf49cef3de49ed708025301ca475d39aeffcb9e75f25fcac963d63faab5e98c7922426400a6ed71eac72c3b046c9090cce8cb693913302a9207d753060c7bf5ed6317e6cf36e6cdacb83e2e45b94982f2ced3894138498cb4917d054ca1f799e40a07bf24638f162e1db48f19db7d0c5bb3846009adb5a528c78d7d0807110687de7fbccfefafc5727fedaea13beed6f6234efbf03394600c3300ad8ee33a9c344184a7eb3ee5aedb2ae81aa6f9a99ff714cf3c87ef26d70b4ef15889337dad16e79958315aec309b0df95355964e4549c3c841dc4084061dc76d454cc7084613d5b6749242581bd6423c6f8f5a64939713d411c61ce9945b273e2e08b4f20db88e96760b3a795658c00f1c3a5a553ccd92a79bc979cce28d743981558af1420ce0d539a21e0c354b8472afec8ec510799b4dd7419656e88b0437bec56d0a2ef39cbca4df6a19bf599c1c89c09c1649a80029ab0ed9c4a2b64e569b3d0539fa92f99a4eb2b25e370f227ae1bdf93a27c421b75745554555675a6388b5da406e959f9c64e812a2e9b1e9a88995042f954cc26f2af1205b353cd4838b693bc37dda21a793c68c097dea64919148f9bda62322c8102ff6a08a47933c6cf07fd3caced109b87bcb872a37cae626f690a28a7189aabb12a75c9b9f397df3acc68cffdb800108a8590f54443581ed420a01cdac8b1c984a366ee64e835739944a51053a63e04575f4e90c613a83c17ce69600e2496f0e7e8296eecea251814eef0f3624c45f31c4ad13e24bcc161a98a04b8235c3378860e37fdd2434f9c364dff2c105481ee29b01aa8d6e2f41254c48a1e12e9c5a5d8f3969b2ac1d182c2f27cdc03d45ef678fadb0cda4094f21e39a3fe7f95d980f41127c289ae6622496a685b44a0786b7fd32c72f1d949568f5466b0d566008d578183d34f0883caf9511f91cf964a93f61d8ed08ed7a02c945b2bdb64caeabe8cc0f18be0f6769de334093a1b12ae1ec73be0ccfa7fb2356486d8c2e7d533212653070b0f1c547ee2d07962968f1467aabc16dcf1a8ce81e2e9a9c8323297cf13c3db91b8844e20fd17ca6360f303207d72fe44a10379dfd323de949190aa067349bccf55a53930df5f993ace77ca1a1686bb332fcc8f6a7189c3458f9ed053c7248b430aab91162e2a1"}}, 0xf06) 2m29.306233974s ago: executing program 6 (id=3864): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2642, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES32=r0], 0x0) 2m25.765999176s ago: executing program 6 (id=3878): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mlock(&(0x7f00007a9000/0x3000)=nil, 0x3000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.558784184s ago: executing program 6 (id=3887): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000001a000000000000000000000000000000449610a208fc82162a8ad1f5d475ee2697656c8f4c86380fb30dc87c7bcff8accb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x4, "9e8d2745585f6400d1de4d18f5127e7a79a91a95161c79fb72b118bbcca20a4f", 0x34565559}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r3 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xf, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2000, 0x103) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m19.416595572s ago: executing program 6 (id=3890): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, &(0x7f0000000200)=""/62, &(0x7f0000000440)=""/135, &(0x7f0000000380), 0x4}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r9, 0xffffffffffffffff}) close_range(r0, r11, 0x0) 2m17.822521199s ago: executing program 6 (id=3894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x5f, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m17.742347272s ago: executing program 7 (id=3895): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xf800, 0x7, 0x6, 0xfff, 0xc59, {0x0, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x7f}}, 0xfffffffd, 0x1, 0x12, 0x11, 0x4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 2m17.618942849s ago: executing program 7 (id=3897): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r0, 0x8b20, 0x0) r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x2000000) close_range(r1, 0xffffffffffffffff, 0x0) 2m14.064882707s ago: executing program 7 (id=3899): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 2m12.630947741s ago: executing program 7 (id=3902): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) 2m10.835639873s ago: executing program 7 (id=3903): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m10.364310716s ago: executing program 7 (id=3905): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, &(0x7f0000000200)=""/62, &(0x7f0000000440)=""/135, &(0x7f0000000380), 0x4}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r9, 0xffffffffffffffff}) close_range(r0, r11, 0x0) 2m1.878985635s ago: executing program 38 (id=3894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x5f, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m55.035057165s ago: executing program 39 (id=3905): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, &(0x7f0000000200)=""/62, &(0x7f0000000440)=""/135, &(0x7f0000000380), 0x4}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r9, 0xffffffffffffffff}) close_range(r0, r11, 0x0) 1m49.319989752s ago: executing program 5 (id=3925): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004002, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m47.451973519s ago: executing program 5 (id=3928): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 1m46.502544119s ago: executing program 5 (id=3932): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r0, 0x8b20, 0x0) r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xff07}, 0x2000000) close_range(r1, 0xffffffffffffffff, 0x0) 1m45.008900365s ago: executing program 5 (id=3935): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x17d}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 1m42.886358061s ago: executing program 5 (id=3939): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x20008080) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x102) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4090, 0xffa}, {&(0x7f0000000540)=""/134, 0x86}], 0x2}, 0x7}], 0x3, 0x2000, 0x0) 1m39.754305069s ago: executing program 5 (id=3942): r0 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc0541, 0x0) r5 = fsopen(0x0, 0x1) fcntl$dupfd(r4, 0x0, r5) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10) lsetxattr$security_capability(0x0, &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) 1m21.795083851s ago: executing program 40 (id=3942): r0 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc0541, 0x0) r5 = fsopen(0x0, 0x1) fcntl$dupfd(r4, 0x0, r5) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10) lsetxattr$security_capability(0x0, &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) 29.273708081s ago: executing program 4 (id=4014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) 29.157288185s ago: executing program 4 (id=4015): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x20008b}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x80e, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000400)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fsmount(0xffffffffffffffff, 0x1, 0x2) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x50, r4, 0x6) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 27.729599615s ago: executing program 4 (id=4016): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) 26.729369814s ago: executing program 4 (id=4017): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x2c}}, 0x60040050) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='nfs4\x00', 0x1000080, 0x0) epoll_create1(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4010}, 0x18) 26.129320405s ago: executing program 4 (id=4019): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 25.979333686s ago: executing program 4 (id=4020): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x5e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 24.096405034s ago: executing program 3 (id=4024): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) 22.836944697s ago: executing program 3 (id=4025): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x20008b}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x80e, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000400)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fsmount(0xffffffffffffffff, 0x1, 0x2) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x50, r4, 0x6) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 19.985212417s ago: executing program 3 (id=4026): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x2c}}, 0x60040050) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='nfs4\x00', 0x1000080, 0x0) epoll_create1(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4010}, 0x18) 18.465828816s ago: executing program 3 (id=4027): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 15.295232602s ago: executing program 3 (id=4028): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000180)={&(0x7f0000000140)="3ac91d265850ea4f8bb7bc9f", 0xc}) 15.134109626s ago: executing program 3 (id=4029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010000108000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000800", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x24048180) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000040)={r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000340)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) 10.504753047s ago: executing program 41 (id=4020): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x5e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 42 (id=4029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010000108000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000800", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x24048180) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000040)={r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000340)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): e number 85 [ 1091.220945][T10931] usblp0: removed [ 1091.561193][ T6139] usbhid 4-1:0.0: can't add hid device: -71 [ 1091.561309][ T6139] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1091.596885][ T6139] usb 4-1: USB disconnect, device number 68 [ 1091.652172][T10931] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1091.813129][T10931] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1091.813157][T10931] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1091.813178][T10931] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.815610][T10931] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1091.815637][T10931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.815655][T10931] usb 7-1: Product: syz [ 1091.815667][T10931] usb 7-1: Manufacturer: syz [ 1091.815680][T10931] usb 7-1: SerialNumber: syz [ 1091.836238][T10931] hub 7-1:1.0: bad descriptor, ignoring hub [ 1091.836366][T10931] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1091.952820][ T1507] team0 (unregistering): Port device team_slave_1 removed [ 1091.992830][ T1507] team0 (unregistering): Port device team_slave_0 removed [ 1092.063983][T10931] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1092.150777][T10931] usb 7-1: USB disconnect, device number 86 [ 1092.200013][T10931] usblp0: removed [ 1092.352903][ T5805] Bluetooth: hci3: command tx timeout [ 1094.262189][ T5816] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1094.470982][ T5816] usb 6-1: no configurations [ 1094.471055][ T5816] usb 6-1: can't read configurations, error -22 [ 1094.528475][ T43] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1094.674603][ T5816] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1094.801645][T17105] batman_adv: batadv0: Adding interface: ipvlan1 [ 1094.801666][T17105] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.801681][T17105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.801691][T17105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.801697][T17105] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 1094.818269][ T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1094.818303][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1094.818325][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1094.818344][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1094.818383][ T43] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1094.818403][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.837675][ T43] usb 7-1: config 0 descriptor?? [ 1094.893034][ T5816] usb 6-1: no configurations [ 1094.893054][ T5816] usb 6-1: can't read configurations, error -22 [ 1094.893429][ T5816] usb usb6-port1: attempt power cycle [ 1095.287239][ T43] usbhid 7-1:0.0: can't add hid device: -71 [ 1095.287321][ T43] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1095.312147][ T5816] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1095.315499][ T43] usb 7-1: USB disconnect, device number 87 [ 1095.336598][ T5816] usb 6-1: no configurations [ 1095.336618][ T5816] usb 6-1: can't read configurations, error -22 [ 1095.584621][ T5816] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1095.615977][ T5816] usb 6-1: no configurations [ 1095.615997][ T5816] usb 6-1: can't read configurations, error -22 [ 1095.616319][ T5816] usb usb6-port1: unable to enumerate USB device [ 1096.898239][T16933] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1096.939607][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3253'. [ 1096.945347][T16933] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1097.002358][T16933] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1097.063190][T16933] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1097.386892][ T43] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1097.583171][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1097.629871][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.637869][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.638324][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1097.712901][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1097.713101][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1097.713146][ T43] usb 4-1: Manufacturer: syz [ 1098.064186][ T43] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1098.064212][ T43] usb 4-1: no configuration chosen from 1 choice [ 1098.275015][T16933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.307968][T17153] fuse: Unknown parameter 'user_i00000000000000000000' [ 1098.347809][T16933] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.375778][ T6138] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1098.382317][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.382447][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.398529][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.402399][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.528822][T17156] tipc: Enabled bearer , priority 0 [ 1098.535455][ T6138] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.535480][ T6138] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1098.535513][ T6138] usb 7-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1098.535533][ T6138] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.543802][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3259'. [ 1098.545775][ T6138] usb 7-1: config 0 descriptor?? [ 1098.616671][T17160] tipc: Resetting bearer [ 1098.807993][T17155] tipc: Disabling bearer [ 1099.747506][T16933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.078958][ T5816] usb 4-1: USB disconnect, device number 69 [ 1100.364046][T16933] veth0_vlan: entered promiscuous mode [ 1100.412167][ T6138] usb 7-1: USB disconnect, device number 88 [ 1100.420830][T16933] veth1_vlan: entered promiscuous mode [ 1100.572804][T16933] veth0_macvtap: entered promiscuous mode [ 1100.586912][T16933] veth1_macvtap: entered promiscuous mode [ 1100.634009][T16933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.655759][T16933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.911460][ T5816] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1100.930290][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.930782][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.931345][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.946141][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.076208][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.076235][ T5816] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1101.081815][ T5816] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1101.081843][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.081859][ T5816] usb 4-1: Product: syz [ 1101.081871][ T5816] usb 4-1: Manufacturer: syz [ 1101.081882][ T5816] usb 4-1: SerialNumber: syz [ 1101.145820][ T5816] usb 4-1: config 0 descriptor?? [ 1101.439388][ T8835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.439409][ T8835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.589705][ T1507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.589724][ T1507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.925885][T17238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 1101.927785][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 1101.971224][T17235] syzkaller0: entered promiscuous mode [ 1101.971251][T17235] syzkaller0: entered allmulticast mode [ 1102.086178][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3269'. [ 1104.619661][T10931] usb 4-1: USB disconnect, device number 70 [ 1104.895381][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 1105.334678][T17297] overlayfs: overlapping lowerdir path [ 1108.092189][ T5816] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1108.244494][ T5816] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.244522][ T5816] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1108.246878][ T5816] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1108.246898][ T5816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.246908][ T5816] usb 7-1: Product: syz [ 1108.246915][ T5816] usb 7-1: Manufacturer: syz [ 1108.246922][ T5816] usb 7-1: SerialNumber: syz [ 1108.250924][ T5816] usb 7-1: config 0 descriptor?? [ 1110.115619][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 1110.880470][ T6139] usb 7-1: USB disconnect, device number 89 [ 1110.980525][T10931] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1110.993949][T10931] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1112.182613][T14164] Bluetooth: hci4: command 0x1003 tx timeout [ 1112.191689][ T5805] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1112.496375][T17374] fuse: Bad value for 'fd' [ 1112.772131][T10931] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1112.926585][T10931] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1112.926612][T10931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.926630][T10931] usb 7-1: Product: syz [ 1112.926641][T10931] usb 7-1: Manufacturer: syz [ 1112.926647][T10931] usb 7-1: SerialNumber: syz [ 1113.707854][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1113.707915][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1114.014600][T14164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1114.029060][T14164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1114.040320][T14164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1114.051811][T14164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1114.061237][T14164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1115.172041][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 1115.179256][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1115.179609][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1115.179637][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1115.180075][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1115.244117][T10931] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1115.259822][T10931] usb 7-1: USB disconnect, device number 90 [ 1116.005309][T17389] input: syz1 as /devices/virtual/input/input27 [ 1116.255010][T14164] Bluetooth: hci4: command tx timeout [ 1116.650656][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.650737][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.223553][T17317] syzkaller0: entered promiscuous mode [ 1117.223571][T17317] syzkaller0: entered allmulticast mode [ 1117.224753][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3285'. [ 1117.765725][T16919] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1118.512145][ T5805] Bluetooth: hci4: command tx timeout [ 1118.547602][T17410] fuse: Bad value for 'fd' [ 1118.792150][T16919] usb 5-1: Using ep0 maxpacket: 16 [ 1118.799229][T16919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.799276][T16919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 1118.799290][T16919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.799303][T16919] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.800684][T16919] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1118.800710][T16919] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1118.800728][T16919] usb 5-1: Manufacturer: syz [ 1118.907659][T16919] usb 5-1: config 0 descriptor?? [ 1119.512164][ T6138] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1119.683262][ T6138] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1119.683291][ T6138] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.683310][ T6138] usb 6-1: Product: syz [ 1119.683323][ T6138] usb 6-1: Manufacturer: syz [ 1119.683336][ T6138] usb 6-1: SerialNumber: syz [ 1119.793372][T10177] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.016561][T17384] lo speed is unknown, defaulting to 1000 [ 1120.172181][ T6138] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1120.172240][ T6138] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1120.584102][ T5805] Bluetooth: hci4: command tx timeout [ 1121.498168][T10177] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1121.578182][ T6139] usb 5-1: USB disconnect, device number 117 [ 1121.725425][T17440] fuse: Bad value for 'fd' [ 1121.996261][T10177] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.239112][T10177] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.406743][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3326'. [ 1122.566661][T17450] syzkaller0: entered promiscuous mode [ 1122.566687][T17450] syzkaller0: entered allmulticast mode [ 1122.662332][ T5805] Bluetooth: hci4: command tx timeout [ 1122.963741][ T6138] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1122.973548][ T6138] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1122.977044][ T6138] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 1122.977098][ T6138] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1122.977116][ T6138] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1122.977882][ T6138] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1123.078609][ T6138] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1123.374954][ T6138] usb 6-1: USB disconnect, device number 74 [ 1123.673351][T17384] chnl_net:caif_netlink_parms(): no params data found [ 1123.842325][T17476] fuse: Unknown parameter '0x0000000000000003' [ 1124.054870][ T6138] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1124.128491][T10177] bridge_slave_1: left allmulticast mode [ 1124.128518][T10177] bridge_slave_1: left promiscuous mode [ 1124.128776][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.202115][ T6138] usb 6-1: Using ep0 maxpacket: 16 [ 1124.203901][ T6138] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.203933][ T6138] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1124.203947][ T6138] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.203959][ T6138] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.204963][ T6138] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1124.204977][ T6138] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1124.204987][ T6138] usb 6-1: Manufacturer: syz [ 1124.208489][ T6138] usb 6-1: config 0 descriptor?? [ 1124.307361][T10177] bridge_slave_0: left allmulticast mode [ 1124.307389][T10177] bridge_slave_0: left promiscuous mode [ 1124.307628][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.982411][T10931] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1125.132053][T10931] usb 4-1: Using ep0 maxpacket: 32 [ 1125.133972][T10931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.133990][T10931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.134011][T10931] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1125.134022][T10931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.140518][T10931] usb 4-1: config 0 descriptor?? [ 1125.303375][T10177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.362983][T10177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.383222][T10177] bond0 (unregistering): Released all slaves [ 1125.439228][T17384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.439296][T17384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.440088][T17384] bridge_slave_0: entered allmulticast mode [ 1125.453086][T17384] bridge_slave_0: entered promiscuous mode [ 1125.489722][T17491] syzkaller0: entered promiscuous mode [ 1125.489779][T17491] syzkaller0: entered allmulticast mode [ 1125.503588][T17384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.504310][T17384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.504952][T17384] bridge_slave_1: entered allmulticast mode [ 1125.511381][T17384] bridge_slave_1: entered promiscuous mode [ 1125.658684][T10931] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1125.914479][ T10] usb 4-1: USB disconnect, device number 71 [ 1125.948894][T17384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.949046][T10177] tipc: Left network mode [ 1125.966108][T17384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.091327][T17384] team0: Port device team_slave_0 added [ 1126.169389][T17384] team0: Port device team_slave_1 added [ 1126.173204][T17502] lo speed is unknown, defaulting to 1000 [ 1126.177579][T17513] syzkaller0: entered promiscuous mode [ 1126.177602][T17513] syzkaller0: entered allmulticast mode [ 1126.688920][ T6139] usb 6-1: USB disconnect, device number 75 [ 1127.078501][T17520] fuse: Unknown parameter '0x0000000000000003' [ 1127.518912][T17384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.518938][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.518962][T17384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.585097][T17384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.585113][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.585138][T17384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.732101][ T6139] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1127.887491][ T6139] usb 6-1: Using ep0 maxpacket: 32 [ 1127.889607][ T6139] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1127.889630][ T6139] usb 6-1: config 0 has no interface number 0 [ 1127.889671][ T6139] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1127.889695][ T6139] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1127.892414][ T6139] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1127.892439][ T6139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.892454][ T6139] usb 6-1: Product: syz [ 1127.892466][ T6139] usb 6-1: Manufacturer: syz [ 1127.892479][ T6139] usb 6-1: SerialNumber: syz [ 1127.909101][ T6139] usb 6-1: config 0 descriptor?? [ 1128.047810][T17538] syzkaller0: entered promiscuous mode [ 1128.047838][T17538] syzkaller0: entered allmulticast mode [ 1128.118971][ T6139] radio-si470x 6-1:0.35: this is not a si470x device. [ 1128.144949][ T6139] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1128.585541][ T6139] usb 6-1: USB disconnect, device number 76 [ 1129.107314][T17384] hsr_slave_0: entered promiscuous mode [ 1129.108841][T17384] hsr_slave_1: entered promiscuous mode [ 1129.109859][T17384] debugfs: 'hsr0' already exists in 'hsr' [ 1129.109881][T17384] Cannot create hsr debugfs directory [ 1129.293392][T17567] fuse: Unknown parameter '0x0000000000000003' [ 1129.394720][T10177] hsr_slave_0: left promiscuous mode [ 1129.450236][T10177] hsr_slave_1: left promiscuous mode [ 1129.981463][T10177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.093537][T10177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.912881][T10177] team0 (unregistering): Port device team_slave_1 removed [ 1131.066057][T10177] team0 (unregistering): Port device team_slave_0 removed [ 1131.462128][ T5805] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1131.751060][T17596] fuse: Unknown parameter '0x0000000000000003' [ 1133.115660][T17634] fuse: Unknown parameter '0x0000000000000003' [ 1133.752220][ T6137] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1133.904447][ T6137] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.904473][ T6137] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1133.904506][ T6137] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1133.904527][ T6137] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.385697][T17384] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1134.426091][T17384] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1134.474345][T17384] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1134.526687][T17384] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1134.941860][T17384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.006524][T17384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.039151][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.041121][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.083660][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.091649][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.552161][ T6137] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1135.689401][T17384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.734742][ T6137] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1135.735311][ T6137] usb 6-1: not running at top speed; connect to a high speed hub [ 1135.736538][ T6137] usb 6-1: config 127 has an invalid interface number: 230 but max is 0 [ 1135.736561][ T6137] usb 6-1: config 127 has no interface number 0 [ 1135.736604][ T6137] usb 6-1: config 127 interface 230 has no altsetting 0 [ 1135.739632][ T6137] usb 6-1: New USB device found, idVendor=2001, idProduct=3a02, bcdDevice=7e.d7 [ 1135.739657][ T6137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.739674][ T6137] usb 6-1: Product: syz [ 1135.739686][ T6137] usb 6-1: Manufacturer: syz [ 1135.739698][ T6137] usb 6-1: SerialNumber: syz [ 1135.980883][ T6137] usb 6-1: Could not find all expected endpoints [ 1135.998670][ T6137] usb 6-1: bad CDC descriptors [ 1136.072139][ T6137] usb 6-1: USB disconnect, device number 77 [ 1136.493733][ T10] usb 7-1: USB disconnect, device number 91 [ 1136.529772][T17384] veth0_vlan: entered promiscuous mode [ 1136.557323][T17384] veth1_vlan: entered promiscuous mode [ 1136.657896][T17384] veth0_macvtap: entered promiscuous mode [ 1136.662355][ T43] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1136.695485][T17384] veth1_macvtap: entered promiscuous mode [ 1136.764831][T17384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.824748][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1136.824779][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1136.824800][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1136.824817][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1136.824855][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1136.824874][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.844036][ T43] usb 5-1: config 0 descriptor?? [ 1136.859211][T17384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.015540][T10051] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.016829][T10051] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.017659][T10051] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.018481][T10051] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.305986][ T43] plantronics 0003:047F:FFFF.001D: item fetching failed at offset 14/15 [ 1137.306690][ T43] plantronics 0003:047F:FFFF.001D: parse failed [ 1137.306785][ T43] plantronics 0003:047F:FFFF.001D: probe with driver plantronics failed with error -22 [ 1137.328204][ T3589] Bluetooth: hci5: Frame reassembly failed (-84) [ 1137.582121][ T6139] usb 5-1: USB disconnect, device number 118 [ 1137.664544][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.664565][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.716982][ T5903] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1137.753252][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.753272][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.862596][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 1137.864792][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.864819][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.864856][ T5903] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1137.864877][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.917841][ T5903] usb 7-1: config 0 descriptor?? [ 1137.929941][ T5903] hub 7-1:0.0: USB hub found [ 1138.122085][ T5903] hub 7-1:0.0: 6 ports detected [ 1138.122654][ T5903] hub 7-1:0.0: insufficient power available to use all downstream ports [ 1138.456209][ T5903] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 1138.456306][ T5903] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1139.106517][ T5903] usbhid 7-1:0.0: can't add hid device: -71 [ 1139.106639][ T5903] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1139.183054][ T5903] usb 7-1: USB disconnect, device number 92 [ 1139.302291][T14164] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1140.251313][T17853] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1140.591397][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1141.560125][T17887] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1141.764821][T17897] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3473'. [ 1143.142246][ T5903] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1143.297439][ T5903] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1143.297469][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.327549][ T5903] usb 7-1: config 0 descriptor?? [ 1143.345537][ T5903] cp210x 7-1:0.0: cp210x converter detected [ 1143.753370][ T5903] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1143.754240][ T5903] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1143.754262][ T5903] cp210x 7-1:0.0: GPIO initialisation failed: -121 [ 1143.786908][ T5903] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1143.956965][ T5903] usb 7-1: USB disconnect, device number 93 [ 1144.019612][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1144.176285][ T5903] cp210x 7-1:0.0: device disconnected [ 1147.322160][ T10] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1147.475597][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.475652][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.475688][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1147.475715][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.481019][ T10] usb 5-1: config 0 descriptor?? [ 1147.609833][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1148.622174][ T6137] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1148.789547][ T6137] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.789575][ T6137] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1148.795316][ T6137] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1148.795346][ T6137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.795364][ T6137] usb 6-1: Product: syz [ 1148.795377][ T6137] usb 6-1: Manufacturer: syz [ 1148.795397][ T6137] usb 6-1: SerialNumber: syz [ 1149.016994][ T6137] usb 6-1: 0:2 : does not exist [ 1149.040967][ T6137] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1149.192563][ T6137] usb 6-1: USB disconnect, device number 78 [ 1149.298663][T14965] udevd[14965]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1150.146447][ T6137] usb 5-1: USB disconnect, device number 119 [ 1150.605554][T10931] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1150.784490][T10931] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.784545][T10931] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1150.784566][T10931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.851552][T10931] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1152.257875][T10931] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1152.257899][T10931] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1152.258321][T10931] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1152.258338][T10931] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 1152.293858][T10931] usb 6-1: USB disconnect, device number 79 [ 1153.352135][ T10] usb 6-1: new low-speed USB device number 80 using dummy_hcd [ 1153.504027][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1153.504054][ T10] usb 6-1: config 0 has no interface number 0 [ 1153.504630][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1153.504646][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1153.504669][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1153.504680][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.509680][ T10] usb 6-1: config 0 descriptor?? [ 1153.510336][T18147] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1153.601862][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1153.811651][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1153.835874][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1153.837738][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1153.868680][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1153.882215][ T5816] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1153.886917][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1154.012926][ T5816] usb 5-1: device descriptor read/64, error -71 [ 1154.017215][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1154.058242][ T6138] usb 6-1: USB disconnect, device number 80 [ 1154.137798][T18166] lo speed is unknown, defaulting to 1000 [ 1154.254681][ T5816] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1154.392131][ T5816] usb 5-1: device descriptor read/64, error -71 [ 1154.503742][ T5816] usb usb5-port1: attempt power cycle [ 1154.522183][T10931] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1154.676688][T10931] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.676745][T10931] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1154.676767][T10931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.730568][T10931] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1154.872268][ T5816] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1154.896481][ T5816] usb 5-1: device descriptor read/8, error -71 [ 1155.099903][T18187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.153800][ T5816] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1155.199960][ T5816] usb 5-1: device descriptor read/8, error -71 [ 1155.302628][ T5816] usb usb5-port1: unable to enumerate USB device [ 1155.791032][T10931] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1155.791056][T10931] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 1155.791477][T10931] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1155.791494][T10931] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 1155.849977][T10931] usb 7-1: USB disconnect, device number 94 [ 1155.880919][T10179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.945176][T14164] Bluetooth: hci5: command tx timeout [ 1156.260513][T10179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.350721][T18166] chnl_net:caif_netlink_parms(): no params data found [ 1156.458441][T18196] netlink: 'syz.6.3598': attribute type 72 has an invalid length. [ 1156.538494][T10179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.877806][T10179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.952133][ T5816] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1156.995642][T18166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.995853][T18166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.996091][T18166] bridge_slave_0: entered allmulticast mode [ 1157.001008][T18166] bridge_slave_0: entered promiscuous mode [ 1157.036935][T18166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.037226][T18166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.037377][T18166] bridge_slave_1: entered allmulticast mode [ 1157.038858][T18166] bridge_slave_1: entered promiscuous mode [ 1157.104132][ T5816] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1157.104165][ T5816] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1157.104179][ T5816] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.104190][ T5816] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1157.104203][ T5816] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1157.104221][ T5816] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1157.104232][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.109073][ T5816] usb 5-1: config 0 descriptor?? [ 1157.181221][T18166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.236032][T18166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.407955][T18166] team0: Port device team_slave_0 added [ 1157.434036][T18166] team0: Port device team_slave_1 added [ 1157.581229][ T5816] ryos 0003:1E7D:3138.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 1157.631327][T18166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.631342][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.631362][T18166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.696487][T18166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.696504][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.696529][T18166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.842822][ T5816] usb 5-1: USB disconnect, device number 124 [ 1158.006428][T18212] fido_id[18212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1158.022229][T14164] Bluetooth: hci5: command tx timeout [ 1158.398560][T18166] hsr_slave_0: entered promiscuous mode [ 1158.492690][T18166] hsr_slave_1: entered promiscuous mode [ 1158.493615][T18166] debugfs: 'hsr0' already exists in 'hsr' [ 1158.493639][T18166] Cannot create hsr debugfs directory [ 1158.699922][T10179] bridge_slave_1: left allmulticast mode [ 1158.699941][T10179] bridge_slave_1: left promiscuous mode [ 1158.700102][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.936377][T10179] bridge_slave_0: left allmulticast mode [ 1158.936408][T10179] bridge_slave_0: left promiscuous mode [ 1158.936609][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.320430][T18227] netlink: 'syz.4.3608': attribute type 72 has an invalid length. [ 1159.352121][T16919] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1159.510601][T16919] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.510656][T16919] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1159.510678][T16919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.629047][T16919] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1159.781337][T18233] block nbd4: not configured, cannot reconfigure [ 1160.102069][T14164] Bluetooth: hci5: command tx timeout [ 1160.304930][T10179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.362885][T10179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.408747][T10179] bond0 (unregistering): Released all slaves [ 1160.651753][T10179] tipc: Left network mode [ 1160.686495][T16919] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1160.686509][T16919] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 1160.774518][T16919] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1160.774535][T16919] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 1160.805727][T16919] usb 7-1: USB disconnect, device number 95 [ 1161.372121][T16919] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1161.443308][T18255] netlink: 'syz.4.3619': attribute type 72 has an invalid length. [ 1161.565668][T16919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.565723][T16919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.565748][T16919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.565782][T16919] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1161.565803][T16919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.570781][T16919] usb 6-1: config 0 descriptor?? [ 1161.823771][ T6137] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1161.976578][ T6137] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1161.976597][ T6137] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.976607][ T6137] usb 7-1: Product: syz [ 1161.976614][ T6137] usb 7-1: Manufacturer: syz [ 1161.976621][ T6137] usb 7-1: SerialNumber: syz [ 1162.042110][T16919] usbhid 6-1:0.0: can't add hid device: -71 [ 1162.042288][T16919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1162.084707][T16919] usb 6-1: USB disconnect, device number 81 [ 1162.194000][T14164] Bluetooth: hci5: command tx timeout [ 1162.493958][ T6137] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1162.493995][ T6137] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1165.081103][ T6137] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 1165.081158][ T6137] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1165.082153][ T6137] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1165.110393][T18301] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3630'. [ 1165.164158][ T6137] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1165.290432][ T6137] usb 7-1: USB disconnect, device number 96 [ 1167.102890][ T6138] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1167.465011][T10179] hsr_slave_0: left promiscuous mode [ 1167.482127][ T6138] usb 5-1: device descriptor read/64, error -71 [ 1167.529664][T10179] hsr_slave_1: left promiscuous mode [ 1167.530632][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.530657][T10179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.593091][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.593119][T10179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.648393][T10179] batman_adv: batadv0: Removing interface: ipvlan1 [ 1167.722162][ T6138] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1167.753514][T10179] veth1_macvtap: left promiscuous mode [ 1167.753596][T10179] veth0_macvtap: left promiscuous mode [ 1167.753800][T10179] veth1_vlan: left promiscuous mode [ 1167.753905][T10179] veth0_vlan: left promiscuous mode [ 1167.853702][ T6138] usb 5-1: device descriptor read/64, error -71 [ 1167.981699][ T6138] usb usb5-port1: attempt power cycle [ 1168.344293][ T6138] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1168.362836][ T6138] usb 5-1: device descriptor read/8, error -71 [ 1168.602097][ T6138] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1168.622909][ T6138] usb 5-1: device descriptor read/8, error -71 [ 1168.742805][ T6138] usb usb5-port1: unable to enumerate USB device [ 1170.393276][T10179] team0 (unregistering): Port device team_slave_1 removed [ 1170.437667][T10179] team0 (unregistering): Port device team_slave_0 removed [ 1170.532131][T16919] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1170.718197][T16919] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1170.718228][T16919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.718248][T16919] usb 7-1: Product: syz [ 1170.718261][T16919] usb 7-1: Manufacturer: syz [ 1170.718275][T16919] usb 7-1: SerialNumber: syz [ 1171.204720][T16919] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1171.204780][T16919] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1171.897921][ T6137] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1172.065272][ T6137] usb 6-1: config 0 has no interfaces? [ 1172.070246][ T6137] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1172.070277][ T6137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.070293][ T6137] usb 6-1: Product: syz [ 1172.070347][ T6137] usb 6-1: Manufacturer: syz [ 1172.070359][ T6137] usb 6-1: SerialNumber: syz [ 1172.117544][T18166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1172.199690][ T6137] usb 6-1: config 0 descriptor?? [ 1172.210400][T18166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1172.306042][T18166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1172.428991][T18166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1172.468687][ T5903] usb 6-1: USB disconnect, device number 82 [ 1172.845720][T16919] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 1172.845757][T16919] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1172.846925][T16919] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1172.924856][T16919] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1172.967484][T16919] usb 7-1: USB disconnect, device number 97 [ 1173.112478][T18166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.204011][T18166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.255253][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.281437][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.377727][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.377834][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.211201][T18166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.370204][T18166] veth0_vlan: entered promiscuous mode [ 1174.400358][T18166] veth1_vlan: entered promiscuous mode [ 1174.472109][T10931] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1174.545884][T18166] veth0_macvtap: entered promiscuous mode [ 1174.561431][T18166] veth1_macvtap: entered promiscuous mode [ 1174.601353][T18166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.622794][T10931] usb 6-1: Using ep0 maxpacket: 32 [ 1174.624741][T10931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.624771][T10931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.624807][T10931] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1174.624828][T10931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.651796][T18166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.676785][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.677029][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.677065][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.677097][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.724040][T10931] usb 6-1: config 0 descriptor?? [ 1174.743273][T10931] hub 6-1:0.0: USB hub found [ 1174.957767][T10931] hub 6-1:0.0: 6 ports detected [ 1174.976272][T10931] hub 6-1:0.0: insufficient power available to use all downstream ports [ 1175.161419][T10931] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1175.161444][T10931] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1175.200121][T10931] usbhid 6-1:0.0: can't add hid device: -71 [ 1175.200234][T10931] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1175.243054][T10931] usb 6-1: USB disconnect, device number 83 [ 1175.362114][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.362134][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.493896][ T8835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.493910][ T8835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.582975][ T6138] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1175.746119][ T6138] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1175.746149][ T6138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.746168][ T6138] usb 5-1: Product: syz [ 1175.746181][ T6138] usb 5-1: Manufacturer: syz [ 1175.746194][ T6138] usb 5-1: SerialNumber: syz [ 1176.240208][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1176.240274][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1177.548343][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.548415][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.052824][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 1178.052877][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1178.053736][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1178.124116][ T6138] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1178.172207][ T6138] usb 5-1: USB disconnect, device number 3 [ 1178.572175][ T5903] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1178.996011][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 1178.998207][ T5903] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1178.998224][ T5903] usb 6-1: config 0 has no interface number 0 [ 1179.000062][ T5903] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1179.000079][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.000088][ T5903] usb 6-1: Product: syz [ 1179.000095][ T5903] usb 6-1: Manufacturer: syz [ 1179.000103][ T5903] usb 6-1: SerialNumber: syz [ 1179.055394][ T5903] usb 6-1: config 0 descriptor?? [ 1179.058797][ T5903] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1179.062185][T10931] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1179.222108][T10931] usb 7-1: Using ep0 maxpacket: 32 [ 1179.224832][T10931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.224902][T10931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.224936][T10931] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1179.224955][T10931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.288138][T10931] usb 7-1: config 0 descriptor?? [ 1179.313157][T10931] hub 7-1:0.0: USB hub found [ 1179.318384][ T5903] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1179.362505][ T5903] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1179.503398][T10931] hub 7-1:0.0: 6 ports detected [ 1179.504056][T10931] hub 7-1:0.0: insufficient power available to use all downstream ports [ 1179.692330][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1179.712878][T10931] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 1179.712903][T10931] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1179.741324][ T5903] usb 6-1: USB disconnect, device number 84 [ 1179.776952][T10931] usbhid 7-1:0.0: can't add hid device: -71 [ 1179.777028][T10931] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1179.814932][ T5903] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1179.830897][T10931] usb 7-1: USB disconnect, device number 98 [ 1179.855615][ T5903] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1179.856467][ T5903] quatech2 6-1:0.51: device disconnected [ 1181.363959][T18528] lo speed is unknown, defaulting to 1000 [ 1181.365046][T18528] lo speed is unknown, defaulting to 1000 [ 1181.407548][T18528] lo speed is unknown, defaulting to 1000 [ 1181.516944][T18528] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1181.714084][T18528] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1181.820710][T18528] lo speed is unknown, defaulting to 1000 [ 1181.823425][T18528] lo speed is unknown, defaulting to 1000 [ 1181.826339][T18528] lo speed is unknown, defaulting to 1000 [ 1181.828762][T18528] lo speed is unknown, defaulting to 1000 [ 1181.831233][T18528] lo speed is unknown, defaulting to 1000 [ 1181.833700][T18528] lo speed is unknown, defaulting to 1000 [ 1181.853889][ T5903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1182.541793][ T5903] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.541848][ T5903] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1182.541870][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.589771][ T5903] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1184.922640][T18556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1184.922658][T18556] IPv6: NLM_F_CREATE should be set when creating new route [ 1184.925221][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'. [ 1185.161827][ T5903] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1185.161852][ T5903] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1185.162362][ T5903] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1185.162380][ T5903] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 1185.175651][ T5903] usb 5-1: USB disconnect, device number 4 [ 1185.854257][T18532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1186.339158][T18570] syzkaller0: entered promiscuous mode [ 1186.339183][T18570] syzkaller0: entered allmulticast mode [ 1186.545151][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1186.582091][T16919] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1186.742330][T16919] usb 7-1: Using ep0 maxpacket: 32 [ 1186.744268][T16919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.744305][T16919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.744335][T16919] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1186.744347][T16919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.747212][T16919] usb 7-1: config 0 descriptor?? [ 1186.751091][T16919] hub 7-1:0.0: USB hub found [ 1186.949610][T16919] hub 7-1:0.0: 6 ports detected [ 1186.949984][T16919] hub 7-1:0.0: insufficient power available to use all downstream ports [ 1186.972087][ T5903] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1187.138046][ T5903] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.138106][ T5903] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1187.138127][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.149547][ T5903] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1187.150282][T16919] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 1187.150305][T16919] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1187.204045][T16919] usbhid 7-1:0.0: can't add hid device: -71 [ 1187.204132][T16919] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1187.243043][T16919] usb 7-1: USB disconnect, device number 99 [ 1187.352072][ T5816] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1187.502102][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 1187.505661][ T5816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1187.508043][ T5816] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1187.508069][ T5816] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1187.508089][ T5816] usb 4-1: Product: syz [ 1187.508097][ T5816] usb 4-1: Manufacturer: syz [ 1187.508104][ T5816] usb 4-1: SerialNumber: syz [ 1187.756285][ T5816] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1187.756311][ T5816] usb 4-1: Handspring Visor / Palm OS: port 191, is for unknown use [ 1187.756328][ T5816] usb 4-1: Handspring Visor / Palm OS: port 206, is for unknown use [ 1187.756344][ T5816] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1187.951734][ T5816] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1187.951810][ T5816] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1187.976297][ T5816] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1187.980160][ T5816] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1188.001428][ T5816] usb 4-1: USB disconnect, device number 72 [ 1188.019003][ T5816] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1188.043432][ T5816] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1188.044193][ T5816] visor 4-1:1.0: device disconnected [ 1188.054844][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1188.187032][ T5903] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1188.205148][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.205259][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.205275][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.205297][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1188.205308][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.214638][ T10] usb 5-1: config 0 descriptor?? [ 1188.387966][ T5903] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1188.387987][ T5903] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 1188.399277][ T5903] usb 6-1: USB disconnect, device number 85 [ 1189.574669][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1189.577213][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1189.610229][ T10] usb 5-1: USB disconnect, device number 5 [ 1189.795396][T14164] Bluetooth: hci2: command 0x0406 tx timeout [ 1191.112448][ T6137] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1191.192116][T10931] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1191.252168][ T6137] usb 4-1: device descriptor read/64, error -71 [ 1191.292161][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1191.346475][T10931] usb 7-1: Using ep0 maxpacket: 32 [ 1191.349533][T10931] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1191.349559][T10931] usb 7-1: config 0 has no interface number 0 [ 1191.373903][T10931] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1191.373931][T10931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.373950][T10931] usb 7-1: Product: syz [ 1191.373963][T10931] usb 7-1: Manufacturer: syz [ 1191.373977][T10931] usb 7-1: SerialNumber: syz [ 1191.379866][T10931] usb 7-1: config 0 descriptor?? [ 1191.432422][ T10] usb 5-1: device descriptor read/64, error -71 [ 1191.492219][ T6137] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1191.622269][ T6137] usb 4-1: device descriptor read/64, error -71 [ 1191.672143][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1191.733979][ T6137] usb usb4-port1: attempt power cycle [ 1191.812120][ T10] usb 5-1: device descriptor read/64, error -71 [ 1191.847798][T10931] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1191.847818][T10931] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1191.892247][T16919] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1191.922380][ T10] usb usb5-port1: attempt power cycle [ 1192.043035][T16919] usb 6-1: Using ep0 maxpacket: 32 [ 1192.045336][T16919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.045366][T16919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.045402][T16919] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1192.045424][T16919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.051423][T10931] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1192.051725][T10931] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 1192.055122][T16919] usb 6-1: config 0 descriptor?? [ 1192.072189][ T6137] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1192.077582][T16919] hub 6-1:0.0: USB hub found [ 1192.119399][ T6137] usb 4-1: device descriptor read/8, error -71 [ 1192.272135][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1192.285291][T16919] hub 6-1:0.0: 6 ports detected [ 1192.285756][T16919] hub 6-1:0.0: insufficient power available to use all downstream ports [ 1192.303541][ T10] usb 5-1: device descriptor read/8, error -71 [ 1192.352169][ T6137] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1192.372789][ T6137] usb 4-1: device descriptor read/8, error -71 [ 1192.483078][ T6137] usb usb4-port1: unable to enumerate USB device [ 1192.487747][T16919] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1192.487765][T16919] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1192.493845][T16919] usbhid 6-1:0.0: can't add hid device: -71 [ 1192.493961][T16919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1192.513579][T16919] usb 6-1: USB disconnect, device number 86 [ 1192.542967][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1192.572966][ T10] usb 5-1: device descriptor read/8, error -71 [ 1192.692567][ T10] usb usb5-port1: unable to enumerate USB device [ 1193.631634][T10931] usb 7-1: USB disconnect, device number 100 [ 1194.172102][T10931] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1194.344067][T10931] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1194.344094][T10931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.348568][T10931] usb 7-1: config 0 descriptor?? [ 1194.379273][T10931] cp210x 7-1:0.0: cp210x converter detected [ 1194.780020][T10931] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1194.780789][T10931] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1194.780812][T10931] cp210x 7-1:0.0: GPIO initialisation failed: -121 [ 1194.809031][T10931] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1194.985015][ T6137] usb 7-1: USB disconnect, device number 101 [ 1194.998805][ T6137] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1194.999508][ T6137] cp210x 7-1:0.0: device disconnected [ 1196.052123][ T10] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1196.202173][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1196.206855][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1196.206884][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.206903][ T10] usb 7-1: Product: syz [ 1196.206916][ T10] usb 7-1: Manufacturer: syz [ 1196.206929][ T10] usb 7-1: SerialNumber: syz [ 1196.211016][ T10] usb 7-1: config 0 descriptor?? [ 1196.259309][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1196.812778][T18644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1197.386671][ T6137] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1197.535027][ T6137] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.535053][ T6137] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1197.537489][ T6137] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1197.537516][ T6137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.537534][ T6137] usb 6-1: Product: syz [ 1197.537541][ T6137] usb 6-1: Manufacturer: syz [ 1197.537548][ T6137] usb 6-1: SerialNumber: syz [ 1197.833732][ T6137] usb 6-1: 0:2 : does not exist [ 1197.845400][ T6137] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1198.911103][ T6137] usb 6-1: USB disconnect, device number 87 [ 1199.069724][ T10] gspca_sonixj: reg_w1 err -71 [ 1199.102171][ T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1199.124274][ T10] usb 7-1: USB disconnect, device number 102 [ 1199.201085][T15453] udevd[15453]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1199.212075][ T6139] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1199.362941][ T6139] usb 4-1: device descriptor read/64, error -71 [ 1199.392279][ T5808] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1199.552113][ T5808] usb 5-1: Using ep0 maxpacket: 32 [ 1199.554096][ T5808] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1199.554122][ T5808] usb 5-1: config 0 has no interface number 0 [ 1199.556362][ T5808] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1199.556388][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.556405][ T5808] usb 5-1: Product: syz [ 1199.556412][ T5808] usb 5-1: Manufacturer: syz [ 1199.556419][ T5808] usb 5-1: SerialNumber: syz [ 1199.561084][ T5808] usb 5-1: config 0 descriptor?? [ 1199.632162][ T6139] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1199.637276][ T5808] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1199.772129][ T6139] usb 4-1: device descriptor read/64, error -71 [ 1199.804505][ T5808] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1199.834868][ T5808] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1199.898628][ T6139] usb usb4-port1: attempt power cycle [ 1200.202677][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1200.204604][ T5816] usb 5-1: USB disconnect, device number 10 [ 1200.234682][ T5816] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1200.258199][ T5816] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1200.258820][ T5816] quatech2 5-1:0.51: device disconnected [ 1200.266092][ T6139] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1200.303612][ T6139] usb 4-1: device descriptor read/8, error -71 [ 1200.552765][ T6139] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1200.583081][ T6139] usb 4-1: device descriptor read/8, error -71 [ 1200.703794][ T6139] usb usb4-port1: unable to enumerate USB device [ 1200.922240][ T5816] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1201.022216][ T6139] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1201.073986][ T5816] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.074039][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.074064][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.074096][ T5816] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1201.074184][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.077605][ T5816] usb 6-1: config 0 descriptor?? [ 1201.212212][ T6139] usb 5-1: Using ep0 maxpacket: 32 [ 1201.216272][ T6139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.216303][ T6139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.216340][ T6139] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1201.216361][ T6139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.257616][ T6139] usb 5-1: config 0 descriptor?? [ 1201.276698][ T6139] hub 5-1:0.0: USB hub found [ 1201.479517][ T6139] hub 5-1:0.0: 6 ports detected [ 1201.479972][ T6139] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1201.706594][ T6139] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1201.706621][ T6139] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1201.716511][ T5816] usbhid 6-1:0.0: can't add hid device: -71 [ 1201.716625][ T5816] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1201.730950][ T5816] usb 6-1: USB disconnect, device number 88 [ 1201.746703][ T6139] usbhid 5-1:0.0: can't add hid device: -71 [ 1201.746824][ T6139] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1202.208598][ T6139] usb 5-1: USB disconnect, device number 11 [ 1203.832233][T18701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1203.873782][ T10] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1203.989753][T18739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3753'. [ 1204.022097][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1204.024540][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.024572][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.024608][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1204.024630][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.031304][ T10] usb 6-1: config 0 descriptor?? [ 1204.084495][ T10] hub 6-1:0.0: USB hub found [ 1204.676685][ T10] hub 6-1:0.0: 6 ports detected [ 1204.677191][ T10] hub 6-1:0.0: insufficient power available to use all downstream ports [ 1204.873991][ T10] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1204.874019][ T10] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1204.899761][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1204.899880][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1204.946512][ T10] usb 6-1: USB disconnect, device number 89 [ 1206.092632][ T5816] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1206.658480][ T5816] usb 7-1: device descriptor read/64, error -71 [ 1206.892180][ T5816] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1207.022133][ T5816] usb 7-1: device descriptor read/64, error -71 [ 1207.114546][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3765'. [ 1207.230634][ T5816] usb usb7-port1: attempt power cycle [ 1208.072906][ T5816] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1208.093735][ T5816] usb 7-1: device descriptor read/8, error -71 [ 1208.847648][ T5816] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1208.863706][ T5816] usb 7-1: device descriptor read/8, error -71 [ 1208.972509][ T5816] usb usb7-port1: unable to enumerate USB device [ 1209.202104][ T5816] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1209.365517][ T5816] usb 4-1: Using ep0 maxpacket: 32 [ 1209.402591][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.402624][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.402671][ T5816] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1209.402693][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.408508][ T5816] usb 4-1: config 0 descriptor?? [ 1209.459518][ T5816] hub 4-1:0.0: USB hub found [ 1209.618597][ T5816] hub 4-1:0.0: 6 ports detected [ 1209.619693][ T5816] hub 4-1:0.0: insufficient power available to use all downstream ports [ 1209.821198][ T5816] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1209.821226][ T5816] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1209.841138][ T5816] usbhid 4-1:0.0: can't add hid device: -71 [ 1209.841253][ T5816] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1209.873065][ T5816] usb 4-1: USB disconnect, device number 81 [ 1209.912094][T18673] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1210.879970][T14164] Bluetooth: hci3: command 0x0406 tx timeout [ 1210.919460][T18673] usb 6-1: Using ep0 maxpacket: 32 [ 1211.361654][T18673] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1211.361683][T18673] usb 6-1: config 0 has no interface number 0 [ 1211.472551][T18673] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1211.472582][T18673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.472609][T18673] usb 6-1: Product: syz [ 1211.472624][T18673] usb 6-1: Manufacturer: syz [ 1211.472637][T18673] usb 6-1: SerialNumber: syz [ 1211.480681][T18673] usb 6-1: config 0 descriptor?? [ 1211.484728][T18673] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1211.785879][T18673] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1211.817416][T18673] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1212.153338][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1212.154878][T16919] usb 6-1: USB disconnect, device number 90 [ 1212.242492][T16919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1212.273013][T16919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1212.273525][T16919] quatech2 6-1:0.51: device disconnected [ 1213.400461][T16919] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1213.692409][T16919] usb 6-1: device descriptor read/64, error -71 [ 1213.932096][T16919] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1214.072076][T16919] usb 6-1: device descriptor read/64, error -71 [ 1214.192670][T16919] usb usb6-port1: attempt power cycle [ 1214.545037][T16919] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1214.601581][T16919] usb 6-1: device descriptor read/8, error -71 [ 1214.693609][ T6138] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1214.857053][T16919] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1214.884077][T16919] usb 6-1: device descriptor read/8, error -71 [ 1214.890444][ T6138] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1214.890473][ T6138] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.890491][ T6138] usb 7-1: Product: syz [ 1214.890501][ T6138] usb 7-1: Manufacturer: syz [ 1214.890509][ T6138] usb 7-1: SerialNumber: syz [ 1214.931658][ T6138] usb 7-1: config 0 descriptor?? [ 1214.998078][T16919] usb usb6-port1: unable to enumerate USB device [ 1215.559356][ T6138] usb 7-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1215.559375][ T6138] usb 7-1: Firmware version (0.0) predates our first public release. [ 1215.559384][ T6138] usb 7-1: Please update to version 0.2 or newer [ 1215.560391][T18872] hfs: unable to load iocharset "io#harset" [ 1215.761780][ T6138] usb 7-1: Firmware: build ' [ 1215.761780][ T6138] dú [ 1215.992623][ T6138] usb 7-1: USB disconnect, device number 107 [ 1216.619063][ T5808] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1216.835801][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 1216.838197][ T5808] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1216.838223][ T5808] usb 4-1: config 0 has no interface number 0 [ 1216.838262][ T5808] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.838285][ T5808] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.838321][ T5808] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1216.838341][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.871511][ T5808] usb 4-1: config 0 descriptor?? [ 1217.559879][ T5808] usbhid 4-1:0.4: can't add hid device: -71 [ 1217.559996][ T5808] usbhid 4-1:0.4: probe with driver usbhid failed with error -71 [ 1217.617574][ T5808] usb 4-1: USB disconnect, device number 82 [ 1219.774497][ T6138] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1219.832345][T17781] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1220.283704][T17781] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.283758][T17781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.283781][T17781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.283815][T17781] usb 7-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1220.283828][T17781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.286543][ T6138] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1220.286568][ T6138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.286578][ T6138] usb 5-1: Product: syz [ 1220.286586][ T6138] usb 5-1: Manufacturer: syz [ 1220.286593][ T6138] usb 5-1: SerialNumber: syz [ 1220.293665][T17781] usb 7-1: config 0 descriptor?? [ 1220.712143][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1220.712262][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1220.902150][T18673] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1220.925538][T17781] usbhid 7-1:0.0: can't add hid device: -71 [ 1220.925658][T17781] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1220.928728][T17781] usb 7-1: USB disconnect, device number 108 [ 1221.084294][T18673] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.084320][T18673] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1221.087245][T18673] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1221.087275][T18673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.087294][T18673] usb 4-1: Product: syz [ 1221.087307][T18673] usb 4-1: Manufacturer: syz [ 1221.087321][T18673] usb 4-1: SerialNumber: syz [ 1221.362321][T18673] usb 4-1: 0:2 : does not exist [ 1221.399441][T18673] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1221.604957][T18673] usb 4-1: USB disconnect, device number 83 [ 1221.666243][T14965] udevd[14965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1222.613052][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1222.613406][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1222.613551][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1222.613892][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1222.615824][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE [ 1222.615884][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1222.616687][ T6138] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1223.764136][ T6138] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1223.902074][ T6138] usb 5-1: USB disconnect, device number 12 [ 1228.166873][ T6139] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1229.481868][ T6139] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1229.481898][ T6139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.481916][ T6139] usb 4-1: Product: syz [ 1229.482058][ T6139] usb 4-1: Manufacturer: syz [ 1229.482072][ T6139] usb 4-1: SerialNumber: syz [ 1229.968318][ T6139] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1229.968378][ T6139] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1232.443526][ T6139] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1232.444136][ T6139] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1232.444610][ T6139] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1232.444667][ T6139] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1232.447836][ T6139] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1232.601507][ T6139] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1232.699498][ T6139] usb 4-1: USB disconnect, device number 84 [ 1238.971206][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.971267][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.992089][ T6139] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 1239.122054][ T6139] usb 7-1: device descriptor read/64, error -71 [ 1239.162155][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1239.328178][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1239.328208][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.382195][ T6139] usb 7-1: new full-speed USB device number 110 using dummy_hcd [ 1239.479699][ T10] usb 4-1: config 0 descriptor?? [ 1239.489902][ T10] cp210x 4-1:0.0: cp210x converter detected [ 1239.532047][ T6139] usb 7-1: device descriptor read/64, error -71 [ 1239.700999][ T6139] usb usb7-port1: attempt power cycle [ 1239.831630][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1239.831649][ T10] cp210x 4-1:0.0: querying part number failed [ 1239.856884][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1239.861793][ T10] usb 4-1: USB disconnect, device number 85 [ 1239.890537][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1239.896848][ T10] cp210x 4-1:0.0: device disconnected [ 1240.992078][ T6139] usb 7-1: new full-speed USB device number 111 using dummy_hcd [ 1240.999940][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 1241.012781][ T6139] usb 7-1: device descriptor read/8, error -71 [ 1241.252105][ T6139] usb 7-1: new full-speed USB device number 112 using dummy_hcd [ 1241.275976][ T6139] usb 7-1: device descriptor read/8, error -71 [ 1241.331357][T19103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1241.331377][T19103] IPv6: NLM_F_CREATE should be set when creating new route [ 1241.382858][ T6139] usb usb7-port1: unable to enumerate USB device [ 1242.058253][T19118] tipc: Enabling of bearer rejected, failed to enable media [ 1242.067375][T19118] syzkaller0: entered promiscuous mode [ 1242.067402][T19118] syzkaller0: entered allmulticast mode [ 1242.233681][T19125] netlink: 'syz.6.3878': attribute type 27 has an invalid length. [ 1242.433728][T19127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1242.635789][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3879'. [ 1245.177863][ T5816] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1245.530601][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 1245.532892][ T5816] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1245.532917][ T5816] usb 5-1: config 0 has no interface number 0 [ 1246.338608][ T5816] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1246.338636][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.338654][ T5816] usb 5-1: Product: syz [ 1246.338666][ T5816] usb 5-1: Manufacturer: syz [ 1246.338686][ T5816] usb 5-1: SerialNumber: syz [ 1246.401303][ T5816] usb 5-1: config 0 descriptor?? [ 1246.824268][ T5816] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1246.824287][ T5816] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1247.025507][ T5816] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1247.025817][ T5816] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1248.099190][T18673] usb 5-1: USB disconnect, device number 13 [ 1248.329398][T19163] tipc: Started in network mode [ 1248.329428][T19163] tipc: Node identity cedb05e0d28a, cluster identity 4711 [ 1248.329610][T19163] tipc: Enabled bearer , priority 0 [ 1248.333123][T19163] syzkaller0: entered promiscuous mode [ 1248.333146][T19163] syzkaller0: entered allmulticast mode [ 1248.344209][T19163] tipc: Resetting bearer [ 1248.382447][T19163] tipc: Resetting bearer [ 1248.483249][T18673] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1248.543059][T19163] tipc: Disabling bearer [ 1248.714691][T18673] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1248.714722][T18673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.714733][T18673] usb 5-1: Product: syz [ 1248.714740][T18673] usb 5-1: Manufacturer: syz [ 1248.714748][T18673] usb 5-1: SerialNumber: syz [ 1248.761235][T18673] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1249.731744][ T6139] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1249.746841][ T10] tipc: Node number set to 475071968 [ 1250.032771][T19178] tipc: Enabling of bearer rejected, failed to enable media [ 1250.033547][T19178] syzkaller0: entered promiscuous mode [ 1250.033570][T19178] syzkaller0: entered allmulticast mode [ 1251.519489][ T6139] usb 5-1: Service connection timeout for: 256 [ 1251.519512][ T6139] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1252.777569][ T5903] usb 5-1: USB disconnect, device number 14 [ 1252.812245][ T6139] ath9k_htc: Failed to initialize the device [ 1252.820264][ T5903] usb 5-1: ath9k_htc: USB layer deinitialized [ 1252.958394][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3894'. [ 1253.802098][T17781] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1253.972067][T17781] usb 5-1: Using ep0 maxpacket: 32 [ 1253.974898][T17781] usb 5-1: no configurations [ 1253.974916][T17781] usb 5-1: can't read configurations, error -22 [ 1254.152150][T17781] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1254.542055][T17781] usb 5-1: Using ep0 maxpacket: 32 [ 1254.787673][T17781] usb 5-1: no configurations [ 1254.787692][T17781] usb 5-1: can't read configurations, error -22 [ 1254.877033][T17781] usb usb5-port1: attempt power cycle [ 1255.256968][T17781] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1255.272755][T17781] usb 5-1: Using ep0 maxpacket: 32 [ 1255.273552][T17781] usb 5-1: no configurations [ 1255.273567][T17781] usb 5-1: can't read configurations, error -22 [ 1255.592076][T17781] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1255.622717][T17781] usb 5-1: Using ep0 maxpacket: 32 [ 1255.623504][T17781] usb 5-1: no configurations [ 1255.623519][T17781] usb 5-1: can't read configurations, error -22 [ 1255.638112][T17781] usb usb5-port1: unable to enumerate USB device [ 1262.375145][T19219] tipc: Started in network mode [ 1262.375206][T19219] tipc: Node identity be17cc2da92, cluster identity 4711 [ 1262.375400][T19219] tipc: Enabled bearer , priority 0 [ 1262.420585][T19222] syzkaller0: entered promiscuous mode [ 1262.420611][T19222] syzkaller0: entered allmulticast mode [ 1263.895437][T19222] tipc: Resetting bearer [ 1266.064355][T19222] tipc: Disabling bearer [ 1268.049992][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1268.219967][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1268.314190][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1268.316024][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1268.318617][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1269.251656][T10931] tipc: Node number set to 389532717 [ 1270.044729][T19250] lo speed is unknown, defaulting to 1000 [ 1270.482104][ T5805] Bluetooth: hci0: command tx timeout [ 1271.935995][T16919] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1272.232151][T16919] usb 5-1: Using ep0 maxpacket: 32 [ 1272.237200][T16919] usb 5-1: no configurations [ 1272.237218][T16919] usb 5-1: can't read configurations, error -22 [ 1272.574735][ T5805] Bluetooth: hci0: command tx timeout [ 1272.576123][T16919] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1274.582364][ T5805] Bluetooth: hci0: command tx timeout [ 1276.392083][ T6081] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1276.565731][ T6081] usb 4-1: device descriptor read/64, error -71 [ 1276.662079][T14164] Bluetooth: hci0: command tx timeout [ 1277.062069][T14164] Bluetooth: hci5: command 0x0406 tx timeout [ 1277.502311][ T6081] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1277.646317][ T6081] usb 4-1: device descriptor read/64, error -71 [ 1277.705644][T19250] lo speed is unknown, defaulting to 1000 [ 1277.768650][ T6081] usb usb4-port1: attempt power cycle [ 1277.871233][ T5805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1277.965549][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1277.973740][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1278.085513][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1278.086622][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1278.260959][ T6081] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1278.482125][ T6081] usb 4-1: device not accepting address 88, error -71 [ 1280.291116][T14164] Bluetooth: hci6: command tx timeout [ 1282.342028][T14164] Bluetooth: hci6: command tx timeout [ 1283.909165][T19280] lo speed is unknown, defaulting to 1000 [ 1284.423447][T14164] Bluetooth: hci6: command tx timeout [ 1286.502256][T14164] Bluetooth: hci6: command tx timeout [ 1287.847162][T19339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3941'. [ 1289.425168][T19339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.485075][T19339] team0: Port device bond0 added [ 1289.509179][T19340] bridge0: port 3(team0) entered blocking state [ 1289.509335][T19340] bridge0: port 3(team0) entered disabled state [ 1289.509561][T19340] team0: entered allmulticast mode [ 1289.509577][T19340] team_slave_0: entered allmulticast mode [ 1289.509596][T19340] team_slave_1: entered allmulticast mode [ 1289.509621][T19340] bond0: entered allmulticast mode [ 1289.509635][T19340] bond_slave_0: entered allmulticast mode [ 1289.509651][T19340] bond_slave_1: entered allmulticast mode [ 1289.550363][T19340] team0: entered promiscuous mode [ 1289.550388][T19340] team_slave_0: entered promiscuous mode [ 1289.550566][T19340] team_slave_1: entered promiscuous mode [ 1289.550739][T19340] bond0: entered promiscuous mode [ 1289.550753][T19340] bond_slave_0: entered promiscuous mode [ 1289.550956][T19340] bond_slave_1: entered promiscuous mode [ 1289.777064][T19340] bridge0: port 3(team0) entered blocking state [ 1289.777191][T19340] bridge0: port 3(team0) entered forwarding state [ 1290.634098][T19188] IPVS: starting estimator thread 0... [ 1290.832426][T19348] IPVS: using max 10 ests per chain, 24000 per kthread [ 1290.996436][T19250] chnl_net:caif_netlink_parms(): no params data found [ 1293.551754][T19280] lo speed is unknown, defaulting to 1000 [ 1300.352698][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.352757][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.860044][T19388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1307.865142][T19388] IPv6: NLM_F_CREATE should be set when creating new route [ 1307.865561][T19388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3952'. [ 1307.982226][T19250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.982350][T19250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.982596][T19250] bridge_slave_0: entered allmulticast mode [ 1307.993310][T19250] bridge_slave_0: entered promiscuous mode [ 1310.548604][T19250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.548728][T19250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.548974][T19250] bridge_slave_1: entered allmulticast mode [ 1310.599605][T19250] bridge_slave_1: entered promiscuous mode [ 1310.802262][T14615] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1312.485674][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1312.500255][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1312.532131][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1312.898962][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1312.899734][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1313.095674][T14615] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1313.095704][T14615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.095723][T14615] usb 5-1: Product: syz [ 1313.095737][T14615] usb 5-1: Manufacturer: syz [ 1313.103588][T14615] usb 5-1: config 0 descriptor?? [ 1313.104158][T14615] usb 5-1: can't set config #0, error -71 [ 1313.152099][T14615] usb 5-1: USB disconnect, device number 21 [ 1314.982087][ T5805] Bluetooth: hci2: command tx timeout [ 1317.181980][ T5805] Bluetooth: hci2: command tx timeout [ 1319.229403][ T5805] Bluetooth: hci2: command tx timeout [ 1320.412201][T19250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.332140][ T5805] Bluetooth: hci2: command tx timeout [ 1323.726466][T19250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.858018][T19424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1323.858037][T19424] IPv6: NLM_F_CREATE should be set when creating new route [ 1323.858315][T19424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1324.069354][T19379] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.258908][T19394] lo speed is unknown, defaulting to 1000 [ 1324.265756][T19250] team0: Port device team_slave_0 added [ 1324.769798][T19379] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.865461][T19441] overlayfs: missing 'lowerdir' [ 1325.954319][T19250] team0: Port device team_slave_1 added [ 1325.954607][T19394] lo speed is unknown, defaulting to 1000 [ 1326.489180][T14164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1326.496468][T14164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1326.507762][T14164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1326.509414][T14164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1326.510120][T14164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1327.010113][T19379] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.981330][T19379] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.425539][T19452] lo speed is unknown, defaulting to 1000 [ 1328.455134][T19280] chnl_net:caif_netlink_parms(): no params data found [ 1328.588990][T14164] Bluetooth: hci1: command tx timeout [ 1330.693076][T14164] Bluetooth: hci1: command tx timeout [ 1331.132056][T19452] lo speed is unknown, defaulting to 1000 [ 1331.623880][T19280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.623999][T19280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.624179][T19280] bridge_slave_0: entered allmulticast mode [ 1331.625824][T19280] bridge_slave_0: entered promiscuous mode [ 1331.690532][T19379] bridge_slave_1: left allmulticast mode [ 1331.690562][T19379] bridge_slave_1: left promiscuous mode [ 1331.690813][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.853245][T19379] bridge_slave_0: left allmulticast mode [ 1331.853269][T19379] bridge_slave_0: left promiscuous mode [ 1331.853468][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.312795][T19487] overlayfs: missing 'workdir' [ 1332.756232][T14164] Bluetooth: hci1: command tx timeout [ 1334.182242][T14615] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1334.250144][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1334.299860][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1334.301255][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1334.311778][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1334.320734][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1334.353251][T14615] usb 5-1: Using ep0 maxpacket: 32 [ 1334.369653][T14615] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.369677][T14615] usb 5-1: config 0 has no interfaces? [ 1334.369708][T14615] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1334.369724][T14615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.373450][T14615] usb 5-1: config 0 descriptor?? [ 1334.406085][T19379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.482925][T19379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.528914][T19379] bond0 (unregistering): Released all slaves [ 1334.542378][T19280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.542537][T19280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.542740][T19280] bridge_slave_1: entered allmulticast mode [ 1334.544140][T19280] bridge_slave_1: entered promiscuous mode [ 1334.845956][T19379] tipc: Left network mode [ 1334.861155][ T5805] Bluetooth: hci1: command tx timeout [ 1334.862331][T19394] chnl_net:caif_netlink_parms(): no params data found [ 1336.429438][ T5805] Bluetooth: hci0: command tx timeout [ 1336.723988][T19497] lo speed is unknown, defaulting to 1000 [ 1336.927400][ T6138] usb 5-1: USB disconnect, device number 22 [ 1337.756120][T19522] overlayfs: missing 'workdir' [ 1338.502104][ T5805] Bluetooth: hci0: command tx timeout [ 1338.952977][T19497] lo speed is unknown, defaulting to 1000 [ 1339.675765][T19394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.675880][T19394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.676112][T19394] bridge_slave_0: entered allmulticast mode [ 1339.678661][T19394] bridge_slave_0: entered promiscuous mode [ 1339.845803][T19394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.845944][T19394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.846175][T19394] bridge_slave_1: entered allmulticast mode [ 1339.851401][T19394] bridge_slave_1: entered promiscuous mode [ 1340.082415][T19452] chnl_net:caif_netlink_parms(): no params data found [ 1340.238481][T19394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.406299][T19379] hsr_slave_0: left promiscuous mode [ 1340.442122][T19379] hsr_slave_1: left promiscuous mode [ 1340.443359][T19379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1340.443385][T19379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.503501][T19379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.503530][T19379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.584694][ T5805] Bluetooth: hci0: command tx timeout [ 1340.624127][T19379] veth1_macvtap: left promiscuous mode [ 1340.624233][T19379] veth0_macvtap: left promiscuous mode [ 1340.624474][T19379] veth1_vlan: left promiscuous mode [ 1340.624651][T19379] veth0_vlan: left promiscuous mode [ 1341.352020][T14615] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1341.405811][T19379] team0 (unregistering): Port device team_slave_1 removed [ 1341.464660][T19379] team0 (unregistering): Port device team_slave_0 removed [ 1341.502025][T14615] usb 4-1: Using ep0 maxpacket: 32 [ 1341.517271][T14615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.517287][T14615] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1341.517308][T14615] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1341.517320][T14615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.562514][T14615] usb 4-1: config 0 descriptor?? [ 1341.742554][T19394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.964473][T19394] team0: Port device team_slave_0 added [ 1341.981400][T19394] team0: Port device team_slave_1 added [ 1342.161084][T19452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.161245][T19452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.161397][T19452] bridge_slave_0: entered allmulticast mode [ 1342.163511][T19452] bridge_slave_0: entered promiscuous mode [ 1342.205729][T19394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1342.205744][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.205766][T19394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1342.206784][T19452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.207842][T19452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.208043][T19452] bridge_slave_1: entered allmulticast mode [ 1342.210330][T19452] bridge_slave_1: entered promiscuous mode [ 1342.237562][T19394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1342.237578][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.237601][T19394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.372775][ T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1342.539218][T19452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.559305][T19452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.662792][ T5805] Bluetooth: hci0: command tx timeout [ 1343.093992][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.094037][ T43] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1343.094057][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.122394][T19394] hsr_slave_0: entered promiscuous mode [ 1343.123866][T19394] hsr_slave_1: entered promiscuous mode [ 1343.147814][ T43] usb 5-1: config 0 descriptor?? [ 1343.160558][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1343.178216][T19452] team0: Port device team_slave_0 added [ 1343.191634][T19497] chnl_net:caif_netlink_parms(): no params data found [ 1343.242362][T19452] team0: Port device team_slave_1 added [ 1343.423575][T19452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.423587][T19452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.423601][T19452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.516810][T19452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.516822][T19452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.516837][T19452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.941273][T19497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.941545][T19497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.941742][T19497] bridge_slave_0: entered allmulticast mode [ 1343.948476][T19497] bridge_slave_0: entered promiscuous mode [ 1344.137035][T19497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.137120][T19497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.137300][T19497] bridge_slave_1: entered allmulticast mode [ 1344.139973][T19497] bridge_slave_1: entered promiscuous mode [ 1344.148094][T19188] usb 4-1: USB disconnect, device number 90 [ 1344.178667][T19452] hsr_slave_0: entered promiscuous mode [ 1344.179394][T19452] hsr_slave_1: entered promiscuous mode [ 1344.179889][T19452] debugfs: 'hsr0' already exists in 'hsr' [ 1344.179904][T19452] Cannot create hsr debugfs directory [ 1344.519865][T19591] overlayfs: missing 'workdir' [ 1345.405150][ T6138] usb 5-1: USB disconnect, device number 23 [ 1346.793387][T19497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.145869][T19379] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.230478][T19497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.137622][T19617] overlayfs: missing 'lowerdir' [ 1348.149409][ T6081] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1348.825593][T19379] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.890611][T19497] team0: Port device team_slave_0 added [ 1348.922138][ T6081] usb 5-1: Using ep0 maxpacket: 32 [ 1348.929270][ T6081] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.929297][ T6081] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1349.283333][ T6081] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1349.283363][ T6081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.283383][ T6081] usb 5-1: Product: syz [ 1349.283396][ T6081] usb 5-1: Manufacturer: syz [ 1349.283410][ T6081] usb 5-1: SerialNumber: syz [ 1349.290212][ T6081] usb 5-1: config 0 descriptor?? [ 1349.328051][T19497] team0: Port device team_slave_1 added [ 1349.874428][T19379] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.066515][T19497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.066532][T19497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.066559][T19497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.342672][T19497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.342690][T19497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.342715][T19497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.599953][T19379] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.706018][T19633] sctp: [Deprecated]: syz.3.4004 (pid 19633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1350.706018][T19633] Use struct sctp_sack_info instead [ 1350.847889][T14615] usb 5-1: USB disconnect, device number 24 [ 1351.099757][T19497] hsr_slave_0: entered promiscuous mode [ 1351.100686][T19497] hsr_slave_1: entered promiscuous mode [ 1351.101243][T19497] debugfs: 'hsr0' already exists in 'hsr' [ 1351.101266][T19497] Cannot create hsr debugfs directory [ 1351.426275][T19645] overlayfs: missing 'lowerdir' [ 1353.622749][T10931] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1353.799577][T10931] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1353.799608][T10931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.799627][T10931] usb 5-1: Product: syz [ 1353.799639][T10931] usb 5-1: Manufacturer: syz [ 1353.799652][T10931] usb 5-1: SerialNumber: syz [ 1353.848390][T10931] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1353.860946][ T6139] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1355.432026][ T6139] usb 5-1: Service connection timeout for: 256 [ 1355.432050][ T6139] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1356.444444][T14615] usb 5-1: USB disconnect, device number 25 [ 1356.515200][ T6139] ath9k_htc: Failed to initialize the device [ 1356.522022][T14615] usb 5-1: ath9k_htc: USB layer deinitialized [ 1356.534373][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1356.925141][T19379] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.962232][T14615] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1357.112220][T14615] usb 5-1: Using ep0 maxpacket: 32 [ 1357.114316][T14615] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1357.114343][T14615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.120182][T14615] usb 5-1: config 0 descriptor?? [ 1357.417155][T14615] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1357.428544][T14615] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1357.430879][T14615] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1357.430946][T14615] usb 5-1: media controller created [ 1357.467852][T14615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1357.636451][T14615] DVB: Unable to find symbol dib7000p_attach() [ 1357.636468][T14615] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1357.661542][T19379] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.732023][T14615] rc_core: IR keymap rc-dib0700-rc5 not found [ 1357.732043][T14615] Registered IR keymap rc-empty [ 1357.732495][T14615] dvb-usb: could not initialize remote control. [ 1357.732508][T14615] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1357.762750][T14615] usb 5-1: USB disconnect, device number 26 [ 1357.881349][T14615] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1358.048846][T19379] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.503091][ T6081] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1358.535166][T19379] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.982183][ T6081] usb 4-1: Using ep0 maxpacket: 32 [ 1358.985745][ T6081] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.985771][ T6081] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1358.995022][T19394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1359.042040][ T6081] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1359.042069][ T6081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.042087][ T6081] usb 4-1: Product: syz [ 1359.042100][ T6081] usb 4-1: Manufacturer: syz [ 1359.042112][ T6081] usb 4-1: SerialNumber: syz [ 1359.045239][ T6081] usb 4-1: config 0 descriptor?? [ 1359.665757][T19394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1360.263909][T19697] overlayfs: missing 'lowerdir' [ 1360.752813][T19394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1360.809084][T19394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1361.397355][T14615] usb 4-1: USB disconnect, device number 91 [ 1361.590866][T19714] ======================================================= [ 1361.590866][T19714] WARNING: The mand mount option has been deprecated and [ 1361.590866][T19714] and is ignored by this kernel. Remove the mand [ 1361.590866][T19714] option from the mount to silence this warning. [ 1361.590866][T19714] ======================================================= [ 1361.591027][T19714] 9p: Bad value for 'wfdno' [ 1361.797855][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.797950][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.566765][T19379] bridge_slave_1: left allmulticast mode [ 1362.566794][T19379] bridge_slave_1: left promiscuous mode [ 1362.567037][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.685511][T19379] bridge_slave_0: left allmulticast mode [ 1362.685539][T19379] bridge_slave_0: left promiscuous mode [ 1362.685797][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.049024][T19379] bridge_slave_1: left allmulticast mode [ 1363.049054][T19379] bridge_slave_1: left promiscuous mode [ 1363.049286][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.984899][T19749] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1363.985284][T19749] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1364.634751][T19379] bridge_slave_0: left allmulticast mode [ 1364.634782][T19379] bridge_slave_0: left promiscuous mode [ 1364.635011][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.637532][T14164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1366.655902][T14164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1366.659463][T14164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1366.690822][T14164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1366.716248][T14164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1367.174033][T19379] bridge_slave_1: left allmulticast mode [ 1367.174053][T19379] bridge_slave_1: left promiscuous mode [ 1367.174200][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.602842][T19379] bridge_slave_0: left allmulticast mode [ 1367.602872][T19379] bridge_slave_0: left promiscuous mode [ 1367.603114][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.013996][T19379] bridge_slave_1: left allmulticast mode [ 1369.014027][T19379] bridge_slave_1: left promiscuous mode [ 1369.014246][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.142118][ T5805] Bluetooth: hci4: command tx timeout [ 1369.345368][T19379] bridge_slave_0: left allmulticast mode [ 1369.345398][T19379] bridge_slave_0: left promiscuous mode [ 1369.345633][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.492141][ T6081] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1369.662173][ T6081] usb 4-1: Using ep0 maxpacket: 32 [ 1369.664282][ T6081] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.664307][ T6081] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1369.666891][ T6081] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1369.666920][ T6081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.666939][ T6081] usb 4-1: Product: syz [ 1369.666951][ T6081] usb 4-1: Manufacturer: syz [ 1369.666965][ T6081] usb 4-1: SerialNumber: syz [ 1369.698831][ T6081] usb 4-1: config 0 descriptor?? [ 1371.222028][ T5805] Bluetooth: hci4: command tx timeout [ 1372.306071][ T43] usb 4-1: USB disconnect, device number 92 [ 1372.496328][T19809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4029'. [ 1373.302034][ T5805] Bluetooth: hci4: command tx timeout [ 1375.382124][ T5805] Bluetooth: hci4: command tx timeout [ 1378.303073][T14164] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1378.307892][T14164] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1378.309370][T14164] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1378.336160][T14164] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1378.336947][T14164] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1380.422143][ T5805] Bluetooth: hci6: command tx timeout [ 1382.504557][ T5805] Bluetooth: hci6: command tx timeout [ 1384.582178][ T5805] Bluetooth: hci6: command tx timeout [ 1386.667293][ T5805] Bluetooth: hci6: command tx timeout [ 1386.843892][T14164] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1386.847984][T14164] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1386.849793][T14164] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1386.851280][T14164] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1386.885076][T14164] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1388.159131][ T5805] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1388.175104][ T5805] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1388.176714][ T5805] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1388.180397][ T5805] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1388.181141][ T5805] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1388.982227][T14164] Bluetooth: hci7: command tx timeout [ 1390.662165][T14164] Bluetooth: hci8: command tx timeout [ 1391.062196][T14164] Bluetooth: hci7: command tx timeout [ 1392.742100][T14164] Bluetooth: hci8: command tx timeout [ 1393.142198][T14164] Bluetooth: hci7: command tx timeout [ 1394.298702][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1394.324938][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1394.326612][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1394.371675][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1394.382871][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1394.822239][T14164] Bluetooth: hci8: command tx timeout [ 1395.222364][T14164] Bluetooth: hci7: command tx timeout [ 1396.502281][T14164] Bluetooth: hci5: command tx timeout [ 1396.902086][T14164] Bluetooth: hci8: command tx timeout [ 1398.582160][T14164] Bluetooth: hci5: command tx timeout [ 1398.949125][T19379] bond0 (unregistering): Released all slaves [ 1400.662138][T14164] Bluetooth: hci5: command tx timeout [ 1402.744400][T14164] Bluetooth: hci5: command tx timeout [ 1423.230130][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.230231][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.844973][ T5805] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1426.878714][ T5805] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1426.880983][ T5805] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1426.902348][ T5805] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1426.904585][ T5805] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1428.982268][T14164] Bluetooth: hci9: command tx timeout [ 1431.062078][T14164] Bluetooth: hci9: command tx timeout [ 1433.142162][T14164] Bluetooth: hci9: command tx timeout [ 1435.222009][ T5805] Bluetooth: hci9: command tx timeout [ 1435.542028][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 1438.404699][ T5805] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1438.426199][ T5805] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1438.428126][ T5805] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1438.451230][ T5805] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1438.463002][ T5805] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1440.582314][ T5805] Bluetooth: hci10: command tx timeout [ 1442.662175][ T5805] Bluetooth: hci10: command tx timeout [ 1444.742191][ T5805] Bluetooth: hci10: command tx timeout [ 1446.822626][ T5805] Bluetooth: hci10: command tx timeout [ 1447.423652][T14164] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1447.456101][T14164] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1447.458891][T14164] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1447.460847][T14164] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1447.488000][T14164] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1448.460239][ T5805] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1448.496843][ T5805] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1448.501506][ T5805] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1448.524577][ T5805] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1448.526577][ T5805] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1449.705906][ T5805] Bluetooth: hci11: command tx timeout [ 1450.662132][ T5805] Bluetooth: hci12: command tx timeout [ 1450.915995][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 1451.782225][T14164] Bluetooth: hci11: command tx timeout [ 1452.742166][T14164] Bluetooth: hci12: command tx timeout [ 1453.862216][T14164] Bluetooth: hci11: command tx timeout [ 1454.515585][ T5805] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1454.547637][ T5805] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1454.549431][ T5805] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1454.550773][ T5805] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1454.551619][ T5805] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1454.822073][ T5805] Bluetooth: hci12: command tx timeout [ 1455.942938][ T5805] Bluetooth: hci11: command tx timeout [ 1456.662107][ T5805] Bluetooth: hci13: command tx timeout [ 1456.839803][T19379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.902024][ T5805] Bluetooth: hci12: command tx timeout [ 1458.239161][T19379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.751679][ T5805] Bluetooth: hci13: command tx timeout [ 1458.833642][T19379] bond0 (unregistering): Released all slaves [ 1460.822646][ T5805] Bluetooth: hci13: command tx timeout [ 1461.198435][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 1462.902465][ T5805] Bluetooth: hci13: command tx timeout [ 1484.667136][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.667231][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.933511][ T5805] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1486.968480][ T5805] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1486.980426][ T5805] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1486.992976][ T5805] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1486.993724][ T5805] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1489.142150][ T5805] Bluetooth: hci14: command tx timeout [ 1491.222082][ T5805] Bluetooth: hci14: command tx timeout [ 1491.874282][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 1493.302085][T14164] Bluetooth: hci14: command tx timeout [ 1495.382036][T14164] Bluetooth: hci14: command tx timeout [ 1498.973544][ T5805] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1499.005879][ T5805] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1499.028746][ T5805] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1499.030217][ T5805] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1499.031669][ T5805] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1501.142403][T14164] Bluetooth: hci15: command tx timeout [ 1502.110726][T14164] Bluetooth: hci6: command 0x0406 tx timeout [ 1503.222333][ T5805] Bluetooth: hci15: command tx timeout [ 1505.303490][ T5805] Bluetooth: hci15: command tx timeout [ 1507.382150][ T5805] Bluetooth: hci15: command tx timeout [ 1508.436160][T14164] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1508.468705][T14164] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1508.486560][T14164] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1508.488541][T14164] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1508.489303][T14164] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1509.493611][ T5805] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1509.525151][ T5805] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1509.526802][ T5805] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1509.528282][ T5805] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1509.529011][ T5805] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1510.582103][T19876] Bluetooth: hci16: command tx timeout [ 1511.622099][T19876] Bluetooth: hci17: command tx timeout [ 1512.356885][T19876] Bluetooth: hci7: command 0x0406 tx timeout [ 1512.356912][ T5812] Bluetooth: hci8: command 0x0406 tx timeout [ 1512.662114][T19876] Bluetooth: hci16: command tx timeout [ 1513.702036][ T5805] Bluetooth: hci17: command tx timeout [ 1514.742311][T19286] Bluetooth: hci16: command tx timeout [ 1515.339460][T19286] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1515.392976][T19876] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1515.395555][T19876] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1515.398442][T19876] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1515.399214][T19876] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1515.782085][ T5805] Bluetooth: hci17: command tx timeout [ 1516.822174][ T5805] Bluetooth: hci16: command tx timeout [ 1517.301989][ T37] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 1517.302017][ T37] Tainted: G L syzkaller #0 [ 1517.302027][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.302037][ T37] task:kwor[ 1517.302037][ T37] task:kworker/u8:1 state:D stack:21504 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1517.302084][ T37] Workqueue: ipv6_addrconf addrconf_dad_work [ 1517.302245][ T37] Call Trace: [ 1517.302253][ T37] [ 1517.302268][ T37] __schedule+0x1553/0x5240 [ 1517.302386][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.302421][ T37] ? unwind_next_frame+0xa5/0x23c0 [ 1517.302447][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.302467][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.302505][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.302528][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.302567][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.302591][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.302614][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.302653][ T37] ? addrconf_dad_work+0x124/0x1680 [ 1517.302682][ T37] ? addrconf_dad_work+0x124/0x1680 [ 1517.302704][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.302730][ T37] addrconf_dad_work+0x124/0x1680 [ 1517.302760][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1517.302788][ T37] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1517.302822][ T37] ? process_scheduled_works+0xa8d/0x18c0 [ 1517.302845][ T37] ? process_scheduled_works+0xa8d/0x18c0 [ 1517.302870][ T37] process_scheduled_works+0xb6e/0x18c0 [ 1517.302923][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1517.302961][ T37] ? assign_work+0x3d5/0x5e0 [ 1517.302989][ T37] worker_thread+0xa53/0xfc0 [ 1517.303039][ T37] kthread+0x388/0x470 [ 1517.303059][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1517.303081][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.303102][ T37] ret_from_fork+0x51e/0xb90 [ 1517.303129][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.303151][ T37] ? __switch_to+0xc7d/0x1450 [ 1517.303198][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.303239][ T37] ret_from_fork_asm+0x1a/0x30 [ 1517.303291][ T37] [ 1517.303417][ T37] INFO: task dhcpcd:5464 blocked for more than 143 seconds. [ 1517.303433][ T37] Tainted: G L syzkaller #0 [ 1517.303443][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.303453][ T37] task:dhcpcd state:D stack:19944 pid:5464 tgid:5464 ppid:5463 task_flags:0x400140 flags:0x00080000 [ 1517.303499][ T37] Call Trace: [ 1517.303506][ T37] [ 1517.303517][ T37] __schedule+0x1553/0x5240 [ 1517.303546][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.303579][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.303599][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.303637][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.303658][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.303697][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.303721][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.303743][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.303763][ T37] ? unwind_next_frame+0xa5/0x23c0 [ 1517.303798][ T37] ? inet6_rtm_deladdr+0x23d/0x370 [ 1517.303856][ T37] ? inet6_rtm_deladdr+0x23d/0x370 [ 1517.303873][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.303900][ T37] inet6_rtm_deladdr+0x23d/0x370 [ 1517.303924][ T37] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 1517.303966][ T37] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 1517.303987][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1517.304087][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1517.304109][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1517.304135][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.304163][ T37] netlink_rcv_skb+0x232/0x4b0 [ 1517.304239][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1517.304263][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1517.304297][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1517.304327][ T37] netlink_unicast+0x831/0x9f0 [ 1517.304357][ T37] ? __pfx_netlink_unicast+0x10/0x10 [ 1517.304381][ T37] ? netlink_sendmsg+0x650/0xb40 [ 1517.304402][ T37] ? skb_put+0x11b/0x210 [ 1517.304513][ T37] netlink_sendmsg+0x813/0xb40 [ 1517.304545][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.304575][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1517.304667][ T37] ____sys_sendmsg+0x94c/0x9c0 [ 1517.304693][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1517.304721][ T37] ? import_iovec+0x73/0xa0 [ 1517.304824][ T37] ___sys_sendmsg+0x2a5/0x360 [ 1517.304842][ T37] ? __pfx_css_rstat_updated+0x10/0x10 [ 1517.304871][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 1517.304895][ T37] ? count_memcg_event_mm+0x21/0x260 [ 1517.305006][ T37] ? __pfx_handle_mm_fault+0x10/0x10 [ 1517.305038][ T37] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1517.305061][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1517.305091][ T37] ? do_user_addr_fault+0xc6f/0x1340 [ 1517.305137][ T37] do_syscall_64+0x14d/0xf80 [ 1517.305229][ T37] ? trace_irq_disable+0x3b/0x150 [ 1517.305250][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.305285][ T37] ? clear_bhb_loop+0x40/0x90 [ 1517.305309][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.305328][ T37] RIP: 0033:0x7fba3b89b407 [ 1517.305351][ T37] RSP: 002b:00007ffcb0bf1830 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1517.305370][ T37] RAX: ffffffffffffffda RBX: 00007fba3b811780 RCX: 00007fba3b89b407 [ 1517.305384][ T37] RDX: 0000000000000000 RSI: 00007ffcb0c05a10 RDI: 0000000000000004 [ 1517.305396][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1517.305408][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcb0c15c40 [ 1517.305420][ T37] R13: 00007fba3b811708 R14: 000000000000002c R15: 00007ffcb0c05a10 [ 1517.305449][ T37] [ 1517.305469][ T37] INFO: task kworker/1:9:6138 blocked for more than 143 seconds. [ 1517.305485][ T37] Tainted: G L syzkaller #0 [ 1517.305495][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.305504][ T37] task:kworker/1:9 state:D stack:19008 pid:6138 tgid:6138 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1517.305550][ T37] Workqueue: events switchdev_deferred_process_work [ 1517.305631][ T37] Call Trace: [ 1517.305638][ T37] [ 1517.305650][ T37] __schedule+0x1553/0x5240 [ 1517.305701][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.305740][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.305762][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.305795][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1517.305819][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.305842][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.305864][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.305911][ T37] ? switchdev_deferred_process_work+0xe/0x20 [ 1517.305934][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.305964][ T37] ? process_scheduled_works+0xa8d/0x18c0 [ 1517.306012][ T37] switchdev_deferred_process_work+0xe/0x20 [ 1517.306035][ T37] process_scheduled_works+0xb6e/0x18c0 [ 1517.306077][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1517.306111][ T37] ? assign_work+0x3d5/0x5e0 [ 1517.306127][ T37] worker_thread+0xa53/0xfc0 [ 1517.306189][ T37] kthread+0x388/0x470 [ 1517.306202][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1517.306215][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.306227][ T37] ret_from_fork+0x51e/0xb90 [ 1517.306243][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.306256][ T37] ? __switch_to+0xc7d/0x1450 [ 1517.306271][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.306282][ T37] ret_from_fork_asm+0x1a/0x30 [ 1517.306301][ T37] [ 1517.306329][ T37] INFO: task kworker/u8:0:14265 blocked for more than 143 seconds. [ 1517.306337][ T37] Tainted: G L syzkaller #0 [ 1517.306343][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.306348][ T37] task:kworker/u8:0 state:D stack:21536 pid:14265 tgid:14265 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1517.306381][ T37] Workqueue: events_unbound linkwatch_event [ 1517.306392][ T37] Call Trace: [ 1517.306396][ T37] [ 1517.306402][ T37] __schedule+0x1553/0x5240 [ 1517.306418][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.306430][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1517.306452][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.306463][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.306484][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.306496][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.306517][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.306530][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.306543][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.306567][ T37] ? linkwatch_event+0xe/0x60 [ 1517.306576][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.306588][ T37] ? process_scheduled_works+0xa8d/0x18c0 [ 1517.306603][ T37] linkwatch_event+0xe/0x60 [ 1517.306612][ T37] process_scheduled_works+0xb6e/0x18c0 [ 1517.306641][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1517.306657][ T37] ? assign_work+0x3d5/0x5e0 [ 1517.306673][ T37] worker_thread+0xa53/0xfc0 [ 1517.306700][ T37] kthread+0x388/0x470 [ 1517.306710][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1517.306723][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.306734][ T37] ret_from_fork+0x51e/0xb90 [ 1517.306749][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.306762][ T37] ? __switch_to+0xc7d/0x1450 [ 1517.306777][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.306788][ T37] ret_from_fork_asm+0x1a/0x30 [ 1517.306806][ T37] [ 1517.306830][ T37] INFO: task syz-executor:19394 blocked for more than 143 seconds. [ 1517.306838][ T37] Tainted: G L syzkaller #0 [ 1517.306844][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.306848][ T37] task:syz-executor state:D stack:22592 pid:19394 tgid:19394 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1517.306873][ T37] Call Trace: [ 1517.306877][ T37] [ 1517.306883][ T37] __schedule+0x1553/0x5240 [ 1517.306899][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.306916][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.306927][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.306954][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.306966][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.306986][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.307000][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.307012][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.307033][ T37] ? inet6_rtm_newaddr+0x65f/0xe30 [ 1517.307047][ T37] ? inet6_rtm_newaddr+0x65f/0xe30 [ 1517.307057][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.307072][ T37] inet6_rtm_newaddr+0x65f/0xe30 [ 1517.307086][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 1517.307116][ T37] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1517.307140][ T37] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1517.307151][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1517.307167][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1517.307180][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1517.307195][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.307210][ T37] netlink_rcv_skb+0x232/0x4b0 [ 1517.307224][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1517.307238][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1517.307257][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1517.307274][ T37] netlink_unicast+0x831/0x9f0 [ 1517.307290][ T37] ? __pfx_netlink_unicast+0x10/0x10 [ 1517.307303][ T37] ? netlink_sendmsg+0x650/0xb40 [ 1517.307315][ T37] ? skb_put+0x11b/0x210 [ 1517.307332][ T37] netlink_sendmsg+0x813/0xb40 [ 1517.307350][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.307367][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1517.307382][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.307395][ T37] __sys_sendto+0x67f/0x710 [ 1517.307446][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 1517.307474][ T37] ? fput_close_sync+0x11f/0x240 [ 1517.307543][ T37] ? __pfx_fput_close_sync+0x10/0x10 [ 1517.307560][ T37] __x64_sys_sendto+0xde/0x100 [ 1517.307576][ T37] do_syscall_64+0x14d/0xf80 [ 1517.307591][ T37] ? trace_irq_disable+0x3b/0x150 [ 1517.307603][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.307613][ T37] ? clear_bhb_loop+0x40/0x90 [ 1517.307626][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.307636][ T37] RIP: 0033:0x7feaf6aecfce [ 1517.307646][ T37] RSP: 002b:00007fffd555d7c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1517.307657][ T37] RAX: ffffffffffffffda RBX: 00005555710d1500 RCX: 00007feaf6aecfce [ 1517.307664][ T37] RDX: 0000000000000040 RSI: 00007feaf78d4670 RDI: 0000000000000003 [ 1517.307671][ T37] RBP: 0000000000000001 R08: 00007fffd555d844 R09: 000000000000000c [ 1517.307678][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1517.307684][ T37] R13: 0000000000000000 R14: 00007feaf78d4670 R15: 0000000000000000 [ 1517.307699][ T37] [ 1517.307704][ T37] INFO: task syz-executor:19452 blocked for more than 143 seconds. [ 1517.307713][ T37] Tainted: G L syzkaller #0 [ 1517.307718][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.307723][ T37] task:syz-executor state:D stack:22216 pid:19452 tgid:19452 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1517.307748][ T37] Call Trace: [ 1517.307752][ T37] [ 1517.307758][ T37] __schedule+0x1553/0x5240 [ 1517.307774][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.307792][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.307803][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.307824][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.307836][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.307857][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.307870][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.307883][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.307905][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1517.307950][ T37] ? new_device_store+0x13c/0x710 [ 1517.307998][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.308010][ T37] ? new_device_store+0x13c/0x710 [ 1517.308026][ T37] new_device_store+0x13c/0x710 [ 1517.308042][ T37] ? __pfx_new_device_store+0x10/0x10 [ 1517.308056][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 1517.308102][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1517.308113][ T37] ? sysfs_kf_write+0x166/0x260 [ 1517.308125][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1517.308135][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1517.308175][ T37] vfs_write+0x629/0xba0 [ 1517.308194][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1517.308211][ T37] ? kmem_cache_free+0x185/0x6b0 [ 1517.308250][ T37] ? do_sys_openat2+0x14c/0x200 [ 1517.308270][ T37] ksys_write+0x156/0x270 [ 1517.308286][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1517.308306][ T37] do_syscall_64+0x14d/0xf80 [ 1517.308320][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.308331][ T37] ? clear_bhb_loop+0x40/0x90 [ 1517.308343][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.308353][ T37] RIP: 0033:0x7f2f34a7cfce [ 1517.308363][ T37] RSP: 002b:00007ffd80adf8a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1517.308372][ T37] RAX: ffffffffffffffda RBX: 0000555562660500 RCX: 00007f2f34a7cfce [ 1517.308380][ T37] RDX: 0000000000000003 RSI: 00007ffd80adf930 RDI: 0000000000000005 [ 1517.308386][ T37] RBP: 00007f2f34b53540 R08: 0000000000000000 R09: 0000000000000000 [ 1517.308392][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1517.308399][ T37] R13: 00007ffd80adf930 R14: 00007f2f35864620 R15: 0000000000000003 [ 1517.308414][ T37] [ 1517.308421][ T37] INFO: task syz-executor:19497 blocked for more than 143 seconds. [ 1517.308429][ T37] Tainted: G L syzkaller #0 [ 1517.308435][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.308439][ T37] task:syz-executor state:D stack:22400 pid:19497 tgid:19497 ppid:1 task_flags:0x480140 flags:0x00080002 [ 1517.308468][ T37] Call Trace: [ 1517.308472][ T37] [ 1517.308478][ T37] __schedule+0x1553/0x5240 [ 1517.308494][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.308512][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.308523][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.308543][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.308555][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.308576][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.308589][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.308602][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.308621][ T37] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1517.308665][ T37] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1517.308677][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.308688][ T37] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1517.308702][ T37] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1517.308715][ T37] rtnl_net_dev_lock+0x257/0x2f0 [ 1517.308730][ T37] unregister_netdevice_notifier_dev_net+0x96/0x440 [ 1517.308749][ T37] ? nsim_destroy+0x8f/0x680 [ 1517.308790][ T37] ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10 [ 1517.308805][ T37] ? __pfx_mntput_no_expire_slowpath+0x10/0x10 [ 1517.308850][ T37] ? mntput_no_expire+0x1c/0x1c0 [ 1517.308861][ T37] ? rcu_is_watching+0x15/0xb0 [ 1517.308877][ T37] ? mntput_no_expire+0x1c/0x1c0 [ 1517.308889][ T37] nsim_destroy+0xd9/0x680 [ 1517.308907][ T37] __nsim_dev_port_del+0x14d/0x1b0 [ 1517.308921][ T37] nsim_dev_reload_destroy+0x288/0x490 [ 1517.308932][ T37] ? nsim_drv_remove+0x50/0x160 [ 1517.308949][ T37] nsim_drv_remove+0x58/0x160 [ 1517.308960][ T37] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1517.308975][ T37] device_release_driver_internal+0x46f/0x870 [ 1517.325824][ T37] bus_remove_device+0x352/0x440 [ 1517.325932][ T37] device_del+0x52b/0x900 [ 1517.325967][ T37] ? __pfx_device_del+0x10/0x10 [ 1517.325993][ T37] device_unregister+0x21/0xf0 [ 1517.326013][ T37] del_device_store+0x2b0/0x370 [ 1517.326041][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1517.326063][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1517.326083][ T37] ? sysfs_kf_write+0x166/0x260 [ 1517.326104][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1517.326120][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1517.326149][ T37] vfs_write+0x629/0xba0 [ 1517.326181][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1517.326207][ T37] ? kmem_cache_free+0x185/0x6b0 [ 1517.326222][ T37] ? do_sys_openat2+0x14c/0x200 [ 1517.326255][ T37] ksys_write+0x156/0x270 [ 1517.326279][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1517.326312][ T37] do_syscall_64+0x14d/0xf80 [ 1517.326335][ T37] ? trace_irq_disable+0x3b/0x150 [ 1517.326353][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.326371][ T37] ? clear_bhb_loop+0x40/0x90 [ 1517.326391][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.326409][ T37] RIP: 0033:0x7ff12490cfce [ 1517.326425][ T37] RSP: 002b:00007fffac8de4c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1517.326444][ T37] RAX: ffffffffffffffda RBX: 0000555594520500 RCX: 00007ff12490cfce [ 1517.326457][ T37] RDX: 0000000000000001 RSI: 00007fffac8de550 RDI: 0000000000000005 [ 1517.326468][ T37] RBP: 00007ff1249e351c R08: 0000000000000000 R09: 0000000000000000 [ 1517.326479][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.326490][ T37] R13: 00007fffac8de550 R14: 00007ff1256f4620 R15: 0000000000000003 [ 1517.326518][ T37] [ 1517.326536][ T37] INFO: task syz.4.4020:19738 blocked for more than 143 seconds. [ 1517.326552][ T37] Tainted: G L syzkaller #0 [ 1517.326561][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.326570][ T37] task:syz.4.4020 state:D stack:29024 pid:19738 tgid:19717 ppid:16933 task_flags:0x400040 flags:0x00080002 [ 1517.326620][ T37] Call Trace: [ 1517.326626][ T37] [ 1517.326637][ T37] __schedule+0x1553/0x5240 [ 1517.326665][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.326696][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.326716][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.326753][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.326773][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.326810][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.326832][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.326854][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.326889][ T37] ? do_ip_setsockopt+0xefa/0x2ea0 [ 1517.327004][ T37] ? do_ip_setsockopt+0xefa/0x2ea0 [ 1517.327024][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.327051][ T37] do_ip_setsockopt+0xefa/0x2ea0 [ 1517.327082][ T37] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1517.327104][ T37] ? do_futex+0x333/0x420 [ 1517.327120][ T37] ? file_init_path+0x455/0x5b0 [ 1517.327157][ T37] ? __fget_files+0x2a/0x420 [ 1517.327211][ T37] ip_setsockopt+0x66/0x110 [ 1517.327234][ T37] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1517.327258][ T37] do_sock_setsockopt+0x17c/0x1b0 [ 1517.327287][ T37] __x64_sys_setsockopt+0x143/0x1b0 [ 1517.327317][ T37] do_syscall_64+0x14d/0xf80 [ 1517.327339][ T37] ? trace_irq_disable+0x3b/0x150 [ 1517.327357][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.327376][ T37] ? clear_bhb_loop+0x40/0x90 [ 1517.327396][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.327414][ T37] RIP: 0033:0x7f890fe8c799 [ 1517.327428][ T37] RSP: 002b:00007f890e0a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1517.327445][ T37] RAX: ffffffffffffffda RBX: 00007f8910106180 RCX: 00007f890fe8c799 [ 1517.327459][ T37] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000006 [ 1517.327470][ T37] RBP: 00007f890ff22c99 R08: 000000000000000c R09: 0000000000000000 [ 1517.327480][ T37] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1517.327492][ T37] R13: 00007f8910106218 R14: 00007f8910106180 R15: 00007ffc350ece28 [ 1517.327522][ T37] [ 1517.327531][ T37] INFO: task syz-executor:19768 blocked for more than 143 seconds. [ 1517.327547][ T37] Tainted: G L syzkaller #0 [ 1517.327556][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.327565][ T37] task:syz-executor state:D stack:26944 pid:19768 tgid:19768 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1517.327612][ T37] Call Trace: [ 1517.327618][ T37] [ 1517.327629][ T37] __schedule+0x1553/0x5240 [ 1517.327672][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.327689][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.327720][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.327739][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.327768][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.327787][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.327809][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.327847][ T37] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1517.327924][ T37] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1517.327953][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.327979][ T37] inet_rtm_newaddr+0x404/0x1ad0 [ 1517.328001][ T37] ? is_bpf_text_address+0x292/0x2b0 [ 1517.328024][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 1517.328049][ T37] ? kernel_text_address+0xa5/0xe0 [ 1517.328071][ T37] ? __kernel_text_address+0xd/0x30 [ 1517.328092][ T37] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1517.328130][ T37] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1517.328151][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1517.328180][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1517.328202][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1517.328227][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.328254][ T37] netlink_rcv_skb+0x232/0x4b0 [ 1517.328279][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1517.328303][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1517.328335][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1517.328364][ T37] netlink_unicast+0x831/0x9f0 [ 1517.328393][ T37] ? __pfx_netlink_unicast+0x10/0x10 [ 1517.328415][ T37] ? netlink_sendmsg+0x650/0xb40 [ 1517.328435][ T37] ? skb_put+0x11b/0x210 [ 1517.328462][ T37] netlink_sendmsg+0x813/0xb40 [ 1517.328492][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.328522][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1517.328546][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.328569][ T37] __sys_sendto+0x67f/0x710 [ 1517.328598][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 1517.328645][ T37] ? exc_page_fault+0x6a/0xc0 [ 1517.328673][ T37] ? do_user_addr_fault+0xc6f/0x1340 [ 1517.328701][ T37] __x64_sys_sendto+0xde/0x100 [ 1517.328728][ T37] do_syscall_64+0x14d/0xf80 [ 1517.328750][ T37] ? trace_irq_disable+0x3b/0x150 [ 1517.328770][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.328788][ T37] ? clear_bhb_loop+0x40/0x90 [ 1517.328810][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.328828][ T37] RIP: 0033:0x7fbf253ccfce [ 1517.328843][ T37] RSP: 002b:00007ffcadebcff8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1517.328861][ T37] RAX: ffffffffffffffda RBX: 000055558efdf500 RCX: 00007fbf253ccfce [ 1517.328875][ T37] RDX: 0000000000000028 RSI: 00007fbf261b4670 RDI: 0000000000000003 [ 1517.328887][ T37] RBP: 0000000000000001 R08: 00007ffcadebd074 R09: 000000000000000c [ 1517.328898][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1517.328909][ T37] R13: 0000000000000000 R14: 00007fbf261b4670 R15: 0000000000000000 [ 1517.328945][ T37] [ 1517.328957][ T37] INFO: task syz.3.4029:19809 blocked for more than 143 seconds. [ 1517.328972][ T37] Tainted: G L syzkaller #0 [ 1517.328982][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1517.328991][ T37] task:syz.3.4029 state:D stack:25976 pid:19809 tgid:19808 ppid:18166 task_flags:0x400140 flags:0x00080002 [ 1517.329040][ T37] Call Trace: [ 1517.329046][ T37] [ 1517.329082][ T37] __schedule+0x1553/0x5240 [ 1517.329109][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.329142][ T37] ? vprintk_emit+0x4eb/0x560 [ 1517.329170][ T37] ? __pfx_vprintk_emit+0x10/0x10 [ 1517.329194][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.329214][ T37] ? __pfx___schedule+0x10/0x10 [ 1517.329252][ T37] rt_mutex_schedule+0x76/0xf0 [ 1517.329273][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1517.329310][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1517.329333][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1517.329354][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1517.329391][ T37] ? rtnl_newlink+0x8a1/0x1be0 [ 1517.329419][ T37] ? rtnl_newlink+0x8a1/0x1be0 [ 1517.329439][ T37] mutex_lock_nested+0x168/0x1d0 [ 1517.329463][ T37] rtnl_newlink+0x8a1/0x1be0 [ 1517.329484][ T37] ? kasan_save_track+0x3e/0x80 [ 1517.329572][ T37] ? ___sys_sendmsg+0x2a5/0x360 [ 1517.329588][ T37] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 1517.329607][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1517.329651][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.329676][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 1517.329724][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1517.329752][ T37] ? kmem_cache_free+0x185/0x6b0 [ 1517.329768][ T37] ? nlmon_xmit+0xb0/0x100 [ 1517.329873][ T37] ? __local_bh_enable+0x1e1/0x2f0 [ 1517.329909][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.329931][ T37] ? __dev_queue_xmit+0x27d/0x39b0 [ 1517.329987][ T37] ? __dev_queue_xmit+0x1ebb/0x39b0 [ 1517.330005][ T37] ? netlink_unicast+0x805/0x9f0 [ 1517.330023][ T37] ? netlink_sendmsg+0x813/0xb40 [ 1517.330044][ T37] ? ____sys_sendmsg+0x94c/0x9c0 [ 1517.330083][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1517.330105][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1517.330131][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1517.330152][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1517.330173][ T37] ? ref_tracker_free+0x673/0x820 [ 1517.330265][ T37] ? __copy_skb_header+0xa3/0x4a0 [ 1517.330285][ T37] ? __pfx_ref_tracker_free+0x10/0x10 [ 1517.330305][ T37] ? __skb_clone+0x63/0x7a0 [ 1517.330330][ T37] netlink_rcv_skb+0x232/0x4b0 [ 1517.330354][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1517.330378][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1517.330410][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1517.330439][ T37] netlink_unicast+0x831/0x9f0 [ 1517.330467][ T37] ? __pfx_netlink_unicast+0x10/0x10 [ 1517.330489][ T37] ? netlink_sendmsg+0x650/0xb40 [ 1517.330509][ T37] ? skb_put+0x11b/0x210 [ 1517.330536][ T37] netlink_sendmsg+0x813/0xb40 [ 1517.330567][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.330597][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1517.330623][ T37] ____sys_sendmsg+0x94c/0x9c0 [ 1517.330646][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1517.330672][ T37] ? import_iovec+0x73/0xa0 [ 1517.330699][ T37] ___sys_sendmsg+0x2a5/0x360 [ 1517.330723][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 1517.330748][ T37] ? futex_wake+0x4af/0x580 [ 1517.330793][ T37] ? __fget_files+0x2a/0x420 [ 1517.330814][ T37] ? __fget_files+0x3a6/0x420 [ 1517.330844][ T37] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1517.330865][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1517.330892][ T37] ? rcu_is_watching+0x15/0xb0 [ 1517.330923][ T37] do_syscall_64+0x14d/0xf80 [ 1517.330954][ T37] ? trace_irq_disable+0x3b/0x150 [ 1517.330973][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.330992][ T37] ? clear_bhb_loop+0x40/0x90 [ 1517.331014][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.331032][ T37] RIP: 0033:0x7fca1eadc799 [ 1517.331047][ T37] RSP: 002b:00007fca1cd2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1517.331065][ T37] RAX: ffffffffffffffda RBX: 00007fca1ed55fa0 RCX: 00007fca1eadc799 [ 1517.331086][ T37] RDX: 0000000024048180 RSI: 0000200000000140 RDI: 0000000000000003 [ 1517.331098][ T37] RBP: 00007fca1eb72c99 R08: 0000000000000000 R09: 0000000000000000 [ 1517.331110][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1517.331122][ T37] R13: 00007fca1ed56038 R14: 00007fca1ed55fa0 R15: 00007ffcbd748058 [ 1517.331151][ T37] [ 1517.331158][ T37] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1517.331187][ T37] [ 1517.331187][ T37] Showing all locks held in the system: [ 1517.331197][ T37] 3 locks held by kworker/u8:1/13: [ 1517.331208][ T37] #0: ffff888031ee3938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1517.331262][ T37] #1: ffffc90000127c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1517.331309][ T37] #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 1517.331356][ T37] 6 locks held by ksoftirqd/0/15: [ 1517.331367][ T37] 4 locks held by pr/legacy/17: [ 1517.331378][ T37] 4 locks held by rcuc/0/20: [ 1517.331389][ T37] 1 lock held by khungtaskd/37: [ 1517.331399][ T37] #0: ffffffff8ddcb8c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1517.331473][ T37] 3 locks held by klogd/5158: [ 1517.331485][ T37] 1 lock held by dhcpcd/5464: [ 1517.331495][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x23d/0x370 [ 1517.331537][ T37] 2 locks held by getty/5563: [ 1517.331546][ T37] #0: ffff88802a6670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1517.331662][ T37] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1517.331706][ T37] 3 locks held by kworker/u9:4/5812: [ 1517.331715][ T37] #0: ffff888055c74138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1517.331761][ T37] #1: ffffc90004b47c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1517.331807][ T37] #2: ffff88805692cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1517.337579][ T37] 3 locks held by kworker/1:9/6138: [ 1517.337593][ T37] #0: ffff888019c03938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1517.337640][ T37] #1: ffffc9000598fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1517.337685][ T37] #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1517.337742][ T37] 3 locks held by kworker/u8:0/14265: [ 1517.337753][ T37] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1517.337798][ T37] #1: ffffc90005327c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1517.337843][ T37] #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1517.337889][ T37] 2 locks held by syz.4.3435/17810: [ 1517.337900][ T37] #0: ffff8880406a0f78 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1517.337954][ T37] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x7f/0x270 [ 1517.338028][ T37] 1 lock held by syz.3.3705/18595: [ 1517.338040][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1517.338157][ T37] 5 locks held by kworker/u8:22/19379: [ 1517.338168][ T37] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1517.338213][ T37] #1: ffffc90004757c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1517.338258][ T37] #2: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1517.338335][ T37] #3: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 1517.338380][ T37] #4: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1517.338425][ T37] 1 lock held by syz-executor/19394: [ 1517.338435][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 1517.338478][ T37] 4 locks held by syz-executor/19452: [ 1517.338488][ T37] #0: ffff8880372b4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1517.338537][ T37] #1: ffff88805efd5c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1517.338584][ T37] #2: ffff8880284c2788 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1517.338633][ T37] #3: ffffffff8e9c8258 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 1517.338682][ T37] 7 locks held by syz-executor/19497: [ 1517.338693][ T37] #0: ffff8880372b4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1517.338741][ T37] #1: ffff88805be31478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1517.338786][ T37] #2: ffff8880284c2698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1517.338835][ T37] #3: ffffffff8e9c8258 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1517.338881][ T37] #4: ffff8880246f50d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1517.338925][ T37] #5: ffff88805f034300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1517.338978][ T37] #6: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1517.339025][ T37] 1 lock held by syz.4.4020/19738: [ 1517.339036][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xefa/0x2ea0 [ 1517.339084][ T37] 1 lock held by syz-executor/19768: [ 1517.339095][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339139][ T37] 1 lock held by syz.3.4029/19809: [ 1517.339150][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1517.339195][ T37] 1 lock held by syz-executor/19813: [ 1517.339206][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339249][ T37] 1 lock held by syz-executor/19819: [ 1517.339260][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339303][ T37] 1 lock held by syz-executor/19823: [ 1517.339314][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339358][ T37] 1 lock held by syz-executor/19826: [ 1517.339368][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339412][ T37] 1 lock held by syz-executor/19832: [ 1517.339423][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339466][ T37] 1 lock held by syz-executor/19838: [ 1517.339476][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339521][ T37] 1 lock held by syz-executor/19842: [ 1517.339531][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339575][ T37] 1 lock held by syz-executor/19847: [ 1517.339586][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339630][ T37] 1 lock held by syz-executor/19850: [ 1517.339640][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339684][ T37] 1 lock held by syz-executor/19855: [ 1517.339695][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339739][ T37] 1 lock held by syz-executor/19861: [ 1517.339749][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339792][ T37] 1 lock held by syz-executor/19868: [ 1517.339803][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339848][ T37] 1 lock held by syz-executor/19874: [ 1517.339858][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339902][ T37] 1 lock held by syz-executor/19879: [ 1517.339913][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1517.339964][ T37] [ 1517.339969][ T37] ============================================= [ 1517.339969][ T37] [ 1517.339985][ T37] NMI backtrace for cpu 0 [ 1517.340009][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1517.340034][ T37] Tainted: [L]=SOFTLOCKUP [ 1517.340041][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1517.340052][ T37] Call Trace: [ 1517.340060][ T37] [ 1517.340070][ T37] dump_stack_lvl+0xe8/0x150 [ 1517.340098][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1517.340154][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1517.340180][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1517.340203][ T37] sys_info+0x135/0x170 [ 1517.340221][ T37] watchdog+0xfd9/0x1030 [ 1517.340244][ T37] ? watchdog+0x21a/0x1030 [ 1517.340267][ T37] kthread+0x388/0x470 [ 1517.340283][ T37] ? __pfx_watchdog+0x10/0x10 [ 1517.340299][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.340317][ T37] ret_from_fork+0x51e/0xb90 [ 1517.340342][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.340363][ T37] ? __switch_to+0xc7d/0x1450 [ 1517.340387][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.340407][ T37] ret_from_fork_asm+0x1a/0x30 [ 1517.340438][ T37] [ 1517.340444][ T37] Sending NMI from CPU 0 to CPUs 1: [ 1517.340476][ C1] NMI backtrace for cpu 1 [ 1517.340492][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1517.340514][ C1] Tainted: [L]=SOFTLOCKUP [ 1517.340520][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1517.340529][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1517.340637][ C1] Code: e8 0e a4 94 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f b4 fa fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1517.340651][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 1517.340666][ C1] RAX: 1ffffffff332a600 RBX: 00000000000003fd RCX: 0000000000000000 [ 1517.340678][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1517.340688][ C1] RBP: ffffffff99953750 R08: 0000000000000000 R09: 0000000000000000 [ 1517.340698][ C1] R10: dffffc0000000000 R11: ffffffff852fc1b0 R12: dffffc0000000000 [ 1517.340710][ C1] R13: 0000000000000000 R14: ffffffff999534c0 R15: 0000000000000000 [ 1517.340721][ C1] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 1517.340734][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1517.340745][ C1] CR2: 000055863a7c66a0 CR3: 0000000037fae000 CR4: 00000000003526f0 [ 1517.340760][ C1] Call Trace: [ 1517.340767][ C1] [ 1517.340775][ C1] wait_for_lsr+0x1aa/0x2f0 [ 1517.340795][ C1] serial8250_console_write+0x120d/0x1b90 [ 1517.340822][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1517.340845][ C1] ? console_flush_one_record+0x48f/0xb90 [ 1517.340870][ C1] console_flush_one_record+0x68b/0xb90 [ 1517.340893][ C1] ? console_flush_one_record+0xfa/0xb90 [ 1517.340915][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1517.340937][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1517.340962][ C1] legacy_kthread_func+0x1b6/0x250 [ 1517.340984][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1517.341004][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1517.341026][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1517.341051][ C1] kthread+0x388/0x470 [ 1517.341066][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1517.341085][ C1] ? __pfx_kthread+0x10/0x10 [ 1517.341101][ C1] ret_from_fork+0x51e/0xb90 [ 1517.341121][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.341139][ C1] ? __switch_to+0xc7d/0x1450 [ 1517.341158][ C1] ? __pfx_kthread+0x10/0x10 [ 1517.341174][ C1] ret_from_fork_asm+0x1a/0x30 [ 1517.341195][ C1] [ 1517.341483][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1517.341503][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1517.341527][ T37] Tainted: [L]=SOFTLOCKUP [ 1517.341534][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1517.341545][ T37] Call Trace: [ 1517.341552][ T37] [ 1517.341560][ T37] vpanic+0x56c/0xa60 [ 1517.341589][ T37] ? __pfx_vpanic+0x10/0x10 [ 1517.341620][ T37] panic+0xc5/0xd0 [ 1517.341643][ T37] ? __pfx_panic+0x10/0x10 [ 1517.341664][ T37] ? printk_trigger_flush+0x117/0x180 [ 1517.341688][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1517.341717][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1517.341742][ T37] watchdog+0x1023/0x1030 [ 1517.341767][ T37] ? watchdog+0x21a/0x1030 [ 1517.341794][ T37] kthread+0x388/0x470 [ 1517.341815][ T37] ? __pfx_watchdog+0x10/0x10 [ 1517.341831][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.341847][ T37] ret_from_fork+0x51e/0xb90 [ 1517.341870][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.341889][ T37] ? __switch_to+0xc7d/0x1450 [ 1517.341910][ T37] ? __pfx_kthread+0x10/0x10 [ 1517.341928][ T37] ret_from_fork_asm+0x1a/0x30 [ 1517.342012][ T37] [ 1517.342437][ T37] Kernel Offset: disabled