last executing test programs: 17.015414639s ago: executing program 2 (id=14): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 14.570355143s ago: executing program 4 (id=17): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 14.564911113s ago: executing program 3 (id=18): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "1c"}]}}, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 14.228139927s ago: executing program 1 (id=20): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r0, &(0x7f0000001400)=[{}], 0x1) 13.897439337s ago: executing program 1 (id=21): syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usbip_server_init(0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_vhci(0x0, 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="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", 0x219, 0xc000, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{0x0}, {0x0}], 0x2, &(0x7f0000001f80)=""/178, 0xb2}, 0x0) personality(0x400000) 13.861524344s ago: executing program 0 (id=22): unshare(0x2c020400) msgget$private(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x1b, 0xffffff7f00000000, 0x3000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x19033}], 0x1, 0x3, 0x5) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3, &(0x7f0000000280)=[{0x2, 0x1, 0x2}, {0x3, 0x0, 0x9}, {0x6, 0x82, 0xe0e}], 0x3, 0x6, 0x0, 0x58, 0xb, 0x28}) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xe) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3a9bd5a8a"}) 13.811856926s ago: executing program 2 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket(0x1a, 0x800, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000020c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="2800330080000000ffffffffffff08"], 0x44}}, 0x44000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000002080)=0x7, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20010004, 0x0, 0x0) r7 = syz_usb_connect_ath9k(0x3, 0x96, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x24e5b15701d7af5, [{{0x9, 0x2, 0xfffffffffffffd1d}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_ep_read(r7, 0x6, 0x0, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)={0x24, r9, 0x1, 0x0, 0x0, {0x4}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9b3c}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0xfcffffff00000000}, 0x0) 12.567345161s ago: executing program 0 (id=24): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000007c0)=[{0x40}]}) write$ppp(r0, &(0x7f0000000900)='\x00\x00', 0x2) 11.039884371s ago: executing program 3 (id=25): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0xfffffffc}, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000500), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_emit_vhci(0x0, 0x22) r2 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x4, 0x7, 0x8, 0x5, "0022aed9ae659d4d95fd3d1fa09814", "aadb641b", "7e2ec700", "5439cfe3", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad3eb5918df0f52938453c9", "ac562047f08f7537b6597721"]}) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', '', [{}, {0x20, '\x00'}, {0x20, '#! '}, {0x20, '@,'}, {0x20, '/dev/vmci\x00'}, {0x20, 'm'}, {}, {0x20, '&'}], 0xa, "a1ec78ec0faf7e76578251d69b6e"}, 0x2c) lseek(0xffffffffffffffff, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c800a1009d000100100c040005000800030308006000a0e9ff0710000300080003000c000000060003a908000000ec67000026071143748fc0010a00020009000b0859000400e9aaa6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f487cd00cb37dc58160e3c063ef6461cf331038d364cf0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f07a00400ffff0101"], 0xa6) 11.034826989s ago: executing program 4 (id=26): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 10.673614212s ago: executing program 0 (id=27): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x7fff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000340)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x4, 0x8}, {0x6, 0x0, 0x0, 0x8}]}) write$ppp(r0, &(0x7f00000003c0)="16320cbfed9726a3c1fcbdd2fc38ea7e90c2cbb54618ef", 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000000000a7e90a20000000120a00030000000000000000000000030900020073797a3140000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001004000000000000c41000000140014ab6c964bfbe55bd374c023df9af39562"], 0x30}}, 0x0) 10.370515481s ago: executing program 3 (id=28): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40015b19, 0x0) 10.279624527s ago: executing program 1 (id=29): socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x5}, 0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000001c0)={@remote, @local, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x7c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000004e22000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x7, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_setup(0x6e90, &(0x7f0000000080), 0x0, &(0x7f0000000240)) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439e73c82bad769c1516d4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2f068d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6322d4d3e89d8d8fb5d51ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e"}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c8e1f48"}, 0x0, 0x2, {}, 0xffffff82}) 9.951339273s ago: executing program 2 (id=30): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1f, 0x40, 0x82, 0x20, 0x46d, 0x8ac, 0x80de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xbb, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x32, 0xc, 0xa, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xf, 0xf7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x1, 0x80}]}]}}]}}]}}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r0, &(0x7f00000000c0)=""/108, 0xfe6e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, 0x0, 0x0, 0x3, 0xfffffffc) 9.82014245s ago: executing program 4 (id=31): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r0, &(0x7f0000001400)=[{}], 0x1) 9.583707007s ago: executing program 4 (id=32): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) io_uring_setup(0x4cec, &(0x7f00000000c0)={0x0, 0xd5e3, 0x6, 0x2, 0x1db}) 6.98146842s ago: executing program 0 (id=33): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0486c009000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000200)=0x84, 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000010001000900000000900000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r2, &(0x7f0000000480)="f5741ed3b15e40e4514e91f16ca276cb2f186ff314b41cc9420b57f7b9f26a91b2f9a4dc83d7d63d548dd7ee04d774f43c723c8621345a68830d45c93ccc8aaacb50e252726c4076d401299e74c687089e6435e71f4e", &(0x7f0000000380)=""/58}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b70400000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) flock(0xffffffffffffffff, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='1-2:', @ANYRESOCT, @ANYBLOB='E'], 0x31) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x0, 0xb, 0xa1, {0xa1, 0x0, "ee3e78c188366897b72b00b42a5c3b870d6802a0a673e3b026c0efd7cf77eab427867f41bcc95b3678e05557e7b3d6a301a8d7dbb4c89c6dffdabd00beed5f9fca69e934f4fa36b4b50e73e2922eff5ce58ad776afe4ea09056b8fce292a7c916accbccfdbaf654a10a4f09ef40eb8b3134b2925e259cd9c6e93ac049dae71ba6a5ce82d4534a8ed0309181b9ec7008250a5bc9fe940f10e5a95bb4a16693c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000002940)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 5.787896648s ago: executing program 3 (id=34): unshare(0x2c020400) msgget$private(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x1b, 0xffffff7f00000000, 0x3000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x19033}], 0x1, 0x3, 0x5) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3, &(0x7f0000000280)=[{0x2, 0x1, 0x2}, {0x3, 0x0, 0x9}], 0x2, 0x6, 0x0, 0x58, 0xb, 0x28}) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xe) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3a9bd5a8a"}) 5.729456404s ago: executing program 2 (id=35): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) r1 = socket(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0c009900090000004b0000007c007a800800040000000000080004000700000008000400050000001c0002004902c9c0d5931e691507c899faf41370298d00000000000014000100948b3e98c888c88a33cacd7b68dbe0a60c000300661f83ecad25a51e24000100640000005cf1eae0"], 0xcc}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000001200)={0x0, 0x48574653}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x0, 0xa2, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x64266}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000102c0)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0}) 5.728780654s ago: executing program 4 (id=36): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "1c"}]}}, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 4.99162711s ago: executing program 1 (id=37): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000007c0)=[{0x40}]}) write$ppp(r0, &(0x7f0000000900)='\x00\x00', 0x2) 3.991857136s ago: executing program 2 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2c00) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000400)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000440)) (fail_nth: 1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r7, @ANYBLOB="db773d9c9f69d20f6972bce67162fefe9f1bf6efe204f6a58a8cda410c3c9ccd514e44d112c69b29f990330d14a34b08ebc3bc191f50bd3d7e89f296e714c027d9c57cbdf1512462d0204daa4f00ca5c78866c7c4c6cdc55f0cdbb2b69bf9e6730b19bdb7d95b63c31009ddf05d9106745af461fa1890f7f857689863d2859a12e9a9d22c893bc6444630b18cb722eefe51d0ff6338b0eae6856a6cdd173399051f72ec0d9d8e1e6409cdf44e37f30", @ANYRES8=r8, @ANYRESDEC=r8]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x0, r7}}, './file0\x00'}) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r9 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000c40)="b338", 0x2}, {&(0x7f0000000cc0)="b4", 0x1}], 0x2, 0x0, 0x0, 0x4011}}], 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) 3.982280048s ago: executing program 1 (id=39): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0xfffffffc}, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000500), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x4, 0x7, 0x8, 0x5, "0022aed9ae659d4d95fd3d1fa09814", "aadb641b", "7e2ec700", "5439cfe3", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad3eb5918df0f52938453c9", "ac562047f08f7537b6597721"]}) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', '', [{}, {0x20, '\x00'}, {0x20, '#! '}, {0x20, '@,'}, {0x20, '/dev/vmci\x00'}, {0x20, 'm'}, {}, {0x20, '&'}], 0xa, "a1ec78ec0faf7e76578251d69b6e"}, 0x2c) lseek(0xffffffffffffffff, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c800a1009d000100100c040005000800030308006000a0e9ff0710000300080003000c000000060003a908000000ec67000026071143748fc0010a00020009000b0859000400e9aaa6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f487cd00cb37dc58160e3c063ef6461cf331038d364cf0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f07a00400ffff0101"], 0xa6) 3.881652689s ago: executing program 3 (id=40): syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usbip_server_init(0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_vhci(0x0, 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="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", 0x219, 0xc000, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{0x0}, {0x0}], 0x2, &(0x7f0000001f80)=""/178, 0xb2}, 0x0) personality(0x400000) 3.504929338s ago: executing program 1 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket(0x1a, 0x800, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000020c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="2800330080000000ffffffffffff08"], 0x44}}, 0x44000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000002080)=0x7, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20010004, 0x0, 0x0) r7 = syz_usb_connect_ath9k(0x3, 0x96, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x24e5b15701d7af5, [{{0x9, 0x2, 0xfffffffffffffd1d}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_ep_read(r7, 0x6, 0x0, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)={0x24, r9, 0x1, 0x0, 0x0, {0x4}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9b3c}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0xfcffffff00000000}, 0x0) 3.380032448s ago: executing program 2 (id=42): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 2.378436577s ago: executing program 0 (id=44): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0], 0x0) 1.659879393s ago: executing program 3 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xa}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c0002"], 0xec}}, 0x0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x20880) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x61, 0x40001002, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12012000538acc089c0e00001e5b0102030109021b0001000000000904000001d4fcef000905", @ANYRES16=r1], 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20040778, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.236645801s ago: executing program 4 (id=46): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1f, 0x40, 0x82, 0x20, 0x46d, 0x8ac, 0x80de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xbb, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x32, 0xc, 0xa, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xf, 0xf7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x1, 0x80}]}]}}]}}]}}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r0, &(0x7f00000000c0)=""/108, 0xfe6e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, 0x0, 0x0, 0x3, 0xfffffffc) 0s ago: executing program 0 (id=47): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 59.270229][ T5215] cgroup: Unknown subsys name 'net' [ 59.385589][ T5215] cgroup: Unknown subsys name 'cpuset' [ 59.393726][ T5215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.771860][ T5215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.357203][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.370622][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.383027][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.393503][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.393618][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.408275][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.412207][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.418452][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.422484][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.430887][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.438858][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.444018][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.452402][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.462882][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.466692][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.476164][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.480577][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.485881][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.493594][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.500269][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.507339][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.521271][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.521347][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.528499][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.535791][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.543254][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.551971][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.557444][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.615464][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.623718][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.965620][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 65.050096][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 65.136402][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 65.188088][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.196586][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.204390][ T5243] bridge_slave_0: entered allmulticast mode [ 65.212253][ T5243] bridge_slave_0: entered promiscuous mode [ 65.221551][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.228872][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.236113][ T5243] bridge_slave_1: entered allmulticast mode [ 65.243915][ T5243] bridge_slave_1: entered promiscuous mode [ 65.250966][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 65.329780][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.337163][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.344885][ T5246] bridge_slave_0: entered allmulticast mode [ 65.351602][ T5246] bridge_slave_0: entered promiscuous mode [ 65.359273][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.366608][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.374066][ T5246] bridge_slave_1: entered allmulticast mode [ 65.381077][ T5246] bridge_slave_1: entered promiscuous mode [ 65.402023][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.414771][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 65.450989][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.490463][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.497877][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.505323][ T5247] bridge_slave_0: entered allmulticast mode [ 65.512718][ T5247] bridge_slave_0: entered promiscuous mode [ 65.529604][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.537137][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.544484][ T5247] bridge_slave_1: entered allmulticast mode [ 65.551162][ T5247] bridge_slave_1: entered promiscuous mode [ 65.572443][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.584163][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.617357][ T5243] team0: Port device team_slave_0 added [ 65.650712][ T5243] team0: Port device team_slave_1 added [ 65.679979][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.709401][ T5246] team0: Port device team_slave_0 added [ 65.717959][ T5246] team0: Port device team_slave_1 added [ 65.732633][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.771450][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.783360][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.790522][ T5245] bridge_slave_0: entered allmulticast mode [ 65.798028][ T5245] bridge_slave_0: entered promiscuous mode [ 65.806139][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.813465][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.820676][ T5245] bridge_slave_1: entered allmulticast mode [ 65.827611][ T5245] bridge_slave_1: entered promiscuous mode [ 65.843685][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.850675][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.877028][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.888924][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.899228][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.907381][ T5244] bridge_slave_0: entered allmulticast mode [ 65.914783][ T5244] bridge_slave_0: entered promiscuous mode [ 65.922763][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.930206][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.937553][ T5244] bridge_slave_1: entered allmulticast mode [ 65.944529][ T5244] bridge_slave_1: entered promiscuous mode [ 65.967561][ T5247] team0: Port device team_slave_0 added [ 65.976267][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.984034][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.010263][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.036970][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.046112][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.076919][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.097946][ T5247] team0: Port device team_slave_1 added [ 66.119143][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.127807][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.154726][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.177414][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.203121][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.210107][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.237080][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.250401][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.262576][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.277727][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.288038][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.295113][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.321147][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.398725][ T5243] hsr_slave_0: entered promiscuous mode [ 66.408517][ T5243] hsr_slave_1: entered promiscuous mode [ 66.417458][ T5244] team0: Port device team_slave_0 added [ 66.427137][ T5246] hsr_slave_0: entered promiscuous mode [ 66.433853][ T5246] hsr_slave_1: entered promiscuous mode [ 66.439992][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.448386][ T5246] Cannot create hsr debugfs directory [ 66.466451][ T5245] team0: Port device team_slave_0 added [ 66.474614][ T5245] team0: Port device team_slave_1 added [ 66.492930][ T5244] team0: Port device team_slave_1 added [ 66.593985][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.601016][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.623233][ T4620] Bluetooth: hci4: command tx timeout [ 66.628441][ T5228] Bluetooth: hci2: command tx timeout [ 66.638804][ T5232] Bluetooth: hci1: command tx timeout [ 66.639846][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.657717][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.664893][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.691012][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.701922][ T5232] Bluetooth: hci0: command tx timeout [ 66.701932][ T5228] Bluetooth: hci3: command tx timeout [ 66.707559][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.707577][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.746594][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.761327][ T5247] hsr_slave_0: entered promiscuous mode [ 66.768654][ T5247] hsr_slave_1: entered promiscuous mode [ 66.774853][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.782687][ T5247] Cannot create hsr debugfs directory [ 66.806835][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.813885][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.840325][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.954370][ T5244] hsr_slave_0: entered promiscuous mode [ 66.960850][ T5244] hsr_slave_1: entered promiscuous mode [ 66.967690][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.975609][ T5244] Cannot create hsr debugfs directory [ 67.019134][ T5245] hsr_slave_0: entered promiscuous mode [ 67.026664][ T5245] hsr_slave_1: entered promiscuous mode [ 67.032985][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.040570][ T5245] Cannot create hsr debugfs directory [ 67.187716][ T5243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.206617][ T5243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.218929][ T5243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.240547][ T5243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.344948][ T5246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.360262][ T5246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.375941][ T5246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.385996][ T5246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.420269][ T5247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.443105][ T5247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.456023][ T5247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.468726][ T5247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.555059][ T5244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.564895][ T5244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.597440][ T5244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.607698][ T5244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.697084][ T5245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.717622][ T5245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.735977][ T5245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.750595][ T5245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.769919][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.790025][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.814601][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.849503][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.880073][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.887373][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.908353][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.919798][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.936564][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.943850][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.971358][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.978494][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.989746][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.996879][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.027193][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.034365][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.059446][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.066656][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.160680][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.192711][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.220047][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.240128][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.247368][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.264722][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.295272][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.313955][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.321085][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.346958][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.363836][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.371040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.421552][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.428711][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.449244][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.548598][ T5247] veth0_vlan: entered promiscuous mode [ 68.566354][ T5243] veth0_vlan: entered promiscuous mode [ 68.585313][ T5247] veth1_vlan: entered promiscuous mode [ 68.603080][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.614031][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.639794][ T5243] veth1_vlan: entered promiscuous mode [ 68.657061][ T5246] veth0_vlan: entered promiscuous mode [ 68.699461][ T5247] veth0_macvtap: entered promiscuous mode [ 68.705390][ T5232] Bluetooth: hci2: command tx timeout [ 68.712296][ T5232] Bluetooth: hci1: command tx timeout [ 68.716806][ T5228] Bluetooth: hci4: command tx timeout [ 68.740996][ T5247] veth1_macvtap: entered promiscuous mode [ 68.770914][ T5246] veth1_vlan: entered promiscuous mode [ 68.782185][ T5228] Bluetooth: hci0: command tx timeout [ 68.782449][ T5232] Bluetooth: hci3: command tx timeout [ 68.807995][ T5244] veth0_vlan: entered promiscuous mode [ 68.821454][ T5243] veth0_macvtap: entered promiscuous mode [ 68.836922][ T5243] veth1_macvtap: entered promiscuous mode [ 68.847619][ T5244] veth1_vlan: entered promiscuous mode [ 68.866204][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.881145][ T5245] veth0_vlan: entered promiscuous mode [ 68.896685][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.909738][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.923151][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.934582][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.954254][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.964973][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.976424][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.991227][ T5245] veth1_vlan: entered promiscuous mode [ 69.006079][ T5246] veth0_macvtap: entered promiscuous mode [ 69.016503][ T5243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.027103][ T5243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.036727][ T5243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.045708][ T5243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.065566][ T5247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.074506][ T5247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.084428][ T5247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.093257][ T5247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.108545][ T5244] veth0_macvtap: entered promiscuous mode [ 69.117279][ T5246] veth1_macvtap: entered promiscuous mode [ 69.137249][ T5244] veth1_macvtap: entered promiscuous mode [ 69.206816][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.221498][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.232401][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.244436][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.256648][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.285027][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.295476][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.302343][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.316276][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.326599][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.337259][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.349244][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.366353][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.378520][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.389455][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.400183][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.410444][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.424353][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.435268][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.448746][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.459609][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.470039][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.480545][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.490538][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.501072][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.513230][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.522390][ T5246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.531172][ T5246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.541128][ T5246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.549914][ T5246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.579840][ T5244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.590038][ T5244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.599143][ T5244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.608274][ T5244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.620453][ T5245] veth0_macvtap: entered promiscuous mode [ 69.641744][ T5245] veth1_macvtap: entered promiscuous mode [ 69.649375][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.663230][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.706968][ T1835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.720905][ T1835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.755767][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.770081][ T5247] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.785416][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.800761][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.812808][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.822873][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.833353][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.843299][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.853796][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.865194][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.893004][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.921957][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.941738][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.962766][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.973626][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.986009][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.996021][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.006488][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.019146][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.033171][ T5245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.042021][ T5245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.050716][ T5245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.059496][ T5245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.073903][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.096274][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.156942][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.180128][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.195412][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.236288][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.307894][ T1835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.320584][ T1835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.369245][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.395093][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.470470][ T5292] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 70.565338][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.565611][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.583958][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.594998][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.651845][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.787754][ T5232] Bluetooth: hci4: command tx timeout [ 70.787776][ T5228] Bluetooth: hci1: command tx timeout [ 70.793205][ T4620] Bluetooth: hci2: command tx timeout [ 70.903858][ T5294] Zero length message leads to an empty skb [ 70.937153][ T5228] Bluetooth: hci0: command tx timeout [ 70.942086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.944181][ T5228] Bluetooth: hci3: command tx timeout [ 70.987819][ T8] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 71.002809][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.010825][ T8] usb 5-1: Product: syz [ 71.015216][ T8] usb 5-1: Manufacturer: syz [ 71.019835][ T8] usb 5-1: SerialNumber: syz [ 71.040914][ T5294] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 71.055716][ T8] usb 5-1: config 0 descriptor?? [ 71.251929][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.324084][ T5297] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.402079][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 71.418567][ T25] usb 4-1: config 187 has an invalid interface number: 132 but max is 0 [ 71.431872][ T5284] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.442232][ T25] usb 4-1: config 187 has an invalid descriptor of length 10, skipping remainder of the config [ 71.473381][ T25] usb 4-1: config 187 has no interface number 0 [ 71.488815][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=08ac, bcdDevice=80.de [ 71.499451][ T5297] usb 3-1: Using ep0 maxpacket: 8 [ 71.507394][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.514125][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.521725][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.564946][ T8] usb 5-1: Firmware: major: 79, minor: 142, hardware type: UNKNOWN (208) [ 71.571710][ T25] usb 4-1: Product: syz [ 71.581271][ T25] usb 4-1: Manufacturer: syz [ 71.587428][ T25] usb 4-1: SerialNumber: syz [ 71.593026][ T5297] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.602884][ T5297] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.613066][ T5297] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.623286][ T5297] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.636597][ T5297] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.649158][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.679018][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ac [ 71.687586][ T5284] usb 1-1: Using ep0 maxpacket: 8 [ 71.697815][ T5284] usb 1-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=dd.2d [ 71.707577][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.716169][ T5284] usb 1-1: Product: syz [ 71.720550][ T5284] usb 1-1: Manufacturer: syz [ 71.726666][ T5284] usb 1-1: SerialNumber: syz [ 71.736463][ T5284] usb 1-1: config 0 descriptor?? [ 71.760502][ T5284] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 71.770799][ T5284] dvb-usb: bulk message failed: -22 (4/0) [ 71.776771][ T5284] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 71.778664][ T8] usb 5-1: failed to fetch extended address, random address set [ 71.787010][ T5284] dvb-usb: bulk message failed: -22 (5/0) [ 71.803395][ T8] usb 5-1: atusb_probe: initialization failed, error = -524 [ 71.829442][ T8] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 71.875447][ T8] usb 5-1: USB disconnect, device number 2 [ 71.875613][ T5284] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 71.902328][ T5297] usb 3-1: GET_CAPABILITIES returned 0 [ 71.907927][ T5297] usbtmc 3-1:16.0: can't read capabilities [ 71.932212][ T5284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.954569][ T5284] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 71.966058][ T5284] usb 1-1: media controller created [ 71.986942][ T5294] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.987667][ T5284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.077491][ T5284] usb 1-1: selecting invalid altsetting 3 [ 72.084857][ T5284] ttusb2: set interface to alts=3 failed [ 72.099926][ T5280] usb 3-1: USB disconnect, device number 2 [ 72.202952][ T25] gspca_zc3xx: reg_w_i err -110 [ 72.229083][ T5284] DVB: Unable to find symbol tda10086_attach() [ 72.252184][ T5284] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 72.274670][ T5284] dvb-usb: bulk message failed: -22 (4/0) [ 72.285444][ T5284] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 72.304579][ T5284] dvb-usb: bulk message failed: -22 (5/0) [ 72.310508][ T5284] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 72.328001][ T5284] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 72.360222][ T5284] usb 1-1: USB disconnect, device number 2 [ 72.399354][ T5284] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 72.780966][ T5315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.802537][ T25] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 72.808884][ T25] gspca_zc3xx 4-1:187.132: probe with driver gspca_zc3xx failed with error -110 [ 72.862247][ T5232] Bluetooth: hci1: command tx timeout [ 72.874750][ T5228] Bluetooth: hci4: command tx timeout [ 72.876627][ T5232] Bluetooth: hci2: command tx timeout [ 72.913586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.922560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.931100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.939665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.948281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.956759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.965189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.025113][ T5232] Bluetooth: hci3: command tx timeout [ 73.030588][ T5232] Bluetooth: hci0: command tx timeout [ 73.171902][ T5280] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.197390][ T5326] mmap: syz.4.10 (5326) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.336203][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 73.358167][ T5280] usb 1-1: config 187 has an invalid interface number: 132 but max is 0 [ 73.371971][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.404935][ T5280] usb 1-1: config 187 has an invalid descriptor of length 36, skipping remainder of the config [ 73.468542][ T5280] usb 1-1: config 187 has no interface number 0 [ 73.476923][ T5280] usb 1-1: New USB device found, idVendor=046d, idProduct=08ac, bcdDevice=80.de [ 73.520839][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.544665][ T5280] usb 1-1: Product: syz [ 73.555429][ T25] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 73.569574][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.580672][ T25] usb 2-1: Product: syz [ 73.582007][ T5280] usb 1-1: Manufacturer: syz [ 73.599418][ T25] usb 2-1: Manufacturer: syz [ 73.605492][ T25] usb 2-1: SerialNumber: syz [ 73.613296][ T25] usb 2-1: config 0 descriptor?? [ 73.620626][ T5280] usb 1-1: SerialNumber: syz [ 73.656274][ T5280] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ac [ 73.804501][ T5279] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.013187][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.032491][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.053236][ T5279] usb 3-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 74.072058][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.091000][ T25] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 74.102756][ T5291] usb 4-1: USB disconnect, device number 2 [ 74.107408][ T5279] usb 3-1: config 0 descriptor?? [ 74.127946][ T25] usb 2-1: Firmware version (0.0) predates our first public release. [ 74.131904][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.137981][ T25] usb 2-1: Please update to version 0.2 or newer [ 74.173377][ T5280] gspca_zc3xx: reg_w_i err -110 [ 74.191747][ C1] hrtimer: interrupt took 161918 ns [ 74.321749][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 74.328793][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.339392][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.349700][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.360023][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.374030][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.384063][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.431939][ T5291] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.593481][ T5291] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 74.604749][ T5291] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.618976][ T5291] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 74.634114][ T5337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 74.646759][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.660509][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 74.681794][ T8] usbtmc 5-1:16.0: can't read capabilities [ 74.763819][ T5280] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 74.770305][ T5280] gspca_zc3xx 1-1:187.132: probe with driver gspca_zc3xx failed with error -110 [ 74.910009][ T5336] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16'. [ 74.923129][ T5336] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 74.934571][ T5333] hub 6-0:1.0: USB hub found [ 74.941154][ T5333] hub 6-0:1.0: 1 port detected [ 75.208420][ T5282] usb 5-1: USB disconnect, device number 3 [ 75.269842][ T5291] usb 4-1: string descriptor 0 read error: -71 [ 75.337668][ T5291] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 75.742211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.751126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.173899][ T25] usb 1-1: USB disconnect, device number 3 [ 76.280375][ T5283] usb 2-1: USB disconnect, device number 2 [ 76.511907][ T5282] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.687805][ T5279] usbhid 3-1:0.0: can't add hid device: -71 [ 76.725566][ T5279] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 76.761772][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.838430][ T5279] usb 3-1: USB disconnect, device number 3 [ 76.850103][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.931741][ T5282] usb 5-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 76.982141][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.043957][ T5282] usb 5-1: config 0 descriptor?? [ 77.123953][ T5358] input: syz0 as /devices/virtual/input/input6 [ 77.130506][ T5358] input: failed to attach handler leds to device input6, error: -6 [ 77.352340][ T5279] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.557925][ T5279] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 77.567964][ T5360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17'. [ 77.594942][ T5279] usb 3-1: config index 0 descriptor too short (expected 64797, got 132) [ 77.617744][ T5279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.670985][ T5279] usb 3-1: config index 1 descriptor too short (expected 64797, got 132) [ 77.710632][ T5279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.800679][ T5279] usb 3-1: config index 2 descriptor too short (expected 64797, got 132) [ 77.863273][ T5279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.011543][ T5279] usb 3-1: config index 3 descriptor too short (expected 64797, got 132) [ 78.068316][ T5279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.099930][ T5291] usb 4-1: USB disconnect, device number 3 [ 78.134565][ T5279] usb 3-1: config index 4 descriptor too short (expected 64797, got 132) [ 78.182159][ T5279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.240232][ T5279] usb 3-1: config index 5 descriptor too short (expected 64797, got 132) [ 78.275699][ T5279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.326079][ T5279] usb 3-1: config index 6 descriptor too short (expected 64797, got 132) [ 78.343309][ T5279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.371880][ T5283] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.384245][ T5279] usb 3-1: config index 7 descriptor too short (expected 64797, got 132) [ 78.408111][ T5279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.454591][ T5279] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 78.490460][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.510023][ T5279] usb 3-1: Product: syz [ 78.529115][ T5279] usb 3-1: Manufacturer: syz [ 78.546175][ T5279] usb 3-1: SerialNumber: syz [ 78.579494][ T5279] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 78.588404][ T5283] usb 2-1: Using ep0 maxpacket: 8 [ 78.627243][ T5283] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 78.664148][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.719989][ T3302] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.737569][ T5283] usb 2-1: Product: syz [ 78.749705][ T5283] usb 2-1: Manufacturer: syz [ 78.775676][ T5283] usb 2-1: SerialNumber: syz [ 78.828695][ T5283] usb 2-1: config 0 descriptor?? [ 78.865962][ T5283] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 78.972300][ T5291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.102585][ T5355] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 79.109324][ T5355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.295920][ T5355] vhci_hcd vhci_hcd.0: Device attached [ 79.353526][ T5282] usbhid 5-1:0.0: can't add hid device: -71 [ 79.461006][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.471563][ T5364] vhci_hcd: connection closed [ 79.475052][ T12] vhci_hcd: stop threads [ 79.518151][ T5283] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 79.567366][ T5282] usb 5-1: USB disconnect, device number 4 [ 79.605084][ T5283] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 79.634070][ T12] vhci_hcd: release socket [ 79.662699][ T5297] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 79.717364][ T12] vhci_hcd: disconnect device [ 79.762366][ T5283] usb 2-1: USB disconnect, device number 3 [ 79.788528][ T5241] udevd[5241]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 79.834621][ T5291] usb 4-1: device not accepting address 4, error -71 [ 79.850724][ T3302] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 79.851582][ T3302] ath9k_htc: Failed to initialize the device [ 79.931454][ T3302] usb 3-1: ath9k_htc: USB layer deinitialized [ 79.965777][ T5228] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 79.973356][ T5228] Bluetooth: Wrong link type (-22) [ 80.510318][ T5279] usb 3-1: USB disconnect, device number 4 [ 80.548736][ T5378] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 80.890672][ T5291] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 81.091756][ T5279] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.111933][ T46] cfg80211: failed to load regulatory.db [ 82.911457][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 83.551731][ T5279] usb 3-1: Using ep0 maxpacket: 32 [ 84.537409][ T5291] usb 4-1: device descriptor read/all, error -71 [ 84.704314][ T5291] usb usb4-port1: attempt power cycle [ 84.731852][ T5279] usb 3-1: device descriptor read/all, error -71 [ 85.392592][ T5297] vhci_hcd: vhci_device speed not set [ 85.421651][ C0] sched: DL replenish lagged too much [ 86.043336][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.064783][ T5397] input: syz0 as /devices/virtual/input/input7 [ 86.071043][ T5397] input: failed to attach handler leds to device input7, error: -6 [ 86.195236][ T5283] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.273712][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.331520][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.389828][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.419231][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 86.453325][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.478712][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.531893][ T5283] usb 5-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 86.541021][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.575819][ T46] usb 1-1: config 0 descriptor?? [ 86.693736][ T5283] usb 5-1: config 0 descriptor?? [ 86.840970][ T5228] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 86.848135][ T5228] Bluetooth: Wrong link type (-22) [ 87.088530][ T46] logitech-hidpp-device 0003:046D:C086.0001: unbalanced collection at end of report description [ 87.132079][ T5297] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 87.183755][ T46] logitech-hidpp-device 0003:046D:C086.0001: hidpp_probe:parse failed [ 87.220538][ T46] logitech-hidpp-device 0003:046D:C086.0001: probe with driver logitech-hidpp-device failed with error -22 [ 87.287839][ T46] usb 1-1: USB disconnect, device number 4 [ 87.331931][ T5297] usb 4-1: Using ep0 maxpacket: 8 [ 87.378574][ T5409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 87.392478][ T5297] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 87.453766][ T5297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.503700][ T5297] usb 4-1: Product: syz [ 87.532941][ T5297] usb 4-1: Manufacturer: syz [ 87.571729][ T5297] usb 4-1: SerialNumber: syz [ 87.615678][ T5297] usb 4-1: config 0 descriptor?? [ 87.692008][ T5297] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 87.777306][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.809904][ T5279] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.902129][ T5405] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 87.908742][ T5405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.002878][ T5279] usb 2-1: too many configurations: 245, using maximum allowed: 8 [ 88.013519][ T5405] vhci_hcd vhci_hcd.0: Device attached [ 88.092260][ T5279] usb 2-1: config index 0 descriptor too short (expected 64797, got 132) [ 88.148278][ T5411] vhci_hcd: connection closed [ 88.152031][ T3024] vhci_hcd: stop threads [ 88.191328][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.214465][ T3024] vhci_hcd: release socket [ 88.237482][ T5297] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 88.249744][ T3024] vhci_hcd: disconnect device [ 88.274158][ T5279] usb 2-1: config index 1 descriptor too short (expected 64797, got 132) [ 88.310664][ T5297] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 88.337994][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.377103][ T5297] usb 4-1: USB disconnect, device number 7 [ 88.430228][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.442234][ T5279] usb 2-1: config index 2 descriptor too short (expected 64797, got 132) [ 88.510964][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.571513][ T5279] usb 2-1: config index 3 descriptor too short (expected 64797, got 132) [ 88.601589][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.670888][ T5279] usb 2-1: config index 4 descriptor too short (expected 64797, got 132) [ 88.700739][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.732637][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.799793][ T5279] usb 2-1: config index 5 descriptor too short (expected 64797, got 132) [ 88.847649][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.919054][ T5279] usb 2-1: config index 6 descriptor too short (expected 64797, got 132) [ 88.946711][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.973303][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.009104][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.030654][ T5279] usb 2-1: config index 7 descriptor too short (expected 64797, got 132) [ 89.071080][ T46] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.092782][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 89.127009][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.160758][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.217520][ T5283] usbhid 5-1:0.0: can't add hid device: -71 [ 89.230470][ T5279] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.252499][ T46] usb 1-1: SerialNumber: syz [ 89.271797][ T5283] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 89.300333][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.325252][ T5419] capability: warning: `syz.3.45' uses 32-bit capabilities (legacy support in use) [ 89.373214][ T5283] usb 5-1: USB disconnect, device number 5 [ 89.382518][ T5279] usb 2-1: Product: syz [ 89.403928][ T5279] usb 2-1: Manufacturer: syz [ 89.408724][ T5279] usb 2-1: SerialNumber: syz [ 89.518732][ T5279] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.573597][ T5282] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.596410][ T46] usb 1-1: 0:2 : does not exist [ 89.601574][ T46] usb 1-1: unit 5 not found! [ 89.693259][ T3302] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 89.781166][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.804437][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.821322][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.830485][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.839668][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.847729][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.856133][ T5283] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.865182][ T46] usb 1-1: USB disconnect, device number 5 [ 89.886232][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.923681][ T3302] usb 4-1: Using ep0 maxpacket: 8 [ 89.990855][ T3302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 90.039092][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 90.059818][ T3302] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 90.097555][ T5283] usb 5-1: config 187 has an invalid interface number: 132 but max is 0 [ 90.120228][ T5241] udevd[5241]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.145250][ T3302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.171852][ T5283] usb 5-1: config 187 has an invalid descriptor of length 36, skipping remainder of the config [ 90.231774][ T3302] usb 4-1: Product: syz [ 90.270630][ T3302] usb 4-1: Manufacturer: syz [ 90.298606][ T5283] usb 5-1: config 187 has no interface number 0 [ 90.319085][ T3302] usb 4-1: SerialNumber: syz [ 90.352746][ T3302] usb 4-1: config 0 descriptor?? [ 90.386582][ T5283] usb 5-1: New USB device found, idVendor=046d, idProduct=08ac, bcdDevice=80.de [ 90.403902][ T3302] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0204 [ 90.428547][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.448261][ T5283] usb 5-1: Product: syz [ 90.510529][ T5283] usb 5-1: Manufacturer: syz [ 90.528862][ T5283] usb 5-1: SerialNumber: syz [ 90.574890][ T5283] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ac [ 91.797934][ T5282] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 92.045199][ T5282] ath9k_htc: Failed to initialize the device [ 94.544324][ T5232] Bluetooth: hci3: command tx timeout [ 103.998841][ T5232] Bluetooth: hci3: command tx timeout [ 110.322107][ T5232] Bluetooth: hci3: command tx timeout [ 117.691820][ T5283] gspca_zc3xx: reg_w_i err -110 [ 128.372436][ T5228] Bluetooth: hci3: command tx timeout [ 144.547175][ T8] usb 2-1: USB disconnect, device number 4 [ 151.887501][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.904475][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.411987][ T8] usb 2-1: ath9k_htc: USB layer deinitialized [ 175.559192][ T5283] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 183.814996][ T5283] gspca_zc3xx 5-1:187.132: probe with driver gspca_zc3xx failed with error -110 [ 191.613822][ T5283] usb 5-1: USB disconnect, device number 6 [ 217.260520][ T5238] Bluetooth: hci1: command 0x0406 tx timeout [ 217.275972][ T5238] Bluetooth: hci0: command 0x0406 tx timeout [ 217.290673][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 217.305245][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 268.434914][ T5284] kworker/1:7: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.435563][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.448935][ T5284] CPU: 1 UID: 0 PID: 5284 Comm: kworker/1:7 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 268.458832][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.469188][ T5284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.469214][ T5284] Workqueue: events_power_efficient neigh_periodic_work [ 268.479740][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.489744][ T5284] [ 268.489760][ T5284] Call Trace: [ 268.489776][ T5284] [ 268.489787][ T5284] dump_stack_lvl+0x241/0x360 [ 268.496720][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.502923][ T5284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.502954][ T5284] ? __pfx__printk+0x10/0x10 [ 268.505397][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.508528][ T5284] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 268.511445][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.516145][ T5284] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 268.516174][ T5284] warn_alloc+0x278/0x410 [ 268.522805][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.527951][ T5284] ? seqcount_lockdep_reader_access+0x13b/0x1e0 [ 268.532586][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.542335][ T5284] ? __pfx_warn_alloc+0x10/0x10 [ 268.542398][ T5284] __alloc_pages_slowpath+0xf37/0x1020 [ 268.548908][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.559268][ T5284] ? __pfx___alloc_pages_slowpath+0x10/0x10 [ 268.559310][ T5284] __alloc_pages_noprof+0x43e/0x6c0 [ 268.565830][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.570120][ T5284] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 268.576464][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.582695][ T5284] alloc_pages_mpol_noprof+0x3e8/0x680 [ 268.589186][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.594048][ T5284] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 268.594080][ T5284] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 268.599648][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.609328][ T5284] ? alloc_pages_noprof+0x43/0x170 [ 268.609374][ T5284] alloc_slab_page+0x6a/0x120 [ 268.615307][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.620466][ T5284] allocate_slab+0x1c0/0x2f0 [ 268.630980][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.636651][ T5284] ___slab_alloc+0xcd1/0x14b0 [ 268.636691][ T5284] ? __alloc_skb+0x1c3/0x440 [ 268.642980][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.648384][ T5284] ? __alloc_skb+0x1c3/0x440 [ 268.656215][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.660831][ T5284] __slab_alloc+0x58/0xa0 [ 268.667084][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.676612][ T5284] ? __alloc_skb+0x1c3/0x440 [ 268.676648][ T5284] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 268.681779][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.686428][ T5284] __alloc_skb+0x1c3/0x440 [ 268.696946][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.701494][ T5284] ? __pfx___alloc_skb+0x10/0x10 [ 268.708020][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.712447][ T5284] ? do_raw_write_lock+0x148/0x4f0 [ 268.712490][ T5284] ? __lock_acquire+0x2010/0x2050 [ 268.712527][ T5284] __neigh_notify+0x81/0x140 [ 268.717110][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.723606][ T5284] neigh_cleanup_and_release+0xb7/0x2a0 [ 268.723637][ T5284] neigh_periodic_work+0x3c9/0xd50 [ 268.728230][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.738016][ T5284] ? process_scheduled_works+0x976/0x1850 [ 268.738048][ T5284] process_scheduled_works+0xa63/0x1850 [ 268.742399][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.752893][ T5284] ? __pfx_process_scheduled_works+0x10/0x10 [ 268.757636][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.763351][ T5284] ? assign_work+0x364/0x3d0 [ 268.763388][ T5284] worker_thread+0x870/0xd30 [ 268.769604][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.774015][ T5284] ? __kthread_parkme+0x169/0x1d0 [ 268.780515][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.785430][ T5284] ? __pfx_worker_thread+0x10/0x10 [ 268.785459][ T5284] kthread+0x2f0/0x390 [ 268.795264][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.800320][ T5284] ? __pfx_worker_thread+0x10/0x10 [ 268.805490][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.809899][ T5284] ? __pfx_kthread+0x10/0x10 [ 268.820412][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.825903][ T5284] ret_from_fork+0x4b/0x80 [ 268.825935][ T5284] ? __pfx_kthread+0x10/0x10 [ 268.831020][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.837238][ T5284] ret_from_fork_asm+0x1a/0x30 [ 268.837289][ T5284] [ 268.843026][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.848613][ T5284] Mem-Info: [ 268.855154][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.861001][ T5284] active_anon:4150 inactive_anon:0 isolated_anon:0 [ 268.861001][ T5284] active_file:1425 inactive_file:38210 isolated_file:0 [ 268.861001][ T5284] unevictable:768 dirty:123 writeback:41 [ 268.861001][ T5284] slab_reclaimable:8250 slab_unreclaimable:1447331 [ 268.861001][ T5284] mapped:17887 shmem:1258 pagetables:672 [ 268.861001][ T5284] sec_pagetables:0 bounce:0 [ 268.861001][ T5284] kernel_misc_reclaimable:0 [ 268.861001][ T5284] free:9204 free_pcp:6671 free_cma:0 [ 268.870793][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.875387][ T5284] Node 0 active_anon:16600kB inactive_anon:0kB active_file:5636kB inactive_file:152760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:71544kB dirty:484kB writeback:164kB shmem:3496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10156kB pagetables:2688kB sec_pagetables:0kB all_unreclaimable? no [ 268.879960][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.890483][ T5284] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 268.895507][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.901770][ T5284] Node 0 DMA free:9916kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 268.907005][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 268.910921][ T5284] lowmem_reserve[]: 0 [ 268.917440][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 268.922554][ T5284] 2465 2466 [ 268.932363][ C0] node 0: slabs: 47205, objs: 566460, free: 0 [ 268.936927][ T5284] 0 0 [ 268.947438][ C0] node 1: slabs: 120145, objs: 1441740, free: 48 [ 268.993061][ T5351] usb 4-1: USB disconnect, device number 8 [ 269.035072][ T5284] [ 269.035089][ T5284] Node 0 DMA32 free:5800kB boost:4096kB min:38296kB low:46844kB high:55392kB reserved_highatomic:8192KB active_anon:16564kB inactive_anon:0kB active_file:5636kB inactive_file:151932kB unevictable:1536kB writepending:644kB present:3129332kB managed:2552480kB mlocked:0kB bounce:0kB free_pcp:14444kB local_pcp:6036kB free_cma:0kB [ 269.035152][ T5284] lowmem_reserve[]: 0 0 0 0 0 [ 269.035197][ T5284] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 269.035251][ T5284] lowmem_reserve[]: 0 0 0 0 0 [ 269.035297][ T5284] Node 1 Normal free:20864kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:10240KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:80kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12316kB local_pcp:4064kB free_cma:0kB [ 269.035353][ T5284] lowmem_reserve[]: 0 0 0 0 0 [ 269.035399][ T5284] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9896kB [ 269.316403][ T5284] Node 0 DMA32: 1899*4kB (UM) 252*8kB (UME) 41*16kB (UME) 44*32kB (UME) 41*64kB (UME) 24*128kB (UMEH) 17*256kB (U) 12*512kB (U) 13*1024kB (UH) 6*2048kB (U) 6*4096kB (U) = 78044kB [ 269.334434][ T5284] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 269.346041][ T5284] Node 1 Normal: 4*4kB (UME) 7*8kB (UME) 8*16kB (E) 11*32kB (MEH) 11*64kB (MEH) 2*128kB (EH) 5*256kB (UMEH) 5*512kB (UMH) 5*1024kB (UMEH) 1*2048kB (E) 2*4096kB (M) = 20712kB [ 269.363626][ T5284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.373263][ T5284] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.382623][ T5284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.392248][ T5284] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.401635][ T5284] 40896 total pagecache pages [ 269.406359][ T5284] 0 pages in swap cache [ 269.410538][ T5284] Free swap = 124996kB [ 269.414785][ T5284] Total swap = 124996kB [ 269.418988][ T5284] 2097051 pages RAM [ 269.422932][ T5284] 0 pages HighMem/MovableOnly [ 269.427625][ T5284] 427081 pages reserved [ 269.431837][ T5284] 0 pages cma reserved [ 270.162217][ T30] INFO: task syz-executor:5424 blocked for more than 166 seconds. [ 270.170359][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 270.272058][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.278439][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.302998][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.310140][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.379519][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 271.761715][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.770466][ T30] task:syz-executor state:D stack:26256 pid:5424 tgid:5424 ppid:5414 flags:0x00004002 [ 272.411732][ T30] Call Trace: [ 272.415086][ T30] [ 272.418077][ T30] __schedule+0x1895/0x4b30 [ 272.671631][ T30] ? __pfx___schedule+0x10/0x10 [ 272.676575][ T30] ? __pfx_lock_release+0x10/0x10 [ 272.871622][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 272.877287][ T30] ? schedule+0x90/0x320 [ 273.071619][ T30] schedule+0x14b/0x320 [ 273.076747][ T30] schedule_preempt_disabled+0x13/0x30 [ 273.261618][ T30] __mutex_lock+0x6a7/0xd70 [ 273.266218][ T30] ? __mutex_lock+0x52a/0xd70 [ 273.270933][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 273.471659][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 273.476795][ T30] ? read_word_at_a_time+0xe/0x20 [ 273.681620][ T30] ? sized_strscpy+0x8d/0x220 [ 273.686393][ T30] ip_tunnel_init_net+0x20e/0x720 [ 273.851644][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 273.857372][ T30] ? ops_init+0x75/0x590 [ 274.031649][ T30] ops_init+0x31e/0x590 [ 274.035912][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 274.041327][ T30] setup_net+0x287/0x9e0 [ 275.083429][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 275.089065][ T30] ? __pfx_setup_net+0x10/0x10 [ 275.093919][ T30] copy_net_ns+0x33f/0x570 [ 275.098381][ T30] create_new_namespaces+0x425/0x7b0 [ 275.103801][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 275.109551][ T30] ksys_unshare+0x619/0xc10 [ 275.114161][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 275.119220][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.125696][ T30] ? do_syscall_64+0x100/0x230 [ 275.130502][ T30] __x64_sys_unshare+0x38/0x40 [ 275.135782][ T30] do_syscall_64+0xf3/0x230 [ 275.140342][ T30] ? clear_bhb_loop+0x35/0x90 [ 275.145139][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.151063][ T30] RIP: 0033:0x7f41de77f737 [ 275.155579][ T30] RSP: 002b:00007f41dea5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 275.164151][ T30] RAX: ffffffffffffffda RBX: 00007f41de7f198c RCX: 00007f41de77f737 [ 275.172229][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 275.180236][ T30] RBP: 0000000000000000 R08: 00007f41df467d60 R09: 0000000000000000 [ 275.188629][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 275.196740][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 275.204828][ T30] [ 275.207926][ T30] [ 275.207926][ T30] Showing all locks held in the system: [ 275.215763][ T30] 1 lock held by kthreadd/2: [ 275.220375][ T30] 3 locks held by kworker/0:0/8: [ 275.225851][ T30] #0: ffff8881446c1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.237739][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.249762][ T30] #2: ffff888145316190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 275.258791][ T30] 7 locks held by kworker/u8:0/11: [ 275.264053][ T30] 3 locks held by kworker/u8:1/12: [ 275.269200][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.280991][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.292136][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 275.301189][ T30] 2 locks held by kdevtmpfs/27: [ 275.306224][ T30] 1 lock held by khungtaskd/30: [ 275.311124][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 275.321247][ T30] 6 locks held by kworker/u8:2/35: [ 275.326905][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.338365][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.349032][ T30] #2: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 275.358621][ T30] #3: ffff888024d6a0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 275.368784][ T30] #4: ffff888024d6b250 (&devlink->lock_key#2){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 275.379741][ T30] #5: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 275.388769][ T30] 3 locks held by kworker/u8:3/52: [ 275.394006][ T30] 3 locks held by kworker/u8:6/1065: [ 275.399330][ T30] 3 locks held by kworker/R-ipv6_/2725: [ 275.404957][ T30] #0: ffff88802df79948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.416716][ T30] #1: ffffc90009287c80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.430894][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 275.440942][ T30] 2 locks held by kworker/u8:8/3024: [ 275.446345][ T30] 3 locks held by kworker/1:2/3302: [ 275.451674][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.464166][ T30] #1: ffffc9000ac27d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.475186][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 275.484640][ T30] 6 locks held by kworker/u9:1/4620: [ 275.489966][ T30] #0: ffff88814c755148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.500936][ T30] #1: ffffc9000dc2fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.513824][ T30] #2: ffff88802836cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 275.523802][ T30] #3: ffff88802836c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 275.534088][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 275.544412][ T30] #5: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 275.555524][ T30] 1 lock held by syslogd/4665: [ 275.560328][ T30] 1 lock held by udevd/4683: [ 275.565019][ T30] 2 locks held by dhcpcd/4897: [ 275.569821][ T30] 2 locks held by getty/4985: [ 275.574626][ T30] #0: ffff8880321090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 275.584523][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 275.594802][ T30] 5 locks held by kworker/u9:4/5232: [ 275.600117][ T30] #0: ffff888143bfb948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.611114][ T30] #1: ffffc90003d17d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.623902][ T30] #2: ffff888029c70d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 275.634295][ T30] #3: ffff888029c70078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 275.644545][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 275.654445][ T30] 5 locks held by kworker/u9:5/5234: [ 275.659766][ T30] #0: ffff888143bff948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.671013][ T30] #1: ffffc90003d47d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.683843][ T30] #2: ffff888028e10d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 275.693977][ T30] #3: ffff888028e10078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 275.703833][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 275.713721][ T30] 2 locks held by udevd/5235: [ 275.718440][ T30] 5 locks held by kworker/u9:7/5238: [ 275.723880][ T30] #0: ffff88807a75f948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.734845][ T30] #1: ffffc90003d67d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.748528][ T30] #2: ffff888032278d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 275.758545][ T30] #3: ffff888032278078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 275.768398][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 275.778345][ T30] 2 locks held by udevd/5242: [ 275.783150][ T30] 5 locks held by syz-executor/5243: [ 275.788469][ T30] 3 locks held by kworker/1:5/5282: [ 275.793741][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.804906][ T30] #1: ffffc90004247d00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.817098][ T30] #2: ffff888145316190 (&dev->mutex){....}-{3:3}, at: ath9k_hif_usb_firmware_cb+0x34a/0x4b0 [ 275.827513][ T30] 3 locks held by kworker/1:6/5283: [ 275.832813][ T30] 2 locks held by kworker/0:5/5291: [ 275.838805][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.849992][ T30] #1: ffffc900042c7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.860422][ T30] 3 locks held by kworker/1:8/5297: [ 275.865757][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.878266][ T30] #1: ffffc90004337d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.889510][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 275.899213][ T30] 3 locks held by kworker/0:6/5351: [ 275.904553][ T30] #0: ffff8881446c1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.916058][ T30] #1: ffffc90004717d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.928064][ T30] #2: ffff888028681190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 275.937093][ T30] 2 locks held by syz-executor/5424: [ 275.942917][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 275.952831][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 275.962493][ T30] 2 locks held by dhcpcd/5427: [ 275.967277][ T30] #0: ffff88802894c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 275.977087][ T30] #1: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 275.988305][ T30] 1 lock held by syz-executor/5428: [ 275.993588][ T30] [ 275.995936][ T30] ============================================= [ 275.995936][ T30] [ 276.004488][ T30] NMI backtrace for cpu 1 [ 276.008844][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 276.019025][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.029113][ T30] Call Trace: [ 276.032432][ T30] [ 276.035384][ T30] dump_stack_lvl+0x241/0x360 [ 276.040135][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.045369][ T30] ? __pfx__printk+0x10/0x10 [ 276.050033][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 276.055027][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 276.060537][ T30] ? _printk+0xd5/0x120 [ 276.064735][ T30] ? __pfx__printk+0x10/0x10 [ 276.069373][ T30] ? __wake_up_klogd+0xcc/0x110 [ 276.074270][ T30] ? __pfx__printk+0x10/0x10 [ 276.078907][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 276.083990][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 276.090024][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 276.096065][ T30] watchdog+0xff4/0x1040 [ 276.100353][ T30] ? watchdog+0x1ea/0x1040 [ 276.104818][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.109538][ T30] kthread+0x2f0/0x390 [ 276.113642][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.118356][ T30] ? __pfx_kthread+0x10/0x10 [ 276.122983][ T30] ret_from_fork+0x4b/0x80 [ 276.127440][ T30] ? __pfx_kthread+0x10/0x10 [ 276.132061][ T30] ret_from_fork_asm+0x1a/0x30 [ 276.136886][ T30] [ 276.140574][ T30] Sending NMI from CPU 1 to CPUs 0: [ 276.146711][ C0] NMI backtrace for cpu 0 [ 276.146726][ C0] CPU: 0 UID: 0 PID: 5351 Comm: kworker/0:6 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 276.146746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.146758][ C0] Workqueue: usb_hub_wq hub_event [ 276.146785][ C0] RIP: 0010:debug_check_no_obj_freed+0x2cc/0x580 [ 276.146813][ C0] Code: 00 00 49 89 c4 49 89 c5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 e7 e8 18 3c 3c fd 49 8b 04 24 <48> 89 44 24 38 49 8d 5c 24 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 [ 276.146834][ C0] RSP: 0018:ffffc90004716f20 EFLAGS: 00000046 [ 276.146848][ C0] RAX: ffff88804cac8310 RBX: ffff88804c6d43d0 RCX: dffffc0000000000 [ 276.146862][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90004716e00 [ 276.146875][ C0] RBP: ffffc90004717078 R08: 0000000000000003 R09: fffff520008e2dc0 [ 276.146887][ C0] R10: dffffc0000000000 R11: fffff520008e2dc0 R12: ffff88804cac8348 [ 276.146900][ C0] R13: 1ffff11009959069 R14: ffff888193be8a50 R15: 0000000000000036 [ 276.146913][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 276.146928][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.146940][ C0] CR2: 0000559afc500010 CR3: 000000006340a000 CR4: 00000000003506f0 [ 276.146956][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.146966][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.146977][ C0] Call Trace: [ 276.146983][ C0] [ 276.146990][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 276.147016][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 276.147044][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 276.147069][ C0] ? nmi_handle+0x2a/0x5a0 [ 276.147094][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 276.147116][ C0] ? nmi_handle+0x14f/0x5a0 [ 276.147133][ C0] ? nmi_handle+0x2a/0x5a0 [ 276.147150][ C0] ? debug_check_no_obj_freed+0x2cc/0x580 [ 276.147174][ C0] ? default_do_nmi+0x63/0x160 [ 276.147206][ C0] ? exc_nmi+0x123/0x1f0 [ 276.147231][ C0] ? end_repeat_nmi+0xf/0x53 [ 276.147258][ C0] ? debug_check_no_obj_freed+0x2cc/0x580 [ 276.147282][ C0] ? debug_check_no_obj_freed+0x2cc/0x580 [ 276.147306][ C0] ? debug_check_no_obj_freed+0x2cc/0x580 [ 276.147330][ C0] [ 276.147335][ C0] [ 276.147348][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 276.147374][ C0] ? page_ext_get+0x20/0x2a0 [ 276.147393][ C0] ? page_ext_get+0x1d6/0x2a0 [ 276.147414][ C0] free_unref_page+0x41b/0xf20 [ 276.147445][ C0] __put_partials+0xeb/0x130 [ 276.147471][ C0] put_cpu_partial+0x17c/0x250 [ 276.147486][ C0] ? put_cpu_partial+0x70/0x250 [ 276.147504][ C0] __slab_free+0x2ea/0x3d0 [ 276.147522][ C0] ? __phys_addr+0xba/0x170 [ 276.147540][ C0] qlist_free_all+0x9a/0x140 [ 276.147558][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 276.147587][ C0] __kasan_kmalloc+0x23/0xb0 [ 276.147605][ C0] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 276.147628][ C0] ? kasprintf+0xd5/0x120 [ 276.147652][ C0] kvasprintf+0xdf/0x190 [ 276.147674][ C0] ? __pfx_kvasprintf+0x10/0x10 [ 276.147697][ C0] ? __pfx_format_decode+0x10/0x10 [ 276.147720][ C0] ? hub_event+0x1ebc/0x5150 [ 276.147741][ C0] ? worker_thread+0x870/0xd30 [ 276.147768][ C0] kasprintf+0xd5/0x120 [ 276.147791][ C0] ? __pfx_kasprintf+0x10/0x10 [ 276.147814][ C0] ? __pfx_add_uevent_var+0x10/0x10 [ 276.147841][ C0] ? __pfx_usb_devnode+0x10/0x10 [ 276.147865][ C0] device_get_devnode+0xbc/0x2f0 [ 276.147893][ C0] dev_uevent+0x1ef/0xa40 [ 276.147914][ C0] ? __pfx_dev_uevent+0x10/0x10 [ 276.147932][ C0] ? vsnprintf+0x184/0x1da0 [ 276.147957][ C0] ? __pfx_add_uevent_var+0x10/0x10 [ 276.147979][ C0] ? trace_kmalloc+0x1f/0xd0 [ 276.148001][ C0] ? __asan_memcpy+0x40/0x70 [ 276.148026][ C0] ? kobject_get_path+0x1aa/0x230 [ 276.148049][ C0] kobject_uevent_env+0x467/0x8e0 [ 276.148077][ C0] device_del+0x7db/0x9b0 [ 276.148102][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.148127][ C0] ? __pfx_device_del+0x10/0x10 [ 276.148150][ C0] ? kobject_put+0x44d/0x480 [ 276.148175][ C0] usb_disconnect+0x60b/0x950 [ 276.148203][ C0] hub_event+0x1ebc/0x5150 [ 276.148234][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 276.148271][ C0] ? __pfx_hub_event+0x10/0x10 [ 276.148294][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 276.148320][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.148346][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.148377][ C0] ? process_scheduled_works+0x976/0x1850 [ 276.148401][ C0] process_scheduled_works+0xa63/0x1850 [ 276.148437][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.148464][ C0] ? assign_work+0x364/0x3d0 [ 276.148489][ C0] worker_thread+0x870/0xd30 [ 276.148516][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 276.148538][ C0] ? __kthread_parkme+0x169/0x1d0 [ 276.148564][ C0] ? __pfx_worker_thread+0x10/0x10 [ 276.148587][ C0] kthread+0x2f0/0x390 [ 276.148603][ C0] ? __pfx_worker_thread+0x10/0x10 [ 276.148625][ C0] ? __pfx_kthread+0x10/0x10 [ 276.148642][ C0] ret_from_fork+0x4b/0x80 [ 276.148665][ C0] ? __pfx_kthread+0x10/0x10 [ 276.148681][ C0] ret_from_fork_asm+0x1a/0x30 [ 276.148713][ C0] [ 276.149711][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 276.663897][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 276.674103][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.684266][ T30] Call Trace: [ 276.687583][ T30] [ 276.690535][ T30] dump_stack_lvl+0x241/0x360 [ 276.695239][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.700464][ T30] ? __pfx__printk+0x10/0x10 [ 276.705079][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.711121][ T30] ? vscnprintf+0x5d/0x90 [ 276.715507][ T30] panic+0x349/0x880 [ 276.719425][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 276.725608][ T30] ? __pfx_panic+0x10/0x10 [ 276.730049][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 276.735445][ T30] ? __irq_work_queue_local+0x137/0x410 [ 276.741020][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 276.746415][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 276.752598][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 276.758787][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 276.764980][ T30] watchdog+0x1033/0x1040 [ 276.769342][ T30] ? watchdog+0x1ea/0x1040 [ 276.773794][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.778496][ T30] kthread+0x2f0/0x390 [ 276.782584][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.787284][ T30] ? __pfx_kthread+0x10/0x10 [ 276.791897][ T30] ret_from_fork+0x4b/0x80 [ 276.796354][ T30] ? __pfx_kthread+0x10/0x10 [ 276.800962][ T30] ret_from_fork_asm+0x1a/0x30 [ 276.805773][ T30] [ 276.809174][ T30] Kernel Offset: disabled [ 276.813503][ T30] Rebooting in 86400 seconds..