last executing test programs: 34.603458597s ago: executing program 4 (id=4247): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x40000ea, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x809ee}}, './file0\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r6, &(0x7f00000027c0)=[{&(0x7f0000000480)=""/86, 0x56}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0xc, "b4bc323ef77d1f000071849800000000dfff00"}}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') close(r5) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="28010000", @ANYRES16=r4, @ANYBLOB="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"], 0x128}}, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r3}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x1000005d, 0x3, 0xd77, 0x8000000000000000, 0xfffffffffffffffe, 0xfffefffffffffffe, 0x1, 0x10}, 0x0) socket(0x80000000000000a, 0x2, 0x0) 27.865767056s ago: executing program 4 (id=4254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e45766500000c00028008000100000000001400030067656e65766531000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async, rerun: 64) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0xb) 27.568175005s ago: executing program 3 (id=4255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a7704000000002400000002000000480004802800018007000100637400001c0002800500030001000000080001400000001708000240000000131c0001800a00010072656469720000000c00028008000140000000170900010073797a30000000000900020073797a3200"], 0x9c}}, 0x0) 27.36242323s ago: executing program 4 (id=4256): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c40)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xfffffff9, 0x94e, 0x40}}]}]}]}, 0x38}}, 0x0) 26.263952049s ago: executing program 3 (id=4258): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4c) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000}, 0xc) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) 26.120791212s ago: executing program 4 (id=4259): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000042c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0x0, r2}, 0x10) read$FUSE(r0, &(0x7f0000004380)={0x2020}, 0x2020) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040), &(0x7f00000005c0)) openat$incfs(0xffffffffffffff9c, &(0x7f0000002140)='.pending_reads\x00', 0x400, 0x0) 25.465391138s ago: executing program 4 (id=4260): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2e, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61127600000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, &(0x7f0000000100)={0xda, 0x4, 0x100, 0xfffffffffffffff2}) mq_timedreceive(r4, 0x0, 0x0, 0x8000000000f, &(0x7f0000000240)) lseek(r4, 0x0, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a300)={0x2020}, 0x204c) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) unshare(0x68040200) socket$inet(0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0xfffff000) mprotect(&(0x7f0000656000/0x2000)=nil, 0x2000, 0x1000000) timer_create(0x7, 0x0, &(0x7f0000000100)) syz_clone(0x20f5000, 0x0, 0x0, 0x0, 0x0, 0x0) 25.061522198s ago: executing program 4 (id=4261): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f0000000380)={0x0, 0x0, "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"}) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$midi(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 25.05288002s ago: executing program 3 (id=4262): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) mmap(&(0x7f0000928000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x10, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="120100000004e308d112ac141a4b010203010902120001000000000913700000ffffff00"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0xe, 0x8, 0xc0, 0x100}]}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0x0, r2}, 0x10) read$FUSE(r0, &(0x7f0000004380)={0x2020}, 0x2020) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040), &(0x7f00000005c0)) openat$incfs(0xffffffffffffff9c, &(0x7f0000002140)='.pending_reads\x00', 0x400, 0x0) 20.726050913s ago: executing program 3 (id=4272): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) (async) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) 20.162676314s ago: executing program 1 (id=4275): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x107181) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f00000001c0)=0xffffffff) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r4 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000004}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000004000000010000000900000000000000", @ANYRES32, @ANYBLOB="800000000000d00000000000f2ffffffffffff07c9d48f2b580151e517aabdc6a3fd9a729c96447a274fc52bdf14f51424bc5ff2a0dd583d5836fb1e580f0a05af3dd7d6c37e9743218672549fade0931aeeae411e65bb71786c3dc3622b9129838324cd7b48fbc0d1e8dafb90dbd98ee3522f6a687444ef2670db5a4802ff75351d8d34b3d7dd8e204ba18030e2534a335ec48c6f1aed4b42c65c84ef5e909c16c3b9664346c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) epoll_pwait(r4, &(0x7f0000000300), 0x1, 0xfffffffc, 0x0, 0xfffffffffffffff6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) (async, rerun: 64) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f00000000c0), 0x80, 0x20800) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0x50002000}) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000180001801400020073797a5f74756e0000000000000000000500030002000000050002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008041) preadv(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 18.691508734s ago: executing program 1 (id=4279): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080500c80002"], 0xfffffffffffffd2a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f00000006c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t/\x00\x00\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdV<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x83\"\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xb0\x1e$\xd1\x17\f\xddiN\xf5\xca\x84\xf3\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, r2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f00000001c0)=@hopopts={0x2c, 0x12, '\x00', [@generic={0x80, 0x1a, "22a893a3ee773b458b15b43d28b2942c3d641c5e059be42ef927"}, @generic={0x7c, 0x65, "8fe46fa47d89e9229c8f5d112278a0ab797592c462471aad2fcc6fa7825c13154e89daa520402540fb9b9eec42861b7a4074a9572f78607f65a3157b75cb1f63f0e1ce19d22a2ad406b1aa08f8b2e6fe04d82d0054c1c0f6a6fd46b2131a6a72736a44e0e6"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0xa0) 18.49210842s ago: executing program 3 (id=4280): r0 = socket$netlink(0x10, 0x3, 0x4) memfd_create(0x0, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x4e62, &(0x7f0000000380)={0x0, 0xf3b1, 0x10100, 0x0, 0x276}, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) recvmmsg(r4, &(0x7f0000004300), 0x3a4, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c562d117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000214e224e0000", 0x58}], 0x1) 15.891194753s ago: executing program 0 (id=4285): openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047452, 0x20004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000800000000000a240000000c0a03000000000000000000000000060800044000000000080004400a010400000000000000000000000048000000140a030000000000000000000300000008000340000000000900010073797a31000000000900020073797a30000000000900010073797a3100000000080003400000000a140000001100010000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000200000240012800c0001006d6163766c616e001400028008000100100000000600020001000000a265087eaa"], 0x44}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f00000001c0)={@my=0x1, 0x7fffffff}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a227536350102f0010902120001000000"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x2031a9, 0x20, 0x2, 0x301}, &(0x7f0000000000), &(0x7f0000000140)) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90824fc60", 0x14}], 0x1}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0xe, 0x0, &(0x7f0000000900)) close(0xffffffffffffffff) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="30fe7e1ec81d", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x12, 0x5, 0x0, "a0fbe54d58dd42fecba440c93eed55"}]}}}}}}}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 15.242483419s ago: executing program 1 (id=4286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xb, 0x5, 0x0, 0x0, 0xb8, 0x8, 0x7, 0xf8, 0x1, 0x6, 0x2, 0x6, 0x0, 0xf92, 0x10, 0x61, 0x6c, 0x1, 0x7f, '\x00', 0x8, 0x7}) 14.883462166s ago: executing program 1 (id=4287): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r1, &(0x7f0000004340)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x801c581f, 0x0) write$FUSE_LK(r1, &(0x7f00000021c0)={0x28, 0x0, r4}, 0x28) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x100}, {{0x4}, {0x2, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.387880622s ago: executing program 1 (id=4288): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x169802, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1e, 0x61, 0xe4, 0x10, 0x13b1, 0x42, 0x7b55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xcf, 0x28, 0xfc, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40}}]}}]}}]}}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x8}, {0x6}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r2, 0x5, 0x0) lseek(r2, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000180)) r4 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x40041) r5 = dup2(r4, r4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100007de84e4acfe60a25d660def4341e8c3fda0eec843a8a308115d7320834f8c9b5723ead7150219154788345188906412f72511687a9bbccccb8a95e23058d9f5769ac566c214074bfeefe7501366aec4fc6cf1c3cfcafff6e16e4d161df3d9f44ff10a5a0cf629953575a95a9f04f9c43ee4a609062c6078edd658842cb3123032c69c4ecc41732374698681e92d8ba4b6a5ed2a3de8f650ac65331e0bbea5081bf4034c0bb111304887c15febd2ec091f93ae2c57e4062a574655c00f0ba4de7f9", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000080)={0x1}) write$ppp(r5, &(0x7f0000000280)="1e05df3099efd8ef8d449c7700", 0xd) 12.94477973s ago: executing program 1 (id=4290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x100) (async) shutdown(r3, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000097000040"]) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0x2) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd03006ad8b2e80a469064c4000000000000fe800000000000000000000000000012fe80000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70c2000090780000fe06e229df5f0000"], 0x0) (async) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x48400) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100051010000000000ec0000000", 0x58}], 0x1) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r7, &(0x7f00000000c0)='./file0\x00', 0x1) 11.721234661s ago: executing program 0 (id=4292): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000024000780080002"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={0x0, 0x58}) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000280), 0x4) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000100)) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0019b40320d812010079de01ec020109021b0001000003000904000001785e4c00090585020004"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) read$char_usb(r7, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc040}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.795860998s ago: executing program 2 (id=4293): syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x87, 0x28, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}]}}]}}]}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000500)) 8.326596773s ago: executing program 0 (id=4294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.027580543s ago: executing program 2 (id=4295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xb, 0x5, 0x0, 0x0, 0xb8, 0x8, 0x7, 0xf8, 0x1, 0x6, 0x2, 0x6, 0x0, 0xf92, 0x10, 0x61, 0x6c, 0x1, 0x7f, '\x00', 0x8, 0x7}) 7.964067932s ago: executing program 0 (id=4296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="e98d0000000000000000d76b56ba87564d1b7796f0e1d004050000000500050000000000"], 0x1c}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040ac05624200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a9ce56"], 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) 7.694684127s ago: executing program 2 (id=4297): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) epoll_create(0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "c90e"}, 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) poll(&(0x7f0000000200)=[{r1, 0x410}], 0x1, 0x81) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.656087051s ago: executing program 2 (id=4298): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRESOCT=r3, @ANYRES16=r2], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @device_b}, 0x0, @val={0x8c, 0x18, {0x0, '\x00', @long="8c58ea25b8b4fa85433c7c90bed82811"}}}}]}, 0x54}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) acct(0x0) 3.192631979s ago: executing program 0 (id=4299): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000200b060100000000000001090224000100000000012205000905810300"/54], 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:/', 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400000000008000840000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x1, @mcast1, 0x9}, 0x1c) mq_timedreceive(r0, &(0x7f0000000580)=""/221, 0xdd, 0x89, &(0x7f0000000000)) sendmmsg$inet(r4, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="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", 0x2de}, {&(0x7f0000000800)="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", 0x2a7}], 0x2, 0x0, 0x0, 0x900}}], 0x2, 0x24000004) 3.190853912s ago: executing program 2 (id=4300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb653, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004fc0)={0x38, r4, 0x10ada85e65c25349, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x5, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mkdirat(r6, &(0x7f0000000080)='./file0\x00', 0x60) (async) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=""/51, 0x33) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 150.073231ms ago: executing program 2 (id=4301): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x7f) socket(0x1a, 0xa, 0xffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYBLOB="1000018004"], 0x28}, 0x1, 0x1000000000000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6328a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000000c0005"], 0x98}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@local=@item_012={0x1, 0x2, 0x0, "04"}, @global=@item_4={0x3, 0x1, 0x5, "3a76f1eb"}, @local=@item_012={0x2, 0x2, 0x2, "5fd3"}, @global=@item_4={0x3, 0x1, 0x3, "1ed4cec8"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000000000)={0x2, 0x2, 0x6}) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a0a44000000001010902440001010000000904000012020600ad052425000005240000000d240f0100000000000000000009058103"], 0x0) 0s ago: executing program 0 (id=4302): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) syz_usb_connect(0x2, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004e6aa9204c051600578e010203010922360002000000000e0400f50003ed0200090503000000000000090400"], 0x0) kernel console output (not intermixed with test programs): l, usb_gadget_register_driver returned -16 [ 1641.384218][T27602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.551339][T27602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.623426][T27602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.676726][T27602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.732116][T27602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.580081][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.648937][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.816837][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.884289][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.901440][T27917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4088'. [ 1642.955325][ T5288] usb 4-1: string descriptor 0 read error: -71 [ 1643.044265][ T5288] usb 4-1: USB disconnect, device number 22 [ 1643.213716][T19376] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1643.347860][T27932] netlink: 'syz.0.4090': attribute type 21 has an invalid length. [ 1643.386850][T19376] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.399912][T19376] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1643.409693][T19376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.435630][T19376] usb 3-1: config 0 descriptor?? [ 1643.446249][T19376] pwc: Askey VC010 type 2 USB webcam detected. [ 1643.644931][T19376] pwc: send_video_command error -71 [ 1643.651536][T19376] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1643.662567][T19376] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1643.676555][T19376] usb 3-1: USB disconnect, device number 25 [ 1643.871312][T27943] fuse: Unknown parameter '÷Ùôž‰Œpny00000000000000000000' [ 1643.995941][T19376] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1644.140637][T27952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4092'. [ 1644.174974][T19376] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.185658][T19376] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1644.239708][T19376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.275145][T19376] usb 3-1: config 0 descriptor?? [ 1644.286621][T19376] pwc: Askey VC010 type 2 USB webcam detected. [ 1644.403502][ T5288] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1644.520356][T19376] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1644.540771][T19376] pwc: recv_control_msg error -32 req 02 val 2700 [ 1644.561728][T19376] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1644.572063][ T5288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.592258][ T5288] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1644.612068][ T5287] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1644.628276][T19376] pwc: recv_control_msg error -32 req 04 val 1000 [ 1644.649201][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.658250][T19376] pwc: recv_control_msg error -32 req 04 val 1300 [ 1644.667932][T19376] pwc: recv_control_msg error -32 req 04 val 1400 [ 1644.677363][ T5288] usb 1-1: config 0 descriptor?? [ 1644.687251][ T5288] pwc: Askey VC010 type 2 USB webcam detected. [ 1644.737839][T19376] pwc: recv_control_msg error -71 req 02 val 2000 [ 1644.751308][T19376] pwc: recv_control_msg error -71 req 02 val 2100 [ 1644.766543][T19376] pwc: recv_control_msg error -71 req 04 val 1500 [ 1644.779211][T19376] pwc: recv_control_msg error -71 req 02 val 2500 [ 1644.792784][T19376] pwc: recv_control_msg error -71 req 02 val 2400 [ 1644.800440][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 1644.842340][ T5287] usb 5-1: config 3 has an invalid interface number: 9 but max is 3 [ 1644.846333][T27976] fuse: Bad value for 'fd' [ 1644.872355][ T5287] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1644.882358][T19376] pwc: recv_control_msg error -71 req 02 val 2600 [ 1644.897919][ T5288] pwc: send_video_command error -71 [ 1644.905352][T19376] pwc: recv_control_msg error -71 req 02 val 2900 [ 1644.924829][ T5288] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1644.938635][T19376] pwc: recv_control_msg error -71 req 02 val 2800 [ 1644.945446][ T5287] usb 5-1: config 3 has an invalid interface number: 84 but max is 3 [ 1644.954002][ T5288] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1644.963517][ T5287] usb 5-1: config 3 has an invalid descriptor of length 64, skipping remainder of the config [ 1644.973969][T19376] pwc: recv_control_msg error -71 req 04 val 1100 [ 1644.982316][ T5288] usb 1-1: USB disconnect, device number 50 [ 1644.992636][T19376] pwc: recv_control_msg error -71 req 04 val 1200 [ 1645.006191][ T5287] usb 5-1: config 3 has 3 interfaces, different from the descriptor's value: 4 [ 1645.022248][T19376] pwc: Registered as video71. [ 1645.031149][ T5287] usb 5-1: config 3 has no interface number 1 [ 1645.052320][T19376] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input146 [ 1645.062802][ T5230] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1645.086017][ T5287] usb 5-1: config 3 has no interface number 2 [ 1645.092199][ T5287] usb 5-1: config 3 interface 0 altsetting 145 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1645.153238][T19376] usb 3-1: USB disconnect, device number 26 [ 1645.278746][ T5287] usb 5-1: config 3 interface 9 altsetting 3 endpoint 0xC has invalid maxpacket 1544, setting to 1024 [ 1645.295453][ T5287] usb 5-1: config 3 interface 9 altsetting 3 bulk endpoint 0xE has invalid maxpacket 1024 [ 1645.308972][ T5230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.320513][ T5287] usb 5-1: config 3 interface 84 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1645.349394][ T5230] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1645.387889][ T5287] usb 5-1: config 3 interface 0 has no altsetting 0 [ 1645.395606][ T5230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1645.405066][ T5287] usb 5-1: config 3 interface 9 has no altsetting 0 [ 1645.411703][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.420785][ T5287] usb 5-1: config 3 interface 84 has no altsetting 0 [ 1645.429757][ T5230] usb 4-1: config 0 descriptor?? [ 1645.438529][ T5287] usb 5-1: New USB device found, idVendor=16d8, idProduct=8002, bcdDevice=3a.82 [ 1645.449507][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.469278][ T5287] usb 5-1: Product: 넚⅟爛晸皧桒꯿ࣞ셛㉰áœëœ à¼™â·§ê­ê¦ä£ƒï‘„è±å…¡ç’±î¤¢à­Ÿæžä¥†ç¸¥ëž£á”–繬ë™åš¦ç¤‹îŠà¼°ê–™ä³½î‰›Ý•â©´ê·¨ç©¯ç šä•¥ä¢‰çœ†æ½‘ħ媀ꥷ☻盉岾ä•à¼ â‰Œï”翲鹵汰梛ὔå°ä£—툤僿齟ê‡áœ¡æ²â¬¶ë¿¼ëƒÑƒì‰žì¾»ïžì‹è¤‚ꌫ寽斸걺鴤å ë‚¬ç¸±è£¼í‡ë¹“䶒ܠêí¨å•¨ï»¯ë¢â¨å¯žê±°ä»†ë“½ë½›ã†·ä’€ìº› [ 1645.500973][ T5288] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1645.510170][T23413] Bluetooth: hci3: command 0x0406 tx timeout [ 1645.524056][ T5287] usb 5-1: Manufacturer: 饰뀓◯蓷阄횈â—é°ã²¤é¬’컉䒤﶑᥊㩛â—埑ê¦å£¼ìŸˆç ‹î¼” [ 1645.534822][ T5287] usb 5-1: SerialNumber: â°Š [ 1645.656960][T27974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.684685][T27974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.755201][ T5288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.800279][ T5287] usb 5-1: selecting invalid altsetting 0 [ 1645.809043][ T5287] usb 5-1: Could not set interface, error -22 [ 1645.816500][ T5288] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1645.833575][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.834032][ T5282] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1645.846915][ T5287] usb 5-1: USB disconnect, device number 26 [ 1645.876649][ T5288] usb 1-1: config 0 descriptor?? [ 1645.900040][ T5288] pwc: Askey VC010 type 2 USB webcam detected. [ 1646.043538][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 1646.054181][ T5282] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1646.091236][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.114416][ T5282] usb 3-1: Product: syz [ 1646.118824][ T5282] usb 3-1: Manufacturer: syz [ 1646.123637][ T5282] usb 3-1: SerialNumber: syz [ 1646.130288][ T5282] usb 3-1: config 0 descriptor?? [ 1646.302042][ T5288] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1646.341733][ T5282] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1646.358154][ T5288] pwc: recv_control_msg error -32 req 02 val 2700 [ 1646.374592][ T5288] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1646.382050][ T5288] pwc: recv_control_msg error -32 req 04 val 1000 [ 1646.391168][ T5288] pwc: recv_control_msg error -32 req 04 val 1300 [ 1646.405807][ T5288] pwc: recv_control_msg error -32 req 04 val 1400 [ 1646.413462][ T5288] pwc: recv_control_msg error -32 req 02 val 2000 [ 1646.420979][ T5288] pwc: recv_control_msg error -32 req 02 val 2100 [ 1646.429070][ T5288] pwc: recv_control_msg error -32 req 04 val 1500 [ 1646.436820][ T5288] pwc: recv_control_msg error -71 req 02 val 2500 [ 1646.444200][ T5288] pwc: recv_control_msg error -71 req 02 val 2400 [ 1646.451238][ T5288] pwc: recv_control_msg error -71 req 02 val 2600 [ 1646.461928][ T5288] pwc: recv_control_msg error -71 req 02 val 2900 [ 1646.471639][ T5288] pwc: recv_control_msg error -71 req 02 val 2800 [ 1646.563861][ T5288] pwc: recv_control_msg error -71 req 04 val 1100 [ 1646.573678][ T5288] pwc: recv_control_msg error -71 req 04 val 1200 [ 1646.600861][ T5288] pwc: Registered as video71. [ 1646.609946][ T5288] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input147 [ 1646.643573][ T5288] usb 1-1: USB disconnect, device number 51 [ 1647.371663][ T5282] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1647.388198][ T5282] usb 3-1: USB disconnect, device number 27 [ 1648.144864][T27998] fuse: Unknown parameter '÷Ùôž‰Œpny00000000000000000000' [ 1648.363412][ T5288] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1648.514510][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 1648.525212][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.536827][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.550628][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1648.564183][ T5288] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1648.573488][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.644068][ T5288] usb 3-1: config 0 descriptor?? [ 1648.813857][T28008] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1649.026508][ T5230] usb 4-1: string descriptor 0 read error: -71 [ 1649.075024][ T5230] usb 4-1: USB disconnect, device number 23 [ 1649.095167][ T5288] usbhid 3-1:0.0: can't add hid device: -71 [ 1649.113863][ T5288] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1649.117701][T28013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.133675][ T5288] usb 3-1: USB disconnect, device number 28 [ 1649.311274][T28017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1649.336980][T28006] fuse: Unknown parameter 'user_id00000000000000000000' [ 1649.663508][ T5288] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1649.675494][ T5282] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1649.814922][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.864443][ T5282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.874864][ T5282] usb 5-1: config 0 has no interfaces? [ 1649.910054][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.930572][ T5282] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1649.939855][ T5288] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 1649.939891][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.964528][ T5288] usb 4-1: config 0 descriptor?? [ 1650.024811][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.033009][ T5282] usb 5-1: Product: syz [ 1650.040400][ T5282] usb 5-1: Manufacturer: syz [ 1650.046605][ T5282] usb 5-1: SerialNumber: syz [ 1650.063052][ T5282] usb 5-1: config 0 descriptor?? [ 1650.123619][ T3354] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1650.363710][ T3354] usb 1-1: Using ep0 maxpacket: 32 [ 1650.397209][ T5288] wacom 0003:056A:0003.004E: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 1650.412911][ T3354] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.430450][ T3354] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1650.470558][ T5288] wacom 0003:056A:0003.004E: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.3-1/input0 [ 1650.491801][ T3354] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1650.503729][ T3354] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1650.512392][ T3354] usb 1-1: Product: syz [ 1650.518985][ T3354] usb 1-1: Manufacturer: syz [ 1650.524560][ T5288] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0003.004E/input/input148 [ 1650.537786][ T3354] usb 1-1: SerialNumber: syz [ 1650.561889][ T3354] usb 1-1: config 0 descriptor?? [ 1650.741413][ T3354] usb 4-1: USB disconnect, device number 24 [ 1651.723531][ T5282] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1651.910684][ T5282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.962475][ T5237] Bluetooth: hci1: unexpected event 0x10 length: 7 > 1 [ 1651.966851][T23413] Bluetooth: hci1: hardware error 0x00 [ 1651.982211][ T5282] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1652.022598][T28068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.041520][ T5282] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1652.078994][T28068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.092552][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.142909][ T5282] usb 2-1: config 0 descriptor?? [ 1652.193525][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1652.376335][T28063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.391165][ T9] usb 4-1: config 0 has an invalid interface number: 204 but max is 1 [ 1652.400195][ T9] usb 4-1: config 0 has an invalid interface number: 109 but max is 1 [ 1652.409807][ T9] usb 4-1: config 0 has no interface number 0 [ 1652.416075][ T9] usb 4-1: config 0 has no interface number 1 [ 1652.422203][ T9] usb 4-1: too many endpoints for config 0 interface 109 altsetting 139: 60, using maximum allowed: 30 [ 1652.433567][ T9] usb 4-1: config 0 interface 109 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 60 [ 1652.449837][ T9] usb 4-1: config 0 interface 109 has no altsetting 0 [ 1652.488934][ T9] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1652.516534][T28063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.540087][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.550007][ T9] usb 4-1: Product: syz [ 1652.555054][ T9] usb 4-1: Manufacturer: syz [ 1652.560510][ T9] usb 4-1: SerialNumber: syz [ 1652.605756][ T3354] usb 5-1: USB disconnect, device number 27 [ 1652.617022][ T9] usb 4-1: config 0 descriptor?? [ 1653.453814][ T5288] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1653.655102][ T5288] usb 3-1: config 0 has no interfaces? [ 1653.728887][ T5288] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1653.740624][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.748889][ T5288] usb 3-1: Product: syz [ 1653.753104][ T5288] usb 3-1: Manufacturer: syz [ 1653.766095][ T5288] usb 3-1: SerialNumber: syz [ 1653.779170][ T5288] usb 3-1: config 0 descriptor?? [ 1654.073569][T23413] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1654.463951][T28082] could not allocate digest TFM handle [ 1655.003577][ T9] usb 4-1: USB disconnect, device number 25 [ 1655.076550][T27752] udevd[27752]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.204/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1655.198145][T28099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1655.590624][ T5282] usb 2-1: string descriptor 0 read error: -71 [ 1655.602257][ T5282] usb 2-1: USB disconnect, device number 11 [ 1656.013908][ T5288] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1656.163460][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 1656.170449][ T5288] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1656.183466][ T5282] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1656.184512][ T5288] usb 4-1: can't read configurations, error -22 [ 1656.220260][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4132'. [ 1656.363598][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 1656.383462][ T5288] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1656.451390][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.512641][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.534959][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 1656.554299][ T5282] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1656.564378][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.609153][ T5288] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1656.617794][ T5288] usb 4-1: can't read configurations, error -22 [ 1656.628744][ T5288] usb usb4-port1: attempt power cycle [ 1656.636674][ T5282] usb 5-1: config 0 descriptor?? [ 1656.904174][ T9] usb 3-1: USB disconnect, device number 29 [ 1656.913820][ T5282] elan 0003:04F3:0755.004F: unknown main item tag 0x0 [ 1656.941978][ T5282] elan 0003:04F3:0755.004F: item fetching failed at offset 2/5 [ 1656.986271][ T5288] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1656.990240][ T5282] elan 0003:04F3:0755.004F: Hid Parse failed [ 1657.017333][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 1657.025535][ T5288] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1657.037890][ T5288] usb 4-1: can't read configurations, error -22 [ 1657.052039][ T5282] elan 0003:04F3:0755.004F: probe with driver elan failed with error -22 [ 1657.111652][ T5282] usb 5-1: USB disconnect, device number 28 [ 1657.168214][T28122] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1657.173694][ T5288] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1657.213578][T28122] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1657.224653][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 1657.243094][ T5288] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1657.251326][ T5288] usb 4-1: can't read configurations, error -22 [ 1657.263093][ T5288] usb usb4-port1: unable to enumerate USB device [ 1658.127056][T28136] tun0: tun_chr_ioctl cmd 3226476800 [ 1658.383431][ T5282] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1658.573627][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 1658.601132][ T5288] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1658.692654][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.704597][ T5282] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1658.714518][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.734261][ T5282] usb 5-1: config 0 descriptor?? [ 1658.810504][ T5288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.935692][ T5288] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1658.945317][T28136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.091776][T28136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.126454][ T5288] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1659.186148][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.246890][T28136] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4141'. [ 1659.278772][ T5282] usbhid 5-1:0.0: can't add hid device: -71 [ 1659.285208][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1659.301296][ T5282] usb 5-1: USB disconnect, device number 29 [ 1659.334958][ T5288] usb 3-1: config 0 descriptor?? [ 1659.631879][T28140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.705161][T28140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.119466][T28156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1660.210519][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1660.616066][T28167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1660.663666][ T5282] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1660.773039][T28173] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4150'. [ 1660.879770][ T5282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.890114][ T5282] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1660.901209][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.922663][ T5282] usb 5-1: config 0 descriptor?? [ 1660.947048][ T5282] pwc: Askey VC010 type 2 USB webcam detected. [ 1661.146088][ T5282] pwc: send_video_command error -71 [ 1661.151474][ T5282] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1661.159621][ T5282] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1661.170984][ T5282] usb 5-1: USB disconnect, device number 30 [ 1661.653758][ T3354] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1661.854816][ T5230] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1662.027772][ T3354] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.040458][ T3354] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1662.049684][ T3354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.060195][ T3354] usb 5-1: config 0 descriptor?? [ 1662.074693][ T3354] pwc: Askey VC010 type 2 USB webcam detected. [ 1662.236007][ T5230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.267206][ T5230] usb 4-1: config 0 has no interfaces? [ 1662.522292][ T3354] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1662.603822][ T5230] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1662.613053][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.621313][ T5230] usb 4-1: Product: syz [ 1662.627160][ T5230] usb 4-1: Manufacturer: syz [ 1662.631854][ T5230] usb 4-1: SerialNumber: syz [ 1662.673785][ T3354] pwc: recv_control_msg error -32 req 02 val 2700 [ 1662.684707][ T5230] usb 4-1: config 0 descriptor?? [ 1662.713800][ T3354] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1662.744000][ T3354] pwc: recv_control_msg error -32 req 04 val 1000 [ 1662.762990][ T3354] pwc: recv_control_msg error -32 req 04 val 1300 [ 1662.777560][ T3354] pwc: recv_control_msg error -32 req 04 val 1400 [ 1662.789556][ T3354] pwc: recv_control_msg error -32 req 02 val 2000 [ 1662.803875][ T3354] pwc: recv_control_msg error -32 req 02 val 2100 [ 1662.813687][ T3354] pwc: recv_control_msg error -32 req 04 val 1500 [ 1662.897144][T28201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1662.972708][T28186] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4153'. [ 1663.025810][ T3354] pwc: recv_control_msg error -71 req 02 val 2400 [ 1663.032690][ T3354] pwc: recv_control_msg error -71 req 02 val 2600 [ 1663.039626][ T3354] pwc: recv_control_msg error -71 req 02 val 2900 [ 1663.065158][ T3354] pwc: recv_control_msg error -71 req 02 val 2800 [ 1663.097630][ T5288] usb 3-1: string descriptor 0 read error: -71 [ 1663.110899][ T5288] usb 3-1: USB disconnect, device number 30 [ 1663.120045][ T3354] pwc: recv_control_msg error -71 req 04 val 1100 [ 1663.129154][ T3354] pwc: recv_control_msg error -71 req 04 val 1200 [ 1663.140924][ T3354] pwc: Registered as video71. [ 1663.147106][ T3354] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input151 [ 1663.173713][ T3354] usb 5-1: USB disconnect, device number 31 [ 1663.675696][T28215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.707150][T28220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.757952][T28215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.766064][T28220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.781267][T28216] ip6t_rpfilter: unknown options [ 1663.828898][T28217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4161'. [ 1663.913437][ T3354] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1663.937623][T28217] vlan2: entered promiscuous mode [ 1663.958556][T28217] veth1: entered promiscuous mode [ 1663.963816][T19376] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1663.996334][T28217] vlan2: entered allmulticast mode [ 1664.012115][T28217] veth1: entered allmulticast mode [ 1664.123537][T19376] usb 3-1: Using ep0 maxpacket: 8 [ 1664.136502][T28217] veth1: left allmulticast mode [ 1664.143590][T28217] veth1: left promiscuous mode [ 1664.191661][T19376] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1664.202460][T19376] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1664.291068][ T3354] usb 2-1: device descriptor read/all, error -71 [ 1664.303357][T19376] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1664.323534][T19376] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1664.332437][T19376] usb 3-1: Product: syz [ 1664.336745][T19376] usb 3-1: Manufacturer: syz [ 1664.341378][T19376] usb 3-1: SerialNumber: syz [ 1664.560239][T19376] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 1664.588414][T19376] visor 3-1:1.0: probe with driver visor failed with error -71 [ 1664.600643][T19376] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1664.615673][T19376] usb 3-1: USB disconnect, device number 31 [ 1664.829871][ T5282] usb 4-1: USB disconnect, device number 30 [ 1664.933469][ T3354] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1665.083539][ T3354] usb 2-1: Using ep0 maxpacket: 32 [ 1665.091400][ T3354] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1665.100951][ T3354] usb 2-1: config 7 has an invalid interface number: 180 but max is 1 [ 1665.112038][ T3354] usb 2-1: config 7 has an invalid interface number: 57 but max is 1 [ 1665.133988][ T3354] usb 2-1: config 7 has no interface number 0 [ 1665.140143][ T3354] usb 2-1: config 7 has no interface number 1 [ 1665.146483][ T3354] usb 2-1: config 7 interface 57 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1665.157592][ T3354] usb 2-1: config 7 interface 57 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1665.168802][ T3354] usb 2-1: config 7 interface 57 altsetting 8 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1665.180819][ T3354] usb 2-1: config 7 interface 57 altsetting 8 endpoint 0x89 has an invalid bInterval 220, changing to 11 [ 1665.196450][ T3354] usb 2-1: config 7 interface 57 altsetting 8 endpoint 0x89 has invalid maxpacket 26298, setting to 1024 [ 1665.208232][ T3354] usb 2-1: config 7 interface 57 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1665.226502][ T3354] usb 2-1: config 7 interface 180 has no altsetting 0 [ 1665.233603][ T3354] usb 2-1: config 7 interface 57 has no altsetting 0 [ 1665.255415][ T3354] usb 2-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=b8.b9 [ 1665.264293][T28240] FAULT_INJECTION: forcing a failure. [ 1665.264293][T28240] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.264503][T28240] CPU: 0 UID: 0 PID: 28240 Comm: syz.2.4167 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1665.264529][T28240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1665.264543][T28240] Call Trace: [ 1665.264552][T28240] [ 1665.264562][T28240] dump_stack_lvl+0x241/0x360 [ 1665.264594][T28240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1665.264618][T28240] ? __pfx__printk+0x10/0x10 [ 1665.264663][T28240] should_fail_ex+0x3b0/0x4e0 [ 1665.264696][T28240] ? nsim_fib_event_nb+0x287/0x10b0 [ 1665.264736][ T3354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.264760][ T3354] usb 2-1: Product: syz [ 1665.264776][ T3354] usb 2-1: Manufacturer: syz [ 1665.264793][ T3354] usb 2-1: SerialNumber: syz [ 1665.350536][T28240] should_failslab+0xac/0x100 [ 1665.355230][T28240] ? nsim_fib_event_nb+0x287/0x10b0 [ 1665.360462][T28240] __kmalloc_noprof+0xd8/0x400 [ 1665.365239][T28240] nsim_fib_event_nb+0x287/0x10b0 [ 1665.370283][T28240] notifier_call_chain+0x19f/0x3e0 [ 1665.375430][T28240] ? atomic_notifier_call_chain+0x26/0x180 [ 1665.381305][T28240] atomic_notifier_call_chain+0xdb/0x180 [ 1665.387019][T28240] call_fib_notifiers+0x31/0x60 [ 1665.391932][T28240] fib6_add+0x1bd5/0x4430 [ 1665.396368][T28240] ? __pfx_lock_acquire+0x10/0x10 [ 1665.401498][T28240] ? __pfx_fib6_add+0x10/0x10 [ 1665.406230][T28240] ? do_raw_spin_lock+0x14f/0x370 [ 1665.411311][T28240] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1665.417186][T28240] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1665.422598][T28240] ? ip6_route_add+0x76/0x160 [ 1665.427325][T28240] ip6_route_add+0x8b/0x160 [ 1665.431861][T28240] ipv6_route_ioctl+0x588/0x870 [ 1665.436752][T28240] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 1665.442167][T28240] ? __might_fault+0xc6/0x120 [ 1665.446886][T28240] inet6_ioctl+0x21a/0x280 [ 1665.451334][T28240] ? __pfx_inet6_ioctl+0x10/0x10 [ 1665.456313][T28240] sock_do_ioctl+0x158/0x460 [ 1665.460964][T28240] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1665.466122][T28240] sock_ioctl+0x626/0x8e0 [ 1665.470502][T28240] ? __pfx_sock_ioctl+0x10/0x10 [ 1665.475389][T28240] ? __fget_files+0x29/0x470 [ 1665.480014][T28240] ? __fget_files+0x3f3/0x470 [ 1665.484724][T28240] ? __pfx_sock_ioctl+0x10/0x10 [ 1665.489618][T28240] __se_sys_ioctl+0xf9/0x170 [ 1665.494242][T28240] do_syscall_64+0xf3/0x230 [ 1665.498753][T28240] ? clear_bhb_loop+0x35/0x90 [ 1665.503462][T28240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.509387][T28240] RIP: 0033:0x7feb3a77dff9 [ 1665.513831][T28240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1665.533479][T28240] RSP: 002b:00007feb3b5b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1665.541929][T28240] RAX: ffffffffffffffda RBX: 00007feb3a935f80 RCX: 00007feb3a77dff9 [ 1665.549922][T28240] RDX: 0000000020000640 RSI: 000000000000890b RDI: 0000000000000006 [ 1665.557923][T28240] RBP: 00007feb3b5b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1665.565925][T28240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.573924][T28240] R13: 0000000000000000 R14: 00007feb3a935f80 R15: 00007feb3aa5fa28 [ 1665.581924][T28240] [ 1665.608536][T28242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.062247][T28254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1666.089168][T28254] delete_channel: no stack [ 1666.133939][T28252] delete_channel: no stack [ 1666.179674][ T5282] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1666.248220][ T3354] iowarrior 2-1:7.180: no interrupt-in endpoint found [ 1666.375668][ T3354] iowarrior 2-1:7.57: no interrupt-out endpoint found [ 1666.405413][ T3354] usb 2-1: USB disconnect, device number 13 [ 1666.433013][ T5282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.477049][T28258] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1666.488820][ T5282] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1666.566303][ T5282] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1666.572736][T28262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.622518][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.650748][T28262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.684439][ T5282] usb 3-1: config 0 descriptor?? [ 1666.903407][ T3354] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1666.942229][T28250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.016301][T28275] tun0: tun_chr_ioctl cmd 3226476800 [ 1667.033412][ T3354] usb 2-1: device descriptor read/64, error -71 [ 1667.048094][T28250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.273826][ T3354] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1667.313623][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1667.413470][ T3354] usb 2-1: device descriptor read/64, error -71 [ 1667.506973][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1667.527328][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.543928][ T3354] usb usb2-port1: attempt power cycle [ 1667.544927][ T9] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1667.560311][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.572211][ T9] usb 4-1: config 0 descriptor?? [ 1667.783938][T28275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.806276][T28275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.821482][T28275] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1667.835924][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1667.843556][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1667.855895][ T9] usb 4-1: USB disconnect, device number 31 [ 1667.934418][ T3354] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1667.965023][ T3354] usb 2-1: device descriptor read/8, error -71 [ 1668.227383][ T3354] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1668.274359][ T3354] usb 2-1: device descriptor read/8, error -71 [ 1668.407549][ T3354] usb usb2-port1: unable to enumerate USB device [ 1669.028122][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.034907][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.113821][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1669.123055][T28288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4179'. [ 1669.274227][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1669.283451][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.315688][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1669.344451][ T5282] usb 3-1: string descriptor 0 read error: -71 [ 1669.351105][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1669.362294][ T5282] usb 3-1: USB disconnect, device number 32 [ 1669.375138][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1669.410540][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1669.442470][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1669.454098][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.465532][ T9] usb 4-1: Product: syz [ 1669.469770][ T9] usb 4-1: Manufacturer: syz [ 1669.474544][ T9] usb 4-1: SerialNumber: syz [ 1669.693839][ T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1669.702442][ T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1669.727520][T28298] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4183'. [ 1669.823535][ T9] usb 4-1: USB disconnect, device number 32 [ 1669.825777][ T5288] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1669.951867][T28302] udevd[28302]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1670.065248][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 1670.084988][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1670.115026][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1670.129647][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1670.159874][ T5288] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1670.179926][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.194670][ T5288] usb 2-1: config 0 descriptor?? [ 1670.308505][T28306] tipc: Started in network mode [ 1670.353486][T28306] tipc: Node identity 1, cluster identity 4711 [ 1670.366232][T28306] tipc: Node number set to 1 [ 1670.643187][ T5288] hid (null): global environment stack underflow [ 1670.672841][ T5288] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0050/input/input152 [ 1670.776230][ T5288] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0050/input/input153 [ 1670.852428][ T5288] kye 0003:0458:5011.0050: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 1670.947686][ T5288] usb 2-1: USB disconnect, device number 18 [ 1671.364501][T28320] tun0: tun_chr_ioctl cmd 3226476800 [ 1671.371847][T28325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1671.400734][T28320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.529500][T28320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.704033][T28320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.764748][T28320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.826503][T28320] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4187'. [ 1672.343613][T12641] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1672.568863][T12641] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.619303][T12641] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1672.702557][T12641] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1672.751919][T12641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.805040][T12641] usb 2-1: config 0 descriptor?? [ 1672.873702][ T3354] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1673.019961][T28331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.071466][ T3354] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.084774][ T3354] usb 4-1: config 0 has no interfaces? [ 1673.121703][T28331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.122307][ T3354] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1673.142282][ T3354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.166831][ T3354] usb 4-1: Product: syz [ 1673.171266][ T3354] usb 4-1: Manufacturer: syz [ 1673.176817][ T3354] usb 4-1: SerialNumber: syz [ 1673.196208][ T3354] usb 4-1: config 0 descriptor?? [ 1673.285927][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1673.285960][ T29] audit: type=1326 audit(1729643747.711:20863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1673.427795][ T29] audit: type=1326 audit(1729643747.711:20864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1673.601745][ T29] audit: type=1326 audit(1729643747.751:20865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1673.795222][ T29] audit: type=1326 audit(1729643747.751:20866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1674.053640][ T29] audit: type=1326 audit(1729643747.751:20867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1674.181123][ T29] audit: type=1326 audit(1729643747.751:20868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1674.268327][ T29] audit: type=1326 audit(1729643747.751:20869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1674.290917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.503707][ T29] audit: type=1326 audit(1729643747.751:20870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1674.548997][T23413] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1674.562705][T23413] Bluetooth: hci0: Injecting HCI hardware error event [ 1674.574593][T23413] Bluetooth: hci0: hardware error 0x00 [ 1674.668949][ T29] audit: type=1326 audit(1729643747.751:20871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1674.808087][ T29] audit: type=1326 audit(1729643747.771:20872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28348 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe297dff9 code=0x7ffc0000 [ 1675.291719][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1675.307313][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1675.327706][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1675.337680][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1675.349192][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1675.359110][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1675.536501][ T9] usb 4-1: USB disconnect, device number 33 [ 1675.887474][T28355] fuse: Unknown parameter '0xffffffffffffffff' [ 1676.170763][T12641] usb 2-1: string descriptor 0 read error: -71 [ 1676.181026][T12641] usb 2-1: USB disconnect, device number 19 [ 1676.205967][T28358] chnl_net:caif_netlink_parms(): no params data found [ 1676.228516][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 1676.550646][T28372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4199'. [ 1676.581727][T28372] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1676.704023][T23413] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1676.741205][T28358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.811899][T28358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.836411][T28358] bridge_slave_0: entered allmulticast mode [ 1676.863877][ T5230] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1676.890989][T28358] bridge_slave_0: entered promiscuous mode [ 1676.925552][T28358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.949619][T28358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.974475][T28358] bridge_slave_1: entered allmulticast mode [ 1677.004335][T28358] bridge_slave_1: entered promiscuous mode [ 1677.043406][ T5230] usb 2-1: Using ep0 maxpacket: 8 [ 1677.053780][ T5230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1677.109097][ T5230] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1677.118684][ T5230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.126910][ T5230] usb 2-1: Product: syz [ 1677.131215][ T5230] usb 2-1: Manufacturer: syz [ 1677.137070][ T5230] usb 2-1: SerialNumber: syz [ 1677.145617][ T5230] usb 2-1: config 0 descriptor?? [ 1677.157899][ T5230] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1677.223178][T28358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.324725][T28358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.423633][T23413] Bluetooth: hci7: command tx timeout [ 1677.527093][T28358] team0: Port device team_slave_0 added [ 1677.560901][T28358] team0: Port device team_slave_1 added [ 1677.760878][T28358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.783993][T28358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.853033][T28358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.889756][T28358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.898044][T28358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.905923][T19376] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1677.928792][T28358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.157391][T19376] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.167706][T19376] usb 3-1: config 0 has no interfaces? [ 1678.186063][T19376] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1678.196884][T19376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.207458][T19376] usb 3-1: Product: syz [ 1678.213172][T19376] usb 3-1: Manufacturer: syz [ 1678.218029][T19376] usb 3-1: SerialNumber: syz [ 1678.225170][T19376] usb 3-1: config 0 descriptor?? [ 1678.250668][T28358] hsr_slave_0: entered promiscuous mode [ 1678.384380][ T5230] gspca_zc3xx: reg_w_i err -71 [ 1678.395030][T28358] hsr_slave_1: entered promiscuous mode [ 1678.403969][T28358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1678.420579][T28358] Cannot create hsr debugfs directory [ 1678.504242][T28397] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4204'. [ 1678.551369][T28398] dccp_close: ABORT with 32 bytes unread [ 1679.003621][ T5230] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1679.010024][ T5230] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1679.036126][ T5230] usb 2-1: USB disconnect, device number 20 [ 1679.152437][T28358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.379829][T28358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.409320][T28413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.452969][T28413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.506116][T23413] Bluetooth: hci7: command tx timeout [ 1679.527454][T28413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.538968][T28358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.572720][T28413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.710196][T28358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.034453][T28358] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1680.055392][T28358] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1680.081619][T28358] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1680.114896][T28358] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1680.320039][T28358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.386079][T28358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.434763][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.441923][ T6765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.481980][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.489171][ T6765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.595149][T19376] usb 3-1: USB disconnect, device number 34 [ 1680.719458][T28417] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1680.741861][T28358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1680.921500][T28358] veth0_vlan: entered promiscuous mode [ 1680.942622][T28358] veth1_vlan: entered promiscuous mode [ 1681.031499][T28358] veth0_macvtap: entered promiscuous mode [ 1681.104373][T28358] veth1_macvtap: entered promiscuous mode [ 1681.175274][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.234329][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.253593][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.272607][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.313765][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.332224][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.345470][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.359590][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.363452][T12641] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1681.370340][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.392282][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.415244][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.427220][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.439260][T28358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.455439][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.466102][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.476009][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.487082][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.520561][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.533541][T12641] usb 3-1: device descriptor read/64, error -71 [ 1681.557328][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.584043][T23413] Bluetooth: hci7: command tx timeout [ 1681.594586][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.629046][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.667376][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.699812][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.718504][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.742687][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.770006][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.773638][T12641] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1681.809039][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.858308][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.889854][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.915637][T28358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.926329][T12641] usb 3-1: device descriptor read/64, error -71 [ 1681.952326][T28358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.027791][T28358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1682.040403][T28358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.049427][T28358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.058282][T28358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.067666][T28358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.073539][T12641] usb usb3-port1: attempt power cycle [ 1682.280600][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.315721][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.382003][ T6754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.390922][ T6754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.423525][T12641] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1682.484752][T12641] usb 3-1: device descriptor read/8, error -71 [ 1682.724162][T12641] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1682.786517][T12641] usb 3-1: device descriptor read/8, error -71 [ 1682.897269][T12641] usb usb3-port1: unable to enumerate USB device [ 1683.003883][ T6754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.183233][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1683.213524][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1683.259518][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1683.278170][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1683.288860][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1683.297019][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1683.440181][ T6754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.659404][ T6754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.678514][ T5237] Bluetooth: hci7: command tx timeout [ 1683.720277][T28442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.750382][T28442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.889617][ T6754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.030184][T28448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.092384][T28431] chnl_net:caif_netlink_parms(): no params data found [ 1684.116273][T28448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.338322][T28459] x_tables: duplicate underflow at hook 1 [ 1684.455727][T28431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.467503][T28462] fuse: Bad value for 'fd' [ 1684.480581][T28431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.488560][T28431] bridge_slave_0: entered allmulticast mode [ 1684.535642][T28431] bridge_slave_0: entered promiscuous mode [ 1684.570702][T28431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.594086][T28431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.620811][T28431] bridge_slave_1: entered allmulticast mode [ 1684.665027][T28431] bridge_slave_1: entered promiscuous mode [ 1684.685345][ T6754] bridge_slave_1: left allmulticast mode [ 1684.698216][ T6754] bridge_slave_1: left promiscuous mode [ 1684.757368][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.810499][ T6754] bridge_slave_0: left allmulticast mode [ 1684.847224][ T6754] bridge_slave_0: left promiscuous mode [ 1684.884482][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.953552][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1684.953573][ T29] audit: type=1326 audit(1729643759.381:20879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1685.007886][ T29] audit: type=1326 audit(1729643759.421:20880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1685.085342][ T29] audit: type=1326 audit(1729643759.441:20881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1685.186775][ T29] audit: type=1326 audit(1729643759.471:20882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1685.248637][ T29] audit: type=1326 audit(1729643759.471:20883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb3a77c990 code=0x7ffc0000 [ 1685.347955][ T5237] Bluetooth: hci0: command tx timeout [ 1685.360483][ T29] audit: type=1326 audit(1729643759.471:20884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1685.558765][ T29] audit: type=1326 audit(1729643759.471:20885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1685.584188][ T29] audit: type=1326 audit(1729643759.471:20886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1685.630271][ T29] audit: type=1326 audit(1729643759.471:20887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1685.668811][ T29] audit: type=1326 audit(1729643759.471:20888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28465 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1686.451192][ T6754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1686.476349][ T6754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1686.501245][ T6754] bond0 (unregistering): Released all slaves [ 1686.594806][T28471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1686.747814][T28431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.788254][T28431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.848800][T28481] tipc: Trying to set illegal importance in message [ 1687.123603][ T3354] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1687.193511][ T5302] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1687.226445][T28431] team0: Port device team_slave_0 added [ 1687.296410][T28431] team0: Port device team_slave_1 added [ 1687.326434][ T3354] usb 5-1: Using ep0 maxpacket: 8 [ 1687.357994][ T5302] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.389239][ T3354] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 1687.397830][ T3354] usb 5-1: config 0 has no interface number 0 [ 1687.404778][ T3354] usb 5-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice=47.b7 [ 1687.413773][ T5302] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1687.414088][ T3354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.446478][ T5237] Bluetooth: hci0: command tx timeout [ 1687.448857][ T3354] usb 5-1: config 0 descriptor?? [ 1687.469948][ T3354] snd-usb-caiaq 5-1:0.253: can't set alt interface. [ 1687.477251][ T3354] usb 5-1: unable to init card! (ret=-5) [ 1687.483343][ T3354] snd-usb-caiaq 5-1:0.253: probe with driver snd-usb-caiaq failed with error -5 [ 1687.504944][ T5302] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1687.515246][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.526807][ T5302] usb 3-1: config 0 descriptor?? [ 1687.644082][T28431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.682337][T12641] usb 5-1: USB disconnect, device number 32 [ 1687.713964][T28431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.771143][T28482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.800860][T28431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1687.829236][T28482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.882011][T28431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.924738][T28431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.989980][T28431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.080090][ T6754] hsr_slave_0: left promiscuous mode [ 1688.110723][ T6754] hsr_slave_1: left promiscuous mode [ 1688.126937][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1688.157670][ T6754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.215275][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1688.265824][ T6754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.433130][ T6754] veth1_macvtap: left promiscuous mode [ 1688.471234][ T6754] veth0_macvtap: left promiscuous mode [ 1688.510468][ T6754] veth1_vlan: left promiscuous mode [ 1688.549703][ T6754] veth0_vlan: left promiscuous mode [ 1689.532900][ T5237] Bluetooth: hci0: command tx timeout [ 1689.715887][T23413] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1689.731683][T23413] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1689.743241][T23413] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1689.805349][T23413] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1689.817140][T23413] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1689.825088][T23413] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1689.854082][T19376] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1690.068008][T19376] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.114327][T19376] usb 5-1: config 0 has no interfaces? [ 1690.183897][T19376] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1690.240551][T19376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.288096][T19376] usb 5-1: Product: syz [ 1690.312398][T19376] usb 5-1: Manufacturer: syz [ 1690.332926][T19376] usb 5-1: SerialNumber: syz [ 1690.351525][T19376] usb 5-1: config 0 descriptor?? [ 1691.005241][T28512] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4231'. [ 1691.092260][ T5302] usb 3-1: string descriptor 0 read error: -71 [ 1691.099582][ T5302] usb 3-1: USB disconnect, device number 39 [ 1691.595140][ T5237] Bluetooth: hci0: command tx timeout [ 1691.923922][ T5237] Bluetooth: hci8: command tx timeout [ 1692.396165][ T6754] team0 (unregistering): Port device team_slave_1 removed [ 1692.636786][ T6754] team0 (unregistering): Port device team_slave_0 removed [ 1693.711902][T28511] geneve0: entered promiscuous mode [ 1693.728376][T28511] geneve0: left promiscuous mode [ 1693.888083][ T9] usb 5-1: USB disconnect, device number 33 [ 1693.954554][T28517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1693.972571][T28431] hsr_slave_0: entered promiscuous mode [ 1693.989717][ T5237] Bluetooth: hci8: command tx timeout [ 1693.997765][T28431] hsr_slave_1: entered promiscuous mode [ 1694.014985][T28431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1694.031944][T28431] Cannot create hsr debugfs directory [ 1694.303652][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1694.495877][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1694.521563][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.578955][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.631543][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1694.667721][T28510] chnl_net:caif_netlink_parms(): no params data found [ 1694.740748][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.832513][ T9] usb 5-1: config 0 descriptor?? [ 1695.100133][T28510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.161682][T28510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.184027][T28510] bridge_slave_0: entered allmulticast mode [ 1695.191586][T28510] bridge_slave_0: entered promiscuous mode [ 1695.261779][T28521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.302310][T28552] netlink: 'syz.2.4236': attribute type 10 has an invalid length. [ 1695.316640][T28521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.352421][T28521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.387053][T28521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.568416][T28552] team0: Port device geneve1 added [ 1695.597678][T28510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.644148][T28510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.660889][T28510] bridge_slave_1: entered allmulticast mode [ 1695.707436][T28510] bridge_slave_1: entered promiscuous mode [ 1695.982588][T28510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.997080][T28510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.065636][ T5237] Bluetooth: hci8: command tx timeout [ 1696.210223][T28510] team0: Port device team_slave_0 added [ 1696.219693][ T3354] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1696.254164][T28510] team0: Port device team_slave_1 added [ 1696.386239][T28510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.404120][T28510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.434293][ T3354] usb 3-1: no configurations [ 1696.442402][ T3354] usb 3-1: can't read configurations, error -22 [ 1696.452341][T28510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.476899][T28510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.484312][T28510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.512420][T28510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.584036][ T3354] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1696.686861][T28510] hsr_slave_0: entered promiscuous mode [ 1696.719039][T28510] hsr_slave_1: entered promiscuous mode [ 1696.735042][ T3354] usb 3-1: no configurations [ 1696.739781][ T3354] usb 3-1: can't read configurations, error -22 [ 1696.770934][T28510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1696.782079][ T3354] usb usb3-port1: attempt power cycle [ 1696.797698][T28510] Cannot create hsr debugfs directory [ 1697.011184][T28431] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1697.040350][T28431] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1697.112370][T28431] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1697.134010][ T3354] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1697.160853][T28431] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1697.175044][ T3354] usb 3-1: no configurations [ 1697.184425][ T3354] usb 3-1: can't read configurations, error -22 [ 1697.325289][ T3354] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1697.380025][ T3354] usb 3-1: no configurations [ 1697.401769][ T3354] usb 3-1: can't read configurations, error -22 [ 1697.437827][ T3354] usb usb3-port1: unable to enumerate USB device [ 1697.656661][T28510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.756124][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1697.773680][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1697.794261][ T3354] usb 1-1: USB disconnect, device number 52 [ 1697.796449][ T9] usb 5-1: USB disconnect, device number 34 [ 1697.977248][T28510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.153988][ T5237] Bluetooth: hci8: command tx timeout [ 1698.237162][T28510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.299316][T23413] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1698.310996][T23413] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1698.326751][T23413] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1698.351974][T28431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.376581][T23413] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1698.391730][T23413] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1698.399973][T23413] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1698.415294][ T5230] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1698.565412][T28510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.599152][ T5230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.669491][ T5230] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1698.718008][ T5230] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1698.740049][T28431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1698.763304][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.865184][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.872437][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1698.906272][ T5230] usb 5-1: config 0 descriptor?? [ 1699.156291][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.163517][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1699.231319][T28573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.275511][T28573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.557943][T28510] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1699.655084][T28510] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1699.837878][T28510] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1699.985976][T28510] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1700.149869][T28581] chnl_net:caif_netlink_parms(): no params data found [ 1700.317531][T28431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1700.474470][ T5237] Bluetooth: hci9: command tx timeout [ 1700.621936][T28581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.634261][T28581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.696959][T28581] bridge_slave_0: entered allmulticast mode [ 1700.738265][T28581] bridge_slave_0: entered promiscuous mode [ 1700.807562][T28581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.819796][T28581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.837905][T28581] bridge_slave_1: entered allmulticast mode [ 1700.857024][T28581] bridge_slave_1: entered promiscuous mode [ 1701.377204][T28581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.450285][T28581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.542878][T28626] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1701.579846][ T5230] usb 5-1: string descriptor 0 read error: -71 [ 1701.629188][ T5230] usb 5-1: USB disconnect, device number 35 [ 1701.651068][T28581] team0: Port device team_slave_0 added [ 1701.849690][T28581] team0: Port device team_slave_1 added [ 1701.893100][T28431] veth0_vlan: entered promiscuous mode [ 1702.005006][T28581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.012011][T28581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.049807][T28581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.086005][T28581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.098102][T28581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.132120][T28581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.150568][T28431] veth1_vlan: entered promiscuous mode [ 1702.254345][ T5230] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1702.325170][T28581] hsr_slave_0: entered promiscuous mode [ 1702.351533][T28581] hsr_slave_1: entered promiscuous mode [ 1702.367822][T28581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1702.379979][T28581] Cannot create hsr debugfs directory [ 1702.415957][ T5230] usb 3-1: Using ep0 maxpacket: 32 [ 1702.422623][ T5230] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1702.428918][T28510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.433158][ T5230] usb 3-1: config 0 has no interface number 0 [ 1702.473162][ T5230] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1702.487525][ T5230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.495680][ T5230] usb 3-1: Product: syz [ 1702.500027][ T5230] usb 3-1: Manufacturer: syz [ 1702.508289][ T5230] usb 3-1: SerialNumber: syz [ 1702.523832][ T5230] usb 3-1: config 0 descriptor?? [ 1702.539006][ T5230] smsc95xx v2.0.0 [ 1702.543609][ T5237] Bluetooth: hci9: command tx timeout [ 1702.601178][T28510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.706506][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.713695][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.730457][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.737656][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.872706][T28431] veth0_macvtap: entered promiscuous mode [ 1702.944336][ T5230] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1702.963478][ T5230] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1703.003557][T28431] veth1_macvtap: entered promiscuous mode [ 1703.191189][T28581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.301243][T28510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1703.335966][T28510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1703.467579][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.502156][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.562704][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.575575][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.587373][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.603873][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.617486][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.631607][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.648814][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.687072][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.747387][T28431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1703.968818][T28581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.157168][T28581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.225777][ T5230] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1704.237178][ T5230] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1704.259963][ T5230] usb 3-1: USB disconnect, device number 44 [ 1704.278676][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.307335][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.333509][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.363416][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.395199][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.413885][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.443441][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.454173][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.465433][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.475993][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.493443][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.504101][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.514011][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.524551][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.535324][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.547144][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.557897][T28431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.569214][T28431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.585943][T28431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.597947][T28431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.610060][T28431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.619295][T28431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.628552][T28431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.634534][ T5237] Bluetooth: hci9: command tx timeout [ 1704.690821][T28581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.727548][T28510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.971933][T20411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.048624][T20411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.255546][T28510] veth0_vlan: entered promiscuous mode [ 1705.357222][T28510] veth1_vlan: entered promiscuous mode [ 1705.479533][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.521488][T28581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1705.534790][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.575941][T28581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1705.644599][T28581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1705.697524][T28581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1705.747927][T28510] veth0_macvtap: entered promiscuous mode [ 1705.795278][T28510] veth1_macvtap: entered promiscuous mode [ 1705.950474][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.991299][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.016931][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.054046][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.103164][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.123377][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.133556][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.145656][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.205397][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.313514][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.336866][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.355772][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.377152][T28510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.413979][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.425224][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.435545][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.454495][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.543891][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.579644][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.593386][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.611367][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.621861][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.632599][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.642609][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.653740][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.663715][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.674283][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.685706][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.697430][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.707507][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.723381][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.733352][T28510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.733415][ T5237] Bluetooth: hci9: command tx timeout [ 1706.744808][T28510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.769314][T28510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.834206][T28510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.843034][T28510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.923485][T28510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.932284][T28510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.281117][T28581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.306440][T28581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.449881][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.457013][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1707.475152][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.482285][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1707.588819][T20411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.612522][T20411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.861350][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.036924][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.229126][T28581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.372203][T28581] veth0_vlan: entered promiscuous mode [ 1708.536029][T28581] veth1_vlan: entered promiscuous mode [ 1708.724010][ T5288] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1708.803447][T12641] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1708.918124][T28581] veth0_macvtap: entered promiscuous mode [ 1708.983414][ T5288] usb 2-1: Using ep0 maxpacket: 8 [ 1708.992146][ T5288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1709.001846][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.024415][ T5288] usb 2-1: Product: syz [ 1709.028637][ T5288] usb 2-1: Manufacturer: syz [ 1709.058372][T12641] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.076038][T28581] veth1_macvtap: entered promiscuous mode [ 1709.082810][ T5288] usb 2-1: SerialNumber: syz [ 1709.107224][T12641] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1709.128119][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.176082][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.218665][T12641] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1709.233469][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.273993][T12641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.283995][T12641] usb 3-1: config 0 descriptor?? [ 1709.341106][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.393440][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.420476][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.445381][ T5288] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1709.548824][ T5288] usb 2-1: USB disconnect, device number 21 [ 1709.556038][ T5288] usblp0: removed [ 1709.565088][T28667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.613469][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.636971][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.678258][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.724004][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.770619][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.784273][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.799525][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.890326][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.947484][T28581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.090155][T28667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.110588][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.135217][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.194941][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.255419][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.349032][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.410351][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.463703][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.563538][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.576836][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.588618][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.694628][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.727396][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.751703][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.763367][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.784237][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.803330][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.824060][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.836903][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.894868][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.905571][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.923433][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.953542][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.975127][T28581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1711.099625][T28581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.108711][T28581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.117621][T28581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.126601][T28581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.326764][T28680] batadv_slave_0: entered promiscuous mode [ 1711.671865][T28692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1713.024242][T12641] usb 3-1: string descriptor 0 read error: -71 [ 1713.045665][T12641] usb 3-1: USB disconnect, device number 45 [ 1713.065558][ T1903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.110785][ T1903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.181623][ T8] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1713.265351][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.273204][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.340734][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 1713.352901][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1713.455994][ T8] usb 4-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=4b.1a [ 1713.486503][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.527445][T23413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1713.542639][T23413] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1713.551982][T23413] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1713.567734][T23413] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1713.575863][T23413] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1713.583219][T23413] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1713.590991][ T8] usb 4-1: Product: syz [ 1713.595415][ T8] usb 4-1: Manufacturer: syz [ 1713.600042][ T8] usb 4-1: SerialNumber: syz [ 1713.609466][ T8] usb 4-1: config 0 descriptor?? [ 1713.791907][ T6765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.953195][T25352] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1714.005939][T28696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.027836][T28696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.096287][ T6765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.290108][ T6765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.343607][ T5230] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1714.491586][ T6765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.524085][ T5230] usb 1-1: Using ep0 maxpacket: 32 [ 1714.536085][ T5230] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1714.567941][ T5230] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1714.581915][T28705] chnl_net:caif_netlink_parms(): no params data found [ 1714.589082][ T5230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.659264][ T5230] usb 1-1: Product: syz [ 1714.669547][ T5230] usb 1-1: Manufacturer: syz [ 1714.675408][ T5230] usb 1-1: SerialNumber: syz [ 1714.691033][ T5230] usb 1-1: config 0 descriptor?? [ 1714.707845][T28711] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1714.738609][ T5230] hub 1-1:0.0: bad descriptor, ignoring hub [ 1714.756996][ T5230] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1714.770245][ T5230] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input154 [ 1714.793920][ T8] usb 4-1: USB disconnect, device number 34 [ 1715.046847][ T9] usb 1-1: USB disconnect, device number 53 [ 1715.047003][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1715.167156][T28705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.211351][T28705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.224180][T28705] bridge_slave_0: entered allmulticast mode [ 1715.231275][T28705] bridge_slave_0: entered promiscuous mode [ 1715.320952][T28705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.337771][T28705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.346527][T28705] bridge_slave_1: entered allmulticast mode [ 1715.354062][T28705] bridge_slave_1: entered promiscuous mode [ 1715.437026][ T6765] bridge_slave_1: left allmulticast mode [ 1715.475344][ T6765] bridge_slave_1: left promiscuous mode [ 1715.491276][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.522300][ T6765] bridge_slave_0: left allmulticast mode [ 1715.529222][ T6765] bridge_slave_0: left promiscuous mode [ 1715.536566][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.673746][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1715.744536][T23413] Bluetooth: hci7: command tx timeout [ 1715.913396][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1715.951164][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1716.007219][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.035529][ T9] usb 1-1: Product: syz [ 1716.039937][ T9] usb 1-1: Manufacturer: syz [ 1716.047742][ T9] usb 1-1: SerialNumber: syz [ 1716.089663][ T9] usb 1-1: config 0 descriptor?? [ 1716.419548][ T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 1716.428180][ T9] airspy 1-1:0.0: Could not detect board [ 1716.434084][ T9] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 1716.471015][ T9] usb 1-1: USB disconnect, device number 54 [ 1716.478003][ T5282] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1717.709703][ T6765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.729819][ T6765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.775531][ T6765] bond0 (unregistering): Released all slaves [ 1717.814252][ T3354] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1717.823726][T23413] Bluetooth: hci7: command tx timeout [ 1717.872509][T28705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1717.930661][T28705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1717.988758][ T3354] usb 1-1: Using ep0 maxpacket: 16 [ 1718.025211][ T3354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.043958][ T3354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.056944][ T3354] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1718.066666][ T3354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.092686][ T3354] usb 1-1: config 0 descriptor?? [ 1718.604641][ T5302] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1719.218670][ T5302] usb 3-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60 [ 1719.227945][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.242601][ T5302] usb 3-1: config 0 descriptor?? [ 1719.254529][ T5302] ums-cypress 3-1:0.0: USB Mass Storage device detected [ 1719.280702][T28705] team0: Port device team_slave_0 added [ 1719.370956][ T3354] usbhid 1-1:0.0: can't add hid device: -71 [ 1719.384895][ T3354] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1719.398032][T28705] team0: Port device team_slave_1 added [ 1719.433145][ T3354] usb 1-1: USB disconnect, device number 55 [ 1719.488090][T28757] xt_TCPMSS: Only works on TCP SYN packets [ 1719.607280][T24563] usb 3-1: USB disconnect, device number 47 [ 1719.796743][ T5288] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1719.904299][T23413] Bluetooth: hci7: command tx timeout [ 1719.904327][ T6765] hsr_slave_0: left promiscuous mode [ 1719.975227][ T6765] hsr_slave_1: left promiscuous mode [ 1720.012683][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1720.021525][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1720.052926][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1720.063539][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1720.071518][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1720.083668][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1720.104746][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1720.124783][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1720.134542][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1720.246237][ T6765] veth1_macvtap: left promiscuous mode [ 1720.259320][ T6765] veth0_macvtap: left promiscuous mode [ 1720.268296][ T6765] veth1_vlan: left promiscuous mode [ 1720.278197][ T6765] veth0_vlan: left promiscuous mode [ 1720.284030][ T5288] usb 2-1: config 0 has no interfaces? [ 1720.414888][ T5288] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1720.430380][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.439879][ T5288] usb 2-1: Product: syz [ 1720.445830][ T5288] usb 2-1: Manufacturer: syz [ 1720.454059][ T5288] usb 2-1: SerialNumber: syz [ 1720.460753][ T5288] usb 2-1: config 0 descriptor?? [ 1720.726832][T28792] trusted_key: encrypted_key: master key parameter 'defaulp' is invalid [ 1721.494831][T28796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4284'. [ 1721.984283][ T5237] Bluetooth: hci7: command tx timeout [ 1722.223614][ T5237] Bluetooth: hci0: command tx timeout [ 1722.270117][ T5282] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1722.290678][ T5302] usb 2-1: USB disconnect, device number 22 [ 1722.377454][ T6765] team0 (unregistering): Port device team_slave_1 removed [ 1722.490467][ T5282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.501879][ T6765] team0 (unregistering): Port device team_slave_0 removed [ 1722.502756][ T5282] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1722.521188][ T5282] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1722.531497][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 1722.553545][ T5282] usb 1-1: Product: syz [ 1722.557753][ T5282] usb 1-1: Manufacturer: syz [ 1722.562362][ T5282] usb 1-1: SerialNumber: syz [ 1722.580424][ T5282] usb 1-1: config 0 descriptor?? [ 1723.817207][T28705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.824701][T28705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.883413][T28705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.937217][T28789] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1724.009730][T28705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.025901][T28705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.052315][T28705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.212464][T28705] hsr_slave_0: entered promiscuous mode [ 1724.255286][T28705] hsr_slave_1: entered promiscuous mode [ 1724.297687][T28705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1724.313690][ T5237] Bluetooth: hci0: command tx timeout [ 1724.315005][T28705] Cannot create hsr debugfs directory [ 1724.604443][ T5282] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1724.916818][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1724.953467][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1724.983445][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1725.145396][ T5282] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1725.184853][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.204539][ T5282] usb 3-1: Product: syz [ 1725.214577][ T5282] usb 3-1: Manufacturer: syz [ 1725.223457][ T5282] usb 3-1: SerialNumber: syz [ 1725.236729][ T5282] usb 3-1: config 0 descriptor?? [ 1725.334087][ T5282] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1725.403095][ T5288] usb 1-1: USB disconnect, device number 56 [ 1725.779819][T28782] chnl_net:caif_netlink_parms(): no params data found [ 1725.964275][T28839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4292'. [ 1726.006779][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1726.021285][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1726.040249][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1726.050518][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1726.059404][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1726.071788][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1726.305388][ T5288] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1726.372324][ T6765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.383491][ T54] Bluetooth: hci0: command tx timeout [ 1726.464071][ T5288] usb 1-1: device descriptor read/64, error -71 [ 1726.641593][ T6765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.723613][ T5288] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1726.853453][ T5288] usb 1-1: device descriptor read/64, error -71 [ 1726.965906][ T5288] usb usb1-port1: attempt power cycle [ 1727.208797][ T6765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.244936][T28782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.252732][T28782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.279556][T28782] bridge_slave_0: entered allmulticast mode [ 1727.315366][T28782] bridge_slave_0: entered promiscuous mode [ 1727.331399][T28782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.350884][T28782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.413862][ T5288] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1727.420658][T28782] bridge_slave_1: entered allmulticast mode [ 1727.442251][ T5237] Bluetooth: hci6: command 0x0406 tx timeout [ 1727.459833][ T5288] usb 1-1: device descriptor read/8, error -71 [ 1727.464000][T28782] bridge_slave_1: entered promiscuous mode [ 1727.652098][T24563] usb 3-1: USB disconnect, device number 48 [ 1727.724941][ T5288] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1727.776246][ T5288] usb 1-1: device descriptor read/8, error -71 [ 1727.839541][ T6765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.894109][ T5288] usb usb1-port1: unable to enumerate USB device [ 1727.927942][T28782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.987094][T28782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.133921][T24563] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1728.143484][ T54] Bluetooth: hci8: command tx timeout [ 1728.168707][T28782] team0: Port device team_slave_0 added [ 1728.247279][T28782] team0: Port device team_slave_1 added [ 1728.315181][T24563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1728.344786][T24563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1728.389010][T24563] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1728.429706][T28782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1728.437470][T24563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.450506][T28782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1728.462564][T24563] usb 3-1: Product: syz [ 1728.478247][ T54] Bluetooth: hci0: command tx timeout [ 1728.492485][T28782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1728.499840][T24563] usb 3-1: Manufacturer: syz [ 1728.506997][T28782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1728.514715][T28782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1728.526144][T24563] usb 3-1: SerialNumber: syz [ 1728.544031][T28782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1728.644663][T24563] usb 3-1: config 0 descriptor?? [ 1728.666773][T24563] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1728.794038][ T6765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.845917][T28844] chnl_net:caif_netlink_parms(): no params data found [ 1728.903144][T28705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1728.918065][T12641] usb 3-1: USB disconnect, device number 49 [ 1729.021641][T28782] hsr_slave_0: entered promiscuous mode [ 1729.032112][T28782] hsr_slave_1: entered promiscuous mode [ 1729.057931][T28782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1729.076902][T28782] Cannot create hsr debugfs directory [ 1729.141415][ T6765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.168450][T28705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1729.231229][T28705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1729.259162][T28705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1729.329676][ T6765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.510362][ T6765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.659365][T28844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.679785][T28844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.700077][T28844] bridge_slave_0: entered allmulticast mode [ 1729.742459][T28844] bridge_slave_0: entered promiscuous mode [ 1729.815696][T28844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.853889][T28844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.861244][T28844] bridge_slave_1: entered allmulticast mode [ 1729.887725][T28844] bridge_slave_1: entered promiscuous mode [ 1729.953458][ T5282] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1730.105264][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.124855][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.143667][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1730.178107][T28844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1730.192438][ T5282] usb 1-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1730.223688][ T54] Bluetooth: hci8: command tx timeout [ 1730.236346][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.260358][ T5282] usb 1-1: config 0 descriptor?? [ 1730.304092][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1730.311828][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1730.328414][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.343688][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1730.355528][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1730.365276][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.408244][ T9] usb 3-1: Product: syz [ 1730.412552][ T9] usb 3-1: Manufacturer: syz [ 1730.426031][ T9] usb 3-1: SerialNumber: syz [ 1730.428671][T28844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.466336][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.475688][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.622237][ T6765] bridge_slave_1: left allmulticast mode [ 1730.654148][ T6765] bridge_slave_1: left promiscuous mode [ 1730.670224][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.691379][ T5282] hid-generic 0003:05AC:4262.0051: unbalanced delimiter at end of report description [ 1730.702826][ T6765] bridge_slave_0: left allmulticast mode [ 1730.714306][ T5282] hid-generic 0003:05AC:4262.0051: probe with driver hid-generic failed with error -22 [ 1730.730974][ T6765] bridge_slave_0: left promiscuous mode [ 1730.753573][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.826953][ T6765] bridge_slave_1: left allmulticast mode [ 1730.832804][ T6765] bridge_slave_1: left promiscuous mode [ 1730.838856][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.851663][ T9] usb 3-1: 0:2 : does not exist [ 1730.866997][ T6765] bridge_slave_0: left allmulticast mode [ 1730.885563][ T6765] bridge_slave_0: left promiscuous mode [ 1730.906578][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.266395][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1731.266435][ T29] audit: type=1326 audit(1729643805.701:20925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1731.383439][ T29] audit: type=1326 audit(1729643805.701:20926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1731.410230][ T29] audit: type=1326 audit(1729643805.701:20927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1731.443399][ T29] audit: type=1326 audit(1729643805.701:20928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1731.470016][ T29] audit: type=1326 audit(1729643805.701:20929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1731.539340][ T29] audit: type=1326 audit(1729643805.701:20930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3a77dbfb code=0x7ffc0000 [ 1731.624837][ T29] audit: type=1326 audit(1729643805.701:20931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3a77dbfb code=0x7ffc0000 [ 1731.706201][ T29] audit: type=1326 audit(1729643805.701:20932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb3a7b00e5 code=0x7ffc0000 [ 1731.822080][ T29] audit: type=1326 audit(1729643805.901:20933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1731.852130][ T29] audit: type=1326 audit(1729643805.901:20934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28884 comm="syz.2.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3a77dff9 code=0x7ffc0000 [ 1732.167393][ T9] usb 3-1: USB disconnect, device number 50 [ 1732.305649][ T54] Bluetooth: hci8: command tx timeout [ 1733.689671][ T6765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1733.707758][ T6765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1733.728488][ T6765] bond0 (unregistering): Released all slaves [ 1734.031865][ T6765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1734.045735][ T6765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1734.065948][ T6765] bond0 (unregistering): Released all slaves [ 1734.280163][T12641] usb 1-1: USB disconnect, device number 61 [ 1734.287617][T28844] team0: Port device team_slave_0 added [ 1734.300733][T28844] team0: Port device team_slave_1 added [ 1734.384350][ T54] Bluetooth: hci8: command tx timeout [ 1734.683558][T12641] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1734.691355][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1734.843491][T12641] usb 1-1: Using ep0 maxpacket: 32 [ 1734.879559][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1734.904172][T12641] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1734.916621][T28844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.925762][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.950552][T12641] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1734.953296][T28844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1734.973419][T12641] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1734.994950][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.005841][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1735.030417][T12641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.054242][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 1735.068921][T12641] usb 1-1: config 0 descriptor?? [ 1735.080348][T28844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.091159][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.104678][ T9] usb 3-1: config 0 descriptor?? [ 1735.130904][T28844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.165805][T28844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1735.199308][T28844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.332464][T28946] libceph: resolve '0.' (ret=-3): failed [ 1735.810242][T28844] hsr_slave_0: entered promiscuous mode [ 1735.869989][T28844] hsr_slave_1: entered promiscuous mode [ 1735.923578][T28844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1735.931218][T28844] Cannot create hsr debugfs directory [ 1736.679469][T28705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.740058][T28782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1736.796633][T28782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1736.906371][ T6765] hsr_slave_0: left promiscuous mode [ 1736.925859][ T6765] hsr_slave_1: left promiscuous mode [ 1736.934388][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.941878][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.981803][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.999354][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.047075][ T6765] hsr_slave_0: left promiscuous mode [ 1737.060434][ T6765] hsr_slave_1: left promiscuous mode [ 1737.077020][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.102664][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.125051][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1737.132893][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.261931][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1737.276456][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1737.288393][ T6765] veth1_macvtap: left promiscuous mode [ 1737.299924][ T9] usb 3-1: USB disconnect, device number 51 [ 1737.307105][ T6765] veth0_macvtap: left promiscuous mode [ 1737.312763][ T6765] veth1_vlan: left promiscuous mode [ 1737.334035][ T6765] veth0_vlan: left promiscuous mode [ 1737.349284][ T6765] veth1_macvtap: left promiscuous mode [ 1737.355361][ T6765] veth0_macvtap: left promiscuous mode [ 1737.384160][ T6765] veth1_vlan: left promiscuous mode [ 1737.394963][ T6765] veth0_vlan: left promiscuous mode [ 1737.440933][ T5302] usb 1-1: USB disconnect, device number 62 [ 1737.743942][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1737.833437][ T5302] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1737.905659][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1737.917018][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1737.956676][ T9] usb 3-1: config 179 has no interface number 0 [ 1737.964090][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1737.993649][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1738.014113][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1738.025640][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1738.038469][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1738.051965][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1738.064708][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.074834][ T5302] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1738.082480][ T5302] usb 1-1: can't read configurations, error -61 [ 1738.095374][T28988] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1738.222259][ T5302] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1738.337189][ T5282] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input155 [ 1738.387395][ T5302] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1738.402337][ T5302] usb 1-1: can't read configurations, error -61 [ 1738.413132][ T5302] usb usb1-port1: attempt power cycle [ 1738.588674][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'. [ 1738.625011][T28991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.642235][T28991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.688453][T28991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.721333][T28991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.772774][ T5302] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1738.829081][ T5302] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1738.849530][ T5302] usb 1-1: can't read configurations, error -61 [ 1738.983664][ T5302] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1739.032926][ T5302] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1739.047518][ T5302] usb 1-1: can't read configurations, error -61 [ 1739.060042][ T5302] usb usb1-port1: unable to enumerate USB device [ 1739.434272][ T30] INFO: task syz.0.3985:27229 blocked for more than 143 seconds. [ 1739.442083][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1739.479698][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1739.513836][ T30] task:syz.0.3985 state:D stack:25920 pid:27229 tgid:27229 ppid:26633 flags:0x00000004 [ 1739.533281][ T30] Call Trace: [ 1739.536641][ T30] [ 1739.539638][ T30] __schedule+0x18af/0x4bd0 [ 1739.589269][ T30] ? __pfx___schedule+0x10/0x10 [ 1739.604051][ T30] ? __pfx_lock_release+0x10/0x10 [ 1739.610675][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1739.654497][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1739.660916][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1739.700650][ T30] ? schedule+0x90/0x320 [ 1739.705975][ T30] schedule+0x14b/0x320 [ 1739.710197][ T30] ? down_read+0x6a5/0xa40 [ 1739.726556][ T30] schedule_preempt_disabled+0x13/0x30 [ 1739.732125][ T30] down_read+0x705/0xa40 [ 1739.748350][ T30] ? __pfx_down_read+0x10/0x10 [ 1739.759119][ T30] ? release_fault_lock+0x163/0x230 [ 1739.765779][ T30] ? release_fault_lock+0xa6/0x230 [ 1739.771771][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 1739.790488][ T30] do_sync_mmap_readahead+0x499/0x970 [ 1739.797325][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1739.805017][ T30] ? count_memcg_event_mm+0x90/0x420 [ 1739.812014][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1739.845016][ T30] filemap_fault+0x8c5/0x1950 [ 1739.849775][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1739.859924][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 1739.864841][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1739.869998][ T30] ? pte_alloc_one+0x442/0x5d0 [ 1739.874945][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 1739.880107][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1739.885733][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1739.890988][ T30] __do_fault+0x135/0x460 [ 1739.908463][ T30] handle_pte_fault+0x1105/0x6800 [ 1739.943677][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1739.950113][ T30] ? mark_lock+0x9a/0x360 [ 1739.962082][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1739.983379][ T30] ? __lock_acquire+0x1384/0x2050 [ 1739.988525][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 1740.002875][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 1740.023953][ T30] ? __thp_vma_allowable_orders+0x22c/0x9c0 [ 1740.029942][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1740.049854][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1740.073404][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1740.078786][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 1740.097946][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 1740.114637][ T30] ? exc_page_fault+0x113/0x8c0 [ 1740.119584][ T30] exc_page_fault+0x459/0x8c0 [ 1740.143283][ T30] asm_exc_page_fault+0x26/0x30 [ 1740.148224][ T30] RIP: 0033:0x7f0d9d045163 [ 1740.152674][ T30] RSP: 002b:00007f0d9d45fb50 EFLAGS: 00010246 [ 1740.183472][ T30] RAX: 00000000200c58c0 RBX: 0000000000000008 RCX: 0000000000000000 [ 1740.191552][ T30] RDX: 000000000000001d RSI: 0000000000000000 RDI: 000055557a3a93c8 [ 1740.204355][ T30] RBP: 00007f0d9d45fc68 R08: 0000000000000000 R09: 0000000000000000 [ 1740.212451][ T30] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000001844b8 [ 1740.233416][ T30] R13: 00007f0d9d45fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 1740.241553][ T30] [ 1740.244853][ T30] INFO: task syz.0.3985:27231 blocked for more than 144 seconds. [ 1740.252740][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1740.261065][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1740.293492][ T30] task:syz.0.3985 state:D stack:22880 pid:27231 tgid:27229 ppid:26633 flags:0x00004006 [ 1740.307856][ T30] Call Trace: [ 1740.311199][ T30] [ 1740.314583][ T30] __schedule+0x18af/0x4bd0 [ 1740.319165][ T30] ? __pfx___schedule+0x10/0x10 [ 1740.336883][ T30] ? __pfx_lock_release+0x10/0x10 [ 1740.342083][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1740.348610][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1740.355494][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1740.360800][ T30] ? schedule+0x90/0x320 [ 1740.365536][ T30] schedule+0x14b/0x320 [ 1740.374942][ T30] ? down_read+0x6a5/0xa40 [ 1740.397232][ T30] schedule_preempt_disabled+0x13/0x30 [ 1740.404251][ T30] down_read+0x705/0xa40 [ 1740.408620][ T30] ? __pfx_down_read+0x10/0x10 [ 1740.413931][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 1740.423862][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 1740.429430][ T30] do_sync_mmap_readahead+0x499/0x970 [ 1740.435208][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1740.441131][ T30] ? count_memcg_event_mm+0x90/0x420 [ 1740.446679][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1740.452020][ T30] filemap_fault+0x8c5/0x1950 [ 1740.456822][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1740.463211][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 1740.468349][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1740.474428][ T30] ? pte_alloc_one+0x442/0x5d0 [ 1740.479242][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 1740.485314][ T30] __do_fault+0x135/0x460 [ 1740.489687][ T30] handle_pte_fault+0x1105/0x6800 [ 1740.495100][ T30] ? mark_lock+0x9a/0x360 [ 1740.499469][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1740.504962][ T30] ? __lock_acquire+0x1384/0x2050 [ 1740.510052][ T30] ? __thp_vma_allowable_orders+0x22c/0x9c0 [ 1740.516079][ T30] ? mt_find+0x2a9/0x920 [ 1740.520359][ T30] ? __pfx_lock_release+0x10/0x10 [ 1740.525789][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1740.530776][ T30] ? mt_find+0x2a9/0x920 [ 1740.535161][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1740.540554][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1740.547194][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1740.552546][ T30] exc_page_fault+0x2b9/0x8c0 [ 1740.557663][ T30] asm_exc_page_fault+0x26/0x30 [ 1740.562578][ T30] RIP: 0010:__put_user_nocheck_4+0x7/0x20 [ 1740.568471][ T30] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 [ 1740.589387][ T30] RSP: 0018:ffffc9000960f8f8 EFLAGS: 00050202 [ 1740.596703][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000200366f0 [ 1740.604822][ T30] RDX: ffff88801cf15a00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1740.612834][ T30] RBP: ffffc9000960fa70 R08: ffffffff8988361f R09: 1ffff920012c1ed0 [ 1740.621156][ T30] R10: dffffc0000000000 R11: fffff520012c1ed1 R12: 00000000200366c0 [ 1740.629286][ T30] R13: 0000000000000002 R14: 0000000000000000 R15: ffffc9000960fd00 [ 1740.637543][ T30] ? ____sys_recvmsg+0x28f/0x480 [ 1740.642558][ T30] ____sys_recvmsg+0x2a7/0x480 [ 1740.647787][ T30] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1740.653144][ T30] ? __might_fault+0xaa/0x120 [ 1740.657952][ T30] do_recvmmsg+0x45e/0xad0 [ 1740.662410][ T30] ? mark_lock+0x9a/0x360 [ 1740.666873][ T30] ? __pfx_do_recvmmsg+0x10/0x10 [ 1740.671867][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 1740.678610][ T30] ? futex_wait+0x285/0x360 [ 1740.683173][ T30] ? __pfx_futex_wait+0x10/0x10 [ 1740.689079][ T30] ? __pfx_do_futex+0x10/0x10 [ 1740.693906][ T30] __x64_sys_recvmmsg+0x199/0x250 [ 1740.698974][ T30] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1740.707005][ T30] ? do_syscall_64+0x100/0x230 [ 1740.712119][ T30] ? do_syscall_64+0xb6/0x230 [ 1740.717957][ T30] do_syscall_64+0xf3/0x230 [ 1740.722508][ T30] ? clear_bhb_loop+0x35/0x90 [ 1740.727313][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.733584][ T30] RIP: 0033:0x7f0d9d17dff9 [ 1740.738032][ T30] RSP: 002b:00007f0d9deea038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1740.746566][ T30] RAX: ffffffffffffffda RBX: 00007f0d9d336058 RCX: 00007f0d9d17dff9 [ 1740.754681][ T30] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1740.762695][ T30] RBP: 00007f0d9d1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1740.771011][ T30] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1740.779974][ T30] R13: 0000000000000000 R14: 00007f0d9d336058 R15: 00007f0d9d45fa28 [ 1740.789166][ T30] [ 1740.792290][ T30] [ 1740.792290][ T30] Showing all locks held in the system: [ 1740.800183][ T30] 1 lock held by khungtaskd/30: [ 1740.815800][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1740.826151][ T30] 3 locks held by kworker/u9:0/54: [ 1740.831298][ T30] #0: ffff88807d7e3948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1740.843118][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1740.858734][ T30] #2: ffff888069550d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1740.869527][ T30] 2 locks held by kworker/u8:8/2929: [ 1740.875267][ T30] 2 locks held by dhcpcd/4900: [ 1740.883388][ T30] #0: ffff8880521356c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 1740.893061][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 1740.902623][ T30] 2 locks held by getty/4986: [ 1740.907724][ T30] #0: ffff88814bae40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1740.917986][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1740.928781][ T30] 3 locks held by kworker/0:7/5302: [ 1740.934348][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1740.946228][ T30] #1: ffffc900040e7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1740.957313][ T30] #2: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1740.968643][ T30] 3 locks held by kworker/u8:13/6762: [ 1740.974391][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1740.994175][ T30] #1: ffffc900032cfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1741.033326][ T30] #2: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1741.042500][ T30] 5 locks held by kworker/u8:14/6765: [ 1741.052589][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1741.063647][ T30] #1: ffffc90017b5fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1741.074582][ T30] #2: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1741.084156][ T30] #3: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xaa0 [ 1741.096121][ T30] #4: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1741.107538][ T30] 3 locks held by kworker/u8:1/20411: [ 1741.112960][ T30] #0: ffff88814b655148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1741.124763][ T30] #1: ffffc9000489fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1741.137996][ T30] #2: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1741.147541][ T30] 1 lock held by syz.0.3840/26503: [ 1741.152695][ T30] #0: ffff888025c114c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 1741.163795][ T30] 1 lock held by syz.0.3985/27229: [ 1741.168948][ T30] #0: ffff888025c114c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1741.180390][ T30] 1 lock held by syz.0.3985/27231: [ 1741.185645][ T30] #0: ffff888025c114c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1741.198365][ T30] 1 lock held by syz.4.4163/28223: [ 1741.204450][ T30] #0: ffff888025c114c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1741.215849][ T30] 1 lock held by syz.4.4163/28224: [ 1741.220998][ T30] #0: ffff888025c114c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1741.232648][ T30] 1 lock held by syz.4.4163/28227: [ 1741.237877][ T30] #0: ffff888025c114c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1741.249348][ T30] 1 lock held by syz.1.4209/28411: [ 1741.254896][ T30] #0: ffff888025c114c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1741.266420][ T30] 1 lock held by syz.0.4227/28491: [ 1741.271593][ T30] #0: ffff888025c114c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1741.283033][ T30] 1 lock held by syz-executor/28705: [ 1741.288644][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1741.299132][ T30] 1 lock held by syz-executor/28782: [ 1741.305480][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1741.315280][ T30] 1 lock held by syz-executor/28844: [ 1741.320593][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1741.330199][ T30] 1 lock held by syz.2.4301/28988: [ 1741.335379][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1741.345506][ T30] [ 1741.347895][ T30] ============================================= [ 1741.347895][ T30] [ 1741.356653][ T30] NMI backtrace for cpu 1 [ 1741.361013][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1741.371546][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1741.381630][ T30] Call Trace: [ 1741.384922][ T30] [ 1741.387853][ T30] dump_stack_lvl+0x241/0x360 [ 1741.392538][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1741.397744][ T30] ? __pfx__printk+0x10/0x10 [ 1741.402343][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1741.407306][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1741.412787][ T30] ? _printk+0xd5/0x120 [ 1741.416954][ T30] ? __pfx__printk+0x10/0x10 [ 1741.421560][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1741.426437][ T30] ? __pfx__printk+0x10/0x10 [ 1741.431034][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1741.436083][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1741.442070][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1741.448144][ T30] watchdog+0xff4/0x1040 [ 1741.452402][ T30] ? watchdog+0x1ea/0x1040 [ 1741.456844][ T30] ? __pfx_watchdog+0x10/0x10 [ 1741.461535][ T30] kthread+0x2f0/0x390 [ 1741.465603][ T30] ? __pfx_watchdog+0x10/0x10 [ 1741.470291][ T30] ? __pfx_kthread+0x10/0x10 [ 1741.474882][ T30] ret_from_fork+0x4b/0x80 [ 1741.479307][ T30] ? __pfx_kthread+0x10/0x10 [ 1741.483899][ T30] ret_from_fork_asm+0x1a/0x30 [ 1741.488705][ T30] [ 1741.491954][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1741.498952][ C0] NMI backtrace for cpu 0 [ 1741.498972][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1741.498991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1741.499003][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1741.499029][ C0] RIP: 0010:kasan_disable_current+0x0/0x20 [ 1741.499049][ C0] Code: 8b 04 25 c0 d7 03 00 ff 80 e8 15 00 00 c3 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 04 25 c0 d7 03 00 ff 88 e8 15 00 00 c3 cc cc [ 1741.499063][ C0] RSP: 0018:ffffc90000107738 EFLAGS: 00000093 [ 1741.499077][ C0] RAX: ffffffff813567de RBX: 0000000000000000 RCX: ffff88801befbc00 [ 1741.499089][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1741.499099][ C0] RBP: ffffc90000107910 R08: ffffffff813567b8 R09: 1ffff1100358e0ef [ 1741.499112][ C0] R10: dffffc0000000000 R11: ffffed100358e0f0 R12: ffff88801ac7c558 [ 1741.499124][ C0] R13: ffffc90000107800 R14: 1ffff1100358f8ab R15: ffff88801befbc00 [ 1741.499136][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1741.499150][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1741.499161][ C0] CR2: 0000561640da9058 CR3: 000000001ac78000 CR4: 00000000003526f0 [ 1741.499176][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1741.499186][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1741.499197][ C0] Call Trace: [ 1741.499203][ C0] [ 1741.499211][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1741.499232][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1741.499258][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1741.499278][ C0] ? nmi_handle+0x2a/0x5a0 [ 1741.499301][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1741.499323][ C0] ? nmi_handle+0x14f/0x5a0 [ 1741.499339][ C0] ? nmi_handle+0x2a/0x5a0 [ 1741.499356][ C0] ? __pfx_kasan_disable_current+0x10/0x10 [ 1741.499373][ C0] ? default_do_nmi+0x63/0x160 [ 1741.499394][ C0] ? exc_nmi+0x123/0x1f0 [ 1741.499414][ C0] ? end_repeat_nmi+0xf/0x53 [ 1741.499433][ C0] ? __text_poke+0x738/0xd30 [ 1741.499451][ C0] ? __text_poke+0x75e/0xd30 [ 1741.499470][ C0] ? __pfx_kasan_disable_current+0x10/0x10 [ 1741.499487][ C0] ? __pfx_kasan_disable_current+0x10/0x10 [ 1741.499506][ C0] ? __pfx_kasan_disable_current+0x10/0x10 [ 1741.499523][ C0] [ 1741.499529][ C0] [ 1741.499534][ C0] __text_poke+0x768/0xd30 [ 1741.499553][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1741.499573][ C0] ? __kmalloc_noprof+0xef/0x400 [ 1741.499594][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1741.499614][ C0] ? __pfx___text_poke+0x10/0x10 [ 1741.499633][ C0] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 1741.499657][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1741.499675][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1741.499694][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 1741.499715][ C0] ? __pfx___might_resched+0x10/0x10 [ 1741.499741][ C0] text_poke_bp_batch+0x8cd/0xb30 [ 1741.499765][ C0] ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0 [ 1741.499788][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1741.499811][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1741.499836][ C0] ? process_scheduled_works+0x976/0x1850 [ 1741.499859][ C0] text_poke_finish+0x30/0x50 [ 1741.499878][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1741.499900][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 1741.499924][ C0] static_key_enable+0x1a/0x20 [ 1741.499945][ C0] toggle_allocation_gate+0xbc/0x260 [ 1741.499968][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1741.499988][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1741.500018][ C0] process_scheduled_works+0xa63/0x1850 [ 1741.500050][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1741.500076][ C0] ? assign_work+0x364/0x3d0 [ 1741.500099][ C0] worker_thread+0x870/0xd30 [ 1741.500127][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1741.500151][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1741.500173][ C0] kthread+0x2f0/0x390 [ 1741.500189][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1741.500210][ C0] ? __pfx_kthread+0x10/0x10 [ 1741.500226][ C0] ret_from_fork+0x4b/0x80 [ 1741.500248][ C0] ? __pfx_kthread+0x10/0x10 [ 1741.500264][ C0] ret_from_fork_asm+0x1a/0x30 [ 1741.500292][ C0] [ 1741.586278][ T6765] team0 (unregistering): Port device team_slave_1 removed [ 1741.753783][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1741.753805][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1741.753832][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1741.753846][ T30] Call Trace: [ 1741.753855][ T30] [ 1741.753865][ T30] dump_stack_lvl+0x241/0x360 [ 1741.753897][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1741.753921][ T30] ? __pfx__printk+0x10/0x10 [ 1741.753940][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1741.753979][ T30] ? vscnprintf+0x5d/0x90 [ 1741.754008][ T30] panic+0x349/0x880 [ 1741.754030][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1741.754059][ T30] ? __pfx_panic+0x10/0x10 [ 1741.754078][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1741.754103][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1741.754133][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1741.754156][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1741.754183][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1741.754213][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1741.754243][ T30] watchdog+0x1033/0x1040 [ 1741.754273][ T30] ? watchdog+0x1ea/0x1040 [ 1741.754304][ T30] ? __pfx_watchdog+0x10/0x10 [ 1741.754331][ T30] kthread+0x2f0/0x390 [ 1741.754350][ T30] ? __pfx_watchdog+0x10/0x10 [ 1741.754375][ T30] ? __pfx_kthread+0x10/0x10 [ 1741.754396][ T30] ret_from_fork+0x4b/0x80 [ 1741.754424][ T30] ? __pfx_kthread+0x10/0x10 [ 1741.754444][ T30] ret_from_fork_asm+0x1a/0x30 [ 1741.754483][ T30] [ 1741.754868][ T30] Kernel Offset: disabled