last executing test programs: 4.57571947s ago: executing program 0 (id=848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) recvmmsg(r2, &(0x7f0000001580)=[{{&(0x7f0000000440)=@l2, 0x80, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9e8}], 0x2, 0x42, &(0x7f0000001440)={0x0, 0x3938700}) 3.863271869s ago: executing program 4 (id=859): r0 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xbd, 0x1a, 0xbd, 0x8, 0x19d2, 0x167, 0xbc89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x8, 0x10}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}}, 0x0) 3.72447424s ago: executing program 0 (id=862): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_ptrace(r0, &(0x7f0000000140), 0x14) 3.668014109s ago: executing program 0 (id=863): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, 0x0, &(0x7f00000004c0)=""/195, &(0x7f00000005c0)=""/187, 0x100000}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) capset(0x0, 0x0) 3.647406439s ago: executing program 0 (id=864): msgctl$IPC_SET(0x0, 0x1, 0x0) syz_usb_connect(0x1, 0x5d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cd0361086d040e0ab55f0102030109024b0001020000000904be000103"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) msgsnd(0x0, 0x0, 0x96, 0x800) 3.30001418s ago: executing program 4 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 2.468550432s ago: executing program 4 (id=873): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{&(0x7f0000000400)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)=""/101, 0x65}, {&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000600)=""/88, 0x58}], 0x3}, 0x8}, {{&(0x7f0000000680)=@can, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/81, 0x51}], 0x2, &(0x7f0000000980)=""/133, 0x85}, 0xfffffffa}, {{&(0x7f0000000a40)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000c40)=""/118, 0x76}], 0x2}, 0x2}, {{&(0x7f0000000d80)=@tipc=@name, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/132, 0x84}, {&(0x7f0000000ec0)=""/58, 0x3a}, {0x0}], 0x3}, 0x4}, {{&(0x7f0000001080)=@ax25={{0x3, @rose}, [@null, @rose, @rose, @remote, @netrom, @default, @default, @null]}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/49, 0x31}, {&(0x7f0000003140)=""/122, 0x7a}, {&(0x7f00000031c0)=""/244, 0xf4}, {&(0x7f00000032c0)=""/8, 0x8}], 0x6, &(0x7f0000003380)=""/201, 0xc9}, 0x8}, {{&(0x7f0000003480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003500)=""/148, 0x94}], 0x1, &(0x7f0000003600)=""/21, 0x15}, 0x6}], 0x6, 0x10040, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x10}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) 1.92459433s ago: executing program 2 (id=877): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x20000000) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.867704892s ago: executing program 2 (id=878): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000e40)=ANY=[], 0x158) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x68, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x2a0, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x270, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "fde80b91b72fa437c27b47f8e96f06a2e77483f1b7b24658a400e9ca482a88de2374e981725f0baf66ec00ecc9acdfb6e16259b6a31acbcc805fdb6044513c0db09a9e19b45799ce56a77dabe19cb180ee61ce20112f4f095e4cb88775a066a944222a625ae96af1afce02646d553a68adbad1fa8f3dbc5ea9047da508ef5e12cba8ef78f1052551aef5cbfc846112d2736286594eae1c86b3a96c58eae28155600335cef4847c6e353f701fd3f48e9dda292582965936e650412c1cecaa1cffb1437c98b9"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "8ce1677e3343e241f994522eb45a68aaf79e7c7d4c53c8f6b14e057a1a59f45accda398dc8b9fe8577c19abbf63d7590c64fd0dc726aca8c5f47b2d01c610d80acad066f2cc9606f81fa225e0c7d9c8d1c3241d7016b5681d4b0bd62982d527c7cb8a2df458af54ca5857dc0768165e4f7473ff76ec903c65fb634dfa6b559121913b0d9ad5f7f6d821b4f0c08952bc3c32f2ba1c9d74594c9"}]}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "1302a3d3596be284c900fcbe888878bf237bf323a13e97745bb35014715a9763f8be336a95d22bb0c49ec8cfaf18f32e6ae0f6db26e10925452a3cc58e4962c1e7a207157c8afe0d305c7848c9a3bccf109c4bb08cd9e4ab2e80a0e5fdd4634ae083c1114f586804f7cd21c716ecc64348cbb3621e51a8c5d1a17e1aa688accdd6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, @NFT_MSG_DELTABLE={0x108, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xda, 0x6, "7aba14293c0b0793ddabf09d6c3cfab4ff3a3275532366a7a67ba43c9ed0d97037de20d84f07452c5b6df31a5bee021ef9f5439465ae065853deaada20f7dc50e4f3bf5201c48be2e175bb02c1ab6e5df47b8eae92c6810b4a4f9bea285f12d21f49a89bd576a13c46b9027c6f4ddd2dc638d2fb800197fa9e1f31e514c0847aa9ef5a36a13dc536fae56640dd8789983aff58e6de3a4e799d08ec487ec311aef7d73735dd06b68c84052919db03fc19e476a97b0e577374d2ac529dbaae65bd914d0cf287b0b5645d72dcbc0c3fe7aac8a9b28d342d"}]}, @NFT_MSG_NEWFLOWTABLE={0x1e4, 0x16, 0xa, 0xb05, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x640}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x1f0}, 0x1, 0x0, 0x0, 0x20040000}, 0x24020841) 1.867178059s ago: executing program 4 (id=879): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf, "0002ff0000000008"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.131188338s ago: executing program 3 (id=886): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000001}}], 0x1, 0x0) 1.064005417s ago: executing program 3 (id=888): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe40000000109026801010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.058584663s ago: executing program 2 (id=891): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x75de0fa8, 0x5, 0x9, 0x81, 0x101, 0x7, 0x2, 0x7fffffff, 0xfffffffd, 0xd, 0xb, 0x3, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0xffffff29, 0x5, 0x9}]}}]}, 0x178}}, 0x0) 1.038159964s ago: executing program 2 (id=892): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 992.108362ms ago: executing program 4 (id=893): io_setup(0x7, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0}]) 624.100345ms ago: executing program 0 (id=894): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000814000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000"], 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) 605.630662ms ago: executing program 0 (id=895): syz_usb_connect(0x3, 0x38, &(0x7f0000001880)={{0x12, 0x1, 0x250, 0x8e, 0x5a, 0xe4, 0x10, 0x424, 0xc001, 0xe20c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x8, 0x5, 0x80, 0x1, [{{0x9, 0x4, 0x22, 0x2, 0x2, 0x64, 0x5, 0x79, 0x3, [], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x0, 0x67, 0x9}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x1, 0x92, 0x7, [@generic={0x2, 0xb}]}}]}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 578.45726ms ago: executing program 3 (id=896): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="93378e66cf9b48cb24f73793e9594b1061790c6a3302853a9fa89527", 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x2a6c}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/90, 0x5a}, {0x0}], 0x2}}], 0x2, 0x2000, 0x0) 577.408767ms ago: executing program 3 (id=897): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$vhost_msg(r0, 0x0, 0x0) 520.055992ms ago: executing program 3 (id=898): rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000040)="c402412d3538000000c441ef196ec866400fe2de0fae41b108c421797ec7f2466ff00fc01ec4e1a5140f63df", 0xc000000, 0x0, {[0x80]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x4, &(0x7f00000004c0)={&(0x7f0000000440)="c44241b6fc3ef0408160bb841e97fbc421a9db9297c80000c462f9237e0ec42241096aa8260f01f9f6892d00000000430fc4890a0000009bc421a96db290474df23b9967a554eb", 0x4, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000500)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x41000004, 0x0) 177.181902ms ago: executing program 1 (id=901): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000e40)=ANY=[], 0x158) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x68, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x2a0, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x270, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "fde80b91b72fa437c27b47f8e96f06a2e77483f1b7b24658a400e9ca482a88de2374e981725f0baf66ec00ecc9acdfb6e16259b6a31acbcc805fdb6044513c0db09a9e19b45799ce56a77dabe19cb180ee61ce20112f4f095e4cb88775a066a944222a625ae96af1afce02646d553a68adbad1fa8f3dbc5ea9047da508ef5e12cba8ef78f1052551aef5cbfc846112d2736286594eae1c86b3a96c58eae28155600335cef4847c6e353f701fd3f48e9dda292582965936e650412c1cecaa1cffb1437c98b9"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "8ce1677e3343e241f994522eb45a68aaf79e7c7d4c53c8f6b14e057a1a59f45accda398dc8b9fe8577c19abbf63d7590c64fd0dc726aca8c5f47b2d01c610d80acad066f2cc9606f81fa225e0c7d9c8d1c3241d7016b5681d4b0bd62982d527c7cb8a2df458af54ca5857dc0768165e4f7473ff76ec903c65fb634dfa6b559121913b0d9ad5f7f6d821b4f0c08952bc3c32f2ba1c9d74594c9"}]}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "1302a3d3596be284c900fcbe888878bf237bf323a13e97745bb35014715a9763f8be336a95d22bb0c49ec8cfaf18f32e6ae0f6db26e10925452a3cc58e4962c1e7a207157c8afe0d305c7848c9a3bccf109c4bb08cd9e4ab2e80a0e5fdd4634ae083c1114f586804f7cd21c716ecc64348cbb3621e51a8c5d1a17e1aa688accdd6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, @NFT_MSG_DELTABLE={0x108, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xda, 0x6, "7aba14293c0b0793ddabf09d6c3cfab4ff3a3275532366a7a67ba43c9ed0d97037de20d84f07452c5b6df31a5bee021ef9f5439465ae065853deaada20f7dc50e4f3bf5201c48be2e175bb02c1ab6e5df47b8eae92c6810b4a4f9bea285f12d21f49a89bd576a13c46b9027c6f4ddd2dc638d2fb800197fa9e1f31e514c0847aa9ef5a36a13dc536fae56640dd8789983aff58e6de3a4e799d08ec487ec311aef7d73735dd06b68c84052919db03fc19e476a97b0e577374d2ac529dbaae65bd914d0cf287b0b5645d72dcbc0c3fe7aac8a9b28d342d"}]}, @NFT_MSG_NEWFLOWTABLE={0x1e4, 0x16, 0xa, 0xb05, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x640}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x1f0}, 0x1, 0x0, 0x0, 0x20040000}, 0x24020841) 176.797137ms ago: executing program 2 (id=902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x3c, r1, 0x1, 0x0, 0x0, {0x35}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 174.951883ms ago: executing program 1 (id=903): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf, "0002ff0000000008"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 115.217281ms ago: executing program 2 (id=904): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001040)={0x84, &(0x7f0000000b80)={0x0, 0xe}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x7, 0x1}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x120, 0x8, [0xf00]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0xfe}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "f43c"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000f00)={0x40, 0x19, 0x2, '\f&'}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000f80)={0x40, 0x1c, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0xad}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0xd}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) listen(r1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000001300)={0x2, 0x0, {0x0, 0x0, 0x4, 0x2000017, 0x10000000, 0x60, 0x0, 0xffffffff}}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x8004) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) 113.253942ms ago: executing program 1 (id=905): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000814000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000"], 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) 100.567168ms ago: executing program 4 (id=906): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x3, 0x2, 0x1, 0x80000001, 0x3, 0x7a6, 0x276014fa, 0x2}, 0x20) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0xfffffffc}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4008843) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x7, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7b, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 98.547117ms ago: executing program 1 (id=907): r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0xa2100) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0xc, 0x3f6f, 0x2020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 74.152298ms ago: executing program 1 (id=908): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) 58.082373ms ago: executing program 1 (id=909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmmsg$inet(r1, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) recvmmsg(r1, &(0x7f0000001580)=[{{&(0x7f0000000440)=@l2, 0x80, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9e8}], 0x2, 0x42, &(0x7f0000001440)={0x0, 0x3938700}) 0s ago: executing program 3 (id=910): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(0x4) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$hidraw(r1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x9, 0x9, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 23.775400][ T6536] cgroup: Unknown subsys name 'net' [ 23.925377][ T6536] cgroup: Unknown subsys name 'cpuset' [ 23.927649][ T6536] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.094162][ T6536] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 25.991176][ T6555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.003647][ T6559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.014753][ T6564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.015366][ T6564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.018129][ T6565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.018622][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.019181][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.019934][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.020222][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.020540][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.020935][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.022107][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.022806][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.023016][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.023273][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.024300][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.025548][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.026001][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.026199][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.026761][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.028402][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.037539][ T6563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.039659][ T6563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.042003][ T6563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.045714][ T6563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.180604][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 26.267955][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.268257][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.268352][ T6550] bridge_slave_0: entered allmulticast mode [ 26.268821][ T6550] bridge_slave_0: entered promiscuous mode [ 26.271131][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 26.279710][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 26.284794][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.284878][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.284937][ T6550] bridge_slave_1: entered allmulticast mode [ 26.285350][ T6550] bridge_slave_1: entered promiscuous mode [ 26.297753][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.298633][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.317668][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 26.341851][ T6550] team0: Port device team_slave_0 added [ 26.352364][ T6550] team0: Port device team_slave_1 added [ 26.368441][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.368521][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.368585][ T6558] bridge_slave_0: entered allmulticast mode [ 26.369029][ T6558] bridge_slave_0: entered promiscuous mode [ 26.370030][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 26.376236][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.377456][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.381429][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.384165][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.384210][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.384283][ T6556] bridge_slave_0: entered allmulticast mode [ 26.384706][ T6556] bridge_slave_0: entered promiscuous mode [ 26.387793][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.387868][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.387938][ T6558] bridge_slave_1: entered allmulticast mode [ 26.388384][ T6558] bridge_slave_1: entered promiscuous mode [ 26.396157][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.397310][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.401670][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.404426][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.404481][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.404571][ T6556] bridge_slave_1: entered allmulticast mode [ 26.405025][ T6556] bridge_slave_1: entered promiscuous mode [ 26.426454][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.436652][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.436727][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.437139][ T6560] bridge_slave_0: entered allmulticast mode [ 26.437615][ T6560] bridge_slave_0: entered promiscuous mode [ 26.438380][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.438396][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.438460][ T6560] bridge_slave_1: entered allmulticast mode [ 26.438908][ T6560] bridge_slave_1: entered promiscuous mode [ 26.440386][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.449635][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.449677][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.449744][ T6549] bridge_slave_0: entered allmulticast mode [ 26.450213][ T6549] bridge_slave_0: entered promiscuous mode [ 26.452544][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.453586][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.467549][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.467634][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.467704][ T6549] bridge_slave_1: entered allmulticast mode [ 26.468163][ T6549] bridge_slave_1: entered promiscuous mode [ 26.477580][ T6550] hsr_slave_0: entered promiscuous mode [ 26.477995][ T6550] hsr_slave_1: entered promiscuous mode [ 26.486245][ T6558] team0: Port device team_slave_0 added [ 26.487194][ T6556] team0: Port device team_slave_0 added [ 26.488068][ T6558] team0: Port device team_slave_1 added [ 26.493409][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.498504][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.499677][ T6556] team0: Port device team_slave_1 added [ 26.507443][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.512014][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.532074][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.533383][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.537627][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.538297][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.538306][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.538317][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.553205][ T6560] team0: Port device team_slave_0 added [ 26.553647][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.553665][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.553691][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.555558][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.555568][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.555583][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.570827][ T6549] team0: Port device team_slave_0 added [ 26.571938][ T6549] team0: Port device team_slave_1 added [ 26.574152][ T6560] team0: Port device team_slave_1 added [ 26.581759][ T6556] hsr_slave_0: entered promiscuous mode [ 26.582121][ T6556] hsr_slave_1: entered promiscuous mode [ 26.582323][ T6556] debugfs: 'hsr0' already exists in 'hsr' [ 26.582364][ T6556] Cannot create hsr debugfs directory [ 26.584374][ T6558] hsr_slave_0: entered promiscuous mode [ 26.585390][ T6558] hsr_slave_1: entered promiscuous mode [ 26.585616][ T6558] debugfs: 'hsr0' already exists in 'hsr' [ 26.585626][ T6558] Cannot create hsr debugfs directory [ 26.605959][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.605986][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.606001][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.606579][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.606588][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.606602][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.614763][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.614772][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.614785][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.615386][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.615392][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.615404][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.652462][ T6549] hsr_slave_0: entered promiscuous mode [ 26.652821][ T6549] hsr_slave_1: entered promiscuous mode [ 26.653029][ T6549] debugfs: 'hsr0' already exists in 'hsr' [ 26.653039][ T6549] Cannot create hsr debugfs directory [ 26.667244][ T6560] hsr_slave_0: entered promiscuous mode [ 26.667624][ T6560] hsr_slave_1: entered promiscuous mode [ 26.667856][ T6560] debugfs: 'hsr0' already exists in 'hsr' [ 26.667868][ T6560] Cannot create hsr debugfs directory [ 26.745478][ T6550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.759344][ T6550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.763240][ T6550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.775309][ T6550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.796741][ T6558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.806621][ T6558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.809661][ T6558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.812535][ T6558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.832962][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.833017][ T6558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.833203][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.833234][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.839642][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.839685][ T6550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.839758][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.839782][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.848937][ T6549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.852437][ T6549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.855632][ T6549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.858781][ T6549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.889206][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.889253][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.889333][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.889366][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.897059][ T6556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.899355][ T6556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.901594][ T6556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.907879][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.911389][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.918254][ T6556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.922729][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.926003][ T717] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.927795][ T717] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.931011][ T717] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.932970][ T717] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.937411][ T717] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.939653][ T717] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.958677][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.968257][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.968318][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.968679][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.968698][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.969017][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.969031][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.981222][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.981263][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.984880][ T6560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.987279][ T6560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.993681][ T6560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.998571][ T6560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.026619][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.050081][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.053087][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.062306][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.088548][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.088594][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.092020][ T1975] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.092073][ T1975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.097008][ T1975] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.097031][ T1975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.099560][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.099617][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.120127][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.132433][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.151224][ T6558] veth0_vlan: entered promiscuous mode [ 27.152888][ T6558] veth1_vlan: entered promiscuous mode [ 27.165068][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.168099][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.180622][ T6558] veth0_macvtap: entered promiscuous mode [ 27.181692][ T6558] veth1_macvtap: entered promiscuous mode [ 27.187437][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.189733][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.189780][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.200222][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.200263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.211073][ T6550] veth0_vlan: entered promiscuous mode [ 27.212578][ T6550] veth1_vlan: entered promiscuous mode [ 27.223406][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.249323][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.249647][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.249668][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.249682][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.257044][ T6560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.267702][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.298245][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.312819][ T6549] veth0_vlan: entered promiscuous mode [ 27.324821][ T6549] veth1_vlan: entered promiscuous mode [ 27.326512][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.326552][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.348516][ T6550] veth0_macvtap: entered promiscuous mode [ 27.350587][ T6550] veth1_macvtap: entered promiscuous mode [ 27.353102][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.353146][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.360256][ T6556] veth0_vlan: entered promiscuous mode [ 27.368378][ T6549] veth0_macvtap: entered promiscuous mode [ 27.371137][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.373602][ T6549] veth1_macvtap: entered promiscuous mode [ 27.380626][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.382294][ T6556] veth1_vlan: entered promiscuous mode [ 27.385865][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.386997][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.391369][ T6558] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.392900][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.397605][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.397665][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.397699][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.397723][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.397746][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.397765][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.397785][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.397802][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.480327][ T6556] veth0_macvtap: entered promiscuous mode [ 27.481582][ T6556] veth1_macvtap: entered promiscuous mode [ 27.493519][ T1975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.493572][ T1975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.498476][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.501324][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.508482][ T1975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.513285][ T1975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.517187][ T1975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.517242][ T1975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.538942][ T4160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.541012][ T4160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.547677][ T1975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.547705][ T1975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.575134][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.575163][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.580985][ T6560] veth0_vlan: entered promiscuous mode [ 27.588371][ T6560] veth1_vlan: entered promiscuous mode [ 27.592845][ T4160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.598040][ T4160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.608131][ T4160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.608165][ T4160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.617687][ T6560] veth0_macvtap: entered promiscuous mode [ 27.620378][ T6560] veth1_macvtap: entered promiscuous mode [ 27.650791][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.651798][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.657977][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.659895][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.664692][ T254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.664740][ T254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.664774][ T254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.664792][ T254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.700734][ T1975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.702195][ T1975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.718668][ T4160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.718706][ T4160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.724740][ T6661] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 27.785896][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.787611][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.791984][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.793626][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.800646][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.802412][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.875679][ T6661] usb 1-1: config 2 has an invalid interface number: 190 but max is 0 [ 27.875712][ T6661] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 27.875732][ T6661] usb 1-1: config 2 has no interface number 0 [ 27.875755][ T6661] usb 1-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.889744][ T6661] usb 1-1: string descriptor 0 read error: -22 [ 27.889811][ T6661] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 27.889838][ T6661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.164136][ T6143] Bluetooth: hci1: command tx timeout [ 28.166263][ T6555] Bluetooth: hci0: command tx timeout [ 28.168018][ T53] Bluetooth: hci4: command tx timeout [ 28.168405][ T6563] Bluetooth: hci2: command tx timeout [ 28.169276][ T6559] Bluetooth: hci3: command tx timeout [ 28.282617][ T6661] (null): keene_cmd_main failed (-71) [ 28.285762][ T6661] video4linux radio2: keene_cmd_main failed (-71) [ 28.285790][ T6661] radio-keene 1-1:2.190: V4L2 device registered as radio2 [ 28.293296][ T6661] usb 1-1: USB disconnect, device number 2 [ 28.877715][ T6710] ptrace attach of "./syz-executor exec"[6549] was attempted by " [ 28.979506][ T6720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 29.996074][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.997944][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.026325][ T6744] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.157972][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.160245][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.174573][ T6559] Bluetooth: hci3: command tx timeout [ 30.174596][ T53] Bluetooth: hci4: command tx timeout [ 30.174612][ T6559] Bluetooth: hci0: command tx timeout [ 30.174626][ T53] Bluetooth: hci1: command tx timeout [ 30.175607][ T6563] Bluetooth: hci2: command tx timeout [ 30.499204][ T6756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 30.691438][ T6772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.40'. [ 30.693533][ T6766] netlink: 60 bytes leftover after parsing attributes in process `syz.1.40'. [ 30.695655][ T6772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.40'. [ 30.775138][ T6609] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.786035][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.787846][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.061708][ T6790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 31.227904][ T6609] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 31.230220][ T6609] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 31.230258][ T6609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.230268][ T6609] usb 1-1: Product: syz [ 31.230273][ T6609] usb 1-1: Manufacturer: syz [ 31.230279][ T6609] usb 1-1: SerialNumber: syz [ 31.442386][ T6609] usb 1-1: USB disconnect, device number 3 [ 32.011054][ T6798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 32.186953][ T6806] capability: warning: `syz.4.55' uses deprecated v2 capabilities in a way that may be insecure [ 32.202962][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.205790][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.255719][ T6563] Bluetooth: hci2: command tx timeout [ 32.257125][ T6563] Bluetooth: hci0: command tx timeout [ 32.258216][ T6563] Bluetooth: hci3: command tx timeout [ 32.263926][ T6555] Bluetooth: hci1: command tx timeout [ 32.264990][ T6555] Bluetooth: hci4: command tx timeout [ 32.987641][ T6835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 33.705165][ T6857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.705347][ T6857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.715909][ T6857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.716138][ T6857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.751612][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.751795][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.804306][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.807545][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.863850][ T6551] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.013837][ T6551] usb 1-1: Using ep0 maxpacket: 16 [ 34.015796][ T6551] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 7 [ 34.018911][ T6551] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.018932][ T6551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.018942][ T6551] usb 1-1: Product: syz [ 34.018950][ T6551] usb 1-1: Manufacturer: syz [ 34.018957][ T6551] usb 1-1: SerialNumber: syz [ 34.232934][ T6551] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.240908][ T6551] usb 1-1: USB disconnect, device number 4 [ 34.249905][ T6543] udevd[6543]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 34.324979][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.326810][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.333872][ T6563] Bluetooth: hci4: command tx timeout [ 34.335196][ T6563] Bluetooth: hci1: command tx timeout [ 34.335266][ T6563] Bluetooth: hci3: command tx timeout [ 34.335289][ T6563] Bluetooth: hci0: command tx timeout [ 34.335309][ T6563] Bluetooth: hci2: command tx timeout [ 34.734739][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.734934][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.309611][ T6894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 35.574917][ T6908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 35.815018][ T6922] fuse: Unknown parameter 'grou00000000000000000000' [ 36.470617][ T6946] fuse: Unknown parameter 'grou00000000000000000000' [ 36.924886][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.927013][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.035296][ T6961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 37.583006][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.584968][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.746164][ T6976] fuse: Unknown parameter 'grou00000000000000000000' [ 37.967734][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.969969][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.071210][ T7001] fuse: Unknown parameter 'group_i00000000000000000000' [ 38.091069][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.091252][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.108111][ T7005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.284732][ T7009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 38.570445][ T7022] capability: warning: `syz.3.140' uses 32-bit capabilities (legacy support in use) [ 38.679874][ T31] audit: type=1326 audit(38.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255b3a8 code=0x7ffc0000 [ 38.688013][ T31] audit: type=1326 audit(38.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffffb255b3a8 code=0x7ffc0000 [ 38.688061][ T31] audit: type=1326 audit(38.660:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255b3a8 code=0x7ffc0000 [ 38.688102][ T31] audit: type=1326 audit(38.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255b3a8 code=0x7ffc0000 [ 38.698707][ T7036] fuse: Unknown parameter 'group_i00000000000000000000' [ 38.807149][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.807967][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.098754][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.100896][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.655164][ T7090] fuse: Unknown parameter 'group_i00000000000000000000' [ 40.442982][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.459424][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.478070][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.478247][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.587847][ T7115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 41.002951][ T7122] fuse: Unknown parameter 'group_id00000000000000000000' [ 41.244420][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.244493][ T7140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.371622][ T7149] fuse: Unknown parameter 'group_id00000000000000000000' [ 41.771580][ T7173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 41.949562][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.192'. [ 41.995705][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.995912][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.135488][ T7183] fuse: Unknown parameter 'group_id00000000000000000000' [ 42.363473][ T7189] Zero length message leads to an empty skb [ 42.851352][ T7211] fuse: Bad value for 'user_id' [ 42.851384][ T7211] fuse: Bad value for 'user_id' [ 43.095278][ T6602] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.329816][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.331750][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.386415][ T6602] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 43.386451][ T6602] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.386481][ T6602] usb 1-1: config 2 interface 0 has no altsetting 0 [ 43.389754][ T6602] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 43.389770][ T6602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.389777][ T6602] usb 1-1: Product: syz [ 43.389783][ T6602] usb 1-1: Manufacturer: syz [ 43.389788][ T6602] usb 1-1: SerialNumber: syz [ 43.480929][ T7235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 43.645032][ T6602] ims_pcu 1-1:2.0: Missing CDC union descriptor [ 43.647148][ T6602] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 43.649857][ T6602] usb 1-1: USB disconnect, device number 5 [ 44.064150][ T7246] fuse: Bad value for 'user_id' [ 44.064172][ T7246] fuse: Bad value for 'user_id' [ 44.613384][ T7274] fuse: Bad value for 'user_id' [ 44.615164][ T7274] fuse: Bad value for 'user_id' [ 44.651264][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.656784][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.766229][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.824166][ T7296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 44.995555][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.059591][ T7299] process 'syz.0.242' launched './file1' with NULL argv: empty string added [ 45.060910][ T7299] ======================================================= [ 45.060910][ T7299] WARNING: The mand mount option has been deprecated and [ 45.060910][ T7299] and is ignored by this kernel. Remove the mand [ 45.060910][ T7299] option from the mount to silence this warning. [ 45.060910][ T7299] ======================================================= [ 45.061178][ T7299] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 45.061186][ T7299] CIFS mount error: No usable UNC path provided in device string! [ 45.061186][ T7299] [ 45.061246][ T7299] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 45.116381][ T7305] fuse: Bad value for 'fd' [ 45.222962][ T7316] warning: `syz.3.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 45.417846][ T6551] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.677449][ T6551] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 45.677499][ T6551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.677510][ T6551] usb 1-1: Product: syz [ 45.677518][ T6551] usb 1-1: Manufacturer: syz [ 45.677525][ T6551] usb 1-1: SerialNumber: syz [ 45.771966][ T7329] netlink: 'syz.2.254': attribute type 12 has an invalid length. [ 45.819894][ T7335] fuse: Bad value for 'fd' [ 45.858680][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.858868][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.363731][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.367425][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.731338][ T7354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 47.065760][ T7365] netlink: 'syz.3.267': attribute type 12 has an invalid length. [ 47.141473][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.266'. [ 47.305832][ T6551] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 47.305885][ T6551] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 47.306215][ T6551] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 47.324587][ T6551] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 47.685678][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.691100][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.832683][ T7374] fuse: Bad value for 'fd' [ 47.919739][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.921564][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.232705][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.232885][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.294680][ T7391] netlink: 'syz.3.278': attribute type 12 has an invalid length. [ 48.327087][ T6551] usb 1-1: USB disconnect, device number 6 [ 49.077971][ T7405] fuse: Bad value for 'fd' [ 49.523932][ T6551] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.676517][ T7437] fuse: Bad value for 'fd' [ 49.785250][ T6551] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 49.785284][ T6551] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.785299][ T6551] usb 1-1: config 2 interface 0 has no altsetting 0 [ 49.787362][ T6551] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 49.787373][ T6551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.787380][ T6551] usb 1-1: Product: syz [ 49.787385][ T6551] usb 1-1: Manufacturer: syz [ 49.787390][ T6551] usb 1-1: SerialNumber: syz [ 50.008948][ T6551] usb 1-1: USB disconnect, device number 7 [ 50.137516][ T7450] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 50.208482][ T7455] veth2: entered promiscuous mode [ 50.209818][ T7455] veth2: entered allmulticast mode [ 50.300752][ T7461] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.301'. [ 50.300996][ T7461] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.301'. [ 50.736173][ T7475] fuse: Bad value for 'fd' [ 50.825097][ T7486] syz.1.312 (7486): /proc/7484/oom_adj is deprecated, please use /proc/7484/oom_score_adj instead. [ 50.907239][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.907436][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.923860][ T1857] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 51.018283][ T7502] fuse: Invalid rootmode [ 51.053987][ T1857] usb 1-1: device descriptor read/64, error -71 [ 51.296427][ T1857] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 51.420673][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.421215][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.513877][ T1857] usb 1-1: device descriptor read/64, error -71 [ 51.627320][ T1857] usb usb1-port1: attempt power cycle [ 51.703482][ T7518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 51.777783][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.782076][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.973911][ T1857] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 51.976069][ T7533] fuse: Invalid rootmode [ 52.000659][ T1857] usb 1-1: device descriptor read/8, error -71 [ 52.039402][ T7537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.041424][ T7537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.233797][ T1857] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 52.254347][ T1857] usb 1-1: device descriptor read/8, error -71 [ 52.364120][ T1857] usb usb1-port1: unable to enumerate USB device [ 52.423370][ T7547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 52.680307][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.682353][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.143501][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.143669][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.814781][ T7574] fuse: Invalid rootmode [ 53.862668][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.865685][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.421161][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.421344][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.835158][ T7600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 55.146108][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.146281][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.293042][ T7614] fuse: Bad value for 'rootmode' [ 55.945134][ T1857] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 56.056694][ T7660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 56.235670][ T1857] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 56.235722][ T1857] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.235757][ T1857] usb 1-1: config 2 interface 0 has no altsetting 0 [ 56.243122][ T1857] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 56.243161][ T1857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.243194][ T1857] usb 1-1: Product: syz [ 56.243206][ T1857] usb 1-1: Manufacturer: syz [ 56.243216][ T1857] usb 1-1: SerialNumber: syz [ 56.294767][ T7664] fuse: Bad value for 'rootmode' [ 56.422767][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.422958][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.460344][ T1857] usb 1-1: USB disconnect, device number 12 [ 56.721881][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.723470][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.003230][ T7685] syz.4.378 uses old SIOCAX25GETINFO [ 57.022786][ T7687] fuse: Bad value for 'rootmode' [ 57.767668][ T7709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.767855][ T7709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.843932][ T7715] fuse: Unknown parameter 'use00000000000000000000' [ 58.203977][ T6602] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 58.270252][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.272779][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.280888][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.282606][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.305037][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.305209][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.387310][ T7739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 58.577669][ T6602] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 58.577697][ T6602] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.577720][ T6602] usb 1-1: config 0 has no interface number 0 [ 58.577731][ T6602] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.577745][ T6602] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 58.577753][ T6602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.579008][ T6602] usb 1-1: config 0 descriptor?? [ 58.582911][ T6602] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 58.787891][ T6602] usb 1-1: USB disconnect, device number 13 [ 58.969962][ T7742] fuse: Unknown parameter 'use00000000000000000000' [ 59.343937][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 59.347352][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.347535][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.382917][ T7763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.383097][ T7763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.403001][ T7765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.403185][ T7765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.745116][ T7767] fuse: Unknown parameter 'use00000000000000000000' [ 59.848284][ T7772] netlink: 60 bytes leftover after parsing attributes in process `syz.0.416'. [ 59.850379][ T7771] netlink: 60 bytes leftover after parsing attributes in process `syz.0.416'. [ 59.874559][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.874742][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.951991][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.955157][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.966211][ T7788] syz.0.423 uses obsolete (PF_INET,SOCK_PACKET) [ 60.073989][ T7790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 60.338562][ T7792] fuse: Unknown parameter 'user_i00000000000000000000' [ 60.654949][ T6551] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 60.772741][ T7806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.772937][ T7806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.807597][ T6551] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 60.807627][ T6551] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.807650][ T6551] usb 1-1: config 2 interface 0 has no altsetting 0 [ 60.817660][ T6551] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 60.817691][ T6551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.817711][ T6551] usb 1-1: Product: syz [ 60.817716][ T6551] usb 1-1: Manufacturer: syz [ 60.817721][ T6551] usb 1-1: SerialNumber: syz [ 60.827082][ T7814] fuse: Unknown parameter 'user_i00000000000000000000' [ 60.880937][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.890918][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.961516][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.964290][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.033020][ T6551] usb 1-1: USB disconnect, device number 14 [ 61.414266][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.416363][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.640795][ T7841] fuse: Unknown parameter 'user_i00000000000000000000' [ 61.736559][ T7844] xt_SECMARK: unable to map security context 'unconfined' [ 62.493613][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.501170][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.525550][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.527343][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.548990][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.550894][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.825490][ T6622] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 62.913259][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.915008][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.984807][ T6622] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 62.984834][ T6622] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.984843][ T6622] usb 1-1: config 2 interface 0 has no altsetting 0 [ 62.986291][ T6622] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 62.986304][ T6622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.986312][ T6622] usb 1-1: Product: syz [ 62.986318][ T6622] usb 1-1: Manufacturer: syz [ 62.986323][ T6622] usb 1-1: SerialNumber: syz [ 63.089736][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 63.374953][ T6622] usb 1-1: USB disconnect, device number 15 [ 63.417608][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.420166][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.008322][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.010801][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.233971][ T1857] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 64.467618][ T1857] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 64.469218][ T1857] usb 1-1: config 0 has no interface number 0 [ 64.474936][ T1857] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 64.476611][ T1857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.478174][ T1857] usb 1-1: Product: syz [ 64.478983][ T1857] usb 1-1: Manufacturer: syz [ 64.480123][ T1857] usb 1-1: SerialNumber: syz [ 64.486521][ T1857] usb 1-1: config 0 descriptor?? [ 64.494975][ T26] cfg80211: failed to load regulatory.db [ 64.495255][ T2440] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495296][ T2440] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.559622][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.559797][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.564571][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.565911][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.571361][ T7941] bridge0: entered promiscuous mode [ 64.572133][ T7941] vlan2: entered promiscuous mode [ 64.697140][ T1857] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 64.701150][ T1857] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 64.704180][ T1857] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 64.706182][ T1857] usb 1-1: media controller created [ 64.711751][ T1857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.838882][ T7966] fuse: Bad value for 'fd' [ 65.075228][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.077170][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.124211][ T6157] usb 1-1: USB disconnect, device number 16 [ 65.707645][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.707826][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.728711][ T7994] fuse: Bad value for 'fd' [ 65.730413][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 65.816947][ T8012] can0: slcan on ttynull. [ 65.874682][ T8011] can0 (unregistered): slcan off ttynull. [ 65.893393][ T8026] fuse: Unknown parameter '0x0000000000000004' [ 66.082380][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.088905][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.094752][ T6622] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 66.244881][ T6622] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.244933][ T6622] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 66.244944][ T6622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.247760][ T6622] usb 1-1: config 0 descriptor?? [ 66.249386][ T6622] pwc: Askey VC010 type 2 USB webcam detected. [ 66.638392][ T8072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 66.652271][ T6622] pwc: recv_control_msg error -32 req 02 val 2b00 [ 66.653672][ T6622] pwc: recv_control_msg error -32 req 02 val 2700 [ 66.656486][ T6622] pwc: recv_control_msg error -32 req 02 val 2c00 [ 66.657649][ T6622] pwc: recv_control_msg error -32 req 04 val 1000 [ 66.658849][ T6622] pwc: recv_control_msg error -32 req 04 val 1300 [ 66.659495][ T6622] pwc: recv_control_msg error -32 req 04 val 1400 [ 66.659944][ T8074] fuse: Unknown parameter '0x0000000000000004' [ 66.660402][ T6622] pwc: recv_control_msg error -32 req 02 val 2000 [ 66.662202][ T6622] pwc: recv_control_msg error -32 req 02 val 2100 [ 66.799112][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.799304][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.865786][ T6622] pwc: recv_control_msg error -71 req 02 val 2500 [ 66.868507][ T6622] pwc: recv_control_msg error -71 req 02 val 2400 [ 66.869872][ T6622] pwc: recv_control_msg error -71 req 02 val 2600 [ 66.871508][ T6622] pwc: recv_control_msg error -71 req 02 val 2900 [ 66.872809][ T6622] pwc: recv_control_msg error -71 req 02 val 2800 [ 66.874492][ T6622] pwc: recv_control_msg error -71 req 04 val 1100 [ 66.876977][ T6622] pwc: recv_control_msg error -71 req 04 val 1200 [ 66.880272][ T6622] pwc: Registered as video11. [ 66.883337][ T6622] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input3 [ 66.887610][ T6622] usb 1-1: USB disconnect, device number 17 [ 66.903043][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.546'. [ 66.903079][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 67.344583][ T8105] fuse: Unknown parameter '0x0000000000000004' [ 67.585687][ T8129] fuse: Unknown parameter '0x0000000000000004' [ 67.627625][ T31] audit: type=1326 audit(67.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.629300][ T31] audit: type=1326 audit(67.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.630053][ T31] audit: type=1326 audit(67.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.630314][ T31] audit: type=1326 audit(67.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.630327][ T31] audit: type=1326 audit(67.600:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.630339][ T31] audit: type=1326 audit(67.600:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.630375][ T31] audit: type=1326 audit(67.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.630606][ T31] audit: type=1326 audit(67.600:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.630757][ T31] audit: type=1326 audit(67.600:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.630872][ T31] audit: type=1326 audit(67.600:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaaf5b3a8 code=0x7ffc0000 [ 67.781072][ T8151] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.831804][ T8161] fuse: Unknown parameter '0x0000000000000004' [ 67.856940][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.864017][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.960265][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.960436][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.520319][ T8195] fuse: Unknown parameter '0x0000000000000004' [ 68.628106][ T8202] smk_cipso_doi:692 cipso add rc = -17 [ 68.865862][ T8212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.866050][ T8212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.416412][ T8228] fuse: Unknown parameter 'fd0x0000000000000004' [ 69.438392][ T8230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 69.440583][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.442558][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.792175][ T8258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 69.822842][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.823046][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.826258][ T8262] fuse: Unknown parameter 'fd0x0000000000000004' [ 69.882310][ T8273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 70.243807][ T6157] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 70.403844][ T6157] usb 1-1: Using ep0 maxpacket: 16 [ 70.408968][ T6157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 70.410520][ T6157] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 70.410534][ T6157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.410542][ T6157] usb 1-1: Product: syz [ 70.410547][ T6157] usb 1-1: Manufacturer: syz [ 70.410553][ T6157] usb 1-1: SerialNumber: syz [ 70.413524][ T6157] usb 1-1: config 0 descriptor?? [ 70.418218][ T6157] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 70.418247][ T6157] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 70.776056][ T8297] fuse: Unknown parameter 'fd0x0000000000000004' [ 70.827190][ T8303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.156617][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.157203][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.169514][ T8313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.169682][ T8313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.376575][ T6157] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 71.721311][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 71.747956][ T8331] syz_tun: entered allmulticast mode [ 71.864728][ T8339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 72.008077][ T6157] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 72.010170][ T6157] em28xx 1-1:0.0: board has no eeprom [ 72.120549][ T8343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 72.154045][ T6157] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 72.155354][ T6157] em28xx 1-1:0.0: dvb set to bulk mode. [ 72.156855][ T6622] em28xx 1-1:0.0: Binding DVB extension [ 72.162072][ T6157] usb 1-1: USB disconnect, device number 18 [ 72.163679][ T6157] em28xx 1-1:0.0: Disconnecting em28xx [ 72.184249][ T6622] em28xx 1-1:0.0: Registering input extension [ 72.185496][ T6157] em28xx 1-1:0.0: Closing input extension [ 72.203269][ T6157] em28xx 1-1:0.0: Freeing device [ 72.603838][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.605737][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.302646][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.302826][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.525374][ T6609] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 73.661539][ T8385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 73.733775][ T6609] usb 1-1: Using ep0 maxpacket: 8 [ 73.744442][ T6609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.746828][ T6609] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.746850][ T6609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.746865][ T6609] usb 1-1: Product: syz [ 73.746873][ T6609] usb 1-1: Manufacturer: syz [ 73.746880][ T6609] usb 1-1: SerialNumber: syz [ 73.929680][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 73.963962][ T6609] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 73.963990][ T6609] usb 1-1: found format II with max.bitrate = 2, frame size=0 [ 73.964009][ T6609] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 73.999081][ T6609] usb 1-1: USB disconnect, device number 19 [ 74.026464][ T7458] udevd[7458]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.413486][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 74.478793][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.481068][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.575732][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.577299][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.595674][ T8446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 76.160280][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 76.183944][ T6157] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 76.207643][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.208714][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.299303][ T8486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.301052][ T8486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.347118][ T6157] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.347155][ T6157] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 76.347180][ T6157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.350361][ T6157] usb 1-1: config 0 descriptor?? [ 76.358125][ T6157] pwc: Askey VC010 type 2 USB webcam detected. [ 77.097628][ T6157] pwc: recv_control_msg error -32 req 02 val 2b00 [ 77.099082][ T6157] pwc: recv_control_msg error -32 req 02 val 2700 [ 77.102399][ T6157] pwc: recv_control_msg error -32 req 02 val 2c00 [ 77.102784][ T6157] pwc: recv_control_msg error -32 req 04 val 1000 [ 77.103165][ T6157] pwc: recv_control_msg error -32 req 04 val 1300 [ 77.107018][ T6157] pwc: recv_control_msg error -32 req 04 val 1400 [ 77.108739][ T6157] pwc: recv_control_msg error -32 req 02 val 2000 [ 77.111260][ T6157] pwc: recv_control_msg error -32 req 02 val 2100 [ 77.114273][ T6157] pwc: recv_control_msg error -32 req 04 val 1500 [ 77.116185][ T6157] pwc: recv_control_msg error -32 req 02 val 2500 [ 77.117746][ T6157] pwc: recv_control_msg error -32 req 02 val 2400 [ 77.120042][ T6157] pwc: recv_control_msg error -32 req 02 val 2600 [ 77.224806][ T8507] pim6reg: entered allmulticast mode [ 77.240784][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.240982][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.322765][ T6157] pwc: recv_control_msg error -71 req 02 val 2800 [ 77.324663][ T6157] pwc: recv_control_msg error -71 req 04 val 1100 [ 77.326032][ T6157] pwc: recv_control_msg error -71 req 04 val 1200 [ 77.329337][ T6157] pwc: Registered as video11. [ 77.329922][ T6157] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 77.337956][ T6157] usb 1-1: USB disconnect, device number 20 [ 77.817570][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.817747][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.083871][ T6609] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 78.236152][ T6609] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 78.236198][ T6609] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.236210][ T6609] usb 1-1: config 2 interface 0 has no altsetting 0 [ 78.237850][ T6609] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 78.237868][ T6609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.237878][ T6609] usb 1-1: Product: syz [ 78.237886][ T6609] usb 1-1: Manufacturer: syz [ 78.237894][ T6609] usb 1-1: SerialNumber: syz [ 78.368258][ T8558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.470999][ T6609] usb 1-1: USB disconnect, device number 21 [ 78.581968][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.585256][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.109900][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 79.113524][ T8580] smk_cipso_doi:679 remove rc = -2 [ 79.113601][ T8580] smk_cipso_doi:692 cipso add rc = -17 [ 79.332518][ T8585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.332702][ T8585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.340191][ T8587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 79.403438][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.405232][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.885827][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.890863][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.342310][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.342497][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.783978][ T26] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 81.084930][ T26] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 81.084971][ T26] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.084984][ T26] usb 1-1: config 2 interface 0 has no altsetting 0 [ 81.086625][ T26] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 81.086639][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.086648][ T26] usb 1-1: Product: syz [ 81.086654][ T26] usb 1-1: Manufacturer: syz [ 81.086660][ T26] usb 1-1: SerialNumber: syz [ 81.160119][ T8653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.160311][ T8653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.304906][ T26] usb 1-1: USB disconnect, device number 22 [ 81.863082][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.863256][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.177241][ T8691] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 82.177272][ T8691] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 83.009500][ T8744] trusted_key: syz.1.796 sent an empty control message without MSG_MORE. [ 83.140171][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 83.145853][ T8752] smk_cipso_doi:679 remove rc = -2 [ 83.145930][ T8752] smk_cipso_doi:692 cipso add rc = -17 [ 83.361369][ T8756] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '}S7\mgҒ?NZez [ 83.449846][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 83.451825][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 83.459383][ T254] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.459452][ T254] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.459498][ T254] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.459529][ T254] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.815077][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.815240][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.938627][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.938805][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.469542][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 84.475041][ T8835] smk_cipso_doi:679 remove rc = -2 [ 84.475109][ T8835] smk_cipso_doi:692 cipso add rc = -17 [ 84.656574][ T26] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 84.974684][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.974748][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.974777][ T26] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 84.974793][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.981903][ T26] usb 1-1: config 0 descriptor?? [ 85.079581][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.081660][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.246691][ T8851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.246869][ T8851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.257477][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 85.383976][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.833'. [ 85.390008][ T8855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.392995][ T26] elan 0003:04F3:0755.0001: unknown main item tag 0x2 [ 85.393377][ T26] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 85.397813][ T26] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 85.534575][ T6555] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 85.534624][ T6555] Bluetooth: hci4: Injecting HCI hardware error event [ 85.535516][ T6563] Bluetooth: hci4: hardware error 0x00 [ 85.598712][ T26] usb 1-1: USB disconnect, device number 23 [ 86.799648][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.799922][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.869947][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.873349][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.075591][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.075771][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.551755][ T8915] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 87.620827][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.621023][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.693843][ T6563] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 88.109075][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.109253][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.133896][ T1857] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 88.495246][ T1857] usb 1-1: config 2 has an invalid interface number: 190 but max is 0 [ 88.495276][ T1857] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 88.495588][ T1857] usb 1-1: config 2 has no interface number 0 [ 88.495624][ T1857] usb 1-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.022037][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.024532][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.079951][ T8965] bond1: entered promiscuous mode [ 89.079987][ T8965] bond1: entered allmulticast mode [ 89.080144][ T8965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.841274][ T8993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.841464][ T8993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.374723][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.374919][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.428269][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 90.851061][ T1857] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 90.851093][ T1857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.853951][ T1857] usb 1-1: can't set config #2, error -71 [ 90.856645][ T1857] usb 1-1: USB disconnect, device number 24 [ 91.183868][ T1857] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 91.327695][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.327894][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.333847][ T1857] usb 1-1: Using ep0 maxpacket: 16 [ 91.336147][ T1857] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.336975][ T1857] usb 1-1: config 8 has an invalid interface number: 34 but max is 0 [ 91.336985][ T1857] usb 1-1: config 8 has an invalid interface association descriptor of length 2, skipping [ 91.336992][ T1857] usb 1-1: config 8 has no interface number 0 [ 91.337007][ T1857] usb 1-1: config 8 interface 34 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 91.337016][ T1857] usb 1-1: config 8 interface 34 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 91.337023][ T1857] usb 1-1: config 8 interface 34 has no altsetting 0 [ 91.342012][ T1857] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 91.342030][ T1857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.342040][ T1857] usb 1-1: Product: syz [ 91.342047][ T1857] usb 1-1: Manufacturer: syz [ 91.342053][ T1857] usb 1-1: SerialNumber: syz [ 91.396014][ T9045] Bluetooth: MGMT ver 1.23 [ 91.499849][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.500069][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.557637][ T1857] usb 1-1: USB disconnect, device number 25 [ 91.5604 ** replaying previous printk message ** [ 91.560446][ T1857] ================================================================== [ 91.560457][ T1857] BUG: KASAN: slab-use-after-free in hdm_disconnect+0xf4/0x18c [ 91.560477][ T1857] Read of size 8 at addr ffff0000d761d8b0 by task kworker/0:2/1857 [ 91.560485][ T1857] [ 91.560490][ T1857] CPU: 0 UID: 0 PID: 1857 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT [ 91.560497][ T1857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 91.560502][ T1857] Workqueue: usb_hub_wq hub_event [ 91.560514][ T1857] Call trace: [ 91.560516][ T1857] show_stack+0x2c/0x3c (C) [ 91.560525][ T1857] __dump_stack+0x30/0x40 [ 91.560531][ T1857] dump_stack_lvl+0xd8/0x12c [ 91.560537][ T1857] print_address_description+0xa8/0x238 [ 91.560547][ T1857] print_report+0x68/0x84 [ 91.560555][ T1857] kasan_report+0xb0/0x110 [ 91.560563][ T1857] __asan_report_load8_noabort+0x20/0x2c [ 91.560571][ T1857] hdm_disconnect+0xf4/0x18c [ 91.560577][ T1857] usb_unbind_interface+0x244/0x7e4 [ 91.560587][ T1857] device_release_driver_internal+0x3f8/0x68c [ 91.560598][ T1857] device_release_driver+0x28/0x38 [ 91.560607][ T1857] bus_remove_device+0x310/0x3b0 [ 91.560615][ T1857] device_del+0x47c/0x808 [ 91.560621][ T1857] usb_disable_device+0x33c/0x780 [ 91.560630][ T1857] usb_disconnect+0x284/0x82c [ 91.560635][ T1857] hub_event+0x1688/0x3c78 [ 91.560642][ T1857] process_one_work+0x7e8/0x155c [ 91.560649][ T1857] worker_thread+0x990/0xed8 [ 91.560655][ T1857] kthread+0x5fc/0x75c [ 91.560664][ T1857] ret_from_fork+0x10/0x20 [ 91.560671][ T1857] [ 91.560673][ T1857] Allocated by task 1857: [ 91.560676][ T1857] kasan_save_track+0x40/0x78 [ 91.560681][ T1857] kasan_save_alloc_info+0x44/0x54 [ 91.560688][ T1857] __kasan_kmalloc+0x9c/0xb4 [ 91.560693][ T1857] __kmalloc_cache_noprof+0x3a4/0x65c [ 91.560698][ T1857] hdm_probe+0x9c/0x1044 [ 91.560703][ T1857] usb_probe_interface+0x5a4/0xaac [ 91.560712][ T1857] really_probe+0x3b4/0x944 [ 91.560720][ T1857] __driver_probe_device+0x180/0x2d4 [ 91.560728][ T1857] driver_probe_device+0x78/0x330 [ 91.560737][ T1857] __device_attach_driver+0x290/0x4e0 [ 91.560745][ T1857] bus_for_each_drv+0x220/0x2b4 [ 91.560752][ T1857] __device_attach+0x26c/0x388 [ 91.560760][ T1857] device_initial_probe+0x24/0x34 [ 91.560768][ T1857] bus_probe_device+0x178/0x240 [ 91.560775][ T1857] device_add+0x71c/0xa60 [ 91.560780][ T1857] usb_set_configuration+0x1640/0x1bac [ 91.560788][ T1857] usb_generic_driver_probe+0x8c/0x144 [ 91.560797][ T1857] usb_probe_device+0x1a4/0x348 [ 91.560805][ T1857] really_probe+0x3b4/0x944 [ 91.560813][ T1857] __driver_probe_device+0x180/0x2d4 [ 91.560821][ T1857] driver_probe_device+0x78/0x330 [ 91.560829][ T1857] __device_attach_driver+0x290/0x4e0 [ 91.560838][ T1857] bus_for_each_drv+0x220/0x2b4 [ 91.560845][ T1857] __device_attach+0x26c/0x388 [ 91.560852][ T1857] device_initial_probe+0x24/0x34 [ 91.560860][ T1857] bus_probe_device+0x178/0x240 [ 91.560867][ T1857] device_add+0x71c/0xa60 [ 91.560872][ T1857] usb_new_device+0x7f0/0x123c [ 91.560877][ T1857] hub_event+0x211c/0x3c78 [ 91.560883][ T1857] process_one_work+0x7e8/0x155c [ 91.560888][ T1857] worker_thread+0x990/0xed8 [ 91.560894][ T1857] kthread+0x5fc/0x75c [ 91.560902][ T1857] ret_from_fork+0x10/0x20 [ 91.560908][ T1857] [ 91.560909][ T1857] Freed by task 1857: [ 91.560917][ T1857] kasan_save_track+0x40/0x78 [ 91.560922][ T1857] __kasan_save_free_info+0x58/0x70 [ 91.560929][ T1857] __kasan_slab_free+0x74/0xa4 [ 91.560934][ T1857] kfree+0x184/0x600 [ 91.560938][ T1857] release_mdev+0x20/0x30 [ 91.560943][ T1857] device_release+0x8c/0x1ac [ 91.560950][ T1857] kobject_put+0x2b0/0x438 [ 91.560958][ T1857] device_unregister+0x3c/0xcc [ 91.560963][ T1857] most_deregister_interface+0x3e0/0x42c [ 91.560968][ T1857] hdm_disconnect+0xdc/0x18c [ 91.560973][ T1857] usb_unbind_interface+0x244/0x7e4 [ 91.560982][ T1857] device_release_driver_internal+0x3f8/0x68c [ 91.560990][ T1857] device_release_driver+0x28/0x38 [ 91.560998][ T1857] bus_remove_device+0x310/0x3b0 [ 91.561005][ T1857] device_del+0x47c/0x808 [ 91.561011][ T1857] usb_disable_device+0x33c/0x780 [ 91.561019][ T1857] usb_disconnect+0x284/0x82c [ 91.561024][ T1857] hub_event+0x1688/0x3c78 [ 91.561029][ T1857] process_one_work+0x7e8/0x155c [ 91.561034][ T1857] worker_thread+0x990/0xed8 [ 91.561040][ T1857] kthread+0x5fc/0x75c [ 91.561048][ T1857] ret_from_fork+0x10/0x20 [ 91.561053][ T1857] [ 91.561055][ T1857] The buggy address belongs to the object at ffff0000d761c000 [ 91.561055][ T1857] which belongs to the cache kmalloc-8k of size 8192 [ 91.561060][ T1857] The buggy address is located 6320 bytes inside of [ 91.561060][ T1857] freed 8192-byte region [ffff0000d761c000, ffff0000d761e000) [ 91.561066][ T1857] [ 91.561068][ T1857] The buggy address belongs to the physical page: [ 91.561072][ T1857] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117618 [ 91.561077][ T1857] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 91.561082][ T1857] anon flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 91.561088][ T1857] page_type: f5(slab) [ 91.561094][ T1857] raw: 05ffc00000000040 ffff0000c0002280 fffffdffc358dc00 0000000000000005 [ 91.561100][ T1857] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 91.561105][ T1857] head: 05ffc00000000040 ffff0000c0002280 fffffdffc358dc00 0000000000000005 [ 91.561110][ T1857] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 91.561116][ T1857] head: 05ffc00000000003 fffffdffc35d8601 00000000ffffffff 00000000ffffffff [ 91.561121][ T1857] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 91.561124][ T1857] page dumped because: kasan: bad access detected [ 91.561127][ T1857] [ 91.561129][ T1857] Memory state around the buggy address: [ 91.561132][ T1857] ffff0000d761d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.561136][ T1857] ffff0000d761d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.561140][ T1857] >ffff0000d761d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.561143][ T1857] ^ [ 91.561146][ T1857] ffff0000d761d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.561150][ T1857] ffff0000d761d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.561153][ T1857] ================================================================== [ 91.561176][ T1857] Disabling lock debugging due to kernel taint [ 91.561201][ T1857] ------------[ cut here ]------------ [ 91.561205][ T1857] refcount_t: underflow; use-after-free. [ 91.561356][ T1857] WARNING: CPU: 0 PID: 1857 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 91.654059][ T1857] Modules linked in: [ 91.654599][ T1857] CPU: 0 UID: 0 PID: 1857 Comm: kworker/0:2 Tainted: G B syzkaller #0 PREEMPT [ 91.656124][ T1857] Tainted: [B]=BAD_PAGE [ 91.656713][ T1857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 91.658080][ T1857] Workqueue: usb_hub_wq hub_event [ 91.658852][ T1857] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 91.660055][ T1857] pc : refcount_warn_saturate+0x154/0x1f8 [ 91.660955][ T1857] lr : refcount_warn_saturate+0x154/0x1f8 [ 91.661859][ T1857] sp : ffff80009ff17350 [ 91.662482][ T1857] x29: ffff80009ff17350 x28: ffff0000ccb180b0 x27: 1fffe0001aec3800 [ 91.663668][ T1857] x26: 1fffe0001aec3807 x25: dfff800000000000 x24: ffff80009243c9b0 [ 91.664892][ T1857] x23: 1fffe0001aec38a2 x22: ffff0000d761c03c x21: 0000000000000000 [ 91.666170][ T1857] x20: ffff0000d761c038 x19: ffff800092bfa000 x18: 1fffe000337db690 [ 91.667312][ T1857] x17: 3d3d3d3d3d3d3d3d x16: ffff800082de9540 x15: 0000000000000001 [ 91.668603][ T1857] x14: 1ffff00013fe2da0 x13: 0000000000000000 x12: 0000000000000000 [ 91.669939][ T1857] x11: 0000000000100000 x10: 0000000000052ef4 x9 : 126d4477faf57e00 [ 91.671302][ T1857] x8 : 126d4477faf57e00 x7 : 0000000000000001 x6 : ffff8000805638d4 [ 91.672570][ T1857] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 91.673823][ T1857] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 91.675095][ T1857] Call trace: [ 91.675612][ T1857] refcount_warn_saturate+0x154/0x1f8 (P) [ 91.676456][ T1857] kobject_put+0x194/0x438 [ 91.677148][ T1857] put_device+0x28/0x40 [ 91.677813][ T1857] hdm_disconnect+0x174/0x18c [ 91.678554][ T1857] usb_unbind_interface+0x244/0x7e4 [ 91.679380][ T1857] device_release_driver_internal+0x3f8/0x68c [ 91.680411][ T1857] device_release_driver+0x28/0x38 [ 91.681246][ T1857] bus_remove_device+0x310/0x3b0 [ 91.682028][ T1857] device_del+0x47c/0x808 [ 91.682808][ T1857] usb_disable_device+0x33c/0x780 [ 91.683606][ T1857] usb_disconnect+0x284/0x82c [ 91.684306][ T1857] hub_event+0x1688/0x3c78 [ 91.685011][ T1857] process_one_work+0x7e8/0x155c [ 91.685766][ T1857] worker_thread+0x990/0xed8 [ 91.686482][ T1857] kthread+0x5fc/0x75c [ 91.687168][ T1857] ret_from_fork+0x10/0x20 [ 91.687979][ T1857] irq event stamp: 151951 [ 91.688681][ T1857] hardirqs last enabled at (151951): [] irqentry_exit+0xd8/0x108 [ 91.690266][ T1857] hardirqs last disabled at (151950): [] enter_from_kernel_mode+0x14/0x34 [ 91.691843][ T1857] softirqs last enabled at (150580): [] handle_softirqs+0xaf8/0xc88 [ 91.693305][ T1857] softirqs last disabled at (150551): [] __do_softirq+0x14/0x20 [ 91.694656][ T1857] ---[ end trace 0000000000000000 ]---