last executing test programs: 41.747042679s ago: executing program 0 (id=1421): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3, r5}}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800010000000000"], 0x3c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x2, 0x2, 0x0, "509a"}, @main=@item_012={0x2, 0x0, 0x9, "91ac"}]}}, 0x0}, 0x0) 38.442231124s ago: executing program 0 (id=1440): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000183b9220b11342001658010203010902"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 36.545811498s ago: executing program 0 (id=1435): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="43cd", 0x2}, {&(0x7f0000000240)="83", 0x1}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = io_uring_setup(0x66a, &(0x7f00000002c0)) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) openat$mice(0xffffff9c, &(0x7f0000000140), 0x84540) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x450}], 0x2}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58f04"]) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 36.329912871s ago: executing program 0 (id=1437): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@cgroup, 0xffffffffffffffff, 0x25, 0x8000000, 0xffffffffffffffff, @void, @value}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x10c, &(0x7f0000000300)={0x0, 0x88a0, 0x0, 0x1, 0xe4}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x310, 0x8e, 0xec, 0x17, 0x8, 0x13d8, 0x21, 0xaf79, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0xb0, 0x80, [{{0x9, 0x4, 0x92, 0x3, 0x0, 0x82, 0x72, 0x19, 0x4}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x3f70, 0xfdef, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000000)=r9, 0x4) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x20000) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00\x00\f\x00', "030100", "e859ad13", ["8bada940edff000a00", "f460734b0000008000", "000000ff0000000000000020", "0000000000000000000100"]}) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) 34.239062386s ago: executing program 0 (id=1443): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfe, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x0) 25.378353798s ago: executing program 1 (id=1464): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000183b9220b11342001658010203010902"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 22.778415803s ago: executing program 4 (id=1467): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) symlink(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000200)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) socket$inet6(0xa, 0x3, 0x103) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7c, 0x3, 0xc, 0x226, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x5, @void, @value, @void, @value}, 0x50) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000d00), 0x4) sendto$inet(r4, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r4, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) socket$can_raw(0x1d, 0x3, 0x1) 22.322020051s ago: executing program 1 (id=1468): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$inet6(0xa, 0x4, 0x107) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000150000/0x2000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) fcntl$dupfd(r4, 0x0, r4) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f00004e5000/0x2000)=nil) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3c0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0xfff, 0x1004, 0x0, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0x7fffffff, 0xffffffff00000000, 0x4, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x80000000, 0xfffffffffffffc00, 0x2, 0xb, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup(r7) 21.902325582s ago: executing program 2 (id=1469): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a055900000000000001090224000100000000090400000103000200092100000001220700090581033f0704000034dfd7d303cb2820672c9e9430f77506393ed2f9267b18a55750b55a3004c7cf9e6c8827b6e2dbbaace12c68912d4237928ac79ccf11dcd3a1baf61e8102e7778d8328ecb3c74ed7e067efbd14c2175221246cbd619e572bff933893af8ae0a3"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000)=0xffffff80, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0xfe3c, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[], 0x1c}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r7, 0x2def, 0xf510, 0x8, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0xffffff80}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0xe, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 20.769767554s ago: executing program 1 (id=1471): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3, r5}}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800010000000000"], 0x3c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 20.004205479s ago: executing program 4 (id=1472): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='statm\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x4, 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x40010, r4, 0x8000000) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)='[', 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xb, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x519}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = socket$key(0xf, 0x3, 0x2) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@dev, @in6}}, {{@in6=@loopback}}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) sendmsg$key(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000202"], 0x10}}, 0x0) r9 = openat$cgroup_procs(r5, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) unshare(0x2a000400) sendfile(r3, r2, 0x0, 0x100800001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}]}}]}, 0x40}}, 0x0) 19.568853468s ago: executing program 2 (id=1474): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001a00)={0x24, &(0x7f0000001800)={0x0, 0xc, 0x9, {0x9, 0xa, "4556cbab744d01"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000500)={0x0, 0x0, 0x80, 0x0, 0x2f5}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcee0817896735dd1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x3e01ff4920aa4c6b, 0x0) io_uring_enter(r2, 0x7d79, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "3e8343c5"}]}}, 0x0}, 0x0) 18.831009662s ago: executing program 4 (id=1475): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280)="893f3c8c4faea5ef452525a7b7e8de2b905f3a9877ee5506263e8e14fd9e2f3ca037f639c673a7debc8d58dd82bf638d1215770ee76d6052961380080cb8277b3df417ca8769cfa1466048fb17b2be8c66ae851a5b6c9730d8d6c8fa0d9565ce5ab07f515b62d2a30f710a4cb79dbc468c5fbee20795e82b294f92199554f0665d8c7ac3a71258517d7c827538aff75b9c55f2e950ecc13758fcfe049e51826977bc813422117b0c81177ba2cf0842d31d06", 0xb2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$mouse(0x0, 0x4, 0x800) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x5b, 0xa, 0x0, "05fcff410400001bf9585253b800c495f2000500"}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000001080)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @dev, 0x1ff}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) 17.771196129s ago: executing program 4 (id=1479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x9, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030300000000000000000000000005000100070000000900020073797a31000000001400078008001340000000000800124000000000050005000a000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x63, 0x9b, 0x35, 0x8, 0x10b8, 0x1e6e, 0x2ca4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x4, 0x20, 0x4, [{{0x9, 0x4, 0xe6, 0x80, 0x0, 0x37, 0xcb, 0x3b, 0x9}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x5, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0x8, 0xb1, 0x98, 0x10, 0xd46, 0x2012, 0x74ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x1c, 0x30, 0x5, [{{0x9, 0x4, 0x10, 0x3, 0x0, 0x3a, 0x32, 0xcc, 0x8}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000002240)={0x24, 0x0, &(0x7f0000002180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000002740)={0x2c, 0x0, &(0x7f0000002600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003840)={0x84, &(0x7f0000003380)={0x20, 0xa, 0x1, 'L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 17.627314832s ago: executing program 1 (id=1480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) ppoll(&(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0) r6 = syz_open_procfs(0x0, 0x0) futimesat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}) recvmmsg(r6, &(0x7f0000007b40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000780)=""/59, 0x3b}, {&(0x7f00000007c0)=""/61, 0x3d}], 0x5, &(0x7f0000000880)=""/115, 0x73}, 0x1}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000a80)=""/89, 0x59}], 0x2, &(0x7f0000000b40)=""/126, 0x7e}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000bc0)=""/198, 0xc6}, {&(0x7f0000000cc0)=""/241, 0xf1}, {&(0x7f0000000dc0)=""/173, 0xad}, {&(0x7f0000000e80)=""/196, 0xc4}, {0x0}, {&(0x7f0000001080)=""/176, 0xb0}], 0x6, &(0x7f0000002240)=""/149, 0x95}, 0x5}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002300)=""/170, 0xaa}], 0x1, &(0x7f0000002400)=""/73, 0x49}, 0x5}, {{&(0x7f0000002480)=@nfc, 0x80, &(0x7f0000002680)=[{&(0x7f0000002500)=""/205, 0xcd}, {&(0x7f0000002600)=""/73, 0x49}], 0x2, &(0x7f00000026c0)=""/40, 0x28}, 0x43}, {{&(0x7f0000002700)=@nl=@unspec, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002780)=""/194, 0xc2}, {&(0x7f0000002880)=""/158, 0x9e}, {&(0x7f0000002940)=""/238, 0xee}, {&(0x7f0000002a40)=""/115, 0x73}, {&(0x7f0000002ac0)=""/85, 0x55}, {&(0x7f0000002b40)=""/14, 0xe}, {&(0x7f0000002b80)=""/243, 0xf3}, {&(0x7f0000002c80)=""/177, 0xb1}, {&(0x7f0000002d40)=""/126, 0x7e}, {&(0x7f0000002dc0)=""/214, 0xd6}], 0xa}, 0x9}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002f80)=""/34, 0x22}, {&(0x7f0000002fc0)=""/38, 0x26}, {&(0x7f0000003000)=""/145, 0x91}, {&(0x7f00000030c0)=""/24, 0x18}], 0x4, &(0x7f0000003180)=""/146, 0x92}, 0x8}, {{&(0x7f00000062c0)=@alg, 0x80, &(0x7f0000006700)=[{&(0x7f0000006340)=""/234, 0xea}, {&(0x7f0000006440)=""/202, 0xca}, {&(0x7f0000006540)=""/98, 0x62}, {&(0x7f00000065c0)=""/132, 0x84}, {&(0x7f0000006680)=""/128, 0x80}], 0x5, &(0x7f0000006780)=""/4096, 0x1000}, 0xfffffff1}, {{&(0x7f0000007780)=@ieee802154, 0x80, &(0x7f0000007800)=[{&(0x7f0000003240)=""/13, 0xd}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000007ac0)=[{&(0x7f0000007840)=""/92, 0x5c}, {&(0x7f00000078c0)=""/146, 0x92}, {&(0x7f0000007980)=""/118, 0x76}, {&(0x7f0000007a00)=""/152, 0x98}], 0x4, &(0x7f0000007b00)=""/27, 0x1b}, 0x3}], 0xa, 0x0, &(0x7f0000007dc0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a) bind$alg(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000004c0)={'tunl0\x00', r9, 0x7800, 0x89, 0x7, 0xfbcd, {{0x22, 0x4, 0x1, 0x32, 0x88, 0x64, 0x0, 0xfc, 0x2b, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x8a, [@multicast2]}, @timestamp={0x44, 0x10, 0xcf, 0x0, 0x2, [0x8, 0x1, 0x8001]}, @lsrr={0x83, 0xf, 0x3a, [@local, @multicast1, @loopback]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x7, 0xc, "f3ea822477343209c85f"}]}, @end, @timestamp_addr={0x44, 0xc, 0xb8, 0x1, 0x5, [{@multicast1, 0x800}]}, @end, @timestamp={0x44, 0x2c, 0xd, 0x0, 0x9, [0x2, 0x8, 0x1, 0x9, 0x5, 0x4, 0x10, 0x7, 0x6, 0x8]}]}}}}}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) close_range(r7, r7, 0x2) 17.314614728s ago: executing program 2 (id=1481): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x3, 0x8000000000, 0x4001}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x3, 0x0, 0x0, &(0x7f0000000180)='O', 0x1, 0x6}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000280)='O2', 0x2, 0xfffffffffffffffb}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)={0x40, 0x10, 0x4, "237c1a73"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) madvise(&(0x7f0000bf8000/0x1000)=nil, 0x1000, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/64, 0xfdef}], 0x1) 15.885191415s ago: executing program 1 (id=1482): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001a00)={0x24, &(0x7f0000001800)={0x0, 0xc, 0x9, {0x9, 0xa, "4556cbab744d01"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000500)={0x0, 0x0, 0x80, 0x0, 0x2f5}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcee0817896735dd1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x3e01ff4920aa4c6b, 0x0) io_uring_enter(r2, 0x7d79, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "3e8343c5"}]}}, 0x0}, 0x0) 15.748852121s ago: executing program 3 (id=1483): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x8e0, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 15.578793857s ago: executing program 3 (id=1484): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r0 = syz_usb_connect(0x4, 0xa19, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0xc2, 0xd4, 0x9e, 0x20, 0x16d8, 0x6512, 0xc3c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa07, 0x3, 0x5, 0x2, 0x120, 0xb, [{{0x9, 0x4, 0x56, 0x5, 0x7, 0xff, 0xff, 0x0, 0xce, [@hid_hid={0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x6ab}}], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x6, 0x2, 0x1, [@generic={0xf1, 0x6, "fc4aa5cfe5815e54c20523a3232ea588c931e9fa87818de6cb0cb4206615853dc08c53162f22808ef57f2cad86dc71fac50c5ffbbf1e1d370d545590ffb50d73a8ff324a3964988f7bf9722957ad0bfbf38cc6c8655ff0450717b950ac5a47789ff3a8c6c98148a977673d5b6ec8f4948ccd64033579b5197a9fd2379fdbc4e7c7bd1759f102f548ae6a71f27fb0eefa532451987f9b741523a3d8500cab68b7174cb124a41484420ffba4674cabf6adb794f1c39a9089952a6da37e00022e2fa22d12a35241f530e2fadd02bb911daddeadffbf17f6493e3a841d6863b478bb040a1b72a4b912f29c02638f7f59e5"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xc, 0xa, 0x8, [@generic={0xbd, 0x46, "6b514c0d5d03f939d8830b8e17541e6501b3fa4b40779a25cce05f6f861abc7e4532afa686daca0ae9fd9f864de5bb213a044783f873432b9e2ca7b9b7a6d7ce71a054f039d4c8effe2ead54c9c75fc47e0813b75b50da45397e0b2f2de2dabfba3e085c34c6c735e67e89b4025536ca43b97dbb8f4c8f38fff70d1fe64e8166e40f0ec62ed99c304fbda32a5f18b6e84d39aa9be9b6fa0e1f6e9ac262acd69b00b123caccb100d065c2da132982cf178b6484dc7db3924d1a641e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0xf, 0xf9, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x93, 0x5}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x7, 0x2, 0x7, [@generic={0x84, 0x7, "ffbb6cb5d176545cf9f036deec146bd0c08b63c69003688cfd6e2d18a228507eceb5a8bc922e4e04286392b4b1e47a43faedfe9420e3e5b9017675dba0a71ad5265a839c264ac4b0a66a44ee8b7ed72c1525f91fd797d72d39f18c948985a78f1cfe2fa3aac3c2a605dfe45a3e86bed9f7482f6657b73e9617f89e17b237b72d7dba"}, @generic={0xe0, 0x30, "adfa3282891fc4308c03a66c783723f24f15b1d5674ed4679726d99900208ce359c6ccd578080eee32f5c480508811fe9821847af6da4829ee27b913e4a6d388f1f39f2c075414dc49d66c090df4e2c7118ab64f3d7fe73c0756c42a84486d2ac7f10163c80310de6d53f9d8ae49b9b3f0f671a27d136153946a4d395557b6f23573327597e60658bb673c70e099e138a07ca4205c010101d9216ca12ae71cfd82bc2608e8149dae28c5f369773c41d4528f5637bd852b653e4aa17de6def2dafa816ab8fb393b280e7de866c25ed6734ba45e129993aa5a57a8c55e71a2"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x5, 0x5, 0x6, [@generic={0x2, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x5, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x9a, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1ff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x5, 0x4, 0x3b, [@generic={0xf2, 0x3, "95878ee652bdc09291f11eab94874645952f41bd35b7f8e367f783112486696048a76331d95977d0dd9ccf93913675a6f0dbd042db7608daf0617cc56b2ff1ec4b5a862a801efd54dd37960ed73abe9baddf60f5c8148952bfd7989772435b77980bd29f96264bfbf5a7dddff43cc2bb4f0d5137b8c9e3591f0e20e8ac2eea6f10653a91546a553819591396a675a85f696458be718d392684a6fc09673c4a8d7dfbf2c7f2865125717598e97d42fbb95b13b13c37018d7a89d89d462d37096c30f99efa5e7243479c48bacbd7a40fea6f3de619eda58c1b429e5954f7fa8971e557786e7303121066e25b525bd92b53"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xbb}]}}]}}, {{0x9, 0x4, 0x5f, 0x5, 0x7, 0x35, 0xc, 0xc9, 0x2, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "2ce5"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0xff, 0x2}, [@obex={0x5, 0x24, 0x15, 0x6}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '*W'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xd7f8, 0xb72, 0xd63f, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0xff, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x496d}, @mdlm_detail={0xb3, 0x24, 0x13, 0x9, "cae45bf8308d8ad615076c932261993d7ef3e6411f06ff1eb1e933bbf3aff52e13658bc3f19e874d1a3c67787c5c7feec08c4e7ff3804f3fa1d12ca7b80f4ed19538d4e18063a49fd9418e1f25b8d1c8d6f49ea0c0e16f0eaae18e7ccaf90f1a3b35832b22afe683010e880ca3e4ea721a040b2914d99d6ecaf915c11b178972a5001b7e11790f0b59dee870ed28efeda447bd96427be30ac2baf5d557340ee0c535c17d04a3d586d3c9b801699dab"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x7c, 0x7, 0x4}, @obex={0x5, 0x24, 0x15, 0xfffb}]}], [{{0x9, 0x5, 0xe, 0x4, 0x200, 0xf7, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x3, 0x2, [@generic={0x56, 0x4, "7bc26161f3bea28096925c2a7d50f740beb95fc994b1bcc37f81d23d245a64e1e3c5b2483a171282cbeab5332b5fe7bd12faf0de7edf71d8312bb447f5c92d918f0eeaa7c9b07a232701ef4db1366656176d1345"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0x5, 0x5, 0x400, 0x4, 0x3, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x2e, 0x80, 0xe, [@generic={0x12, 0x30, "33b10a950a9cb9fd32a81ce43702fd34"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x0, 0xff, 0x4, [@generic={0x2, 0x5}, @generic={0xde, 0xf, "71a7a8d3e04579587ba6f2e2a6d594f9abbbe5a374d539eb6abce0b8ebb229a5edb4be38e79a7c9343c07e6f4bc19ac557a2169fd5246549dddf9957abf0d82c7b4b528be67564565daffc80219fb73e790a62aae29575385b37b212cce098765f5c5d6a1240d0c508f76e3c6cabe14aff45658164f8f43e67ca3680f55aafeb6debf1dd32ffa09cb9b6b30f99591f6fe0fb126a55e375ccad49d3ac36ae7e4f6296b7da86adf9ec7400d15a7662641660758418b5b0e895dd196ae9fe5d46a0d5abff687fb5e9911e78fb9a5a8195e8473c8b7add26fae0aa101eb8"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0xff, 0x0, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x58, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x30, 0x18, 0xb2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xfffb}]}}]}}, {{0x9, 0x4, 0x23, 0x8, 0x6, 0xac, 0x4f, 0xbd, 0x4, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf, 0x2, 0x7, 0x5d, "99e4c5", "a6d1"}]}], [{{0x9, 0x5, 0x6, 0x8, 0x400, 0xa, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x4, 0x3, 0xd4, [@generic={0x2a, 0x3, "6bd46ff546f17f510c342cfe8faf89815b5caba27255588bce2de097c40c7a4f01dd08b000f12e9e"}, @generic={0xb2, 0x6, "1dedefab231da5272546d0961f2c9b0be1bb168ea124c164651e51706db6d945c8ba9f92f218624610f021ed8f4ad3636d9f7e287c33b2f1337a1f7aff4f5d86d62f37a7867804c463134835437821b46c2c485cca5466e05e35ac1ec6f3750dbe25982b0e4e8d59e1be0093527b91ae09240ba384255e8fad51de747535e4f0c8151047296993f42be9714b4fd140f695ab583c0b9a2d2510d28a784b89e44e1ff2300770c53bc1aa2fd30bc8b4ca64"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x7, 0xc, [@generic={0x9d, 0x73dde7eb52c9ad43, "4d1b238da2c436ba0f444e9aec61a7b67f3e282a7851c74e4b0049445612e49ddb1d1d02223b825534a4e8091547fef73432d64f2d2d458e4ac8fa609c12a478db3e74af6e09aae10a86bfe3d2a5f99b4b8823b01e34a87f481f534a9598fb3fc301ecb1d27c43fe226bf8816b77c96966b1c64ba993bef0a9eeda2bc0b88ff50b87abbfd5cc2af26fbf851f09f540a2e368f94b593e0c995dbfaf"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0xc, 0xf, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x6, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x3}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x10, 0x3, 0x5, [@generic={0x91, 0xa, "0e4625e7a25f0c683ce60e54be34330eaef3c2add7c25947ea4c4fa31b31a7797933c229ab2c3790bd2bcd88877136c0bfc1765c1d35f29353c8ecea1a9c9557dc1dc35809c97aaff6370b50974ed0199169414f79716dd68a1b77ba9804ed138db929f0a9140cc71a6bdcad9a33acf28f6beb578d7aa040369796656448ce189dcaabc373a2876a2b44538a77910c"}, @generic={0x47, 0xc, "bedd7a86fca70b2ee7bd637fb7258b7306f26b40b7516bcb381f9d7b2426ee751891f390169be167bb4b4dbfd5aaaf5221e51eef5e4127764d6bef60fd7fdbf46846ca4ece"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x4, 0x4, 0x7, 0x20, 0x9}, 0x7e, &(0x7f0000000100)={0x5, 0xf, 0x7e, 0x2, [@generic={0x65, 0x10, 0xb, "dab20791d03b821f3f2adf375c6a405b38e8f7f596e48cd92a38ab6eb1313c42fe2060176cc15e621ba3abfed885f57c86a16ccfdff5fa7f6b2943c60ea9a46b0e58520ed1c1dad5e76eb551f25514bf75f4627a821d8813aced6e541a40d34873b8"}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x0, 0x0, 0x0, [0xff00c0, 0x3f00]}]}, 0x1, [{0x27, &(0x7f0000000180)=@string={0x27, 0x3, "6e57d87b7b5329a600b733be81614b3ffc2ba1054a90eae4ab0d7e0dd295747f952cc0fa58"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x14, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000200)=0x2, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f00000004c0)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r3}, 0x14}, 0x1, 0x620b}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) listen(0xffffffffffffffff, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000380)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000600)="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", 0x12f}, {&(0x7f0000000300)="a4b7d02f941ca2c4ffe617c197384da964cf6d2c2fdd95e7ce4e03fdf49fef3432d4a8486b2822d0", 0x28}], 0x3) getsockopt$inet_int(r4, 0x10d, 0x8f, &(0x7f0000000000), &(0x7f0000000240)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "4bc06078", {0x3, 0x1, 0x0, 0x1, 0xfff, 0x3, 0x1}}) 15.307315851s ago: executing program 2 (id=1485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) chmod(0x0, 0x0) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206b1d010140000b0003010902870003010000000904000000010130"], 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4c840, 0x0) fstat(r1, &(0x7f0000000340)) io_uring_setup(0x4897, &(0x7f00000002c0)={0x0, 0xe6e1, 0x1, 0x1, 0x1ec, 0x0, r1}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40080}}, 0x48}}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000003c0)={0x2, 0x3, 0x0, {0x0, 0x0, 0x8, 0xfffffffe}}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}, 0x0) 14.371760357s ago: executing program 0 (id=1466): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3, r5}}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800010000000000"], 0x3c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x2, 0x2, 0x0, "509a"}, @main=@item_012={0x2, 0x0, 0x9, "91ac"}]}}, 0x0}, 0x0) 13.879049851s ago: executing program 4 (id=1486): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000002400)={0x18, 0x7}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1318, 0x1158, 0x0, 0x148, 0x1158, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10f8, 0x1158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1378) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x3d, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, 0x0, 0x0) 13.295660187s ago: executing program 3 (id=1487): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 13.074455394s ago: executing program 2 (id=1488): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280)="893f3c8c4faea5ef452525a7b7e8de2b905f3a9877ee5506263e8e14fd9e2f3ca037f639c673a7debc8d58dd82bf638d1215770ee76d6052961380080cb8277b3df417ca8769cfa1466048fb17b2be8c66ae851a5b6c9730d8d6c8fa0d9565ce5ab07f515b62d2a30f710a4cb79dbc468c5fbee20795e82b294f92199554f0665d8c7ac3a71258517d7c827538aff75b9c55f2e950ecc13758fcfe049e51826977bc813422117b0c81177ba2cf0842d31d06", 0xb2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$mouse(0x0, 0x4, 0x800) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x5b, 0xa, 0x0, "05fcff410400001bf9585253b800c495f2000500"}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000001080)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @dev, 0x1ff}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) 8.699533174s ago: executing program 3 (id=1489): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000180)=0x80000079f8, 0x4) sendto$inet6(r5, &(0x7f0000000680)="ca", 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/157, 0x9d}}], 0x1, 0x12030, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) r7 = dup(r6) ioctl$PPPIOCCONNECT(r7, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) close_range(r2, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 8.466996472s ago: executing program 2 (id=1490): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3, r5}}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800010000000000"], 0x3c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) 8.466409022s ago: executing program 1 (id=1491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) ppoll(&(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0) r6 = syz_open_procfs(0x0, 0x0) futimesat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}) recvmmsg(r6, &(0x7f0000007b40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000780)=""/59, 0x3b}, {&(0x7f00000007c0)=""/61, 0x3d}], 0x5, &(0x7f0000000880)=""/115, 0x73}, 0x1}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000a80)=""/89, 0x59}], 0x2, &(0x7f0000000b40)=""/126, 0x7e}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000bc0)=""/198, 0xc6}, {&(0x7f0000000cc0)=""/241, 0xf1}, {&(0x7f0000000dc0)=""/173, 0xad}, {&(0x7f0000000e80)=""/196, 0xc4}, {0x0}, {&(0x7f0000001080)=""/176, 0xb0}], 0x6, &(0x7f0000002240)=""/149, 0x95}, 0x5}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002300)=""/170, 0xaa}], 0x1, &(0x7f0000002400)=""/73, 0x49}, 0x5}, {{&(0x7f0000002480)=@nfc, 0x80, &(0x7f0000002680)=[{&(0x7f0000002500)=""/205, 0xcd}, {&(0x7f0000002600)=""/73, 0x49}], 0x2, &(0x7f00000026c0)=""/40, 0x28}, 0x43}, {{&(0x7f0000002700)=@nl=@unspec, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002780)=""/194, 0xc2}, {&(0x7f0000002880)=""/158, 0x9e}, {&(0x7f0000002940)=""/238, 0xee}, {&(0x7f0000002a40)=""/115, 0x73}, {&(0x7f0000002ac0)=""/85, 0x55}, {&(0x7f0000002b40)=""/14, 0xe}, {&(0x7f0000002b80)=""/243, 0xf3}, {&(0x7f0000002c80)=""/177, 0xb1}, {&(0x7f0000002d40)=""/126, 0x7e}, {&(0x7f0000002dc0)=""/214, 0xd6}], 0xa}, 0x9}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002f80)=""/34, 0x22}, {&(0x7f0000002fc0)=""/38, 0x26}, {&(0x7f0000003000)=""/145, 0x91}, {&(0x7f00000030c0)=""/24, 0x18}], 0x4, &(0x7f0000003180)=""/146, 0x92}, 0x8}, {{&(0x7f00000062c0)=@alg, 0x80, &(0x7f0000006700)=[{&(0x7f0000006340)=""/234, 0xea}, {&(0x7f0000006440)=""/202, 0xca}, {&(0x7f0000006540)=""/98, 0x62}, {&(0x7f00000065c0)=""/132, 0x84}, {&(0x7f0000006680)=""/128, 0x80}], 0x5, &(0x7f0000006780)=""/4096, 0x1000}, 0xfffffff1}, {{&(0x7f0000007780)=@ieee802154, 0x80, &(0x7f0000007800)=[{&(0x7f0000003240)=""/13, 0xd}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000007ac0)=[{&(0x7f0000007840)=""/92, 0x5c}, {&(0x7f00000078c0)=""/146, 0x92}, {&(0x7f0000007980)=""/118, 0x76}, {&(0x7f0000007a00)=""/152, 0x98}], 0x4, &(0x7f0000007b00)=""/27, 0x1b}, 0x3}], 0xa, 0x0, &(0x7f0000007dc0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a) bind$alg(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000004c0)={'tunl0\x00', r9, 0x7800, 0x89, 0x7, 0xfbcd, {{0x22, 0x4, 0x1, 0x32, 0x88, 0x64, 0x0, 0xfc, 0x2b, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x8a, [@multicast2]}, @timestamp={0x44, 0x10, 0xcf, 0x0, 0x2, [0x8, 0x1, 0x8001]}, @lsrr={0x83, 0xf, 0x3a, [@local, @multicast1, @loopback]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x7, 0xc, "f3ea822477343209c85f"}]}, @end, @timestamp_addr={0x44, 0xc, 0xb8, 0x1, 0x5, [{@multicast1, 0x800}]}, @end, @timestamp={0x44, 0x2c, 0xd, 0x0, 0x9, [0x2, 0x8, 0x1, 0x9, 0x5, 0x4, 0x10, 0x7, 0x6, 0x8]}]}}}}}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) close_range(r7, r7, 0x2) 7.95275232s ago: executing program 4 (id=1492): socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f00000000c0)={0x3, 0x4, 0x6, 0x1103, 0x7, 0x4}) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@ipv4_delroute={0x48, 0x19, 0x500, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x80, 0x0, 0xfd, 0x4, 0x0, 0x3, 0x200}, [@RTA_OIF={0x8}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x6}}, @RTA_OIF={0x8}, @RTA_SRC={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0xba01}, 0x4850) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) getsockopt$inet_int(r2, 0x10d, 0xbb, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "839935191f"}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, 0x0, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r8, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x80000000000000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000180)={0x18, 0x1, 0x1, 0x0, r8}) 7.237655158s ago: executing program 3 (id=1493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3b) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x70002) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0xffffffffffffffff, {[0x480, 0xc00000, 0xba, 0x5, 0x3, 0xa, 0x75559209, 0x1ff]}}, 0x5c) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) recvmsg$unix(r5, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa000001c}) close(r4) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 0s ago: executing program 3 (id=1495): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) r1 = memfd_create(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x7) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) r2 = epoll_create(0x6) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="042c1181c900ffffffffffff02000c070000000d51eb9287cb79c1aa43fead5915dda9c30aafee72ee282f10678b605c897507d3eefc5729c30d3f43f3a79f3fc29f1ba6f06d96a37d7beb772489fddc155b385c9ae6ba"], 0x14) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/214, 0xd6}], 0x1, 0x49, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000080)={0x80000000, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = dup2(r2, r6) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) shutdown(0xffffffffffffffff, 0x0) r9 = accept$inet(r8, 0x0, &(0x7f0000000000)) ioctl$EVIOCGMTSLOTS(r8, 0x8040450a, &(0x7f0000000100)=""/55) getsockopt$inet_mreqsrc(r9, 0x0, 0xf, &(0x7f0000000040)={@dev, @empty, @initdev}, &(0x7f0000000080)=0xc) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x9}) kernel console output (not intermixed with test programs): 467.312107][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.329073][ T937] usb 4-1: string descriptor 0 read error: -22 [ 467.335884][ T937] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 467.345287][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.356340][ T937] usb 4-1: config 0 descriptor?? [ 467.365728][ T937] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 467.374950][ T937] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 467.689822][ T937] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 467.701856][ T937] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 467.719263][ T937] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 467.726342][ T937] em28xx 4-1:0.0: No AC97 audio processor [ 467.755370][ T937] usb 4-1: USB disconnect, device number 83 [ 467.769953][ T937] em28xx 4-1:0.0: Disconnecting em28xx [ 467.776961][ T937] em28xx 4-1:0.0: Freeing device [ 467.942740][ T11] team0 (unregistering): Port device team_slave_1 removed [ 468.502428][ T5237] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 468.612151][T11666] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.634448][T11666] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.652047][T11666] bridge_slave_0: entered allmulticast mode [ 468.658704][T11666] bridge_slave_0: entered promiscuous mode [ 468.667860][T11666] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.677312][T11666] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.688667][T11666] bridge_slave_1: entered allmulticast mode [ 468.695522][ T5237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.707702][T11666] bridge_slave_1: entered promiscuous mode [ 468.713788][ T5237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.725881][ T5237] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 468.729432][ T5229] Bluetooth: hci0: command tx timeout [ 468.735048][ T5237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.750430][ T5237] usb 4-1: config 0 descriptor?? [ 468.839038][T11666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.882138][T11666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.976368][T11666] team0: Port device team_slave_0 added [ 468.986400][T11572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 468.996815][T11572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 469.028803][T11666] team0: Port device team_slave_1 added [ 469.046106][ T5229] Bluetooth: hci3: command tx timeout [ 469.097283][T11572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 469.150365][T11666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.159326][T11666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.192457][T11666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.209341][T11666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.216436][T11666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.219567][ T5237] hid-steam 0003:28DE:1142.0028: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 469.267550][T11666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.281877][T11572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 469.305341][T11570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.420081][T11666] hsr_slave_0: entered promiscuous mode [ 469.426806][T11666] hsr_slave_1: entered promiscuous mode [ 469.505750][ T1174] usb 4-1: USB disconnect, device number 84 [ 469.623050][T11570] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.716652][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.723845][ T7143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.764284][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.771472][ T7143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.835184][T11627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 469.854444][T11627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 469.902012][ T3149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.941699][T11627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 469.954790][T11627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 470.019940][ T3149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.053003][T11572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.096730][ T3149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.126604][T11572] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.175890][ T3149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.193818][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.200974][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.225948][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.233168][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.328797][T11570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.422113][T11572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.482829][T11570] veth0_vlan: entered promiscuous mode [ 470.621419][ T3149] bridge_slave_1: left allmulticast mode [ 470.636691][ T3149] bridge_slave_1: left promiscuous mode [ 470.658504][ T3149] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.690649][ T3149] bridge_slave_0: left allmulticast mode [ 470.696447][ T3149] bridge_slave_0: left promiscuous mode [ 470.749582][ T3149] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.119509][ T5229] Bluetooth: hci3: command tx timeout [ 471.664433][ T3149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.679674][ T3149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.692038][ T3149] bond0 (unregistering): Released all slaves [ 471.743593][T11627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.786302][T11570] veth1_vlan: entered promiscuous mode [ 471.905384][T11572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.939563][T11627] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.072271][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.079456][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.192989][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.200219][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.255208][T11570] veth0_macvtap: entered promiscuous mode [ 472.341620][T11570] veth1_macvtap: entered promiscuous mode [ 472.361950][ T3149] hsr_slave_0: left promiscuous mode [ 472.392725][ T3149] hsr_slave_1: left promiscuous mode [ 472.414252][ T3149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.423754][ T3149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.440802][ T3149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.455374][ T3149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.482764][ T3149] veth1_macvtap: left promiscuous mode [ 472.488457][ T3149] veth0_macvtap: left promiscuous mode [ 472.496721][ T3149] veth1_vlan: left promiscuous mode [ 472.503172][ T3149] veth0_vlan: left promiscuous mode [ 473.214418][ T3149] team0 (unregistering): Port device team_slave_1 removed [ 473.261608][ T3149] team0 (unregistering): Port device team_slave_0 removed [ 473.745473][T11572] veth0_vlan: entered promiscuous mode [ 473.784134][T11627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.832776][T11572] veth1_vlan: entered promiscuous mode [ 473.843880][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.856540][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.874227][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.886973][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.905567][T11570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.052911][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.083767][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.103609][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.119419][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.160433][T11570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.170671][T11666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 474.202421][T11666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 474.263241][T11570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.280406][T11570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.299435][T11570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.308204][T11570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.348992][T11666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.365970][T11627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.374571][T11572] veth0_macvtap: entered promiscuous mode [ 474.389945][T11666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.405293][T11572] veth1_macvtap: entered promiscuous mode [ 474.464487][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.496176][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.514784][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.532774][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.549189][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.579035][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.597046][T11572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.626295][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.638266][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.655308][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.665035][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.673954][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 474.684838][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.741820][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.765432][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.776008][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.793460][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.805889][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.828605][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.847002][T11572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.870395][T11572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.886596][T11572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.897949][T11572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.908040][T11572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.967852][T11627] veth0_vlan: entered promiscuous mode [ 475.033541][ T3149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.123275][T11627] veth1_vlan: entered promiscuous mode [ 475.159998][ T3149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.195114][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.215426][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.311425][ T3149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.380324][ T7143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.394617][ T7143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.427583][ T3149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.477206][T11627] veth0_macvtap: entered promiscuous mode [ 475.530992][T11666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.553346][T11627] veth1_macvtap: entered promiscuous mode [ 475.593444][T11666] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.625110][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.658438][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.665617][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.689426][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.788524][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.814175][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.832943][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.848235][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.871879][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.896572][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.907685][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.923013][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.943197][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.984411][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.009097][T11627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.033394][T11816] chnl_net:caif_netlink_parms(): no params data found [ 476.049554][ T937] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 476.072131][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.079295][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.116669][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.171215][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.207661][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.231932][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.243329][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.254655][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.264951][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.275963][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.296410][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.296917][T11627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.318806][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.340872][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.378483][ T937] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 476.427060][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.439710][T11627] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.465316][T11627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.481099][ T937] usb 5-1: config 0 descriptor?? [ 476.493415][T11627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.506471][T11627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.532697][ T3149] bridge_slave_1: left allmulticast mode [ 476.546131][ T3149] bridge_slave_1: left promiscuous mode [ 476.566470][ T3149] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.585824][ T3149] bridge_slave_0: left allmulticast mode [ 476.595799][ T3149] bridge_slave_0: left promiscuous mode [ 476.606044][ T3149] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.719307][ T5229] Bluetooth: hci2: command tx timeout [ 477.508232][ T3149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.533970][ T3149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.542742][ T5286] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 477.562354][ T3149] bond0 (unregistering): Released all slaves [ 477.617610][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 477.628396][ T937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 477.688826][ T937] usb 5-1: USB disconnect, device number 88 [ 477.703306][ T5286] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 477.713996][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.725227][ T5286] usb 2-1: config 0 descriptor?? [ 477.735010][ T5286] gspca_main: spca508-2.14.0 probing 8086:0110 [ 477.838893][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.848977][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.866506][T11816] bridge_slave_0: entered allmulticast mode [ 477.875895][T11816] bridge_slave_0: entered promiscuous mode [ 477.892142][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.911319][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.918678][T11816] bridge_slave_1: entered allmulticast mode [ 477.954925][T11816] bridge_slave_1: entered promiscuous mode [ 477.985681][T11666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.013300][ T5286] gspca_spca508: reg_read err -32 [ 478.027542][ T5286] gspca_spca508: reg_read err -32 [ 478.151732][T11816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.357122][T11816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.418665][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.453620][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.526323][T11666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.639944][ T3149] hsr_slave_0: left promiscuous mode [ 478.654082][ T5286] gspca_spca508: reg write: error -71 [ 478.666041][ T5286] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 478.674608][ T3149] hsr_slave_1: left promiscuous mode [ 478.690851][ T5286] usb 2-1: USB disconnect, device number 124 [ 478.697428][ T3149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.709237][ T3149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.731781][ T3149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.748592][ T3149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.787397][ T3149] veth1_macvtap: left promiscuous mode [ 478.794424][ T3149] veth0_macvtap: left promiscuous mode [ 478.808095][ T3149] veth1_vlan: left promiscuous mode [ 478.809520][ T5229] Bluetooth: hci2: command tx timeout [ 478.813845][ T3149] veth0_vlan: left promiscuous mode [ 479.540073][ T5314] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 479.614499][ T3149] team0 (unregistering): Port device team_slave_1 removed [ 479.656728][ T3149] team0 (unregistering): Port device team_slave_0 removed [ 479.709398][ T5314] usb 2-1: Using ep0 maxpacket: 32 [ 479.718726][ T5314] usb 2-1: config 0 has no interfaces? [ 479.729512][ T5314] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 479.745214][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.757763][ T5314] usb 2-1: Product: syz [ 479.762072][ T5314] usb 2-1: Manufacturer: syz [ 479.766844][ T5314] usb 2-1: SerialNumber: syz [ 479.776164][ T5314] usb 2-1: config 0 descriptor?? [ 480.165819][T11816] team0: Port device team_slave_0 added [ 480.178859][T11816] team0: Port device team_slave_1 added [ 480.198084][ T5286] usb 2-1: USB disconnect, device number 125 [ 480.292571][T11816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.300125][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.336995][T11816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.361885][T11816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.368885][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.396763][T11816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.418013][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.451497][T11666] veth0_vlan: entered promiscuous mode [ 480.468046][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.482433][T11816] hsr_slave_0: entered promiscuous mode [ 480.500250][T11816] hsr_slave_1: entered promiscuous mode [ 480.523344][T11816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.531374][T11816] Cannot create hsr debugfs directory [ 480.547398][T11666] veth1_vlan: entered promiscuous mode [ 480.710862][ T937] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 480.842553][T11666] veth0_macvtap: entered promiscuous mode [ 480.879944][ T5229] Bluetooth: hci2: command tx timeout [ 480.904006][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.907784][T11932] binder: 11931:11932 ioctl 4018620d 0 returned -22 [ 480.921967][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.943240][ T937] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 480.981707][T11666] veth1_macvtap: entered promiscuous mode [ 481.041830][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.058517][ T937] usb 5-1: config 0 descriptor?? [ 481.300289][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.379842][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.419044][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.445899][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.469051][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.472058][ T937] hid-steam 0003:28DE:1142.0029: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 481.511364][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.548183][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.568415][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.620803][T11666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.642954][ T5314] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 481.737589][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.762023][ T5237] usb 5-1: USB disconnect, device number 89 [ 481.765101][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.785487][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.796121][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.809246][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.820137][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.830894][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.841028][ T5314] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 481.841863][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.865751][T11666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.876646][ T5314] usb 2-1: config 1 interface 0 has no altsetting 0 [ 481.902866][ T5314] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 481.912371][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.922442][ T5314] usb 2-1: Product: syz [ 481.927666][ T5314] usb 2-1: Manufacturer: syz [ 481.933685][T11666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.939439][ T5314] usb 2-1: SerialNumber: syz [ 481.948252][T11666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.950500][T11937] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 481.973014][T11666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.982116][T11666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.146114][T11473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.158773][T11473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.214063][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.246966][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.276324][T11473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.302127][T11816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 482.311927][T11473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.327461][T11816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 482.346307][T11816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 482.367816][T11937] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1354'. [ 482.410672][T11816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 482.440799][ T5314] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input31 [ 482.467330][ T4670] bcm5974 2-1:1.0: could not read from device [ 482.496857][ T4670] bcm5974 2-1:1.0: could not read from device [ 482.506547][ T5314] usb 2-1: USB disconnect, device number 126 [ 482.550058][ T4670] bcm5974 2-1:1.0: could not read from device [ 482.778929][T11963] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 482.959469][ T5229] Bluetooth: hci2: command tx timeout [ 483.129352][ T8] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 483.294068][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.305411][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.317008][ T8] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 483.326584][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.338538][ T8] usb 5-1: config 0 descriptor?? [ 483.525145][T11952] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 483.579551][T11952] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 483.635393][T11952] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 483.654100][T11952] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 483.678647][T11816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.709429][T11952] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 483.715455][T11952] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 483.743271][T11816] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.757749][T11952] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 483.775031][ T8] hid-steam 0003:28DE:1142.002A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 483.796824][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.804009][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.807044][T11952] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 483.829982][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.837125][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.900361][T11952] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 483.906330][T11952] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 483.929522][ T5314] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 483.985782][ T47] usb 5-1: USB disconnect, device number 90 [ 484.099673][ T5314] usb 3-1: Using ep0 maxpacket: 32 [ 484.137292][T11816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.239297][ T5314] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 484.248473][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.256753][ T5314] usb 3-1: Product: syz [ 484.260999][ T5314] usb 3-1: Manufacturer: syz [ 484.265631][ T5314] usb 3-1: SerialNumber: syz [ 484.290929][ T5314] usb 3-1: config 0 descriptor?? [ 484.314938][T11816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.503038][T11972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.560335][T11816] veth0_vlan: entered promiscuous mode [ 484.566514][T11972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.600418][T11816] veth1_vlan: entered promiscuous mode [ 484.650526][ T5314] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 484.677620][T11998] binder: 11995:11998 ioctl 4018620d 0 returned -22 [ 484.680293][ T5314] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 484.698955][T11816] veth0_macvtap: entered promiscuous mode [ 484.831183][T12004] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 484.841136][ T5314] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 484.841945][T11816] veth1_macvtap: entered promiscuous mode [ 484.869508][ T5314] usb 3-1: USB disconnect, device number 90 [ 484.939407][ T47] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 484.967667][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.994854][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.007959][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.025858][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.037219][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.058644][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.072476][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.093496][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.115797][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.127169][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.144000][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.163803][T11816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.178458][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 485.226049][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.231358][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.260600][ T47] usb 2-1: string descriptor 0 read error: -22 [ 485.267158][ T47] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 485.306548][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.326854][ T47] usb 2-1: config 0 descriptor?? [ 485.338251][ T47] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 485.342340][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.347298][ T47] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 485.446808][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.476899][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.496741][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.513133][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.523917][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.570408][T12027] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 485.603320][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.619544][ T47] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 485.625886][ T47] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 485.633195][ T47] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 485.640443][ T47] em28xx 2-1:0.0: No AC97 audio processor [ 485.659365][ T937] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 485.687824][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.711430][ T47] usb 2-1: USB disconnect, device number 127 [ 485.731190][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.741846][ T47] em28xx 2-1:0.0: Disconnecting em28xx [ 485.751254][ T47] em28xx 2-1:0.0: Freeing device [ 485.812016][T11816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.873905][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.890874][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.947441][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.966945][T11816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.976037][ T937] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 485.985579][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.998248][ T937] usb 5-1: config 0 descriptor?? [ 486.029464][ T5314] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 486.077149][T11816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.138697][T11816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.180912][ T5314] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 486.197019][T11816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.240057][ T5314] usb 1-1: config 1 interface 0 has no altsetting 0 [ 486.283988][ T5314] usb 1-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 486.302725][ T5314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.311154][ T5314] usb 1-1: Product: syz [ 486.315378][ T5314] usb 1-1: Manufacturer: syz [ 486.349229][ T5314] usb 1-1: SerialNumber: syz [ 486.390566][T12029] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 486.449836][T12044] fuse: Unknown parameter '0xffffffffffffffff' [ 486.459583][T12044] binder: BINDER_SET_CONTEXT_MGR already set [ 486.467600][T12044] binder: 12043:12044 ioctl 4018620d 20000040 returned -16 [ 486.641915][T12029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.768848][T12029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.835196][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.902710][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.995343][T12029] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1369'. [ 487.074416][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.123029][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.132936][ T5314] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input32 [ 487.164085][ T4670] bcm5974 1-1:1.0: could not read from device [ 487.252402][ T4670] bcm5974 1-1:1.0: could not read from device [ 487.271676][ T5314] usb 1-1: USB disconnect, device number 109 [ 487.279623][ T5237] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 487.335829][ T4670] bcm5974 1-1:1.0: could not read from device [ 487.450472][ T5237] usb 3-1: device descriptor read/64, error -71 [ 487.527090][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 487.534450][ T937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 487.559748][ T937] usb 5-1: USB disconnect, device number 91 [ 487.762724][ T5237] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 487.870174][ T5286] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 487.916717][ T5237] usb 3-1: device descriptor read/64, error -71 [ 488.019521][ T5237] usb usb3-port1: attempt power cycle [ 488.052945][ T5286] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 488.142819][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.160224][ T5286] usb 4-1: config 0 descriptor?? [ 488.407136][ T5286] [drm] vendor descriptor length:c3 data:00 00 00 00 00 00 00 00 00 00 00 [ 488.415974][ T5237] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 488.450394][ T5286] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 488.471206][ T5237] usb 3-1: device descriptor read/8, error -71 [ 488.633568][ T5286] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 488.657456][ T5286] [drm] Initialized udl on minor 2 [ 488.730195][ T5237] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 488.759919][ T5237] usb 3-1: device descriptor read/8, error -71 [ 488.789278][ T5227] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 488.879911][ T5237] usb usb3-port1: unable to enumerate USB device [ 488.897444][T12094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.907029][T12094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.947144][ T5286] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 488.957401][ T5286] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 488.966668][ T5227] usb 1-1: Using ep0 maxpacket: 32 [ 488.974164][ T5237] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 488.986790][ T5237] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 488.989654][T11153] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 488.998336][ T5227] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 489.019515][ T5286] usb 4-1: USB disconnect, device number 85 [ 489.037576][ T5227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.059482][ T5227] usb 1-1: Product: syz [ 489.063720][ T5227] usb 1-1: Manufacturer: syz [ 489.075998][ T5227] usb 1-1: SerialNumber: syz [ 489.082882][ T5227] usb 1-1: config 0 descriptor?? [ 489.191780][T11153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.206311][T11153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.217907][T11153] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 489.228157][T11153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.243266][T11153] usb 2-1: config 0 descriptor?? [ 489.295031][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.307385][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.386128][ T5227] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 489.394771][ T5227] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 489.450289][ T5227] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 489.476340][ T5227] usb 1-1: USB disconnect, device number 110 [ 489.578611][T12125] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 489.729822][T11153] chicony 0003:04F2:1421.002B: report_id 3309536062 is invalid [ 489.737426][T11153] chicony 0003:04F2:1421.002B: item 0 4 1 8 parsing failed [ 489.766263][T11153] chicony 0003:04F2:1421.002B: Chicony hid parse failed: -22 [ 489.782085][T11153] chicony 0003:04F2:1421.002B: probe with driver chicony failed with error -22 [ 489.909334][ T5227] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 489.961830][ T937] usb 2-1: USB disconnect, device number 2 [ 490.092922][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.115095][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.130324][ T5227] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.143654][ T5227] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 490.212408][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.247791][ T5227] usb 4-1: config 0 descriptor?? [ 490.399358][ T937] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 490.551705][ T937] usb 1-1: Using ep0 maxpacket: 32 [ 490.568637][ T937] usb 1-1: config 91 has an invalid descriptor of length 65, skipping remainder of the config [ 490.593196][ T937] usb 1-1: config 91 has 0 interfaces, different from the descriptor's value: 1 [ 490.645257][ T937] usb 1-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.40 [ 490.659232][ T5237] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 490.670149][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.679862][ T5286] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 490.732277][ T937] usb 1-1: Product: syz [ 490.751744][ T937] usb 1-1: Manufacturer: syz [ 490.775091][ T937] usb 1-1: SerialNumber: syz [ 490.829338][ T5237] usb 3-1: Using ep0 maxpacket: 8 [ 490.841969][ T5286] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 490.852928][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.869611][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.877803][ T5237] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 490.889065][ T5237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.900997][ T5237] usb 3-1: config 0 descriptor?? [ 490.906904][ T5286] usb 5-1: config 0 descriptor?? [ 490.943966][ T5286] gspca_main: spca508-2.14.0 probing 8086:0110 [ 491.015834][ T937] usb 1-1: USB disconnect, device number 111 [ 491.150088][ T1174] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 491.192131][ T5227] usbhid 4-1:0.0: can't add hid device: -71 [ 491.198401][ T5227] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 491.210001][ T5227] usb 4-1: USB disconnect, device number 86 [ 491.238806][ T5237] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 491.285424][ T5286] gspca_spca508: reg_read err -32 [ 491.292343][ T5286] gspca_spca508: reg_read err -32 [ 491.310541][ T1174] usb 2-1: Using ep0 maxpacket: 32 [ 491.318238][ T1174] usb 2-1: config 0 has no interfaces? [ 491.378156][ T1174] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 491.390838][ T1174] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 491.429755][ T1174] usb 2-1: Manufacturer: syz [ 491.437090][ T1174] usb 2-1: config 0 descriptor?? [ 491.749340][T12157] nftables ruleset with unbound chain [ 491.805750][ T5227] usb 3-1: USB disconnect, device number 95 [ 491.805880][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 491.856902][ T5227] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 491.908274][ T5286] gspca_spca508: reg write: error -71 [ 491.924557][ T5286] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 491.969263][ T5286] usb 5-1: USB disconnect, device number 92 [ 492.205074][T12163] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 492.259298][ T47] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 492.420354][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 492.427144][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 492.438741][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59209, setting to 1024 [ 492.458920][ T47] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 492.473401][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.531901][ T47] usb 1-1: config 0 descriptor?? [ 492.552129][T12159] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.624771][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 492.643306][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 492.763795][ T47] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 492.899404][ T5286] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 492.988679][T12160] dccp_close: ABORT with 72 bytes unread [ 493.050328][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 493.070207][ T5286] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 493.080017][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.092103][ T5286] usb 5-1: Product: syz [ 493.096710][ T5286] usb 5-1: Manufacturer: syz [ 493.101812][ T5286] usb 5-1: SerialNumber: syz [ 493.108634][ T5286] usb 5-1: config 0 descriptor?? [ 493.319394][ T937] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 493.322080][T12168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1392'. [ 493.342361][ T5286] usb 5-1: USB disconnect, device number 93 [ 493.488111][ T1174] usb 1-1: USB disconnect, device number 112 [ 493.497546][ T1174] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 493.499982][ T937] usb 4-1: Using ep0 maxpacket: 32 [ 493.517428][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 493.525533][ T937] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 493.540413][T12174] netlink: 'syz.2.1394': attribute type 14 has an invalid length. [ 493.558021][T12174] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.566939][T12174] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.575958][T12174] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.584934][T12174] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.610905][T12174] vxlan0: entered promiscuous mode [ 493.616488][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.646844][ T937] usb 4-1: Product: syz [ 493.653257][ T937] usb 4-1: Manufacturer: syz [ 493.658047][ T937] usb 4-1: SerialNumber: syz [ 493.671089][ T937] usb 4-1: config 0 descriptor?? [ 493.898832][T12171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.921114][ T5314] usb 2-1: USB disconnect, device number 3 [ 493.942493][T12171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.058798][ T937] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 494.080446][ T937] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 494.091118][T11153] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 494.141081][ T937] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 494.158637][ T937] usb 4-1: USB disconnect, device number 87 [ 494.252953][T11153] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 494.264485][T11153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 494.276489][T11153] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.298078][T11153] usb 1-1: string descriptor 0 read error: -22 [ 494.305471][T11153] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 494.315790][T11153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.329287][T11153] usb 1-1: config 0 descriptor?? [ 494.339594][T11153] em28xx 1-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 494.348590][T11153] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 494.629322][ T1174] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 494.739593][T11153] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 494.752892][T11153] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 494.789253][ T1174] usb 2-1: Using ep0 maxpacket: 32 [ 494.796467][ T1174] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 494.796765][T11153] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 494.812252][ T1174] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 494.821028][ T937] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 494.830673][ T1174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 494.839945][ T1174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.849832][ T1174] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 494.875967][ T1174] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 494.902845][T11153] em28xx 1-1:0.0: No AC97 audio processor [ 494.912831][ T1174] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 494.923861][T11153] usb 1-1: USB disconnect, device number 113 [ 494.954051][T11153] em28xx 1-1:0.0: Disconnecting em28xx [ 494.971950][T11153] em28xx 1-1:0.0: Freeing device [ 494.973561][ T1174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.014772][ T1174] usb 2-1: config 0 descriptor?? [ 495.020681][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.099769][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.161920][ T937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.195756][ T937] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 495.226918][ T1174] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 495.293358][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.384361][ T8] usb 2-1: USB disconnect, device number 4 [ 495.410153][ T937] usb 3-1: config 0 descriptor?? [ 495.421823][ T8] usblp0: removed [ 495.811457][T12221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.875982][ T937] playstation 0003:054C:0BA0.002C: unbalanced collection at end of report description [ 495.886636][ T937] playstation 0003:054C:0BA0.002C: Parse failed [ 495.893154][ T937] playstation 0003:054C:0BA0.002C: probe with driver playstation failed with error -22 [ 495.929421][ T5314] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 496.105912][ T1174] usb 3-1: USB disconnect, device number 96 [ 496.186343][ T5314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.270720][ T5314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.299407][ T5314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.313025][ T5314] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 496.322498][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.399457][ T5314] usb 1-1: config 0 descriptor?? [ 496.539351][ T47] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 496.731540][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 496.781099][ T47] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 496.802675][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.876387][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.932352][T12237] bridge_slave_0: left allmulticast mode [ 496.938706][T12237] bridge_slave_0: left promiscuous mode [ 496.950132][T12237] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.969270][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.998052][ T47] usb 4-1: Product: syz [ 497.002326][ T47] usb 4-1: Manufacturer: syz [ 497.006934][ T47] usb 4-1: SerialNumber: syz [ 497.040269][T12237] bridge_slave_1: left allmulticast mode [ 497.048426][T12237] bridge_slave_1: left promiscuous mode [ 497.055236][T12237] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.092786][T12237] bond0: (slave bond_slave_0): Releasing backup interface [ 497.118736][T12237] bond0: (slave bond_slave_1): Releasing backup interface [ 497.152453][ T5314] usbhid 1-1:0.0: can't add hid device: -71 [ 497.166390][ T5314] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 497.191120][ T5314] usb 1-1: USB disconnect, device number 114 [ 497.232032][T12237] team0: Port device team_slave_0 removed [ 497.240473][ T47] usb 4-1: invalid UAC_HEADER (v1) [ 497.289011][ T47] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 497.304227][T12237] team0: Port device team_slave_1 removed [ 497.325854][T12237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.334150][T12237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.344001][ T47] usb 4-1: USB disconnect, device number 88 [ 497.354524][ T5248] udevd[5248]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.379911][T12237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.387376][T12237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.425957][T12238] geneve2: entered promiscuous mode [ 497.459359][T12238] geneve2: entered allmulticast mode [ 497.466584][T12238] batman_adv: batadv0: Adding interface: geneve2 [ 497.474845][T12238] batman_adv: batadv0: Interface activated: geneve2 [ 497.484147][ T5283] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 497.649422][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 497.656422][ T5283] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 497.665613][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.671217][ T1174] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 497.675557][ T5283] usb 5-1: config 0 descriptor?? [ 497.690416][ T5283] gspca_main: sunplus-2.14.0 probing 041e:400b [ 497.853513][ T1174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.883259][ T1174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.896636][ T1174] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 497.916311][ T1174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.939640][ T1174] usb 2-1: config 0 descriptor?? [ 498.062802][T12252] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 498.279335][ T47] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 498.305450][ T5283] gspca_sunplus: reg_r err -71 [ 498.312425][ T5283] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 498.323512][ T5283] usb 5-1: USB disconnect, device number 94 [ 498.367854][ T1174] hid-steam 0003:28DE:1142.002D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 498.449264][ T5286] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 498.459276][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 498.481216][ T47] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 498.525705][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.682035][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 498.713466][ T1174] usb 2-1: USB disconnect, device number 5 [ 498.725811][ T47] usb 4-1: config 0 descriptor?? [ 498.795777][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 498.843559][ T47] usb 4-1: selecting invalid altsetting 1 [ 498.849661][ T47] comedi comedi0: could not switch to alternate setting 1 [ 498.856821][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.870834][ T47] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 498.887928][ T5286] usb 3-1: string descriptor 0 read error: -22 [ 498.899822][ T5286] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 498.917876][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.941251][ T5286] usb 3-1: config 0 descriptor?? [ 498.949332][ T5286] em28xx 3-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 498.958201][ T5286] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 498.971303][T12249] dccp_close: ABORT with 76 bytes unread [ 499.212230][ T5286] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 499.238209][ T5286] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 499.264977][ T5286] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 499.286542][ T5286] em28xx 3-1:0.0: No AC97 audio processor [ 499.326683][ T5286] usb 3-1: USB disconnect, device number 97 [ 499.340098][ T5286] em28xx 3-1:0.0: Disconnecting em28xx [ 499.353773][ T5286] em28xx 3-1:0.0: Freeing device [ 499.483248][T12267] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 500.383163][T12282] netlink: 'syz.4.1422': attribute type 7 has an invalid length. [ 500.439610][ T1174] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 500.447872][ T5284] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 500.542785][T12287] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1422'. [ 500.566517][T12287] 0ªX¹¦À: renamed from caif0 [ 500.608359][T12287] 0ªX¹¦À: entered allmulticast mode [ 500.618592][T12287] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 500.638764][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 500.645509][ T5284] usb 3-1: config 6 has an invalid interface number: 230 but max is 0 [ 500.653916][ T1174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.659305][ T937] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 500.672459][ T5284] usb 3-1: config 6 has no interface number 0 [ 500.672514][ T5284] usb 3-1: config 6 interface 230 has no altsetting 0 [ 500.679358][ T1174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.699902][ T5284] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=2c.a4 [ 500.729062][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.748710][ T1174] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 500.759590][ T5284] usb 3-1: Product: syz [ 500.763804][ T5284] usb 3-1: Manufacturer: syz [ 500.768729][ T1174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.777076][ T5284] usb 3-1: SerialNumber: syz [ 500.790799][ T1174] usb 2-1: config 0 descriptor?? [ 500.891358][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.904462][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.930471][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.956113][ T937] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 500.975926][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.998113][ T937] usb 1-1: config 0 descriptor?? [ 501.031722][ T5284] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 501.139471][ T5286] usb 4-1: USB disconnect, device number 89 [ 501.171624][ T5284] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 501.235178][ T5284] dib0700: firmware download failed at 7 with -22 [ 501.275199][ T5284] usb 3-1: USB disconnect, device number 98 [ 501.335541][ T1174] hid-steam 0003:28DE:1142.002E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 501.496076][ T937] playstation 0003:054C:0BA0.002F: unbalanced collection at end of report description [ 501.527649][ T1174] usb 2-1: USB disconnect, device number 6 [ 501.553948][ T937] playstation 0003:054C:0BA0.002F: Parse failed [ 501.560521][ T937] playstation 0003:054C:0BA0.002F: probe with driver playstation failed with error -22 [ 501.609305][ T5284] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 501.622087][T12299] FAULT_INJECTION: forcing a failure. [ 501.622087][T12299] name failslab, interval 1, probability 0, space 0, times 0 [ 501.635283][T12299] CPU: 0 UID: 0 PID: 12299 Comm: syz.4.1425 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 501.646089][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 501.656174][T12299] Call Trace: [ 501.659457][T12299] [ 501.662387][T12299] dump_stack_lvl+0x241/0x360 [ 501.667076][T12299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.672274][T12299] ? __pfx__printk+0x10/0x10 [ 501.676953][T12299] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 501.682935][T12299] ? __pfx___might_resched+0x10/0x10 [ 501.688221][T12299] ? tcp_established_options+0x3c1/0x800 [ 501.693870][T12299] should_fail_ex+0x3b0/0x4e0 [ 501.698562][T12299] should_failslab+0xac/0x100 [ 501.703239][T12299] ? __alloc_skb+0x1c3/0x440 [ 501.707824][T12299] kmem_cache_alloc_node_noprof+0x71/0x320 [ 501.713628][T12299] ? tcp_current_mss+0x29b/0x4d0 [ 501.718570][T12299] __alloc_skb+0x1c3/0x440 [ 501.722987][T12299] ? __pfx___alloc_skb+0x10/0x10 [ 501.727925][T12299] tcp_stream_alloc_skb+0x3d/0x310 [ 501.733035][T12299] tcp_sendmsg_locked+0xde1/0x50a0 [ 501.738144][T12299] ? __lock_acquire+0x1384/0x2050 [ 501.743203][T12299] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 501.748747][T12299] ? __local_bh_enable_ip+0x168/0x200 [ 501.754124][T12299] ? do_raw_spin_unlock+0x13c/0x8b0 [ 501.759325][T12299] tcp_sendmsg+0x30/0x50 [ 501.763568][T12299] __sock_sendmsg+0x1a6/0x270 [ 501.768269][T12299] __sys_sendto+0x39b/0x4f0 [ 501.772812][T12299] ? __pfx___sys_sendto+0x10/0x10 [ 501.777859][T12299] ? __mutex_unlock_slowpath+0x21d/0x750 [ 501.783510][T12299] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 501.789503][T12299] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.795860][T12299] __x64_sys_sendto+0xde/0x100 [ 501.800637][T12299] do_syscall_64+0xf3/0x230 [ 501.805143][T12299] ? clear_bhb_loop+0x35/0x90 [ 501.809820][T12299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.815716][T12299] RIP: 0033:0x7f8e4ab7dff9 [ 501.820129][T12299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.839746][T12299] RSP: 002b:00007f8e4b8fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 501.848183][T12299] RAX: ffffffffffffffda RBX: 00007f8e4ad36130 RCX: 00007f8e4ab7dff9 [ 501.856184][T12299] RDX: 00000000000020c8 RSI: 00000000200012c0 RDI: 000000000000000a [ 501.864158][T12299] RBP: 00007f8e4b8fa090 R08: 0000000000000000 R09: 0000000000000027 [ 501.872124][T12299] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 501.880088][T12299] R13: 0000000000000000 R14: 00007f8e4ad36130 R15: 00007f8e4ae5fa28 [ 501.888069][T12299] [ 501.891199][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.924485][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.933245][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.029234][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 502.051194][ T5284] usb 3-1: config 6 has an invalid interface number: 230 but max is 0 [ 502.087603][ T5284] usb 3-1: config 6 has no interface number 0 [ 502.095400][T12304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1426'. [ 502.118816][ T5284] usb 3-1: config 6 interface 230 has no altsetting 0 [ 502.178928][ T5284] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=2c.a4 [ 502.225757][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.242807][ T5284] usb 3-1: Product: syz [ 502.279221][ T5284] usb 3-1: Manufacturer: syz [ 502.298414][ T5284] usb 3-1: SerialNumber: syz [ 502.797063][ T1174] usb 1-1: USB disconnect, device number 115 [ 503.131072][ T5284] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 503.172261][ T5284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 503.218642][ T5284] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 503.254994][ T5284] usb 3-1: media controller created [ 503.301324][ T5284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 503.569624][ T5284] DVB: Unable to find symbol dib7000p_attach() [ 503.587878][ T5284] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 503.611535][T12315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1428'. [ 503.729392][ T5284] rc_core: IR keymap rc-dib0700-rc5 not found [ 503.737840][ T5284] Registered IR keymap rc-empty [ 503.771772][ T5284] dvb-usb: could not initialize remote control. [ 503.778229][T12324] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 503.780025][ T5284] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 503.818662][ T5284] usb 3-1: USB disconnect, device number 99 [ 503.864398][ T5284] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 503.889916][ T1174] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 504.080268][ T1174] usb 1-1: Using ep0 maxpacket: 32 [ 504.162377][ T1174] usb 1-1: config 0 has no interfaces? [ 504.248985][ T1174] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 504.268958][ T1174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.277689][ T1174] usb 1-1: Product: syz [ 504.282452][ T1174] usb 1-1: Manufacturer: syz [ 504.287223][ T1174] usb 1-1: SerialNumber: syz [ 504.295120][ T1174] usb 1-1: config 0 descriptor?? [ 504.556863][ T5283] usb 1-1: USB disconnect, device number 116 [ 504.838674][T12334] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 504.869528][ T1174] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 505.029248][ T1174] usb 3-1: Using ep0 maxpacket: 8 [ 505.042042][ T1174] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 505.087353][ T1174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.109259][ T5284] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 505.130058][T12336] FAULT_INJECTION: forcing a failure. [ 505.130058][T12336] name failslab, interval 1, probability 0, space 0, times 0 [ 505.149450][T12336] CPU: 1 UID: 0 PID: 12336 Comm: syz.1.1434 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 505.160259][T12336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 505.170344][T12336] Call Trace: [ 505.173616][T12336] [ 505.176537][T12336] dump_stack_lvl+0x241/0x360 [ 505.181302][T12336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.186492][T12336] ? __pfx__printk+0x10/0x10 [ 505.191077][T12336] ? fs_reclaim_acquire+0x93/0x130 [ 505.196189][T12336] ? __pfx___might_resched+0x10/0x10 [ 505.201498][T12336] should_fail_ex+0x3b0/0x4e0 [ 505.206173][T12336] ? tomoyo_encode+0x26f/0x540 [ 505.210937][T12336] should_failslab+0xac/0x100 [ 505.215607][T12336] ? tomoyo_encode+0x26f/0x540 [ 505.220375][T12336] __kmalloc_noprof+0xd8/0x400 [ 505.225154][T12336] tomoyo_encode+0x26f/0x540 [ 505.229762][T12336] tomoyo_realpath_from_path+0x59e/0x5e0 [ 505.235433][T12336] tomoyo_path_number_perm+0x23a/0x880 [ 505.240928][T12336] ? tomoyo_path_number_perm+0x208/0x880 [ 505.246593][T12336] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.252643][T12336] ? __fget_files+0x29/0x470 [ 505.257270][T12336] ? __fget_files+0x3f3/0x470 [ 505.261982][T12336] security_file_ioctl+0xc6/0x2a0 [ 505.267054][T12336] __se_sys_ioctl+0x47/0x170 [ 505.271672][T12336] do_syscall_64+0xf3/0x230 [ 505.276168][T12336] ? clear_bhb_loop+0x35/0x90 [ 505.281125][T12336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.287011][T12336] RIP: 0033:0x7f9ac6b7dff9 [ 505.291421][T12336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.311043][T12336] RSP: 002b:00007f9ac79be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.319464][T12336] RAX: ffffffffffffffda RBX: 00007f9ac6d35f80 RCX: 00007f9ac6b7dff9 [ 505.327476][T12336] RDX: 0000000000000003 RSI: 000000000000540a RDI: 0000000000000007 [ 505.335477][T12336] RBP: 00007f9ac79be090 R08: 0000000000000000 R09: 0000000000000000 [ 505.343461][T12336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.351435][T12336] R13: 0000000000000000 R14: 00007f9ac6d35f80 R15: 00007f9ac6e5fa28 [ 505.359423][T12336] [ 505.379740][ T1174] usb 3-1: config 0 descriptor?? [ 505.387980][T12336] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.504811][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 505.516173][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 505.530166][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.557676][ T5284] usb 5-1: string descriptor 0 read error: -22 [ 505.568563][ T5284] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 505.587923][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.672333][ T5284] usb 5-1: config 0 descriptor?? [ 505.723745][ T5284] em28xx 5-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 505.743079][ T5284] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 506.099634][ T5283] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 506.154272][ T5284] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 506.160877][ T5284] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 506.181989][ T5284] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 506.188980][ T5284] em28xx 5-1:0.0: No AC97 audio processor [ 506.220884][ T5284] usb 5-1: USB disconnect, device number 95 [ 506.233233][ T5284] em28xx 5-1:0.0: Disconnecting em28xx [ 506.258826][ T5284] em28xx 5-1:0.0: Freeing device [ 506.289820][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 506.323275][ T5283] usb 1-1: unable to get BOS descriptor or descriptor too short [ 506.348371][ T5283] usb 1-1: config 4 has an invalid interface number: 146 but max is 0 [ 506.357828][ T5314] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 506.404097][ T5283] usb 1-1: config 4 has no interface number 0 [ 506.449778][ T5283] usb 1-1: config 4 interface 146 has no altsetting 0 [ 506.490229][ T5283] usb 1-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 506.513024][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.523063][ T5283] usb 1-1: Product: syz [ 506.527372][ T5283] usb 1-1: Manufacturer: syz [ 506.532581][ T5283] usb 1-1: SerialNumber: syz [ 506.555310][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.592857][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.621838][ T5314] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 506.664177][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.723523][ T5314] usb 4-1: config 0 descriptor?? [ 506.987947][T12364] FAULT_INJECTION: forcing a failure. [ 506.987947][T12364] name failslab, interval 1, probability 0, space 0, times 0 [ 507.008160][T12364] CPU: 1 UID: 0 PID: 12364 Comm: syz.1.1441 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 507.018987][T12364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 507.029152][T12364] Call Trace: [ 507.032448][T12364] [ 507.035390][T12364] dump_stack_lvl+0x241/0x360 [ 507.040124][T12364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.045350][T12364] ? __pfx__printk+0x10/0x10 [ 507.049960][T12364] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 507.055709][T12364] ? __pfx___might_resched+0x10/0x10 [ 507.061026][T12364] should_fail_ex+0x3b0/0x4e0 [ 507.065733][T12364] should_failslab+0xac/0x100 [ 507.070420][T12364] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 507.076340][T12364] __kmalloc_cache_noprof+0x6c/0x2c0 [ 507.081658][T12364] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 507.087403][T12364] sctp_association_new+0x15aa/0x2400 [ 507.092813][T12364] sctp_connect_new_asoc+0x2d8/0x6c0 [ 507.098140][T12364] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 507.103972][T12364] ? sctp_sendmsg+0xbb9/0x3520 [ 507.108777][T12364] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 507.114599][T12364] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 507.120517][T12364] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 507.126096][T12364] sctp_sendmsg+0x219a/0x3520 [ 507.130793][T12364] ? aa_sk_perm+0x96d/0xab0 [ 507.135314][T12364] ? __pfx_sctp_sendmsg+0x10/0x10 [ 507.140408][T12364] ? __pfx_aa_sk_perm+0x10/0x10 [ 507.145267][T12364] ? inet_sendmsg+0x330/0x390 [ 507.149973][T12364] __sock_sendmsg+0x1a6/0x270 [ 507.154682][T12364] ____sys_sendmsg+0x52a/0x7e0 [ 507.159450][T12364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.164800][T12364] __sys_sendmsg+0x292/0x380 [ 507.169419][T12364] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.174564][T12364] ? __pfx_vfs_write+0x10/0x10 [ 507.179588][T12364] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.185956][T12364] ? do_syscall_64+0x100/0x230 [ 507.190721][T12364] ? do_syscall_64+0xb6/0x230 [ 507.195406][T12364] do_syscall_64+0xf3/0x230 [ 507.199910][T12364] ? clear_bhb_loop+0x35/0x90 [ 507.204584][T12364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.210563][T12364] RIP: 0033:0x7f9ac6b7dff9 [ 507.214975][T12364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.234589][T12364] RSP: 002b:00007f9ac797c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.243020][T12364] RAX: ffffffffffffffda RBX: 00007f9ac6d36130 RCX: 00007f9ac6b7dff9 [ 507.250995][T12364] RDX: 0000000000000080 RSI: 0000000020000f80 RDI: 0000000000000003 [ 507.258967][T12364] RBP: 00007f9ac797c090 R08: 0000000000000000 R09: 0000000000000000 [ 507.266939][T12364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.274910][T12364] R13: 0000000000000001 R14: 00007f9ac6d36130 R15: 00007f9ac6e5fa28 [ 507.282896][T12364] [ 507.295988][T12354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.343198][ T5314] hid-steam 0003:28DE:1142.0030: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 507.344069][T12354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.379332][ T5283] comedi comedi0: could not set alternate setting 3 in high speed [ 507.387994][ T5283] usbduxsigma 1-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 507.412129][ T5283] usbduxsigma 1-1:4.146: probe with driver usbduxsigma failed with error -71 [ 507.453222][ T5283] usb 1-1: USB disconnect, device number 117 [ 507.469301][ T937] usb 4-1: USB disconnect, device number 90 [ 508.019678][ T937] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 508.059273][ T5283] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 508.149973][ T937] usb 2-1: device descriptor read/64, error -71 [ 508.211160][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 508.221752][ T5283] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 508.231344][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.239931][ T5283] usb 5-1: Product: syz [ 508.246892][ T5283] usb 5-1: Manufacturer: syz [ 508.264703][ T5283] usb 5-1: SerialNumber: syz [ 508.290374][ T5283] usb 5-1: config 0 descriptor?? [ 508.389393][ T937] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 508.518320][T12369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.536144][ T937] usb 2-1: device descriptor read/64, error -71 [ 508.559560][T12369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.579257][ T8] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 508.649942][ T937] usb usb2-port1: attempt power cycle [ 508.673134][ T5283] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 508.693687][ T5283] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 508.739514][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 508.749971][ T8] usb 4-1: too many configurations: 240, using maximum allowed: 8 [ 508.766499][ T5283] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 508.778486][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 508.796513][ T8] usb 4-1: can't read configurations, error -61 [ 508.810638][ T5283] usb 5-1: USB disconnect, device number 96 [ 508.949387][ T8] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 508.999389][ T937] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 509.034976][ T937] usb 2-1: device descriptor read/8, error -71 [ 509.100633][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 509.111841][ T8] usb 4-1: too many configurations: 240, using maximum allowed: 8 [ 509.126727][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 509.137186][ T8] usb 4-1: can't read configurations, error -61 [ 509.150790][ T8] usb usb4-port1: attempt power cycle [ 509.279615][ T937] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 509.348768][ T937] usb 2-1: device descriptor read/8, error -71 [ 509.459741][ T937] usb usb2-port1: unable to enumerate USB device [ 509.649302][ T8] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 509.680287][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 509.688567][ T8] usb 4-1: too many configurations: 240, using maximum allowed: 8 [ 509.709735][T12379] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 509.729339][ T937] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 509.741155][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 509.754868][ T8] usb 4-1: can't read configurations, error -61 [ 509.889816][ T8] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 509.909294][ T937] usb 5-1: Using ep0 maxpacket: 32 [ 509.918317][ T937] usb 5-1: config 0 has no interfaces? [ 509.926906][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 509.937293][ T8] usb 4-1: too many configurations: 240, using maximum allowed: 8 [ 509.951414][ T937] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 509.966388][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.977524][ T937] usb 5-1: Product: syz [ 509.982248][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 509.997842][ T8] usb 4-1: can't read configurations, error -61 [ 510.005425][ T8] usb usb4-port1: unable to enumerate USB device [ 510.017847][ T937] usb 5-1: Manufacturer: syz [ 510.024516][ T937] usb 5-1: SerialNumber: syz [ 510.044346][ T937] usb 5-1: config 0 descriptor?? [ 510.245222][ T1174] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 510.255503][ T1174] asix 3-1:0.0: probe with driver asix failed with error -71 [ 510.268066][ T1174] usb 3-1: USB disconnect, device number 100 [ 510.333077][T12381] FAULT_INJECTION: forcing a failure. [ 510.333077][T12381] name failslab, interval 1, probability 0, space 0, times 0 [ 510.346150][T12381] CPU: 0 UID: 0 PID: 12381 Comm: syz.2.1449 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 510.356948][T12381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 510.367076][T12381] Call Trace: [ 510.370380][T12381] [ 510.373329][T12381] dump_stack_lvl+0x241/0x360 [ 510.378043][T12381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.383274][T12381] ? __pfx__printk+0x10/0x10 [ 510.387906][T12381] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 510.394443][T12381] ? __pfx___might_resched+0x10/0x10 [ 510.399781][T12381] should_fail_ex+0x3b0/0x4e0 [ 510.404511][T12381] should_failslab+0xac/0x100 [ 510.409218][T12381] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 510.415661][T12381] ? rds_rm_size+0x435/0x7a0 [ 510.420295][T12381] krealloc_noprof+0x88/0x120 [ 510.425015][T12381] rds_rm_size+0x435/0x7a0 [ 510.429478][T12381] rds_sendmsg+0xe40/0x2270 [ 510.434033][T12381] ? __pfx_rds_sendmsg+0x10/0x10 [ 510.439103][T12381] ? aa_sk_perm+0x96d/0xab0 [ 510.443642][T12381] ? __pfx_aa_sk_perm+0x10/0x10 [ 510.448531][T12381] ? aa_sock_msg_perm+0x91/0x160 [ 510.453506][T12381] ? __pfx_rds_sendmsg+0x10/0x10 [ 510.458511][T12381] __sock_sendmsg+0x221/0x270 [ 510.463216][T12381] ____sys_sendmsg+0x52a/0x7e0 [ 510.468003][T12381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.473326][T12381] __sys_sendmsg+0x292/0x380 [ 510.477936][T12381] ? __pfx___sys_sendmsg+0x10/0x10 [ 510.483059][T12381] ? __pfx_vfs_write+0x10/0x10 [ 510.487842][T12381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 510.494173][T12381] ? do_syscall_64+0x100/0x230 [ 510.498941][T12381] ? do_syscall_64+0xb6/0x230 [ 510.503631][T12381] do_syscall_64+0xf3/0x230 [ 510.508138][T12381] ? clear_bhb_loop+0x35/0x90 [ 510.512816][T12381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.518719][T12381] RIP: 0033:0x7f65c1f7dff9 [ 510.524001][T12381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.543641][T12381] RSP: 002b:00007f65c2ddc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.552062][T12381] RAX: ffffffffffffffda RBX: 00007f65c2135f80 RCX: 00007f65c1f7dff9 [ 510.560030][T12381] RDX: 0000000000000000 RSI: 0000000020001600 RDI: 0000000000000003 [ 510.568000][T12381] RBP: 00007f65c2ddc090 R08: 0000000000000000 R09: 0000000000000000 [ 510.576666][T12381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.584632][T12381] R13: 0000000000000000 R14: 00007f65c2135f80 R15: 00007f65c225fa28 [ 510.592611][T12381] [ 510.597865][ T8] usb 5-1: USB disconnect, device number 97 [ 512.218661][ T81] bridge_slave_1: left allmulticast mode [ 512.268777][ T81] bridge_slave_1: left promiscuous mode [ 512.289447][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.350387][T12401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1454'. [ 512.453344][ T81] bridge_slave_0: left allmulticast mode [ 512.488793][ T81] bridge_slave_0: left promiscuous mode [ 512.498862][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.729331][ T1174] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 512.911967][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 512.912119][ T1174] usb 5-1: Using ep0 maxpacket: 32 [ 513.401923][ T1174] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.425346][ T1174] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.519031][ T1174] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 513.617492][ T1174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.789288][ T47] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 513.985893][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.054486][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.135792][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.165164][ T47] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 514.200734][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.212400][ T5227] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 514.262372][ T47] usb 3-1: config 0 descriptor?? [ 514.419383][ T5227] usb 4-1: Using ep0 maxpacket: 32 [ 514.446056][ T5227] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 514.489244][ T5227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.523645][ T5227] usb 4-1: Product: syz [ 514.536093][ T5227] usb 4-1: Manufacturer: syz [ 514.591159][ T5227] usb 4-1: SerialNumber: syz [ 514.627198][ T5227] usb 4-1: config 0 descriptor?? [ 514.840528][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.860138][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.382825][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.430232][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.490300][ T81] bond0 (unregistering): Released all slaves [ 515.672905][ T5227] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 515.681660][ T5227] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 515.716811][ T1174] usbhid 5-1:32.0: can't add hid device: -71 [ 515.726834][ T1174] usbhid 5-1:32.0: probe with driver usbhid failed with error -71 [ 515.741887][ T1174] usb 5-1: USB disconnect, device number 98 [ 516.049367][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 516.049602][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 516.052629][ T47] usb 3-1: USB disconnect, device number 101 [ 516.087725][ T5227] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 516.189266][ T5227] usb 4-1: USB disconnect, device number 95 [ 516.281477][T12428] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 516.570331][ T47] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 516.640964][ T81] hsr_slave_0: left promiscuous mode [ 516.653068][ T81] hsr_slave_1: left promiscuous mode [ 516.722550][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.739322][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.837500][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.850257][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 516.857528][ T47] usb 3-1: config 6 has an invalid interface number: 230 but max is 0 [ 516.865807][ T47] usb 3-1: config 6 has no interface number 0 [ 516.872083][ T47] usb 3-1: config 6 interface 230 has no altsetting 0 [ 516.882448][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.889463][ T47] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=2c.a4 [ 516.898605][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.906677][ T47] usb 3-1: Product: syz [ 516.912303][ T47] usb 3-1: Manufacturer: syz [ 516.916904][ T47] usb 3-1: SerialNumber: syz [ 516.989243][ T5284] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 517.018080][ T81] veth1_macvtap: left promiscuous mode [ 517.048845][ T81] veth0_macvtap: left promiscuous mode [ 517.059402][ T81] veth1_vlan: left promiscuous mode [ 517.064725][ T81] veth0_vlan: left promiscuous mode [ 517.149225][ T47] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 517.169204][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 517.176600][ T47] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 517.192508][ T5284] usb 2-1: config 0 has no interfaces? [ 517.203656][ T47] dib0700: firmware download failed at 7 with -22 [ 517.213110][ T5284] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 517.248898][ T47] usb 3-1: USB disconnect, device number 102 [ 517.264319][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.356409][ T5284] usb 2-1: Product: syz [ 517.413692][ T5284] usb 2-1: Manufacturer: syz [ 517.451116][ T5284] usb 2-1: SerialNumber: syz [ 517.462121][ T5284] usb 2-1: config 0 descriptor?? [ 517.741914][ T47] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 517.937009][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 517.952090][ T47] usb 3-1: config 6 has an invalid interface number: 230 but max is 0 [ 517.979873][ T47] usb 3-1: config 6 has no interface number 0 [ 517.986037][ T47] usb 3-1: config 6 interface 230 has no altsetting 0 [ 518.060012][ T47] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=2c.a4 [ 518.069936][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.078404][ T47] usb 3-1: Product: syz [ 518.090431][ T47] usb 3-1: Manufacturer: syz [ 518.095327][ T47] usb 3-1: SerialNumber: syz [ 518.189452][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 518.208968][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 518.217670][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 518.237538][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 518.261390][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 518.272740][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 518.376562][ T81] team0 (unregistering): Port device team_slave_1 removed [ 518.446582][ T81] team0 (unregistering): Port device team_slave_0 removed [ 518.758754][ T47] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 518.774691][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 518.785210][ T47] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 518.810221][ T47] usb 3-1: media controller created [ 518.822579][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.867393][ T47] DVB: Unable to find symbol dib7000p_attach() [ 518.873962][ T47] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 518.941664][ T47] rc_core: IR keymap rc-dib0700-rc5 not found [ 518.947791][ T47] Registered IR keymap rc-empty [ 518.953087][ T47] dvb-usb: could not initialize remote control. [ 518.973054][ T47] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 519.114113][ T5284] usb 2-1: USB disconnect, device number 12 [ 519.325227][T12445] chnl_net:caif_netlink_parms(): no params data found [ 519.433008][T12445] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.448316][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.456725][T12445] bridge_slave_0: entered allmulticast mode [ 519.471963][T12445] bridge_slave_0: entered promiscuous mode [ 519.503486][T12445] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.539701][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.557517][T12445] bridge_slave_1: entered allmulticast mode [ 519.640251][T12445] bridge_slave_1: entered promiscuous mode [ 519.820854][T12445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.871517][T12445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.115705][ T47] usb 3-1: USB disconnect, device number 103 [ 520.237161][T12445] team0: Port device team_slave_0 added [ 520.300547][T12445] team0: Port device team_slave_1 added [ 520.308261][ T47] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 520.410287][ T55] Bluetooth: hci5: command tx timeout [ 520.469828][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.502975][T12445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.526740][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.552663][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.593343][T12445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.649375][ T937] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 520.658809][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.675555][T12445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.683358][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.709864][ T47] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 520.745089][T12445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.880086][ T937] usb 4-1: Using ep0 maxpacket: 32 [ 520.881523][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.910835][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1855, setting to 1024 [ 520.922429][ T47] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 520.956506][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.957232][ T937] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 521.017085][ T47] usb 3-1: config 0 descriptor?? [ 521.026635][T12471] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 521.042610][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.044129][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.138558][T12445] hsr_slave_0: entered promiscuous mode [ 521.144731][ T937] usb 4-1: Product: syz [ 521.149304][ T937] usb 4-1: Manufacturer: syz [ 521.160839][T12445] hsr_slave_1: entered promiscuous mode [ 521.164160][ T937] usb 4-1: SerialNumber: syz [ 521.176883][T12445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.188251][T12445] Cannot create hsr debugfs directory [ 521.230026][ T937] usb 4-1: config 0 descriptor?? [ 521.527498][T12473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.547568][T12479] vivid-007: disconnect [ 521.605386][T12473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.668169][T12470] vivid-007: reconnect [ 521.716289][ T937] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 521.724686][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 521.724787][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 521.734319][ T937] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 521.800840][ T47] usb 3-1: USB disconnect, device number 104 [ 521.809268][ T5283] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 521.863583][ T81] bridge_slave_1: left allmulticast mode [ 521.870089][ T937] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 521.879243][ T81] bridge_slave_1: left promiscuous mode [ 521.887220][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.903284][ T937] usb 4-1: USB disconnect, device number 96 [ 521.992127][ T81] bridge_slave_0: left allmulticast mode [ 522.006119][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.016471][ T81] bridge_slave_0: left promiscuous mode [ 522.032790][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.034875][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.073002][ T5283] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.134717][ T5283] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 522.191520][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.218803][ T5283] usb 2-1: config 0 descriptor?? [ 522.497948][ T55] Bluetooth: hci5: command tx timeout [ 522.743238][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 522.886291][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.910961][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.927855][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.937354][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.956685][ T81] bond0 (unregistering): Released all slaves [ 522.963982][ T9] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 522.983969][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.998772][ T9] usb 3-1: config 0 descriptor?? [ 523.317922][T12495] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 523.607390][ T9] chicony 0003:04F2:1421.0031: report_id 3309536062 is invalid [ 523.615439][ T9] chicony 0003:04F2:1421.0031: item 0 4 1 8 parsing failed [ 523.624039][ T9] chicony 0003:04F2:1421.0031: Chicony hid parse failed: -22 [ 523.631798][ T9] chicony 0003:04F2:1421.0031: probe with driver chicony failed with error -22 [ 523.767092][ T81] hsr_slave_0: left promiscuous mode [ 523.786420][ T5283] usbhid 2-1:0.0: can't add hid device: -71 [ 523.792586][ T5283] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 523.803735][ T5283] usb 2-1: USB disconnect, device number 13 [ 523.900642][ T81] hsr_slave_1: left promiscuous mode [ 524.029033][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.088414][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.101613][ T5314] usb 3-1: USB disconnect, device number 105 [ 524.143636][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.180015][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.281924][ T81] veth1_macvtap: left promiscuous mode [ 524.305414][ T81] veth0_macvtap: left promiscuous mode [ 524.316533][ T81] veth1_vlan: left promiscuous mode [ 524.325380][ T81] veth0_vlan: left promiscuous mode [ 524.520577][ T47] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 524.549483][ T5283] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 524.569651][ T55] Bluetooth: hci5: command tx timeout [ 524.697728][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.721934][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 524.733027][ T5283] usb 5-1: config 6 has an invalid interface number: 230 but max is 0 [ 524.752694][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.766546][ T5283] usb 5-1: config 6 has no interface number 0 [ 524.772888][ T47] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 524.782299][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.792319][ T47] usb 4-1: config 0 descriptor?? [ 524.817739][ T5283] usb 5-1: config 6 interface 230 has no altsetting 0 [ 524.888048][ T5283] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=2c.a4 [ 524.913154][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.923158][ T5283] usb 5-1: Product: syz [ 524.935241][ T5283] usb 5-1: Manufacturer: syz [ 524.944398][ T5283] usb 5-1: SerialNumber: syz [ 525.169294][ T5284] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 525.188041][ T5283] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 525.221944][ T47] hid-steam 0003:28DE:1142.0032: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 525.255324][ T5283] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 525.282899][ T5283] dib0700: firmware download failed at 7 with -22 [ 525.308932][ T5283] usb 5-1: USB disconnect, device number 99 [ 525.386172][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 525.395151][ T5284] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 525.414720][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.425551][ T47] usb 4-1: USB disconnect, device number 97 [ 525.444591][ T5284] usb 3-1: Product: syz [ 525.452797][ T5284] usb 3-1: Manufacturer: syz [ 525.460142][ T5284] usb 3-1: SerialNumber: syz [ 525.471157][ T81] team0 (unregistering): Port device team_slave_1 removed [ 525.481716][ T5284] r8152-cfgselector 3-1: Unknown version 0x0000 [ 525.488009][ T5284] r8152-cfgselector 3-1: config 0 descriptor?? [ 525.536281][ T81] team0 (unregistering): Port device team_slave_0 removed [ 525.749327][ T5283] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 525.913762][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 525.938784][ T5283] usb 5-1: config 6 has an invalid interface number: 230 but max is 0 [ 525.947063][ T5283] usb 5-1: config 6 has no interface number 0 [ 525.953352][ T5283] usb 5-1: config 6 interface 230 has no altsetting 0 [ 525.967278][ T5283] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=2c.a4 [ 525.977557][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.994223][ T5283] usb 5-1: Product: syz [ 525.998480][ T5283] usb 5-1: Manufacturer: syz [ 526.007476][ T5283] usb 5-1: SerialNumber: syz [ 526.092055][ T5314] r8152-cfgselector 3-1: USB disconnect, device number 106 [ 526.228455][T12445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 526.272085][T12445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 526.307160][T12445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 526.337605][T12445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 526.446744][ T937] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 526.565707][T12445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.602850][T12445] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.617009][ T937] usb 2-1: device descriptor read/64, error -71 [ 526.650004][ T55] Bluetooth: hci5: command tx timeout [ 526.656705][ T5283] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 526.666396][ T3149] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.673594][ T3149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.679320][ T47] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 526.701478][ T5283] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 526.729051][T11473] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.736282][T11473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.751548][ T5283] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 526.762698][ T5283] usb 5-1: media controller created [ 526.788014][ T5283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.836711][ T5283] DVB: Unable to find symbol dib7000p_attach() [ 526.843310][ T5283] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 526.856551][T12445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.865387][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 526.880345][ T47] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 526.880396][ T937] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 526.904731][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.921081][ T5283] rc_core: IR keymap rc-dib0700-rc5 not found [ 526.922126][ T47] usb 4-1: Product: syz [ 526.927185][ T5283] Registered IR keymap rc-empty [ 526.927334][ T5283] dvb-usb: could not initialize remote control. [ 526.944381][ T5283] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 526.948873][ T47] usb 4-1: Manufacturer: syz [ 526.959065][ T5284] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 526.974546][T12445] veth0_vlan: entered promiscuous mode [ 526.982539][ T47] usb 4-1: SerialNumber: syz [ 526.990211][ T47] usb 4-1: config 0 descriptor?? [ 527.014403][T12445] veth1_vlan: entered promiscuous mode [ 527.031839][ T937] usb 2-1: device descriptor read/64, error -71 [ 527.051606][T12445] veth0_macvtap: entered promiscuous mode [ 527.063849][T12445] veth1_macvtap: entered promiscuous mode [ 527.091242][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.102929][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.112857][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.123793][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.134010][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.141188][ T937] usb usb2-port1: attempt power cycle [ 527.145680][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.161496][ T5284] usb 3-1: Using ep0 maxpacket: 32 [ 527.168545][ T5284] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.184936][ T5284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.190762][T12445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.198023][ T5284] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.204522][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.221158][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.231124][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.241621][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.251692][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.257799][ T5284] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=3 [ 527.262257][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.263791][T12445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.270640][ T5284] usb 3-1: Manufacturer: syz [ 527.284566][T12445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.287933][ T5284] usb 3-1: SerialNumber: syz [ 527.292586][T12445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.292623][T12445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.292651][T12445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.344946][T12541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.373178][T12541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.452428][ T3149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.473078][ T47] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 527.482581][ T3149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.490513][ T47] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 527.528997][ T3149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.538765][ T3149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.552194][ T47] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 527.571713][ T47] usb 4-1: USB disconnect, device number 98 [ 527.579236][ T937] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 527.591911][T12550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1485'. [ 527.609964][ T937] usb 2-1: device descriptor read/8, error -71 [ 527.753392][ T5284] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 527.837081][ T5284] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 527.886832][ T5284] usb 3-1: USB disconnect, device number 107 [ 528.037814][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.569128][ C0] sched: DL replenish lagged too much [ 554.906380][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 554.985861][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.042983][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.093544][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.138378][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.179928][ T5284] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 555.239248][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.247586][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.380068][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.387540][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.430370][ T5284] usb 4-1: config index 0 descriptor too short (expected 25970, got 36) [ 555.438771][ T5284] usb 4-1: config 116 has too many interfaces: 99, using maximum allowed: 32 [ 555.629330][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.636902][ T5284] usb 4-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 555.728576][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.803940][ T5284] usb 4-1: config 116 has 0 interfaces, different from the descriptor's value: 99 [ 555.839292][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.846760][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 555.949297][ T5284] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 555.958408][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.980236][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.019273][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.049230][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.064661][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 556.084910][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 556.092807][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 556.120740][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 556.128200][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 556.309199][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 556.316793][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 556.365520][ T5284] usb 4-1: can't set config #116, error -71 [ 556.498224][ T5284] usb 4-1: USB disconnect, device number 99 [ 556.509674][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 556.517123][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 556.679358][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 556.693370][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 556.702214][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 556.710708][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 556.729591][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 556.740805][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 556.748262][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 556.759279][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 556.939420][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.009243][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.016796][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.159189][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.166653][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.251251][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 557.262766][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 557.271531][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 557.284750][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 557.293348][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 557.301230][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 557.308499][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.395184][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.453307][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.520744][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.528217][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.588185][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.603494][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.612944][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.621354][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.629032][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 557.639388][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.677078][ T47] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 557.809582][ T47] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 557.865755][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 557.889334][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 557.905511][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 557.916277][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 557.932511][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 557.940825][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 558.319465][ T55] Bluetooth: hci3: command tx timeout [ 558.879358][ T55] Bluetooth: hci4: command tx timeout [ 559.360427][ T55] Bluetooth: hci0: command tx timeout [ 559.679329][ T55] Bluetooth: hci1: command tx timeout [ 559.999953][ T55] Bluetooth: hci2: command tx timeout [ 560.399350][ T55] Bluetooth: hci3: command tx timeout [ 560.959295][ T55] Bluetooth: hci4: command tx timeout [ 561.439418][ T55] Bluetooth: hci0: command tx timeout [ 561.759322][ T55] Bluetooth: hci1: command tx timeout [ 562.079288][ T55] Bluetooth: hci2: command tx timeout [ 562.479348][ T55] Bluetooth: hci3: command tx timeout [ 563.039255][ T55] Bluetooth: hci4: command tx timeout [ 563.209687][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.216044][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.519333][ T55] Bluetooth: hci0: command tx timeout [ 563.839331][ T55] Bluetooth: hci1: command tx timeout [ 564.159417][ T55] Bluetooth: hci2: command tx timeout [ 564.559271][ T55] Bluetooth: hci3: command tx timeout [ 565.119562][ T55] Bluetooth: hci4: command tx timeout [ 565.599354][ T55] Bluetooth: hci0: command tx timeout [ 565.919355][ T55] Bluetooth: hci1: command tx timeout [ 566.239240][ T55] Bluetooth: hci2: command tx timeout [ 591.825807][ T5283] usb 5-1: USB disconnect, device number 100 [ 604.563510][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 604.586359][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 604.620892][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 604.630621][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 604.644312][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 604.652307][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 606.719428][ T5229] Bluetooth: hci5: command tx timeout [ 608.809344][ T5229] Bluetooth: hci5: command tx timeout [ 610.879254][ T5229] Bluetooth: hci5: command tx timeout [ 612.959410][ T5229] Bluetooth: hci5: command tx timeout [ 615.641816][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 615.652186][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 615.665036][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 615.677331][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 615.685727][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 615.693525][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 616.826729][ T5233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 616.837703][ T5233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 616.846932][ T5233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 616.861655][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 616.871987][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 616.879541][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 617.018928][ T5229] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 617.029350][ T5229] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 617.039326][ T5229] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 617.048555][ T5229] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 617.079166][ T5229] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 617.086639][ T5229] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 617.185935][ T5229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 617.206609][ T5229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 617.216600][ T5229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 617.236568][ T5229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 617.244564][ T5229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 617.255320][ T5229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 617.759284][ T5229] Bluetooth: hci6: command tx timeout [ 618.959509][ T5229] Bluetooth: hci7: command tx timeout [ 619.119414][ T5229] Bluetooth: hci8: command tx timeout [ 619.359361][ T5229] Bluetooth: hci9: command tx timeout [ 619.839261][ T5229] Bluetooth: hci6: command tx timeout [ 621.039343][ T5229] Bluetooth: hci7: command tx timeout [ 621.199332][ T5229] Bluetooth: hci8: command tx timeout [ 621.439287][ T5229] Bluetooth: hci9: command tx timeout [ 621.919209][ T5229] Bluetooth: hci6: command tx timeout [ 623.119493][ T5229] Bluetooth: hci7: command tx timeout [ 623.279290][ T5229] Bluetooth: hci8: command tx timeout [ 623.519275][ T5229] Bluetooth: hci9: command tx timeout [ 623.999271][ T5229] Bluetooth: hci6: command tx timeout [ 624.642230][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.648595][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.204932][ T5229] Bluetooth: hci7: command tx timeout [ 625.359280][ T5229] Bluetooth: hci8: command tx timeout [ 625.599269][ T5229] Bluetooth: hci9: command tx timeout [ 665.661479][ T5233] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 665.686334][ T5233] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 665.728781][ T5233] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 665.805217][ T5233] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 665.892881][ T5233] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 665.911501][ T5233] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 668.079301][ T5229] Bluetooth: hci10: command tx timeout [ 670.159516][ T5229] Bluetooth: hci10: command tx timeout [ 672.239249][ T5229] Bluetooth: hci10: command tx timeout [ 674.319210][ T5229] Bluetooth: hci10: command tx timeout [ 676.045434][ T5233] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 676.056289][ T5233] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 676.067243][ T5233] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 676.076110][ T5233] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 676.084126][ T5233] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 676.091841][ T5233] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 677.476771][ T5229] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 677.491384][ T5229] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 677.500349][ T5229] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 677.512117][ T5229] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 677.519988][ T5229] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 677.527439][ T5229] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 677.606351][ T5233] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 677.626045][ T5233] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 677.637240][ T5233] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 677.680694][T12646] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 677.688531][T12646] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 677.698318][T12646] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 677.708155][T12646] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 677.717542][T12646] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 677.729716][T12646] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 677.770992][ T55] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 677.783595][ T55] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 677.791127][ T55] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 678.163984][ T55] Bluetooth: hci11: command tx timeout [ 679.599262][ T55] Bluetooth: hci12: command tx timeout [ 679.759303][ T55] Bluetooth: hci14: command tx timeout [ 679.839319][ T55] Bluetooth: hci13: command tx timeout [ 680.239245][ T55] Bluetooth: hci11: command tx timeout [ 681.679340][T12651] Bluetooth: hci12: command tx timeout [ 681.839223][T12651] Bluetooth: hci14: command tx timeout [ 681.919259][T12651] Bluetooth: hci13: command tx timeout [ 682.319212][T12651] Bluetooth: hci11: command tx timeout [ 683.071386][T12650] Bluetooth: hci3: command 0x0406 tx timeout [ 683.077468][T12650] Bluetooth: hci4: command 0x0406 tx timeout [ 683.083965][T12651] Bluetooth: hci2: command 0x0406 tx timeout [ 683.090154][T12651] Bluetooth: hci0: command 0x0406 tx timeout [ 683.096191][T12651] Bluetooth: hci1: command 0x0406 tx timeout [ 683.759274][ T5229] Bluetooth: hci12: command tx timeout [ 683.919218][ T5229] Bluetooth: hci14: command tx timeout [ 683.999473][ T5229] Bluetooth: hci13: command tx timeout [ 684.399162][ T5229] Bluetooth: hci11: command tx timeout [ 685.839238][ T5229] Bluetooth: hci12: command tx timeout [ 685.999190][ T5229] Bluetooth: hci14: command tx timeout [ 686.079500][ T5229] Bluetooth: hci13: command tx timeout [ 686.089619][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.095946][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.680910][ T25] kworker/1:0 (25) used greatest stack depth: 14616 bytes left [ 716.801205][ T30] INFO: task syz-executor:12445 blocked for more than 143 seconds. [ 716.824697][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 716.869226][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.929154][ T30] task:syz-executor state:D stack:20848 pid:12445 tgid:12445 ppid:1 flags:0x00004006 [ 716.995978][ T30] Call Trace: [ 717.064747][ T30] [ 717.067750][ T30] __schedule+0x1895/0x4b30 [ 717.148363][ T30] ? __pfx___schedule+0x10/0x10 [ 717.169084][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.174185][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 717.234704][ T30] ? schedule+0x90/0x320 [ 717.269100][ T30] schedule+0x14b/0x320 [ 717.273339][ T30] schedule_preempt_disabled+0x13/0x30 [ 717.278829][ T30] __mutex_lock+0x6a7/0xd70 [ 717.349100][ T30] ? __mutex_lock+0x52a/0xd70 [ 717.353863][ T30] ? netdev_run_todo+0x7b2/0x1000 [ 717.419215][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.424315][ T30] ? __init_swait_queue_head+0xae/0x150 [ 717.490688][ T30] netdev_run_todo+0x7b2/0x1000 [ 717.495624][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 717.545139][ T30] ? netdev_state_change+0xa8/0x1a0 [ 717.574995][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 717.602078][ T30] ? tun_chr_close+0x105/0x1b0 [ 717.606918][ T30] ? tun_chr_close+0x105/0x1b0 [ 717.659170][ T30] tun_chr_close+0x137/0x1b0 [ 717.663849][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 717.705142][ T30] __fput+0x23f/0x880 [ 717.729129][ T30] task_work_run+0x24f/0x310 [ 717.733792][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 717.794618][ T30] ? __pfx_task_work_run+0x10/0x10 [ 717.829226][ T30] ? do_exit+0xa2a/0x28e0 [ 717.833632][ T30] ? kmem_cache_free+0x1a2/0x420 [ 717.838605][ T30] ? do_exit+0xa2a/0x28e0 [ 717.899256][ T30] do_exit+0xa2f/0x28e0 [ 717.903497][ T30] ? __pfx_do_exit+0x10/0x10 [ 717.908121][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 717.974716][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 718.004602][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.039109][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 718.044299][ T30] do_group_exit+0x207/0x2c0 [ 718.048915][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.115081][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 718.129176][ T30] get_signal+0x16a3/0x1740 [ 718.133774][ T30] ? __pfx_get_signal+0x10/0x10 [ 718.138670][ T30] arch_do_signal_or_restart+0x96/0x860 [ 718.187879][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 718.219047][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 718.225131][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 718.266178][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 718.284645][ T30] do_syscall_64+0x100/0x230 [ 718.304944][ T30] ? clear_bhb_loop+0x35/0x90 [ 718.325339][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.344206][ T30] RIP: 0033:0x7feaa9574257 [ 718.348683][ T30] RSP: 002b:00007feaa985fd90 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 718.397124][ T30] RAX: fffffffffffffe00 RBX: 0000000000000002 RCX: 00007feaa9574257 [ 718.424032][ T30] RDX: 0000000040000000 RSI: 00007feaa985fdec RDI: 00000000ffffffff [ 718.459113][ T30] RBP: 00007feaa985fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 718.467164][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556ba6d5eb [ 718.519168][ T30] R13: 000055556ba6d590 R14: 0000000000080d2a R15: 00007feaa985fe40 [ 718.527238][ T30] [ 718.559140][ T30] INFO: task syz.3.1495:12589 blocked for more than 145 seconds. [ 718.566930][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 718.649234][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.657972][ T30] task:syz.3.1495 state:D stack:24912 pid:12589 tgid:12588 ppid:11816 flags:0x00004006 [ 718.739067][ T30] Call Trace: [ 718.742500][ T30] [ 718.745455][ T30] __schedule+0x1895/0x4b30 [ 718.807439][ T30] ? __pfx___schedule+0x10/0x10 [ 718.839209][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.844318][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 718.895556][ T30] ? schedule+0x90/0x320 [ 718.919229][ T30] schedule+0x14b/0x320 [ 718.923466][ T30] schedule_preempt_disabled+0x13/0x30 [ 718.928970][ T30] __mutex_lock+0x6a7/0xd70 [ 719.009320][ T30] ? __mutex_lock+0x52a/0xd70 [ 719.014076][ T30] ? tun_chr_close+0x3b/0x1b0 [ 719.038815][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 719.055275][ T30] ? __pfx_call_rcu+0x10/0x10 [ 719.084240][ T30] tun_chr_close+0x3b/0x1b0 [ 719.088831][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 719.129224][ T30] __fput+0x23f/0x880 [ 719.133305][ T30] task_work_run+0x24f/0x310 [ 719.137932][ T30] ? __pfx_task_work_run+0x10/0x10 [ 719.184966][ T30] ? switch_task_namespaces+0xe4/0x110 [ 719.196152][ T30] do_exit+0xa2f/0x28e0 [ 719.224702][ T30] ? __pfx_do_exit+0x10/0x10 [ 719.239237][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 719.244693][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 719.279207][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.285616][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 719.323958][ T30] do_group_exit+0x207/0x2c0 [ 719.328633][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 719.364751][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 719.389139][ T30] get_signal+0x16a3/0x1740 [ 719.413608][ T30] ? __pfx_get_signal+0x10/0x10 [ 719.418550][ T30] arch_do_signal_or_restart+0x96/0x860 [ 719.454710][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 719.468206][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 719.484495][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 719.505076][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 719.518765][ T30] do_syscall_64+0x100/0x230 [ 719.534684][ T30] ? clear_bhb_loop+0x35/0x90 [ 719.548298][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.559055][ T30] RIP: 0033:0x7fb5cd77dbfb [ 719.563532][ T30] RSP: 002b:00007fb5ce627f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.593759][ T30] RAX: fffffffffffffffc RBX: 0000000000000008 RCX: 00007fb5cd77dbfb [ 719.617313][ T30] RDX: 00007fb5ce628fe0 RSI: 0000000080085502 RDI: 0000000000000008 [ 719.636252][ T30] RBP: 00007fb5ce628fe0 R08: 0000000000000080 R09: 00007fb5ce627fd8 [ 719.659065][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 719.667116][ T30] R13: 0000000800000000 R14: 0000000000000024 R15: 00007fb5cd7fa273 [ 719.688302][ T30] [ 719.709261][ T30] [ 719.709261][ T30] Showing all locks held in the system: [ 719.717039][ T30] 3 locks held by kworker/0:0/8: [ 719.731807][ T30] 3 locks held by kworker/u8:1/12: [ 719.736988][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 719.757600][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 719.775157][ T30] #2: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 719.784655][ T30] 1 lock held by khungtaskd/30: [ 719.795521][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 719.808610][ T30] 7 locks held by kworker/0:2/937: [ 719.819910][ T30] 2 locks held by getty/4986: [ 719.824637][ T30] #0: ffff88814be3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 719.841495][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 719.857023][ T30] 5 locks held by kworker/0:3/5283: [ 719.864870][ T30] 3 locks held by kworker/0:7/5314: [ 719.873817][ T30] 3 locks held by kworker/0:4/11153: [ 719.881712][ T30] 4 locks held by kworker/u8:9/11473: [ 719.887124][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 719.905355][ T30] #1: ffffc9000340fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 719.917982][ T30] #2: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 719.933654][ T30] #3: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 719.944730][ T30] 1 lock held by syz.3.1436/12345: [ 719.955115][ T30] #0: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 719.967944][ T30] 1 lock held by syz-executor/12445: [ 719.978469][ T30] #0: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 719.990261][ T30] 2 locks held by syz-executor/12594: [ 719.995684][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.011370][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 720.024731][ T30] 2 locks held by syz-executor/12596: [ 720.034014][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.046303][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 720.058893][ T30] 2 locks held by syz-executor/12598: [ 720.068620][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.081896][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 720.093839][ T30] 2 locks held by syz-executor/12600: [ 720.102948][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.116343][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 720.134022][ T30] 2 locks held by syz-executor/12602: [ 720.139778][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.155493][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 720.177183][ T30] 2 locks held by syz-executor/12606: [ 720.187447][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.199600][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.215801][ T30] 2 locks held by syz-executor/12612: [ 720.224532][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.239400][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.260028][ T30] 2 locks held by syz-executor/12618: [ 720.265681][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.283129][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.297812][ T30] 2 locks held by syz-executor/12620: [ 720.305999][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.328189][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.341404][ T30] 2 locks held by syz-executor/12622: [ 720.346836][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.359113][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.375714][ T30] 2 locks held by syz-executor/12632: [ 720.381479][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.397120][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.415743][ T30] 2 locks held by syz-executor/12638: [ 720.422825][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.439113][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.454862][ T30] 2 locks held by syz-executor/12643: [ 720.460627][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.476127][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.494827][ T30] 2 locks held by syz-executor/12648: [ 720.500631][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.516632][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.528278][ T30] 2 locks held by syz-executor/12649: [ 720.541736][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 720.556207][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 720.569942][ T30] [ 720.572310][ T30] ============================================= [ 720.572310][ T30] [ 720.588502][ T30] NMI backtrace for cpu 1 [ 720.592894][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 720.603442][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 720.613527][ T30] Call Trace: [ 720.616830][ T30] [ 720.619780][ T30] dump_stack_lvl+0x241/0x360 [ 720.624495][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.629733][ T30] ? __pfx__printk+0x10/0x10 [ 720.634381][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 720.639367][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 720.644861][ T30] ? _printk+0xd5/0x120 [ 720.649060][ T30] ? __pfx__printk+0x10/0x10 [ 720.653689][ T30] ? __wake_up_klogd+0xcc/0x110 [ 720.658576][ T30] ? __pfx__printk+0x10/0x10 [ 720.663204][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 720.668272][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 720.674284][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 720.680304][ T30] watchdog+0xff4/0x1040 [ 720.684581][ T30] ? watchdog+0x1ea/0x1040 [ 720.689026][ T30] ? __pfx_watchdog+0x10/0x10 [ 720.693750][ T30] kthread+0x2f0/0x390 [ 720.697932][ T30] ? __pfx_watchdog+0x10/0x10 [ 720.702634][ T30] ? __pfx_kthread+0x10/0x10 [ 720.707258][ T30] ret_from_fork+0x4b/0x80 [ 720.711702][ T30] ? __pfx_kthread+0x10/0x10 [ 720.716315][ T30] ret_from_fork_asm+0x1a/0x30 [ 720.721118][ T30] [ 720.725151][ T30] Sending NMI from CPU 1 to CPUs 0: [ 720.730853][ C0] NMI backtrace for cpu 0 [ 720.730868][ C0] CPU: 0 UID: 0 PID: 11153 Comm: kworker/0:4 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 720.730888][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 720.730899][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 720.730925][ C0] RIP: 0010:stack_trace_consume_entry+0x53/0x280 [ 720.730946][ C0] Code: 03 41 0f b6 04 17 84 c0 0f 85 06 01 00 00 44 8b 43 10 48 8d 6b 08 49 89 ec 49 c1 ec 03 41 0f b6 04 14 84 c0 0f 85 1a 01 00 00 <44> 3b 45 00 73 3c 48 8d 7b 0c 49 89 fd 49 c1 ed 03 41 0f b6 44 15 [ 720.730961][ C0] RSP: 0018:ffffc90000006750 EFLAGS: 00000246 [ 720.730975][ C0] RAX: 0000000000000000 RBX: ffffc90000006880 RCX: ffffffff917bb000 [ 720.730988][ C0] RDX: dffffc0000000000 RSI: ffffffff8996243b RDI: ffffc90000006880 [ 720.731000][ C0] RBP: ffffc90000006888 R08: 0000000000000003 R09: ffffc90000006890 [ 720.731013][ C0] R10: ffffc900000067f0 R11: ffffffff8180a0e0 R12: 1ffff92000000d11 [ 720.731026][ C0] R13: ffffffff8180a0e0 R14: ffffc90000006880 R15: 1ffff92000000d12 [ 720.731038][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 720.731053][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.731065][ C0] CR2: 00007feaa9707000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 720.731081][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 720.731091][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 720.731103][ C0] Call Trace: [ 720.731109][ C0] [ 720.731116][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 720.731136][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 720.731158][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 720.731176][ C0] ? nmi_handle+0x2a/0x5a0 [ 720.731200][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 720.731219][ C0] ? nmi_handle+0x14f/0x5a0 [ 720.731235][ C0] ? nmi_handle+0x2a/0x5a0 [ 720.731252][ C0] ? stack_trace_consume_entry+0x53/0x280 [ 720.731270][ C0] ? default_do_nmi+0x63/0x160 [ 720.731289][ C0] ? exc_nmi+0x123/0x1f0 [ 720.731307][ C0] ? end_repeat_nmi+0xf/0x53 [ 720.731323][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 720.731342][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 720.731361][ C0] ? __init_begin+0x41000/0x41000 [ 720.731378][ C0] ? dst_alloc+0x12b/0x190 [ 720.731393][ C0] ? stack_trace_consume_entry+0x53/0x280 [ 720.731411][ C0] ? stack_trace_consume_entry+0x53/0x280 [ 720.731431][ C0] ? stack_trace_consume_entry+0x53/0x280 [ 720.731449][ C0] [ 720.731454][ C0] [ 720.731460][ C0] ? dst_alloc+0x12b/0x190 [ 720.731475][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 720.731493][ C0] arch_stack_walk+0x10e/0x150 [ 720.731512][ C0] ? dst_alloc+0x12b/0x190 [ 720.731529][ C0] stack_trace_save+0x118/0x1d0 [ 720.731546][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 720.731567][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 720.731583][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.731604][ C0] ? ktime_get_with_offset+0x83/0x150 [ 720.731627][ C0] kasan_save_track+0x3f/0x80 [ 720.731648][ C0] ? kasan_save_track+0x3f/0x80 [ 720.731664][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 720.731679][ C0] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 720.731721][ C0] __kasan_slab_alloc+0x66/0x80 [ 720.731737][ C0] ? dst_alloc+0x12b/0x190 [ 720.731752][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 720.731772][ C0] dst_alloc+0x12b/0x190 [ 720.731788][ C0] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 720.731816][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 720.731836][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 720.731856][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 720.731878][ C0] ? __pfx_lock_release+0x10/0x10 [ 720.731897][ C0] ? kthread+0x2f0/0x390 [ 720.731917][ C0] ip_route_output_flow+0x29/0x140 [ 720.731938][ C0] ip_route_me_harder+0x80d/0x1300 [ 720.731963][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 720.731983][ C0] ? trace_kmalloc+0x1f/0xd0 [ 720.732000][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 720.732029][ C0] synproxy_send_tcp+0x356/0x6c0 [ 720.732053][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 720.732079][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 720.732100][ C0] ? synproxy_pernet+0x45/0x270 [ 720.732122][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 720.732144][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 720.732166][ C0] ? nf_ip_checksum+0x13a/0x500 [ 720.732189][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 720.732211][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 720.732234][ C0] ? __pfx_validate_chain+0x10/0x10 [ 720.732256][ C0] nft_do_chain+0x4ad/0x1da0 [ 720.732282][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 720.732301][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 720.732333][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 720.732352][ C0] nft_do_chain_inet+0x418/0x6b0 [ 720.732373][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 720.732392][ C0] ? ipt_do_table+0x312/0x1860 [ 720.732419][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 720.732438][ C0] nf_hook_slow+0xc3/0x220 [ 720.732457][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 720.732474][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 720.732491][ C0] NF_HOOK+0x29e/0x450 [ 720.732509][ C0] ? NF_HOOK+0x9a/0x450 [ 720.732525][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 720.732542][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 720.732562][ C0] ? ip_rcv_finish+0x406/0x560 [ 720.732579][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 720.732596][ C0] NF_HOOK+0x3a4/0x450 [ 720.732612][ C0] ? __lock_acquire+0x1384/0x2050 [ 720.732632][ C0] ? NF_HOOK+0x9a/0x450 [ 720.732653][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 720.732668][ C0] ? ip_rcv_core+0x801/0xd10 [ 720.732686][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 720.732707][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 720.732723][ C0] __netif_receive_skb+0x2bf/0x650 [ 720.732742][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 720.732762][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 720.732779][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 720.732799][ C0] ? __pfx_lock_release+0x10/0x10 [ 720.732820][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 720.732845][ C0] process_backlog+0x662/0x15b0 [ 720.732865][ C0] ? process_backlog+0x33b/0x15b0 [ 720.732887][ C0] ? __pfx_process_backlog+0x10/0x10 [ 720.732905][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 720.732927][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 720.732948][ C0] __napi_poll+0xcb/0x490 [ 720.732967][ C0] net_rx_action+0x89b/0x1240 [ 720.732995][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 720.733014][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 720.733049][ C0] handle_softirqs+0x2c5/0x980 [ 720.733069][ C0] ? do_softirq+0x11b/0x1e0 [ 720.733088][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 720.733111][ C0] do_softirq+0x11b/0x1e0 [ 720.733129][ C0] [ 720.733135][ C0] [ 720.733141][ C0] ? __pfx_do_softirq+0x10/0x10 [ 720.733160][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 720.733181][ C0] ? rcu_is_watching+0x15/0xb0 [ 720.733199][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 720.733218][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 720.733236][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 720.733256][ C0] ? neigh_destroy+0x423/0x580 [ 720.733276][ C0] neigh_periodic_work+0xb35/0xd50 [ 720.733297][ C0] ? process_scheduled_works+0x976/0x1850 [ 720.733317][ C0] process_scheduled_works+0xa63/0x1850 [ 720.733348][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 720.733372][ C0] ? assign_work+0x364/0x3d0 [ 720.733393][ C0] worker_thread+0x870/0xd30 [ 720.733416][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.733437][ C0] ? __kthread_parkme+0x169/0x1d0 [ 720.733458][ C0] ? __pfx_worker_thread+0x10/0x10 [ 720.733477][ C0] kthread+0x2f0/0x390 [ 720.733492][ C0] ? __pfx_worker_thread+0x10/0x10 [ 720.733510][ C0] ? __pfx_kthread+0x10/0x10 [ 720.733526][ C0] ret_from_fork+0x4b/0x80 [ 720.733545][ C0] ? __pfx_kthread+0x10/0x10 [ 720.733560][ C0] ret_from_fork_asm+0x1a/0x30 [ 720.733586][ C0] [ 721.558638][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 721.565547][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 721.576076][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 721.586156][ T30] Call Trace: [ 721.589457][ T30] [ 721.592405][ T30] dump_stack_lvl+0x241/0x360 [ 721.597108][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.602331][ T30] ? __pfx__printk+0x10/0x10 [ 721.606942][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 721.612953][ T30] ? vscnprintf+0x5d/0x90 [ 721.617310][ T30] panic+0x349/0x880 [ 721.621236][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 721.627507][ T30] ? __pfx_panic+0x10/0x10 [ 721.631945][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 721.637344][ T30] ? __irq_work_queue_local+0x137/0x410 [ 721.642921][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 721.648315][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 721.654527][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 721.660724][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 721.666911][ T30] watchdog+0x1033/0x1040 [ 721.671268][ T30] ? watchdog+0x1ea/0x1040 [ 721.675712][ T30] ? __pfx_watchdog+0x10/0x10 [ 721.680418][ T30] kthread+0x2f0/0x390 [ 721.684510][ T30] ? __pfx_watchdog+0x10/0x10 [ 721.689206][ T30] ? __pfx_kthread+0x10/0x10 [ 721.693814][ T30] ret_from_fork+0x4b/0x80 [ 721.698254][ T30] ? __pfx_kthread+0x10/0x10 [ 721.702860][ T30] ret_from_fork_asm+0x1a/0x30 [ 721.707659][ T30] [ 721.710949][ T30] Kernel Offset: disabled [ 721.715275][ T30] Rebooting in 86400 seconds..