last executing test programs: 28.587061579s ago: executing program 4 (id=893): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x891a, 0x0) getpeername$qrtr(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 28.099741728s ago: executing program 4 (id=896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x3a, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x72, &(0x7f00000007c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2, [@srh={0x3c, 0x0, 0x4, 0x0, 0x3, 0x10, 0x761}]}}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x2, 0x300) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r8, 0x63) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) 24.173575714s ago: executing program 4 (id=906): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x891a, 0x0) getpeername$qrtr(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 23.766049161s ago: executing program 4 (id=907): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) close(0xffffffffffffffff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0xe85, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x256f16877c9e1f29, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r6, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 19.111718827s ago: executing program 4 (id=920): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 18.475202555s ago: executing program 4 (id=924): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @pix={0x2, 0x80000020, 0x20, 0x0, 0x0, 0x80000, 0x3}}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x34208482}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x9, 0x9ce, 0x5}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x0) 16.323089936s ago: executing program 0 (id=931): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) close(0xffffffffffffffff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0xe85, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x256f16877c9e1f29, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r6, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.513778605s ago: executing program 0 (id=938): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x3a, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 11.571979829s ago: executing program 1 (id=941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x3a, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x72, &(0x7f00000007c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2, [@srh={0x3c, 0x0, 0x4, 0x0, 0x3, 0x10, 0x761}]}}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x2, 0x300) 9.802890885s ago: executing program 2 (id=947): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @empty, 0x0, 0x3, 'none\x00', 0x20}, 0x2c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 9.509612938s ago: executing program 2 (id=948): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9001) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x2736c9c8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580), 0x4000000000000}) 9.09813558s ago: executing program 0 (id=949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x3a, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x72, &(0x7f00000007c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2, [@srh={0x3c, 0x0, 0x4, 0x0, 0x3, 0x10, 0x761}]}}}}}}}, 0x0) 8.57375192s ago: executing program 3 (id=951): ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x104c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8.405722362s ago: executing program 2 (id=952): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x3a, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x72, &(0x7f00000007c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2, [@srh={0x3c, 0x0, 0x4, 0x0, 0x3, 0x10, 0x761}]}}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x2, 0x300) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) 8.239167617s ago: executing program 3 (id=954): getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000300)=""/147, &(0x7f0000000000)=0x93) fcntl$setown(0xffffffffffffffff, 0x8, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x8, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000006c0)={0x0, 0x0, r5, r6, 0x3, 0x1, 0x80000001, 0x5, {0x4, 0xfff8, 0xfffb, 0x7ff, 0x68, 0xaa, 0x73b6, 0xed, 0x30, 0x4, 0x4, 0x6, 0x9, 0x0, "edf3b72a39fd20b05c922adceb40713de676294e90578c2051c49f221ac766fc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x40, 0x0) membarrier(0x20, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 7.829367457s ago: executing program 1 (id=955): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x891a, 0x0) getpeername$qrtr(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 7.777542778s ago: executing program 3 (id=956): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x3a, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 7.394362563s ago: executing program 1 (id=957): bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x7, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x24, r0, 0x1, 0x0, 0x0, {{0xa}, {@void, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0xfffffeec}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[], 0x2a, 0xfffffffffffffffc) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2b}, {[@dstopts={0x6, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0xb9}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo, @ra={0x5, 0x2, 0xfffe}]}]}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000202001800ffffffffff"], 0x80}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0x0, @in6=@private1}]}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x108}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5.850737845s ago: executing program 0 (id=958): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(0x0, 0x490a80, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x856d}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'pimreg1\x00'}}, 0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x94, &(0x7f0000000100)={0xb, 0x7f, 0xa}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) read(r6, &(0x7f0000000200)=""/145, 0x91) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0x7) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 5.489071193s ago: executing program 1 (id=959): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00629a7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r2, 0x5410, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0b2dcd1abe343c03ae55060c18e1a86a36a4ec"}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300627269646765300000000000efffffff07000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e002176820ecc76c0b0f938f1a2bd6fc37110017f"], 0x1c}}, 0x0) (async) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4079, 0x1000}], 0x1}}], 0x800000000000270, 0x100, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000040)={0x6, 'veth1_to_batadv\x00', {0xbc0}}) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x2000000000000000, 0xef6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1], 0x0, 0xc200}) (async) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000000)=0x7) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0x8004ae98, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x5000}}) 4.489108546s ago: executing program 2 (id=960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x3a, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 4.487413232s ago: executing program 1 (id=969): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x3a, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x72, &(0x7f00000007c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2, [@srh={0x3c, 0x0, 0x4, 0x0, 0x3, 0x10, 0x761}]}}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x2, 0x300) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) 4.397442326s ago: executing program 3 (id=961): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r8, 0x3, 0x13, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r8, 0x1000008, 0x13, r4, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRES8]) syz_open_dev$dri(&(0x7f0000000000), 0x40, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000440)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0x10, 0x0, 0x0) 3.481427686s ago: executing program 0 (id=962): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) syz_io_uring_setup(0x437a, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xec, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (fail_nth: 7) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) 2.737884101s ago: executing program 3 (id=963): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x222800, 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0\x00') 2.691206065s ago: executing program 0 (id=964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x3a, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x72, &(0x7f00000007c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2, [@srh={0x3c, 0x0, 0x4, 0x0, 0x3, 0x10, 0x761}]}}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x2, 0x300) 2.461581389s ago: executing program 3 (id=965): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000080)=0x9e1, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x13, r4, 0x2, &(0x7f0000000740)={0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="9bb57eac789c48e6d227be87fe8e1c096b13b8f46077cc4055fa27f7ebcbc7ced1668929ab3e8ee0fd51570a316c6b6a8fd436fe460c57f26b51c2777dfe8f9c0e3f54dc2d4d1325b0e075403e499e8ea4ac7c01621470aadf524fdbee64bf13d2f6c27e2ad074521e5e935ab6d47a64f02d234afa098ec53867d4dccc05191f2ed4893a435f6f5a87aa5161f08a6a24c24b7faad10ef760eb0be35a8d024a156cf2960d5c4e90c0f2e8ab6553f0f1e1289ff8b78f83ca536fabe98a758825", @ANYRES16=r6, @ANYBLOB="0100fdffffff000000002a000000"], 0x14}}, 0x40480c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 508.728557ms ago: executing program 2 (id=966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x891a, 0x0) getpeername$qrtr(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 244.303235ms ago: executing program 1 (id=967): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) close(0xffffffffffffffff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0xe85, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x256f16877c9e1f29, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r6, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 2 (id=968): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x52, "0300fe96fcb7012ebf8000000000000000bf08000000bb907516f4fe46360373de078aff1d80a13538990a2df3441cc68ef0be411fc32d4de1156dc2e19efe362934b3e64acb33a6926dc54c5678a3770696"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x3a, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x72, &(0x7f00000007c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2, [@srh={0x3c, 0x0, 0x4, 0x0, 0x3, 0x10, 0x761}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ve_0: left promiscuous mode [ 277.200746][ T9108] team_slave_1: left promiscuous mode [ 277.577131][ T11] bridge_slave_1: left allmulticast mode [ 277.583752][ T11] bridge_slave_1: left promiscuous mode [ 277.589598][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.653456][ T11] bridge_slave_0: left allmulticast mode [ 277.662334][ T11] bridge_slave_0: left promiscuous mode [ 277.666486][ T9128] cgroup: fork rejected by pids controller in /syz3 [ 277.678702][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.716053][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.723901][ T9128] sctp: [Deprecated]: syz.3.784 (pid 9128) Use of int in max_burst socket option. [ 277.723901][ T9128] Use struct sctp_assoc_value instead [ 277.742381][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.754223][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.762666][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.771074][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.779797][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.791260][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.800699][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.809059][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.816679][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.824087][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.831718][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.839346][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.846845][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.854250][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.863434][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.871782][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.880785][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.890629][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.899728][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.908160][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.922641][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.930927][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.939438][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.947583][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.955591][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.963833][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.972849][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.980414][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.988917][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 277.999299][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.007671][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.017165][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.024740][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.042340][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.049804][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.064693][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.075360][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.084736][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.093069][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.103447][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.112178][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.121654][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.133584][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.141622][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.149196][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.157039][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.164454][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.172107][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.179845][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.222083][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.262706][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.285599][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.293023][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.307847][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.328118][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.395124][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.404075][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.413297][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.439447][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.446955][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.454369][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.455047][ T29] audit: type=1326 audit(1729069678.322:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.786" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x0 [ 278.461852][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.490648][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.498615][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.508824][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.516478][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.523954][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.531442][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.538939][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.546432][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.553835][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.561361][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.573161][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.580666][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.588143][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.596121][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.604289][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.612673][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.621084][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.628543][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.636031][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.644694][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.652108][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.659737][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.667211][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.674714][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.682117][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.689596][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.697080][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.704712][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.712677][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.721066][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.734737][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.742149][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.749599][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.757080][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.764485][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.773642][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.782844][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.790294][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.797783][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.805302][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.814597][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.822009][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.829581][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.837067][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.844479][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.851963][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.859453][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.866967][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.880161][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.887609][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.896647][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.905199][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.914453][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.921958][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.929758][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.937265][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.944755][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.952153][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.959604][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.967060][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.975291][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.976479][ T5238] Bluetooth: hci4: command tx timeout [ 278.982676][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 278.996569][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.004061][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.011546][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.019524][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.027880][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.035391][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.042797][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.050273][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.057853][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.065312][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.072716][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.080249][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.087696][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.095171][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.102598][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.110048][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.117579][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.125971][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.135913][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.143683][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.151213][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.158694][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.166170][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.173580][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.181062][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.188544][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.196031][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.203435][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.210914][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.218641][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.226722][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.235490][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.242904][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.250420][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.261460][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.269504][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.277011][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.284420][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.291885][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.299418][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.306884][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.314869][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.324212][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.334307][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.344456][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.351923][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.359397][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.366865][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.375142][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.382580][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.390111][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.397639][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.405084][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.413738][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.421282][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.429347][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.437749][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.445171][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.452537][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.460091][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.474866][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.483772][ T936] hid-generic 0081:0001:0002.000B: unknown main item tag 0x0 [ 279.492216][ T5281] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 279.508992][ T936] hid-generic 0081:0001:0002.000B: hidraw0: HID v0.08 Device [syz0] on syz1 [ 279.674804][ T1850] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 279.766778][ T5281] usb 1-1: config 0 has no interfaces? [ 279.783821][ T5281] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 279.793876][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.805026][ T5281] usb 1-1: Product: syz [ 279.816916][ T5281] usb 1-1: Manufacturer: syz [ 279.821526][ T5281] usb 1-1: SerialNumber: syz [ 279.847314][ T5281] usb 1-1: config 0 descriptor?? [ 279.882027][ T1850] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 279.905158][ T1850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.913190][ T1850] usb 5-1: Product: syz [ 279.926228][ T1850] usb 5-1: Manufacturer: syz [ 279.930884][ T1850] usb 5-1: SerialNumber: syz [ 279.944199][ T1850] usb 5-1: config 0 descriptor?? [ 280.053810][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.172847][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.229699][ T11] bond0 (unregistering): Released all slaves [ 280.268675][ T9116] chnl_net:caif_netlink_parms(): no params data found [ 280.411374][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.418855][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.452327][ T11] : left promiscuous mode [ 280.464898][ T1850] hso 5-1:0.0: Failed to find BULK IN ep [ 280.475826][ T1850] usb-storage 5-1:0.0: USB Mass Storage device detected [ 281.055501][ T5238] Bluetooth: hci4: command tx timeout [ 281.375367][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.410881][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.479521][ T9116] bridge_slave_0: entered allmulticast mode [ 281.502982][ T9116] bridge_slave_0: entered promiscuous mode [ 281.554179][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.607512][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.641397][ T9116] bridge_slave_1: entered allmulticast mode [ 281.665721][ T9116] bridge_slave_1: entered promiscuous mode [ 281.900348][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.939433][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.963340][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.977789][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.988717][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.996947][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.076277][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.080535][ T9116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.104391][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.115966][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.131971][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.142702][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.151644][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.196527][ T11] hsr_slave_0: left promiscuous mode [ 282.229625][ T11] hsr_slave_1: left promiscuous mode [ 282.261733][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.284770][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.312193][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.328929][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.381265][ T11] veth1_macvtap: left promiscuous mode [ 282.391697][ T11] veth0_macvtap: left promiscuous mode [ 282.412473][ T936] usb 1-1: USB disconnect, device number 43 [ 282.427127][ T11] veth1_vlan: left promiscuous mode [ 282.432399][ T11] veth0_vlan: left promiscuous mode [ 282.553253][ T1850] usb 5-1: USB disconnect, device number 45 [ 283.015524][ T5281] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 283.074810][ T936] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 283.134805][ T5238] Bluetooth: hci4: command tx timeout [ 283.198657][ T5281] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 283.255447][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.315287][ T936] usb 1-1: config 0 has no interfaces? [ 283.324331][ T5281] usb 5-1: config 0 descriptor?? [ 283.333142][ T936] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 283.342892][ T5281] cp210x 5-1:0.0: cp210x converter detected [ 283.381051][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.470623][ T936] usb 1-1: Product: syz [ 283.487239][ T936] usb 1-1: Manufacturer: syz [ 283.491906][ T936] usb 1-1: SerialNumber: syz [ 283.510437][ T936] usb 1-1: config 0 descriptor?? [ 283.967524][ T11] team0 (unregistering): Port device team_slave_1 removed [ 283.979654][ T5281] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 283.994126][ T5281] cp210x 5-1:0.0: querying part number failed [ 284.015168][ T5238] Bluetooth: hci0: command tx timeout [ 284.044725][ T5281] usb 5-1: cp210x converter now attached to ttyUSB0 [ 284.175067][ T5238] Bluetooth: hci3: command tx timeout [ 284.240379][ T11] team0 (unregistering): Port device team_slave_0 removed [ 285.214748][ T5238] Bluetooth: hci4: command tx timeout [ 285.334447][ T9116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.483945][ T9116] team0: Port device team_slave_0 added [ 285.533816][ T9116] team0: Port device team_slave_1 added [ 285.705763][ T5281] usb 1-1: USB disconnect, device number 44 [ 285.723635][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.786322][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.915569][ T9198] ======================================================= [ 285.915569][ T9198] WARNING: The mand mount option has been deprecated and [ 285.915569][ T9198] and is ignored by this kernel. Remove the mand [ 285.915569][ T9198] option from the mount to silence this warning. [ 285.915569][ T9198] ======================================================= [ 285.925728][ T9116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.027842][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.064640][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.096171][ T5238] Bluetooth: hci0: command tx timeout [ 286.145235][ T9116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.230565][ T11] IPVS: stop unused estimator thread 0... [ 286.254690][ T5238] Bluetooth: hci3: command tx timeout [ 286.325025][ T1850] usb 5-1: USB disconnect, device number 46 [ 286.360058][ T1850] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 286.427314][ T9116] hsr_slave_0: entered promiscuous mode [ 286.445061][ T1850] cp210x 5-1:0.0: device disconnected [ 286.454061][ T9116] hsr_slave_1: entered promiscuous mode [ 286.479521][ T9116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.503887][ T9116] Cannot create hsr debugfs directory [ 286.626268][ T5281] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 286.792046][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.816817][ T5281] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 286.827426][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.836491][ T5281] usb 1-1: Product: syz [ 286.841421][ T5281] usb 1-1: Manufacturer: syz [ 286.849304][ T5281] usb 1-1: SerialNumber: syz [ 286.860696][ T9176] chnl_net:caif_netlink_parms(): no params data found [ 286.864617][ T5281] usb 1-1: config 0 descriptor?? [ 286.894814][ T1850] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 287.094715][ T1850] usb 5-1: Using ep0 maxpacket: 16 [ 287.118820][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.153689][ T1850] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 287.191412][ T46] usb 1-1: USB disconnect, device number 45 [ 287.201307][ T1850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.253143][ T1850] usb 5-1: Product: syz [ 287.270954][ T1850] usb 5-1: Manufacturer: syz [ 287.286763][ T1850] usb 5-1: SerialNumber: syz [ 287.298240][ T1850] usb 5-1: config 0 descriptor?? [ 287.313761][ T1850] ums-freecom 5-1:0.0: USB Mass Storage device detected [ 287.407692][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.458393][ T9174] chnl_net:caif_netlink_parms(): no params data found [ 287.648433][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.813911][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.823275][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.831004][ T9176] bridge_slave_0: entered allmulticast mode [ 287.851946][ T9176] bridge_slave_0: entered promiscuous mode [ 288.034852][ T5281] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 288.060819][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.068369][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.091249][ T9176] bridge_slave_1: entered allmulticast mode [ 288.111709][ T9176] bridge_slave_1: entered promiscuous mode [ 288.178141][ T46] usb 5-1: USB disconnect, device number 47 [ 288.178880][ T5238] Bluetooth: hci0: command tx timeout [ 288.219351][ T5281] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 288.232469][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.243713][ T5281] usb 1-1: Product: syz [ 288.249322][ T5281] usb 1-1: Manufacturer: syz [ 288.254078][ T5281] usb 1-1: SerialNumber: syz [ 288.267762][ T5281] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 288.283438][ T936] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 288.345076][ T5238] Bluetooth: hci3: command tx timeout [ 288.402944][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.419181][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.573542][ T9249] fuse: Bad value for 'fd' [ 288.603991][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.611610][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.620326][ T9174] bridge_slave_0: entered allmulticast mode [ 288.628590][ T9174] bridge_slave_0: entered promiscuous mode [ 288.651075][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.666413][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.686656][ T9174] bridge_slave_1: entered allmulticast mode [ 288.707591][ T9174] bridge_slave_1: entered promiscuous mode [ 288.803785][ T9176] team0: Port device team_slave_0 added [ 288.891368][ T9176] team0: Port device team_slave_1 added [ 288.958159][ T9174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.987197][ T9174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.081972][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.093056][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.121695][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.250502][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.285254][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.340735][ T5281] usb 1-1: USB disconnect, device number 46 [ 289.385103][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.385782][ T936] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 289.445502][ T936] ath9k_htc: Failed to initialize the device [ 289.459127][ T5281] usb 1-1: ath9k_htc: USB layer deinitialized [ 289.485286][ T1850] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 289.529866][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.600898][ T9174] team0: Port device team_slave_0 added [ 289.622776][ T9174] team0: Port device team_slave_1 added [ 289.673935][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'. [ 289.714406][ T1850] usb 5-1: config 0 has no interfaces? [ 289.753381][ T1850] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.763307][ T1850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.772355][ T1850] usb 5-1: Product: syz [ 289.794237][ T1850] usb 5-1: Manufacturer: syz [ 289.820106][ T1850] usb 5-1: SerialNumber: syz [ 289.821629][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.862994][ T1850] usb 5-1: config 0 descriptor?? [ 290.043968][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.162009][ T9176] hsr_slave_0: entered promiscuous mode [ 290.206710][ T9176] hsr_slave_1: entered promiscuous mode [ 290.266477][ T5238] Bluetooth: hci0: command tx timeout [ 290.274270][ T9176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.295761][ T9176] Cannot create hsr debugfs directory [ 290.321906][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.361655][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.387575][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.416648][ T5238] Bluetooth: hci3: command tx timeout [ 290.463099][ T9174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.651347][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.782895][ T9116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.812162][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.844686][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.886413][ T9174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.970987][ T9116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.028404][ T9116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.040542][ T9116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.176536][ T9174] hsr_slave_0: entered promiscuous mode [ 291.187171][ T9174] hsr_slave_1: entered promiscuous mode [ 291.208745][ T9174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.227081][ T9174] Cannot create hsr debugfs directory [ 291.286783][ T11] bridge_slave_1: left allmulticast mode [ 291.293505][ T11] bridge_slave_1: left promiscuous mode [ 291.319809][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.344230][ T11] bridge_slave_0: left allmulticast mode [ 291.350943][ T11] bridge_slave_0: left promiscuous mode [ 291.357368][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.376257][ T11] bridge_slave_1: left allmulticast mode [ 291.382767][ T11] bridge_slave_1: left promiscuous mode [ 291.390756][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.400329][ T11] bridge_slave_0: left allmulticast mode [ 291.408330][ T11] bridge_slave_0: left promiscuous mode [ 291.414023][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.566046][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 291.742142][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.761286][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.785317][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 291.822415][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.847454][ T9] usb 1-1: config 0 descriptor?? [ 292.146999][ T5280] usb 5-1: USB disconnect, device number 48 [ 292.614669][ T5280] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 292.791753][ T5280] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 292.801321][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.827577][ T5280] usb 5-1: Product: syz [ 292.832808][ T5280] usb 5-1: Manufacturer: syz [ 292.838006][ T5280] usb 5-1: SerialNumber: syz [ 292.861218][ T5280] usb 5-1: config 0 descriptor?? [ 292.900424][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.969253][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.993526][ T11] bond0 (unregistering): Released all slaves [ 293.169481][ T5300] usb 5-1: USB disconnect, device number 49 [ 293.369214][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.397796][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.412747][ T11] bond0 (unregistering): Released all slaves [ 293.449101][ T9285] netlink: 24062 bytes leftover after parsing attributes in process `syz.0.809'. [ 293.474792][ T9285] netlink: 188348 bytes leftover after parsing attributes in process `syz.0.809'. [ 293.611242][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 293.637479][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 293.674975][ T9] usb 1-1: USB disconnect, device number 47 [ 294.669735][ T11] hsr_slave_0: left promiscuous mode [ 294.687746][ T936] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 294.713282][ T11] hsr_slave_1: left promiscuous mode [ 294.719827][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.744677][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.785857][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.812897][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.842044][ T11] hsr_slave_0: left promiscuous mode [ 294.861369][ T936] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 294.871453][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.880096][ T936] usb 1-1: Product: syz [ 294.884652][ T936] usb 1-1: Manufacturer: syz [ 294.889853][ T936] usb 1-1: SerialNumber: syz [ 294.899423][ T936] usb 1-1: config 0 descriptor?? [ 294.977290][ T11] hsr_slave_1: left promiscuous mode [ 294.999448][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.054816][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.080860][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.104774][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.197327][ T936] hso 1-1:0.0: Failed to find BULK IN ep [ 295.203500][ T11] veth1_macvtap: left promiscuous mode [ 295.214721][ T11] veth0_macvtap: left promiscuous mode [ 295.220393][ T11] veth1_vlan: left promiscuous mode [ 295.225968][ T11] veth0_vlan: left promiscuous mode [ 295.235514][ T936] usb-storage 1-1:0.0: USB Mass Storage device detected [ 295.263788][ T11] veth1_macvtap: left promiscuous mode [ 295.298010][ T11] veth0_macvtap: left promiscuous mode [ 295.303569][ T11] veth1_vlan: left promiscuous mode [ 295.332229][ T11] veth0_vlan: left promiscuous mode [ 296.034675][ T1850] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 296.301155][ T1850] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 296.310343][ T1850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.329726][ T1850] usb 5-1: Product: syz [ 296.337005][ T1850] usb 5-1: Manufacturer: syz [ 296.347436][ T1850] usb 5-1: SerialNumber: syz [ 296.359777][ T1850] usb 5-1: config 0 descriptor?? [ 296.646439][ T1850] hso 5-1:0.0: Failed to find BULK IN ep [ 296.656971][ T1850] usb-storage 5-1:0.0: USB Mass Storage device detected [ 296.982732][ T11] team0 (unregistering): Port device team_slave_1 removed [ 297.068808][ T11] team0 (unregistering): Port device team_slave_0 removed [ 298.043465][ T46] usb 1-1: USB disconnect, device number 48 [ 298.696210][ T11] team0 (unregistering): Port device team_slave_1 removed [ 298.758802][ T11] team0 (unregistering): Port device team_slave_0 removed [ 298.900376][ T5236] Bluetooth: hci5: command 0x0406 tx timeout [ 299.408746][ T1850] usb 5-1: USB disconnect, device number 50 [ 299.857484][ T9176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 299.885176][ T1850] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 299.907989][ T9176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 299.921081][ T9176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 299.949865][ T9324] netlink: 68 bytes leftover after parsing attributes in process `syz.0.820'. [ 300.030998][ T9176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.072941][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.089763][ T1850] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 300.114754][ T1850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.124659][ T1850] usb 5-1: Product: syz [ 300.137250][ T1850] usb 5-1: Manufacturer: syz [ 300.141880][ T1850] usb 5-1: SerialNumber: syz [ 300.159001][ T1850] usb 5-1: config 0 descriptor?? [ 300.308834][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.425134][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.432260][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.440192][ T5280] usb 5-1: USB disconnect, device number 51 [ 300.482720][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.489880][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.585706][ T9116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.596210][ T9116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.617004][ T9116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.648821][ T9116] veth0_vlan: entered promiscuous mode [ 300.659762][ T9116] veth1_vlan: entered promiscuous mode [ 300.680768][ T9116] veth0_macvtap: entered promiscuous mode [ 300.689801][ T9116] veth1_macvtap: entered promiscuous mode [ 300.705155][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.715632][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.725991][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.737140][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.747256][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.758010][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.768175][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.779151][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.789243][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.799966][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.814820][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.824281][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.835326][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.845964][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.856471][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.866348][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.876829][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.886755][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.897399][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.907301][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.917920][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.930017][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.946119][ T9116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.954881][ T9116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.963724][ T9116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.972497][ T9116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.034046][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.140023][ T9176] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.303457][ T9347] macvlan2: entered promiscuous mode [ 301.324204][ T9347] macvlan2: entered allmulticast mode [ 301.417329][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.424464][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.491949][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.500195][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.533926][ T9176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.545067][ T9176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.727899][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.746398][ T9359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.762235][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.827721][ T9176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.847323][ T9174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.880801][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.913494][ T9174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.922200][ T11] IPVS: stop unused estimator thread 0... [ 301.938600][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.956303][ T9174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.035995][ T9174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 302.085620][ T9176] veth0_vlan: entered promiscuous mode [ 302.169733][ T9176] veth1_vlan: entered promiscuous mode [ 302.229228][ T9375] netlink: 24062 bytes leftover after parsing attributes in process `syz.1.774'. [ 302.242452][ T9375] netlink: 188348 bytes leftover after parsing attributes in process `syz.1.774'. [ 302.254691][ T5300] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 302.291219][ T9176] veth0_macvtap: entered promiscuous mode [ 302.330662][ T9176] veth1_macvtap: entered promiscuous mode [ 302.418666][ T9] IPVS: starting estimator thread 0... [ 302.452378][ T5300] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 302.495700][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.506968][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.524974][ T9378] IPVS: using max 18 ests per chain, 43200 per kthread [ 302.525655][ T5300] usb 5-1: Product: syz [ 302.532540][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.536092][ T5300] usb 5-1: Manufacturer: syz [ 302.536112][ T5300] usb 5-1: SerialNumber: syz [ 302.537981][ T5300] usb 5-1: config 0 descriptor?? [ 302.582345][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.638315][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.673688][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.685683][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 302.734084][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.761060][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.777114][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.801872][ T5300] hso 5-1:0.0: Failed to find BULK IN ep [ 302.808932][ T5300] usb-storage 5-1:0.0: USB Mass Storage device detected [ 302.816176][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.822568][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.859005][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.880972][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.899371][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.913764][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.945913][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 302.954636][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.958517][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.994352][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.995628][ T9] usb 2-1: config 0 descriptor?? [ 303.110531][ T9174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.152641][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.245830][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.267465][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.282134][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.296370][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.312822][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.323952][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.340887][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.352993][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.407977][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.490295][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.538799][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.631195][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.691388][ T9176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.746073][ T9176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.780734][ T9176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.829433][ T9176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.882874][ T9174] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.014710][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 304.031071][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 304.074425][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.112057][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.119189][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.188839][ T9] usb 2-1: USB disconnect, device number 50 [ 304.228305][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.235485][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.427557][ T9174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.441401][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.457551][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.593085][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.607631][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.683146][ T9174] veth0_vlan: entered promiscuous mode [ 304.744317][ T9174] veth1_vlan: entered promiscuous mode [ 304.805653][ T1850] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 304.921520][ T9174] veth0_macvtap: entered promiscuous mode [ 304.937491][ T9174] veth1_macvtap: entered promiscuous mode [ 305.047063][ T9412] binder: 9411:9412 ioctl c0306201 20000080 returned -14 [ 305.112019][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.124826][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.152447][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.164751][ T6708] usb 5-1: USB disconnect, device number 52 [ 305.174717][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.184680][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.195478][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.205458][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.216412][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.226506][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.237888][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.248591][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.259155][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.274079][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.284843][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.296489][ T9174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.306566][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.317107][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.326995][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.338276][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.348999][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.359521][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.369416][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.380461][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.390540][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.401289][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.404815][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 305.411366][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.429654][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.439763][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.451427][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.464386][ T9174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.543233][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 305.568642][ T1850] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 305.578767][ T1850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.588734][ T1850] usb 1-1: Product: syz [ 305.589663][ T9409] netlink: 'syz.3.793': attribute type 25 has an invalid length. [ 305.592907][ T1850] usb 1-1: Manufacturer: syz [ 305.592927][ T1850] usb 1-1: SerialNumber: syz [ 305.616391][ T1850] usb 1-1: config 0 descriptor?? [ 305.709723][ T9409] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.719252][ T9409] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.728360][ T9409] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.737329][ T9409] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.768023][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 305.779043][ T9174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.790102][ T9174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.804152][ T9174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.830694][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.861046][ T9174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.903579][ T9] usb 2-1: Product: syz [ 305.931946][ T9] usb 2-1: Manufacturer: syz [ 305.961558][ T1850] hso 1-1:0.0: Failed to find BULK IN ep [ 305.974940][ T9] usb 2-1: SerialNumber: syz [ 305.992730][ T9] usb 2-1: config 0 descriptor?? [ 306.052806][ T1850] usb-storage 1-1:0.0: USB Mass Storage device detected [ 306.128475][ T46] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 306.345387][ T46] usb 5-1: config 0 has no interfaces? [ 306.366121][ T46] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 306.377900][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.394275][ T1850] usb 2-1: USB disconnect, device number 51 [ 306.403413][ T46] usb 5-1: Product: syz [ 306.430507][ T46] usb 5-1: Manufacturer: syz [ 306.436123][ T46] usb 5-1: SerialNumber: syz [ 306.455265][ T46] usb 5-1: config 0 descriptor?? [ 306.504792][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.541464][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.683845][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.799347][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.845277][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 307.018294][ T9] usb 4-1: config 0 has no interfaces? [ 307.033386][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 307.105778][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.116713][ T9] usb 4-1: Product: syz [ 307.120917][ T9] usb 4-1: Manufacturer: syz [ 307.127915][ T9] usb 4-1: SerialNumber: syz [ 307.135314][ T9] usb 4-1: config 0 descriptor?? [ 307.524748][ T5277] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 307.692472][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.699887][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.821747][ T5277] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 307.834738][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.844780][ T5277] usb 2-1: Product: syz [ 307.854752][ T1850] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 307.862442][ T5277] usb 2-1: Manufacturer: syz [ 307.867194][ T5277] usb 2-1: SerialNumber: syz [ 307.903743][ T9] usb 1-1: USB disconnect, device number 49 [ 307.925876][ T5277] usb 2-1: config 0 descriptor?? [ 308.153975][ T1850] usb 3-1: config 0 has no interfaces? [ 308.175665][ T5277] hso 2-1:0.0: Failed to find BULK IN ep [ 308.251287][ T5277] usb-storage 2-1:0.0: USB Mass Storage device detected [ 308.260585][ T1850] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 308.272271][ T1850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.281605][ T1850] usb 3-1: Product: syz [ 308.325210][ T1850] usb 3-1: Manufacturer: syz [ 308.329908][ T1850] usb 3-1: SerialNumber: syz [ 308.415424][ T1850] usb 3-1: config 0 descriptor?? [ 308.634722][ T5281] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 308.795873][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.803387][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.827140][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.888960][ T5281] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.906675][ T5281] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.919607][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.930964][ T5281] usb 1-1: config 0 descriptor?? [ 309.389751][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.418277][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.655319][ T9472] Cannot find add_set index 0 as target [ 309.779504][ T936] usb 4-1: USB disconnect, device number 56 [ 309.886787][ T5281] usbhid 1-1:0.0: can't add hid device: -71 [ 309.911351][ T5281] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 309.929623][ T5281] usb 1-1: USB disconnect, device number 50 [ 310.060046][ T936] usb 5-1: USB disconnect, device number 53 [ 310.575338][ T5277] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 310.642717][ T46] usb 2-1: USB disconnect, device number 52 [ 310.664409][ T1850] usb 3-1: USB disconnect, device number 35 [ 310.780890][ T5277] usb 5-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 310.795125][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 310.838339][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.889169][ T5277] usb 5-1: Product: syz [ 310.905326][ T5277] usb 5-1: Manufacturer: syz [ 310.910017][ T5277] usb 5-1: SerialNumber: syz [ 310.925987][ T9] usb 4-1: device descriptor read/64, error -71 [ 310.956791][ T5277] usb 5-1: config 0 descriptor?? [ 310.970157][ T5277] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 310.979136][ T5277] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 310.990395][ T5277] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 310.998321][ T5277] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 311.006232][ T5277] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 311.014121][ T5277] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 311.022194][ T5277] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 311.030127][ T5277] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 311.043106][ T5277] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 311.145566][ T5300] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 311.168013][ T936] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 311.185614][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 311.313679][ T5281] usb 5-1: USB disconnect, device number 54 [ 311.326238][ T5281] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 311.336573][ T9] usb 4-1: device descriptor read/64, error -71 [ 311.348457][ T5281] keyspan 5-1:0.0: device disconnected [ 311.394893][ T936] usb 3-1: Using ep0 maxpacket: 8 [ 311.402100][ T936] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 311.416098][ T936] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 311.427409][ T936] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 311.438928][ T936] usb 3-1: config 250 has no interface number 0 [ 311.446086][ T9] usb usb4-port1: attempt power cycle [ 311.453449][ T936] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 311.465365][ T5300] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 311.465399][ T5300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.465422][ T5300] usb 1-1: Product: syz [ 311.465437][ T5300] usb 1-1: Manufacturer: syz [ 311.465454][ T5300] usb 1-1: SerialNumber: syz [ 311.467360][ T5300] usb 1-1: config 0 descriptor?? [ 311.536204][ T936] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 311.546845][ T936] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 311.554864][ T6708] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 311.557269][ T936] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 311.579385][ T936] usb 3-1: config 250 interface 228 has no altsetting 0 [ 311.590828][ T936] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 311.602207][ T936] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 311.611982][ T936] usb 3-1: Product: syz [ 311.619357][ T936] usb 3-1: SerialNumber: syz [ 311.636354][ T936] hub 3-1:250.228: bad descriptor, ignoring hub [ 311.642655][ T936] hub 3-1:250.228: probe with driver hub failed with error -5 [ 311.737698][ T6708] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 311.749172][ T5300] hso 1-1:0.0: Failed to find BULK IN ep [ 311.767917][ T6708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.787836][ T6708] usb 2-1: Product: syz [ 311.796661][ T6708] usb 2-1: Manufacturer: syz [ 311.803143][ T5300] usb-storage 1-1:0.0: USB Mass Storage device detected [ 311.804705][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 311.840736][ T6708] usb 2-1: SerialNumber: syz [ 311.844840][ T936] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 311.887022][ T9] usb 4-1: device descriptor read/8, error -71 [ 311.919723][ T6708] usb 2-1: config 0 descriptor?? [ 312.094472][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.124987][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.155180][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 312.224922][ C0] usblp0: nonzero read bulk status received: -71 [ 312.237622][ T9] usb 4-1: device descriptor read/8, error -71 [ 312.270937][ T936] usb 2-1: USB disconnect, device number 53 [ 312.357202][ T5280] usb 3-1: USB disconnect, device number 36 [ 312.365418][ T9] usb usb4-port1: unable to enumerate USB device [ 312.403305][ T5280] usblp0: removed [ 312.715322][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 312.962065][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 313.020830][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.034322][ T9] usb 5-1: Product: syz [ 313.043012][ T9] usb 5-1: Manufacturer: syz [ 313.051518][ T9] usb 5-1: SerialNumber: syz [ 313.065987][ T9] usb 5-1: config 0 descriptor?? [ 313.236194][ T9507] loop9: detected capacity change from 0 to 7 [ 313.270917][ T9507] Dev loop9: unable to read RDB block 7 [ 313.277488][ T9507] loop9: unable to read partition table [ 313.283290][ T9507] loop9: partition table beyond EOD, truncated [ 313.307895][ T9507] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 313.307895][ T9507] ) failed (rc=-5) [ 313.622900][ T9] hso 5-1:0.0: Failed to find BULK IN ep [ 313.635284][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 313.825787][ T9] usb 1-1: USB disconnect, device number 51 [ 313.957728][ T9525] pimreg: entered allmulticast mode [ 313.971016][ T9525] pimreg: left allmulticast mode [ 314.155104][ T936] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 314.369345][ T9533] FAULT_INJECTION: forcing a failure. [ 314.369345][ T9533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.425027][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.0.853 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 314.435711][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 314.445798][ T9533] Call Trace: [ 314.449084][ T9533] [ 314.452007][ T9533] dump_stack_lvl+0x241/0x360 [ 314.456680][ T9533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.461869][ T9533] ? __pfx__printk+0x10/0x10 [ 314.466450][ T9533] ? __pfx_lock_release+0x10/0x10 [ 314.471472][ T9533] should_fail_ex+0x3b0/0x4e0 [ 314.476146][ T9533] _copy_from_user+0x2f/0xe0 [ 314.480733][ T9533] get_compat_msghdr+0xae/0x730 [ 314.485576][ T9533] ? __fget_files+0x29/0x470 [ 314.490159][ T9533] ? __pfx_get_compat_msghdr+0x10/0x10 [ 314.495624][ T9533] ? __fget_files+0x3f3/0x470 [ 314.500324][ T9533] __sys_sendmsg+0x25d/0x380 [ 314.505047][ T9533] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.510157][ T9533] ? __pfx_vfs_write+0x10/0x10 [ 314.514926][ T9533] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 314.521522][ T9533] ? lockdep_hardirqs_on+0x99/0x150 [ 314.526724][ T9533] __do_fast_syscall_32+0xb4/0x110 [ 314.531841][ T9533] ? exc_page_fault+0x590/0x8c0 [ 314.536696][ T9533] do_fast_syscall_32+0x34/0x80 [ 314.541567][ T9533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.547911][ T9533] RIP: 0023:0xf748d579 [ 314.551992][ T9533] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 314.571590][ T9533] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 314.579998][ T9533] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 314.587963][ T9533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.595923][ T9533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.603887][ T9533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.611846][ T9533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.619814][ T9533] [ 314.874666][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 314.882444][ T5280] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 314.912874][ T936] usb 4-1: config 0 has no interfaces? [ 314.925816][ T936] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 314.940207][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.953467][ T936] usb 4-1: Product: syz [ 314.967128][ T936] usb 4-1: Manufacturer: syz [ 315.021822][ T936] usb 4-1: SerialNumber: syz [ 315.045760][ T9] usb 3-1: device descriptor read/64, error -71 [ 315.056970][ T936] usb 4-1: config 0 descriptor?? [ 315.135929][ T5280] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 315.159625][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.191561][ T5280] usb 2-1: Product: syz [ 315.212766][ T5280] usb 2-1: Manufacturer: syz [ 315.225852][ T5280] usb 2-1: SerialNumber: syz [ 315.252100][ T5280] usb 2-1: config 0 descriptor?? [ 315.315696][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 315.434820][ T5281] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 315.456452][ T9] usb 3-1: device descriptor read/64, error -71 [ 315.567464][ T9] usb usb3-port1: attempt power cycle [ 315.574716][ T5281] usb 1-1: device descriptor read/64, error -71 [ 315.614123][ T5280] hso 2-1:0.0: Failed to find BULK IN ep [ 315.629789][ T5280] usb-storage 2-1:0.0: USB Mass Storage device detected [ 315.834106][ T5277] usb 5-1: USB disconnect, device number 55 [ 315.856863][ T5281] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 315.924648][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 315.947236][ T9] usb 3-1: device descriptor read/8, error -71 [ 316.017067][ T5281] usb 1-1: device descriptor read/64, error -71 [ 316.126126][ T5281] usb usb1-port1: attempt power cycle [ 316.205571][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 316.269215][ T9] usb 3-1: device descriptor read/8, error -71 [ 316.304711][ T6708] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 316.334677][ T5238] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 316.344441][ T5238] Bluetooth: hci0: Injecting HCI hardware error event [ 316.352804][ T5236] Bluetooth: hci0: hardware error 0x00 [ 316.385640][ T9] usb usb3-port1: unable to enumerate USB device [ 316.480864][ T6708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.504670][ T5281] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 316.537481][ T5281] usb 1-1: device descriptor read/8, error -71 [ 316.562088][ T6708] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 316.575069][ T6708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.588029][ T6708] usb 5-1: Product: syz [ 316.595708][ T6708] usb 5-1: Manufacturer: syz [ 316.605870][ T6708] usb 5-1: SerialNumber: syz [ 316.631315][ T6708] usb 5-1: config 0 descriptor?? [ 316.755243][ T6708] rtsx_usb 5-1:0.0: probe with driver rtsx_usb failed with error -22 [ 316.794695][ T5281] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 316.817010][ T5281] usb 1-1: device descriptor read/8, error -71 [ 316.888361][ T6708] usb 5-1: USB disconnect, device number 56 [ 316.956859][ T5281] usb usb1-port1: unable to enumerate USB device [ 317.080958][ T5281] usb 4-1: USB disconnect, device number 61 [ 317.307626][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.318455][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.867047][ T6708] usb 2-1: USB disconnect, device number 54 [ 317.917938][ T9559] FAULT_INJECTION: forcing a failure. [ 317.917938][ T9559] name failslab, interval 1, probability 0, space 0, times 0 [ 317.942267][ T9559] CPU: 1 UID: 0 PID: 9559 Comm: syz.1.863 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 317.952903][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.962963][ T9559] Call Trace: [ 317.966250][ T9559] [ 317.969188][ T9559] dump_stack_lvl+0x241/0x360 [ 317.973870][ T9559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.979062][ T9559] ? __pfx__printk+0x10/0x10 [ 317.983649][ T9559] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 317.990154][ T9559] ? __pfx___might_resched+0x10/0x10 [ 317.995445][ T9559] should_fail_ex+0x3b0/0x4e0 [ 318.000127][ T9559] should_failslab+0xac/0x100 [ 318.004804][ T9559] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 318.011132][ T9559] ? key_alloc+0x388/0xff0 [ 318.015552][ T9559] kmemdup_noprof+0x2a/0x60 [ 318.020049][ T9559] key_alloc+0x388/0xff0 [ 318.024293][ T9559] keyring_alloc+0x44/0xb0 [ 318.028709][ T9559] lookup_user_key+0x4b0/0x1500 [ 318.033565][ T9559] ? __pfx_lookup_user_key+0x10/0x10 [ 318.038857][ T9559] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 318.045026][ T9559] ? __might_fault+0xc6/0x120 [ 318.049702][ T9559] __se_sys_add_key+0x2fa/0x490 [ 318.054561][ T9559] ? __pfx___se_sys_add_key+0x10/0x10 [ 318.059939][ T9559] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 318.066522][ T9559] ? __ia32_sys_add_key+0x20/0xc0 [ 318.071546][ T9559] __do_fast_syscall_32+0xb4/0x110 [ 318.076651][ T9559] ? exc_page_fault+0x590/0x8c0 [ 318.081502][ T9559] do_fast_syscall_32+0x34/0x80 [ 318.086346][ T9559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.092671][ T9559] RIP: 0023:0xf7fe6579 [ 318.096735][ T9559] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 318.116338][ T9559] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 318.124756][ T9559] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000000000000 [ 318.132722][ T9559] RDX: 0000000020000100 RSI: 0000000000000018 RDI: 00000000ffffffff [ 318.140691][ T9559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.148656][ T9559] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 318.156621][ T9559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.164602][ T9559] [ 318.345455][ T5282] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 318.419748][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 318.535259][ T5282] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.545529][ T5280] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 318.553183][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.564835][ T5282] usb 5-1: Product: syz [ 318.569073][ T5282] usb 5-1: Manufacturer: syz [ 318.597849][ T5282] usb 5-1: SerialNumber: syz [ 318.643199][ T5282] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.666387][ T936] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 318.714869][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 318.732506][ T5280] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 318.742562][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.756560][ T5280] usb 3-1: Product: syz [ 318.761371][ T5280] usb 3-1: Manufacturer: syz [ 318.769146][ T5280] usb 3-1: SerialNumber: syz [ 318.778198][ T5280] usb 3-1: config 0 descriptor?? [ 318.993480][ T5280] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 319.295325][ T5281] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 319.328819][ T9585] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.490273][ T5281] usb 4-1: config 0 has no interfaces? [ 319.571734][ T5281] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 319.582123][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.590380][ T5281] usb 4-1: Product: syz [ 319.595002][ T5281] usb 4-1: Manufacturer: syz [ 319.600588][ T5281] usb 4-1: SerialNumber: syz [ 319.613863][ T5281] usb 4-1: config 0 descriptor?? [ 319.753063][ T6708] usb 5-1: USB disconnect, device number 57 [ 319.791004][ T936] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 319.812113][ T9588] could not allocate digest TFM handle sha224-arm64 [ 319.812540][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 319.838135][ T936] ath9k_htc: Failed to initialize the device [ 319.846739][ T6708] usb 5-1: ath9k_htc: USB layer deinitialized [ 319.891833][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 319.935119][ T9594] netlink: 104 bytes leftover after parsing attributes in process `syz.1.871'. [ 319.948884][ T9597] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.872'. [ 319.972333][ T9594] netlink: 104 bytes leftover after parsing attributes in process `syz.1.871'. [ 320.414891][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.533154][ T9602] syz_tun: entered promiscuous mode [ 320.615277][ T9602] syz_tun: left promiscuous mode [ 320.817607][ T936] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 320.984810][ T936] usb 5-1: Using ep0 maxpacket: 32 [ 321.005311][ T936] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 321.019863][ T936] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.029166][ T936] usb 5-1: New USB device strings: Mfr=1, Product=8, SerialNumber=0 [ 321.038149][ T936] usb 5-1: Product: syz [ 321.042453][ T936] usb 5-1: Manufacturer: syz [ 321.054019][ T936] usb 5-1: config 0 descriptor?? [ 321.061882][ T9601] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.328418][ T6708] usb 5-1: USB disconnect, device number 58 [ 321.454605][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.467134][ T5277] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 321.708176][ T5277] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 321.719822][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.728627][ T5277] usb 2-1: Product: syz [ 321.733074][ T5277] usb 2-1: Manufacturer: syz [ 321.740010][ T5277] usb 2-1: SerialNumber: syz [ 321.753574][ T5277] usb 2-1: config 0 descriptor?? [ 322.145471][ T5277] hso 2-1:0.0: Failed to find BULK IN ep [ 322.153631][ T5277] usb-storage 2-1:0.0: USB Mass Storage device detected [ 322.184326][ T1850] usb 4-1: USB disconnect, device number 62 [ 322.374326][ T9615] FAULT_INJECTION: forcing a failure. [ 322.374326][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 322.431292][ T5280] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 322.450238][ T5280] usb 3-1: USB disconnect, device number 41 [ 322.466850][ T9615] CPU: 1 UID: 0 PID: 9615 Comm: syz.3.877 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 322.477503][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 322.487560][ T9615] Call Trace: [ 322.490837][ T9615] [ 322.493762][ T9615] dump_stack_lvl+0x241/0x360 [ 322.498442][ T9615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.503637][ T9615] ? __pfx__printk+0x10/0x10 [ 322.508226][ T9615] ? __kmalloc_noprof+0xb0/0x400 [ 322.513162][ T9615] ? __pfx___might_resched+0x10/0x10 [ 322.518446][ T9615] ? rcu_is_watching+0x15/0xb0 [ 322.523210][ T9615] ? io_alloc_page_table+0x96/0x120 [ 322.528415][ T9615] should_fail_ex+0x3b0/0x4e0 [ 322.533101][ T9615] ? io_sqe_buffers_register+0x209/0x750 [ 322.538732][ T9615] should_failslab+0xac/0x100 [ 322.543411][ T9615] ? io_sqe_buffers_register+0x209/0x750 [ 322.549043][ T9615] __kmalloc_noprof+0xd8/0x400 [ 322.553810][ T9615] io_sqe_buffers_register+0x209/0x750 [ 322.559268][ T9615] ? __se_sys_io_uring_register+0x1ee/0x1780 [ 322.565243][ T9615] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 322.571223][ T9615] ? __mutex_unlock_slowpath+0x21d/0x750 [ 322.576858][ T9615] ? __fget_files+0x29/0x470 [ 322.581446][ T9615] __se_sys_io_uring_register+0x97d/0x1780 [ 322.587251][ T9615] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 322.593487][ T9615] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 322.600067][ T9615] ? lockdep_hardirqs_on+0x99/0x150 [ 322.605262][ T9615] __do_fast_syscall_32+0xb4/0x110 [ 322.610367][ T9615] ? exc_page_fault+0x590/0x8c0 [ 322.615220][ T9615] do_fast_syscall_32+0x34/0x80 [ 322.620065][ T9615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.626394][ T9615] RIP: 0023:0xf73dd579 [ 322.630456][ T9615] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.650064][ T9615] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 322.658481][ T9615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 322.666445][ T9615] RDX: 00000000200002c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 322.674408][ T9615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.682375][ T9615] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.690340][ T9615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.698317][ T9615] [ 322.701722][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.774637][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.924734][ T6708] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 324.148558][ T6708] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 324.180940][ T6708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.221765][ T1850] usb 2-1: USB disconnect, device number 55 [ 324.240666][ T6708] usb 5-1: Product: syz [ 324.296257][ T6708] usb 5-1: Manufacturer: syz [ 324.300921][ T6708] usb 5-1: SerialNumber: syz [ 324.369679][ T6708] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 324.423870][ T46] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 324.814633][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.864875][ T5280] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 325.128419][ T5280] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 325.246391][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.268776][ T5280] usb 2-1: Product: syz [ 325.268801][ T5280] usb 2-1: Manufacturer: syz [ 325.268818][ T5280] usb 2-1: SerialNumber: syz [ 325.272405][ T5280] usb 2-1: config 0 descriptor?? [ 325.544509][ T5280] hso 2-1:0.0: Failed to find BULK IN ep [ 325.572966][ T5280] usb-storage 2-1:0.0: USB Mass Storage device detected [ 325.580788][ T46] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 325.581035][ T46] ath9k_htc: Failed to initialize the device [ 325.613230][ T46] usb 5-1: ath9k_htc: USB layer deinitialized [ 325.628401][ T5281] usb 5-1: USB disconnect, device number 59 [ 325.886418][ T9638] tty tty1: ldisc open failed (-12), clearing slot 0 [ 326.138089][ T9664] fuse: Bad value for 'user_id' [ 326.161637][ T9664] fuse: Bad value for 'user_id' [ 326.435478][ T5281] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 326.619295][ T5281] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 326.645887][ T5281] usb 4-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 326.680028][ T5281] usb 4-1: config 1 interface 0 has no altsetting 0 [ 326.702407][ T5281] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.711754][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.720307][ T5281] usb 4-1: Product: syz [ 326.724962][ T5281] usb 4-1: Manufacturer: 嵣㢒Ũ퀪刏࢐䘐╒悳屣ᇋ够㳯냹䈾皢稗䷙膴뛕嗆裷ἴﴼᏎᲿᓧছ秲䞱ブꡣ⚠짘㑤拥ث덥퉛᠆螷앷切艇뫮윁吨槕⎃忄몌篤龽篣瑺煨篅咶좣㯹싹⧊ᴺ옋匑쟣 [ 326.795322][ T5281] usb 4-1: SerialNumber: syz [ 326.857817][ T9663] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.894749][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.106455][ T5281] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 327.330442][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.425233][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.484199][ T936] usb 4-1: USB disconnect, device number 63 [ 327.556718][ T5277] usb 2-1: USB disconnect, device number 56 [ 327.724862][ T8] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 327.844733][ T1850] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 328.019357][ T1850] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 328.028565][ T8] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 328.028598][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.028620][ T8] usb 5-1: Product: syz [ 328.039034][ T1850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.058267][ T1850] usb 3-1: Product: syz [ 328.062454][ T1850] usb 3-1: Manufacturer: syz [ 328.067955][ T1850] usb 3-1: SerialNumber: syz [ 328.079445][ T8] usb 5-1: Manufacturer: syz [ 328.084061][ T8] usb 5-1: SerialNumber: syz [ 328.125844][ T8] usb 5-1: config 0 descriptor?? [ 328.138739][ T1850] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 328.144612][ T5281] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 328.156674][ T46] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 328.489972][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 328.533401][ T5281] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 328.552198][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.560455][ T5281] usb 2-1: Product: syz [ 328.564914][ T5281] usb 2-1: Manufacturer: syz [ 328.569547][ T5281] usb 2-1: SerialNumber: syz [ 328.582262][ T5281] usb 2-1: config 0 descriptor?? [ 328.609991][ T8] hso 5-1:0.0: Failed to find BULK IN ep [ 328.619190][ T8] usb-storage 5-1:0.0: USB Mass Storage device detected [ 328.942839][ T5281] hso 2-1:0.0: Failed to find BULK IN ep [ 328.950706][ T5281] usb-storage 2-1:0.0: USB Mass Storage device detected [ 329.124632][ T5282] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 329.215229][ T46] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 329.225642][ T46] ath9k_htc: Failed to initialize the device [ 329.278196][ T46] usb 3-1: ath9k_htc: USB layer deinitialized [ 329.308380][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.324747][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 329.344863][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.351324][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.380639][ T5282] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.399982][ T5282] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.409590][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.425410][ T5282] usb 4-1: Product: syz [ 329.429622][ T5282] usb 4-1: Manufacturer: syz [ 329.434245][ T5282] usb 4-1: SerialNumber: syz [ 329.558524][ T5282] usb 4-1: config 0 descriptor?? [ 329.560458][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 329.574734][ T8] usb 3-1: USB disconnect, device number 42 [ 329.590942][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 329.600130][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 329.617922][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 329.699688][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 329.712557][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 330.165219][ T9718] chnl_net:caif_netlink_parms(): no params data found [ 330.397630][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.424084][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.499223][ T9718] bridge_slave_0: entered allmulticast mode [ 330.615862][ T9718] bridge_slave_0: entered promiscuous mode [ 330.630372][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.638960][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.721646][ T9718] bridge_slave_1: entered allmulticast mode [ 330.752179][ T9718] bridge_slave_1: entered promiscuous mode [ 330.854025][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.901741][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.952021][ T5280] usb 5-1: USB disconnect, device number 60 [ 330.974787][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.221668][ T9718] team0: Port device team_slave_0 added [ 331.267643][ T9718] team0: Port device team_slave_1 added [ 331.369753][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.422667][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.584292][ T9718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.618009][ T46] usb 2-1: USB disconnect, device number 57 [ 331.669449][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.725834][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.775468][ T5238] Bluetooth: hci7: command tx timeout [ 331.866857][ T9718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.021887][ T9718] hsr_slave_0: entered promiscuous mode [ 332.046881][ T9718] hsr_slave_1: entered promiscuous mode [ 332.098603][ T5280] usb 4-1: USB disconnect, device number 64 [ 332.111900][ T9718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.156676][ T46] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 332.168981][ T9718] Cannot create hsr debugfs directory [ 332.486668][ T9755] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 332.600264][ T46] usb 5-1: config 0 has no interfaces? [ 332.639519][ T46] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 332.685720][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.693769][ T46] usb 5-1: Product: syz [ 332.698963][ T46] usb 5-1: Manufacturer: syz [ 332.703619][ T46] usb 5-1: SerialNumber: syz [ 332.731893][ T46] usb 5-1: config 0 descriptor?? [ 332.794725][ T1850] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 332.822211][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 332.903784][ T5551] Buffer I/O error on dev loop7, logical block 4095, async page read [ 333.059647][ T9718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.247569][ T1850] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 333.259659][ T1850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.306276][ T1850] usb 4-1: Product: syz [ 333.310501][ T1850] usb 4-1: Manufacturer: syz [ 333.334698][ T1850] usb 4-1: SerialNumber: syz [ 333.341806][ T1850] usb 4-1: config 0 descriptor?? [ 333.363677][ T9718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.631457][ T1850] hso 4-1:0.0: Failed to find BULK IN ep [ 333.726194][ T9718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.807843][ T1850] usb-storage 4-1:0.0: USB Mass Storage device detected [ 333.854696][ T5238] Bluetooth: hci7: command tx timeout [ 333.948491][ T9770] FAULT_INJECTION: forcing a failure. [ 333.948491][ T9770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.971874][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.2.917 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 333.982487][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.992544][ T9770] Call Trace: [ 333.995825][ T9770] [ 333.998751][ T9770] dump_stack_lvl+0x241/0x360 [ 334.003430][ T9770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.008639][ T9770] ? __pfx__printk+0x10/0x10 [ 334.013263][ T9770] ? snprintf+0xda/0x120 [ 334.017521][ T9770] should_fail_ex+0x3b0/0x4e0 [ 334.022224][ T9770] _copy_to_user+0x2f/0xb0 [ 334.026638][ T9770] simple_read_from_buffer+0xca/0x150 [ 334.032009][ T9770] proc_fail_nth_read+0x1e9/0x250 [ 334.037035][ T9770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.042586][ T9770] ? rw_verify_area+0x55e/0x6f0 [ 334.047447][ T9770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.053003][ T9770] vfs_read+0x201/0xbc0 [ 334.057170][ T9770] ? __pfx_lock_release+0x10/0x10 [ 334.062203][ T9770] ? __pfx_vfs_read+0x10/0x10 [ 334.066893][ T9770] ? __fget_files+0x3f3/0x470 [ 334.071572][ T9770] ? fdget_pos+0x24e/0x320 [ 334.075987][ T9770] ksys_read+0x183/0x2b0 [ 334.080229][ T9770] ? __pfx_ksys_read+0x10/0x10 [ 334.084990][ T9770] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 334.091573][ T9770] ? lockdep_hardirqs_on+0x99/0x150 [ 334.096785][ T9770] __do_fast_syscall_32+0xb4/0x110 [ 334.101924][ T9770] ? exc_page_fault+0x590/0x8c0 [ 334.106810][ T9770] do_fast_syscall_32+0x34/0x80 [ 334.111681][ T9770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.118004][ T9770] RIP: 0023:0xf7fa3579 [ 334.122067][ T9770] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 334.141670][ T9770] RSP: 002b:00000000f57265a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 334.150081][ T9770] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5726620 [ 334.158046][ T9770] RDX: 000000000000000f RSI: 00000000f742bff4 RDI: 0000000000000000 [ 334.166010][ T9770] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 334.173986][ T9770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 334.181961][ T9770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.189940][ T9770] [ 334.294162][ T9718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.576431][ T1850] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 334.774682][ T5282] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 334.792945][ T9718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.888238][ T9718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.953240][ T1850] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 334.957190][ T9718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.962498][ T1850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.979607][ T1850] usb 2-1: Product: syz [ 334.983778][ T1850] usb 2-1: Manufacturer: syz [ 334.988445][ T1850] usb 2-1: SerialNumber: syz [ 335.014213][ T1850] usb 2-1: config 0 descriptor?? [ 335.080553][ T5282] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 335.096868][ T9718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 335.212715][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.255517][ T5282] usb 3-1: Product: syz [ 335.259750][ T5282] usb 3-1: Manufacturer: syz [ 335.264381][ T5282] usb 3-1: SerialNumber: syz [ 335.274062][ T5282] usb 3-1: config 0 descriptor?? [ 335.302352][ T1850] hso 2-1:0.0: Failed to find BULK IN ep [ 335.346901][ T1850] usb-storage 2-1:0.0: USB Mass Storage device detected [ 335.466602][ T9718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.546492][ T9771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.679729][ T9718] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.720852][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.727994][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.787334][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.794427][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.825066][ T9771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.837145][ T5280] usb 5-1: USB disconnect, device number 61 [ 335.850639][ T5282] hso 3-1:0.0: Failed to find BULK IN ep [ 335.871762][ T5300] usb 4-1: USB disconnect, device number 65 [ 335.876356][ T5282] usb-storage 3-1:0.0: USB Mass Storage device detected [ 335.983379][ T5238] Bluetooth: hci7: command tx timeout [ 336.319934][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.654822][ T9718] veth0_vlan: entered promiscuous mode [ 336.725964][ T9718] veth1_vlan: entered promiscuous mode [ 336.933777][ T9718] veth0_macvtap: entered promiscuous mode [ 337.001559][ T9718] veth1_macvtap: entered promiscuous mode [ 337.099909][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.133099][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.204700][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.354722][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.371404][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.410611][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.433377][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.444880][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.515508][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.535646][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.603928][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.621285][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.634738][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.647365][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.658563][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.669397][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.684311][ T5277] usb 2-1: USB disconnect, device number 58 [ 337.703477][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.737048][ T8] usb 3-1: USB disconnect, device number 43 [ 337.815286][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.843109][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.856258][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.870103][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.881240][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.892948][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.905131][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.917036][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.927879][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.939829][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.950655][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.962182][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.973564][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.986064][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.997234][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.010650][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.021133][ T5238] Bluetooth: hci7: command tx timeout [ 338.029258][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.094854][ T5277] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 338.159085][ T9718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.174872][ T9718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.183622][ T9718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.205477][ T9718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.272291][ T5277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.283424][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.337516][ T5277] usb 2-1: Product: syz [ 338.353377][ T5277] usb 2-1: Manufacturer: syz [ 338.358289][ T5277] usb 2-1: SerialNumber: syz [ 338.378806][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.396055][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.411811][ T5277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 338.441850][ T6708] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 338.532446][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.540609][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.054954][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.345097][ T1850] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 339.374894][ T5288] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 339.500048][ T5280] usb 2-1: USB disconnect, device number 59 [ 339.535207][ T5282] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 339.537139][ T6708] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 339.551400][ T6708] ath9k_htc: Failed to initialize the device [ 339.558970][ T5280] usb 2-1: ath9k_htc: USB layer deinitialized [ 339.588231][ T5288] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 339.598593][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.607322][ T5288] usb 3-1: Product: syz [ 339.611693][ T5288] usb 3-1: Manufacturer: syz [ 339.617143][ T5288] usb 3-1: SerialNumber: syz [ 339.623875][ T5288] usb 3-1: config 0 descriptor?? [ 339.633655][ T1850] usb 1-1: config 0 has no interfaces? [ 339.789429][ T1850] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 339.798690][ T1850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.867390][ T1850] usb 1-1: Product: syz [ 339.876562][ T1850] usb 1-1: Manufacturer: syz [ 339.881261][ T1850] usb 1-1: SerialNumber: syz [ 339.891679][ T1850] usb 1-1: config 0 descriptor?? [ 339.964936][ T5282] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 339.975531][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.984365][ T5282] usb 4-1: Product: syz [ 339.988830][ T5282] usb 4-1: Manufacturer: syz [ 339.993448][ T5282] usb 4-1: SerialNumber: syz [ 340.018112][ T5282] usb 4-1: config 0 descriptor?? [ 340.133215][ T5288] hso 3-1:0.0: Failed to find BULK IN ep [ 340.216359][ T5288] usb-storage 3-1:0.0: USB Mass Storage device detected [ 340.421122][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.428583][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.490253][ T5282] hso 4-1:0.0: Failed to find BULK IN ep [ 340.535660][ T46] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 340.617557][ T5282] usb-storage 4-1:0.0: USB Mass Storage device detected [ 340.743769][ T46] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 340.795604][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.803658][ T46] usb 2-1: Product: syz [ 340.807960][ T46] usb 2-1: Manufacturer: syz [ 340.814887][ T46] usb 2-1: SerialNumber: syz [ 340.837923][ T46] usb 2-1: config 0 descriptor?? [ 341.142024][ T46] hso 2-1:0.0: Failed to find BULK IN ep [ 341.168596][ T46] usb-storage 2-1:0.0: USB Mass Storage device detected [ 341.549623][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.602816][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.284825][ T46] usb 3-1: USB disconnect, device number 44 [ 342.488710][ T29] audit: type=1326 audit(1729069742.362:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 342.535371][ T29] audit: type=1326 audit(1729069742.392:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 342.589203][ T29] audit: type=1326 audit(1729069742.402:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 342.618310][ T46] usb 1-1: USB disconnect, device number 56 [ 342.729580][ T29] audit: type=1326 audit(1729069742.402:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 342.868688][ T29] audit: type=1326 audit(1729069742.402:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 342.925053][ T6708] usb 4-1: USB disconnect, device number 66 [ 342.994456][ T29] audit: type=1326 audit(1729069742.402:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 343.080178][ T29] audit: type=1326 audit(1729069742.402:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 343.224691][ T46] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 343.254728][ T29] audit: type=1326 audit(1729069742.402:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 343.345591][ T29] audit: type=1326 audit(1729069742.402:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 343.503121][ T29] audit: type=1326 audit(1729069742.402:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 343.572700][ T5282] usb 2-1: USB disconnect, device number 60 [ 343.578826][ T46] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 343.601268][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.609731][ T46] usb 1-1: Product: syz [ 343.613934][ T46] usb 1-1: Manufacturer: syz [ 343.619015][ T46] usb 1-1: SerialNumber: syz [ 343.665197][ T46] usb 1-1: config 0 descriptor?? [ 343.941575][ T46] hso 1-1:0.0: Failed to find BULK IN ep [ 343.969636][ T46] usb-storage 1-1:0.0: USB Mass Storage device detected [ 344.145471][ T5280] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 344.381663][ T5280] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 344.506296][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.526986][ T5280] usb 2-1: Product: syz [ 344.531216][ T5280] usb 2-1: Manufacturer: syz [ 344.539581][ T5280] usb 2-1: SerialNumber: syz [ 344.550252][ T5280] usb 2-1: config 0 descriptor?? [ 344.675513][ T5281] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 344.847376][ T5280] hso 2-1:0.0: Failed to find BULK IN ep [ 344.869686][ T5280] usb-storage 2-1:0.0: USB Mass Storage device detected [ 344.884875][ T5281] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 344.894815][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.921114][ T5281] usb 4-1: Product: syz [ 344.956288][ T5281] usb 4-1: Manufacturer: syz [ 344.961665][ T5281] usb 4-1: SerialNumber: syz [ 344.982675][ T5281] usb 4-1: config 0 descriptor?? [ 345.007829][ T9890] sctp: [Deprecated]: syz.2.945 (pid 9890) Use of int in max_burst socket option deprecated. [ 345.007829][ T9890] Use struct sctp_assoc_value instead [ 345.081473][ T9890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.945'. [ 345.091467][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 345.201577][ T5281] hso 4-1:0.0: Failed to find BULK IN ep [ 345.218557][ T5281] usb-storage 4-1:0.0: USB Mass Storage device detected [ 345.508737][ T46] usb 4-1: USB disconnect, device number 67 [ 345.515970][ T1850] IPVS: starting estimator thread 0... [ 345.645068][ T9900] IPVS: using max 19 ests per chain, 45600 per kthread [ 346.054136][ T5281] usb 1-1: USB disconnect, device number 57 [ 346.614877][ T5281] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 346.989311][ T5281] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 347.089132][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.121718][ T5281] usb 1-1: Product: syz [ 347.147360][ T5281] usb 1-1: Manufacturer: syz [ 347.190497][ T5281] usb 1-1: SerialNumber: syz [ 347.212959][ T5281] usb 1-1: config 0 descriptor?? [ 347.238141][ T5236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 347.254340][ T5236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 347.262838][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 347.276531][ T5236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 347.314920][ T6708] usb 2-1: USB disconnect, device number 61 [ 347.323375][ T5236] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 347.366357][ T5236] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 347.493833][ T1850] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 347.550234][ T5281] hso 1-1:0.0: Failed to find BULK IN ep [ 347.558912][ T5281] usb-storage 1-1:0.0: USB Mass Storage device detected [ 347.768651][ T5288] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 347.979840][ T5288] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 347.997140][ T9929] chnl_net:caif_netlink_parms(): no params data found [ 348.076708][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.130686][ T1850] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 348.154674][ T5288] usb 4-1: Product: syz [ 348.160132][ T1850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.168426][ T5288] usb 4-1: Manufacturer: syz [ 348.173694][ T5288] usb 4-1: SerialNumber: syz [ 348.178521][ T1850] usb 3-1: Product: syz [ 348.190447][ T5288] usb 4-1: config 0 descriptor?? [ 348.195498][ T1850] usb 3-1: Manufacturer: syz [ 348.200098][ T1850] usb 3-1: SerialNumber: syz [ 348.318244][ T1850] usb 3-1: config 0 descriptor?? [ 348.491286][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 348.563465][ T5288] hso 4-1:0.0: Failed to find BULK IN ep [ 348.581332][ T5288] usb-storage 4-1:0.0: USB Mass Storage device detected [ 348.684823][ T1850] hso 3-1:0.0: Failed to find BULK IN ep [ 348.712359][ T9944] tipc: Started in network mode [ 348.723426][ T9944] tipc: Node identity ac14140f, cluster identity 4711 [ 348.733453][ T1850] usb-storage 3-1:0.0: USB Mass Storage device detected [ 348.775875][ T9944] tipc: New replicast peer: 255.255.255.255 [ 348.809667][ T9944] tipc: Enabled bearer , priority 10 [ 348.824097][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.892673][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.939571][ T9929] bridge_slave_0: entered allmulticast mode [ 348.975954][ T9929] bridge_slave_0: entered promiscuous mode [ 349.007929][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.134044][ T9920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.167239][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.180143][ T9920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.215416][ T9929] bridge_slave_1: entered allmulticast mode [ 349.289644][ T9929] bridge_slave_1: entered promiscuous mode [ 349.302402][ T6708] usb 1-1: USB disconnect, device number 58 [ 349.445734][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.470777][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.535804][ T5238] Bluetooth: hci8: command tx timeout [ 349.661889][ T9929] team0: Port device team_slave_0 added [ 349.712699][ T9929] team0: Port device team_slave_1 added [ 349.890561][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.924713][ T1850] tipc: Node number set to 2886997007 [ 350.024618][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.105768][ T5238] Bluetooth: hci6: command 0x0406 tx timeout [ 350.143586][ T9929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.217270][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.217287][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.217303][ T9929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.339189][ T9929] hsr_slave_0: entered promiscuous mode [ 350.379453][ T9929] hsr_slave_1: entered promiscuous mode [ 350.383884][ T9929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.383964][ T9929] Cannot create hsr debugfs directory [ 350.622001][ T5282] usb 3-1: USB disconnect, device number 45 [ 350.673499][ T1850] usb 4-1: USB disconnect, device number 68 [ 351.144675][ T5282] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 351.255012][ T9929] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.359388][ T8] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 351.443860][ T9929] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.611295][ T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 351.614687][ T5236] Bluetooth: hci8: command tx timeout [ 351.649643][ T5282] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 351.704189][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.715060][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.725458][ T8] usb 3-1: Product: syz [ 351.744127][ T5282] usb 2-1: Product: syz [ 351.758122][ T8] usb 3-1: Manufacturer: syz [ 351.774380][ T5282] usb 2-1: Manufacturer: syz [ 351.780643][ T8] usb 3-1: SerialNumber: syz [ 351.795018][ T5282] usb 2-1: SerialNumber: syz [ 351.802111][ T8] usb 3-1: config 0 descriptor?? [ 351.833536][ T5282] usb 2-1: config 0 descriptor?? [ 351.890662][ T9929] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.926196][ T9981] FAULT_INJECTION: forcing a failure. [ 351.926196][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 351.960325][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.0.962 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 351.970970][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 351.981043][ T9981] Call Trace: [ 351.984341][ T9981] [ 351.987297][ T9981] dump_stack_lvl+0x241/0x360 [ 351.992010][ T9981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.997238][ T9981] ? __pfx__printk+0x10/0x10 [ 352.001858][ T9981] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 352.007347][ T9981] ? __pfx___might_resched+0x10/0x10 [ 352.012675][ T9981] should_fail_ex+0x3b0/0x4e0 [ 352.017396][ T9981] should_failslab+0xac/0x100 [ 352.022096][ T9981] ? nf_tables_newtable+0x52c/0x1e10 [ 352.027410][ T9981] __kmalloc_cache_noprof+0x6c/0x2c0 [ 352.032714][ T9981] ? nft_pernet+0x23/0x240 [ 352.037157][ T9981] nf_tables_newtable+0x52c/0x1e10 [ 352.042291][ T9981] ? nfnl_pernet+0x23/0x240 [ 352.046822][ T9981] ? __pfx_nf_tables_newtable+0x10/0x10 [ 352.052395][ T9981] ? __nla_parse+0x40/0x60 [ 352.056837][ T9981] nfnetlink_rcv+0x14dc/0x2ab0 [ 352.061653][ T9981] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 352.066798][ T9981] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.072004][ T9981] ? skb_clone+0x240/0x390 [ 352.076426][ T9981] ? __pfx_lock_release+0x10/0x10 [ 352.081468][ T9981] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.086714][ T9981] netlink_unicast+0x7f6/0x990 [ 352.091509][ T9981] ? __pfx_netlink_unicast+0x10/0x10 [ 352.096814][ T9981] ? __virt_addr_valid+0x183/0x530 [ 352.101920][ T9981] ? __check_object_size+0x48e/0x900 [ 352.107218][ T9981] netlink_sendmsg+0x8e4/0xcb0 [ 352.112014][ T9981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.117321][ T9981] ? __pfx_lock_release+0x10/0x10 [ 352.122388][ T9981] ? aa_sock_msg_perm+0x91/0x160 [ 352.127368][ T9981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.132674][ T9981] __sock_sendmsg+0x221/0x270 [ 352.137391][ T9981] ____sys_sendmsg+0x52a/0x7e0 [ 352.142177][ T9981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.147470][ T9981] __sys_sendmsg+0x292/0x380 [ 352.152071][ T9981] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.157192][ T9981] ? __pfx_vfs_write+0x10/0x10 [ 352.162004][ T9981] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 352.168614][ T9981] ? lockdep_hardirqs_on+0x99/0x150 [ 352.173831][ T9981] __do_fast_syscall_32+0xb4/0x110 [ 352.178954][ T9981] ? exc_page_fault+0x590/0x8c0 [ 352.183820][ T9981] do_fast_syscall_32+0x34/0x80 [ 352.188679][ T9981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.195019][ T9981] RIP: 0023:0xf739d579 [ 352.199091][ T9981] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 352.218704][ T9981] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 352.227124][ T9981] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 352.235113][ T9981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.243107][ T9981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.251093][ T9981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 352.259076][ T9981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.267066][ T9981] [ 352.270297][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.321497][ T8] hso 3-1:0.0: Failed to find BULK IN ep [ 352.346872][ T5282] hso 2-1:0.0: Failed to find BULK IN ep [ 352.357625][ T8] usb-storage 3-1:0.0: USB Mass Storage device detected [ 352.373814][ T5282] usb-storage 2-1:0.0: USB Mass Storage device detected [ 352.513586][ T9968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.657974][ T9968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.913243][ T9929] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.934882][ T1850] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 353.314706][ T5282] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 353.373678][ T1850] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 353.425791][ T1850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.511117][ T1850] usb 1-1: Product: syz [ 353.521177][ T1850] usb 1-1: Manufacturer: syz [ 353.526049][ T1850] usb 1-1: SerialNumber: syz [ 353.528217][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.533338][ T1850] usb 1-1: config 0 descriptor?? [ 353.637306][ T9929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.644085][ T5282] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 353.695967][ T5236] Bluetooth: hci8: command tx timeout [ 353.696351][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.762627][ T5282] usb 4-1: config 0 descriptor?? [ 353.772246][ T1850] hso 1-1:0.0: Failed to find BULK IN ep [ 353.780075][ T1850] usb-storage 1-1:0.0: USB Mass Storage device detected [ 353.793808][ T9929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.868379][ T5282] pwc: Askey VC010 type 2 USB webcam detected. [ 353.892559][ T9929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.010292][ T9929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.084898][ T5282] pwc: send_video_command error -71 [ 354.096505][ T5282] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 354.132685][ T5282] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 354.178705][ T5282] usb 4-1: USB disconnect, device number 69 [ 354.528020][ T9929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.563174][ T9929] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.581225][ T1850] usb 3-1: USB disconnect, device number 46 [ 354.629548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.636717][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.741313][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.748472][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.795095][ T6708] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 354.866276][ T5280] usb 2-1: USB disconnect, device number 62 [ 354.918950][ T9929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.001537][ T6708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.014784][ T6708] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 355.023878][ T6708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.034486][ T6708] usb 4-1: config 0 descriptor?? [ 355.051830][ T6708] pwc: Askey VC010 type 2 USB webcam detected. [ 355.095993][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.450107][ T6708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 355.474579][ T9929] veth0_vlan: entered promiscuous mode [ 355.495618][ T6708] pwc: recv_control_msg error -71 req 02 val 2700 [ 355.509723][ T6708] pwc: recv_control_msg error -71 req 02 val 2c00 [ 355.524361][ T6708] pwc: recv_control_msg error -71 req 04 val 1000 [ 355.533230][ T6708] pwc: recv_control_msg error -71 req 04 val 1300 [ 355.534851][ T5280] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 355.542054][ T6708] pwc: recv_control_msg error -71 req 04 val 1400 [ 355.558626][ T6708] pwc: recv_control_msg error -71 req 02 val 2000 [ 355.566153][ T6708] pwc: recv_control_msg error -71 req 02 val 2100 [ 355.573414][ T6708] pwc: recv_control_msg error -71 req 04 val 1500 [ 355.580605][ T6708] pwc: recv_control_msg error -71 req 02 val 2500 [ 355.586354][ T9929] veth1_vlan: entered promiscuous mode [ 355.588425][ T6708] pwc: recv_control_msg error -71 req 02 val 2400 [ 355.599681][ T6708] pwc: recv_control_msg error -71 req 02 val 2600 [ 355.606586][ T6708] pwc: recv_control_msg error -71 req 02 val 2900 [ 355.648139][ T6708] pwc: recv_control_msg error -71 req 02 val 2800 [ 355.670930][ T5281] usb 1-1: USB disconnect, device number 59 [ 355.694608][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.705674][ T30] INFO: task syz.0.542:7885 blocked for more than 143 seconds. [ 355.714460][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 355.725306][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.734839][ T30] task:syz.0.542 state:D stack:24928 pid:7885 tgid:7884 ppid:7540 flags:0x20004004 [ 355.767462][ T6708] pwc: recv_control_msg error -71 req 04 val 1100 [ 355.777739][ T6708] pwc: recv_control_msg error -71 req 04 val 1200 [ 355.785085][ T5236] Bluetooth: hci8: command tx timeout [ 355.785539][ T6708] pwc: Registered as video71. [ 355.796750][ T6708] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 355.812861][ T6708] usb 4-1: USB disconnect, device number 70 [ 355.853850][ T30] Call Trace: [ 355.895193][ T5300] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 355.907485][ T30] [ 355.910472][ T30] __schedule+0x1895/0x4b30 [ 355.975748][ T30] ? __pfx___schedule+0x10/0x10 [ 355.980673][ T30] ? __pfx_lock_release+0x10/0x10 [ 356.024811][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.032983][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.042802][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 356.048148][ T30] ? schedule+0x90/0x320 [ 356.131617][ T30] schedule+0x14b/0x320 [ 356.202542][ T30] schedule_preempt_disabled+0x13/0x30 [ 356.219078][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 356.274590][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 356.280688][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 356.356507][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 356.361647][ T30] ? __might_fault+0xaa/0x120 [ 356.394687][ T30] ? __pfx_lock_release+0x10/0x10 [ 356.399787][ T30] down_write+0x1d7/0x220 [ 356.404122][ T30] ? __pfx_down_write+0x10/0x10 [ 356.504680][ T30] ? __might_fault+0xc6/0x120 [ 356.509428][ T30] blkdev_common_ioctl+0x150b/0x2480 [ 356.548759][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 356.565546][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 356.571307][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 356.624713][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 356.630855][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 356.664615][ T30] ? file_to_blk_mode+0xcc/0x140 [ 356.669671][ T30] compat_blkdev_ioctl+0x548/0x7b0 [ 356.777267][ T30] ? __fget_files+0x29/0x470 [ 356.781993][ T30] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 356.845119][ T30] __se_compat_sys_ioctl+0x510/0xc90 [ 356.854786][ T30] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 356.861961][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.869159][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.884733][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 356.895371][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 356.901565][ T30] __do_fast_syscall_32+0xb4/0x110 [ 356.906837][ T30] ? exc_page_fault+0x590/0x8c0 [ 356.911767][ T30] do_fast_syscall_32+0x34/0x80 [ 356.916856][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.923263][ T30] RIP: 0023:0xf7f85579 [ 356.927418][ T30] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 356.936746][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000127f [ 356.946216][ T30] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.954258][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.962443][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 357.032252][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.040523][ T30] [ 357.045591][ T30] [ 357.045591][ T30] Showing all locks held in the system: [ 357.053446][ T30] 3 locks held by kworker/0:0/8: [ 357.059677][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 357.284618][ T30] #1: ffffc900000d7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 357.314644][ T30] #2: ffff888030e1e240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 357.334630][ T30] 1 lock held by khungtaskd/30: [ 357.339561][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 357.404625][ T30] 3 locks held by kworker/u8:4/61: [ 357.409829][ T30] #0: ffff88802dec5148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 357.455458][ T30] #1: ffffc900015c7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 357.504598][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 357.514190][ T30] 2 locks held by kworker/u8:7/3003: [ 357.524416][ T30] 2 locks held by getty/4987: [ 357.529277][ T30] #0: ffff88803368a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 357.539266][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 357.549618][ T30] 3 locks held by kworker/0:6/5280: [ 357.554927][ T30] #0: ffff8881412e0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 357.567187][ T30] #1: ffffc9000485fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 357.584764][ T30] #2: ffff8881443f6190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 357.594625][ T30] 3 locks held by kworker/0:7/5281: [ 357.599857][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 357.614870][ T30] #1: ffffc9000486fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 357.625322][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 357.636361][ T30] 3 locks held by kworker/1:6/5300: [ 357.644750][ T30] #0: ffff8881412e0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 357.656365][ T30] #1: ffffc900049afd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 357.669106][ T30] #2: ffff8880284fe190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 357.678850][ T30] 7 locks held by kworker/1:8/6708: [ 357.684105][ T30] #0: ffff8881412e0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 357.695612][ T30] #1: ffffc90002f5fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 357.707628][ T30] #2: ffff88802850e190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 357.724919][ T30] #3: ffff888051518190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 357.734295][ T30] #4: ffff8880796e3160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 357.745183][ T30] #5: ffffffff8f75de28 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x2f3/0x620 [ 357.755598][ T30] #6: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 357.767429][ T30] 1 lock held by syz.4.438/7280: [ 357.775337][ T30] #0: ffff88802379ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 357.786143][ T30] 1 lock held by syz.0.542/7885: [ 357.791127][ T30] #0: ffff88802379ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x150b/0x2480 [ 357.804784][ T30] 1 lock held by syz.0.869/9584: [ 357.812100][ T30] #0: ffff88802379ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 357.827187][ T30] 2 locks held by syz-executor/9711: [ 357.833229][ T30] #0: ffff888032874d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 357.843516][ T30] #1: ffff888032874078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 357.853377][ T30] 1 lock held by syz-executor/9718: [ 357.864716][ T30] #0: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 357.873797][ T30] 1 lock held by syz.4.924/9795: [ 357.884657][ T30] #0: ffff88802379ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 357.914824][ T30] 1 lock held by syz.4.924/9796: [ 357.924671][ T30] #0: ffff88802379ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 357.954463][ T30] 3 locks held by syz-executor/9929: [ 357.959884][ T30] #0: ffff888052ffcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 357.970745][ T30] #1: ffff888052ffc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 357.981294][ T30] #2: ffffffff8fe3f4a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 357.991505][ T30] 3 locks held by syz.3.965/9994: [ 357.996643][ T30] #0: ffff888053c98d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 358.006732][ T30] #1: ffff888053c98078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 358.016879][ T30] #2: ffffffff8fe3f4a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 358.027221][ T30] [ 358.029631][ T30] ============================================= [ 358.029631][ T30] [ 358.093420][ T30] NMI backtrace for cpu 0 [ 358.097823][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 358.108339][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.118393][ T30] Call Trace: [ 358.121669][ T30] [ 358.124603][ T30] dump_stack_lvl+0x241/0x360 [ 358.129291][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.134497][ T30] ? __pfx__printk+0x10/0x10 [ 358.139181][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 358.144118][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 358.149577][ T30] ? _printk+0xd5/0x120 [ 358.153730][ T30] ? __pfx__printk+0x10/0x10 [ 358.158319][ T30] ? __wake_up_klogd+0xcc/0x110 [ 358.163176][ T30] ? __pfx__printk+0x10/0x10 [ 358.167762][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 358.172796][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 358.178788][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 358.184802][ T30] watchdog+0xff4/0x1040 [ 358.189059][ T30] ? watchdog+0x1ea/0x1040 [ 358.193487][ T30] ? __pfx_watchdog+0x10/0x10 [ 358.198183][ T30] kthread+0x2f0/0x390 [ 358.202262][ T30] ? __pfx_watchdog+0x10/0x10 [ 358.206956][ T30] ? __pfx_kthread+0x10/0x10 [ 358.211558][ T30] ret_from_fork+0x4b/0x80 [ 358.215986][ T30] ? __pfx_kthread+0x10/0x10 [ 358.220596][ T30] ret_from_fork_asm+0x1a/0x30 [ 358.225381][ T30] [ 358.230080][ T30] Sending NMI from CPU 0 to CPUs 1: [ 358.236212][ C1] NMI backtrace for cpu 1 [ 358.236226][ C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 358.236247][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.236261][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 358.236287][ C1] RIP: 0010:kasan_check_range+0x261/0x290 [ 358.236309][ C1] Code: 3b 02 eb 1a 4f 8d 5c 3b 03 eb 13 4f 8d 5c 3b 04 eb 0c 4f 8d 5c 3b 05 eb 05 4f 8d 5c 3b 06 4c 89 dd 4d 85 db 0f 84 56 ff ff ff <4d> 01 d1 4c 39 cd 75 11 41 83 e0 07 41 0f be 29 41 39 e8 0f 8c 3d [ 358.236324][ C1] RSP: 0018:ffffc90000106a10 EFLAGS: 00000082 [ 358.236339][ C1] RAX: 0000000000000001 RBX: 1ffff92000020d54 RCX: ffffffff8171beff [ 358.236352][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000106aa0 [ 358.236364][ C1] RBP: fffff52000020d54 R08: ffffc90000106aa3 R09: 1ffff92000020d54 [ 358.236378][ C1] R10: dffffc0000000000 R11: fffff52000020d54 R12: ffffffff9a65b210 [ 358.236391][ C1] R13: 1ffff92000020d54 R14: dffffc0000000001 R15: fffff52000020d55 [ 358.236405][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 358.236419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.236432][ C1] CR2: 0000000020202018 CR3: 000000000e734000 CR4: 00000000003526f0 [ 358.236448][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.236459][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.236470][ C1] Call Trace: [ 358.236478][ C1] [ 358.236485][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 358.236505][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 358.236528][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 358.236546][ C1] ? nmi_handle+0x2a/0x5a0 [ 358.236571][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 358.236591][ C1] ? nmi_handle+0x14f/0x5a0 [ 358.236607][ C1] ? nmi_handle+0x2a/0x5a0 [ 358.236625][ C1] ? kasan_check_range+0x261/0x290 [ 358.236642][ C1] ? default_do_nmi+0x63/0x160 [ 358.236661][ C1] ? exc_nmi+0x123/0x1f0 [ 358.236687][ C1] ? end_repeat_nmi+0xf/0x53 [ 358.236707][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 358.236727][ C1] ? kasan_check_range+0x261/0x290 [ 358.236745][ C1] ? kasan_check_range+0x261/0x290 [ 358.236764][ C1] ? kasan_check_range+0x261/0x290 [ 358.236782][ C1] [ 358.236788][ C1] [ 358.236796][ C1] do_raw_spin_lock+0x14f/0x370 [ 358.236818][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.236836][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 358.236861][ C1] _raw_spin_lock_irqsave+0xe1/0x120 [ 358.236882][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 358.236903][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 358.236926][ C1] debug_object_activate+0x16d/0x510 [ 358.236946][ C1] ? process_scheduled_works+0xa63/0x1850 [ 358.236966][ C1] ? worker_thread+0x870/0xd30 [ 358.236986][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 358.237004][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 358.237025][ C1] ? stack_depot_save_flags+0x29/0x830 [ 358.237048][ C1] ? mark_lock+0x9a/0x360 [ 358.237064][ C1] ? mark_lock+0x9a/0x360 [ 358.237081][ C1] kvfree_call_rcu+0x99/0x790 [ 358.237099][ C1] ? __lock_acquire+0x1384/0x2050 [ 358.237121][ C1] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 358.237144][ C1] cfg80211_update_known_bss+0xb45/0x1590 [ 358.237165][ C1] ? cmp_bss+0x8c7/0xea0 [ 358.237182][ C1] __cfg80211_bss_update+0x153/0x2030 [ 358.237198][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 358.237217][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 358.237238][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.237256][ C1] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 358.237273][ C1] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 358.237290][ C1] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 358.237306][ C1] ? cfg80211_inform_single_bss_data+0xd6e/0x2090 [ 358.237325][ C1] cfg80211_inform_single_bss_data+0xd82/0x2090 [ 358.237346][ C1] ? deref_stack_reg+0x17c/0x210 [ 358.237363][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 358.237390][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 358.237409][ C1] ? cfg80211_inform_bss_data+0x3b6/0x5e70 [ 358.237428][ C1] cfg80211_inform_bss_data+0x3ce/0x5e70 [ 358.237458][ C1] ? __pfx_validate_chain+0x10/0x10 [ 358.237485][ C1] ? __pfx_validate_chain+0x10/0x10 [ 358.237504][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 358.237524][ C1] ? mark_lock+0x9a/0x360 [ 358.237541][ C1] ? __lock_acquire+0x1384/0x2050 [ 358.237574][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 358.237593][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 358.237617][ C1] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 358.237638][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 358.237657][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 358.237684][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 358.237705][ C1] ? __pfx_lock_release+0x10/0x10 [ 358.237732][ C1] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 358.237761][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 358.237780][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 358.237804][ C1] ? mark_lock+0x9a/0x360 [ 358.237821][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 358.237843][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.237864][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 358.237889][ C1] ieee80211_iface_work+0x8a5/0xf20 [ 358.237913][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 358.237933][ C1] ? process_scheduled_works+0x976/0x1850 [ 358.237952][ C1] process_scheduled_works+0xa63/0x1850 [ 358.237984][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.238007][ C1] ? assign_work+0x364/0x3d0 [ 358.238028][ C1] worker_thread+0x870/0xd30 [ 358.238054][ C1] ? __kthread_parkme+0x169/0x1d0 [ 358.238075][ C1] ? __pfx_worker_thread+0x10/0x10 [ 358.238095][ C1] kthread+0x2f0/0x390 [ 358.238109][ C1] ? __pfx_worker_thread+0x10/0x10 [ 358.238129][ C1] ? __pfx_kthread+0x10/0x10 [ 358.238144][ C1] ret_from_fork+0x4b/0x80 [ 358.238164][ C1] ? __pfx_kthread+0x10/0x10 [ 358.238179][ C1] ret_from_fork_asm+0x1a/0x30 [ 358.238205][ C1] [ 358.244929][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 358.244947][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 358.244970][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.244982][ T30] Call Trace: [ 358.244992][ T30] [ 358.245001][ T30] dump_stack_lvl+0x241/0x360 [ 358.245029][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.245053][ T30] ? __pfx__printk+0x10/0x10 [ 358.245070][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 358.245102][ T30] ? vscnprintf+0x5d/0x90 [ 358.245126][ T30] panic+0x349/0x880 [ 358.245146][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 358.245170][ T30] ? __pfx_panic+0x10/0x10 [ 358.245187][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 358.245208][ T30] ? __irq_work_queue_local+0x137/0x410 [ 358.245234][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 358.245254][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 358.245276][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 358.245301][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 358.245327][ T30] watchdog+0x1033/0x1040 [ 358.245353][ T30] ? watchdog+0x1ea/0x1040 [ 358.245381][ T30] ? __pfx_watchdog+0x10/0x10 [ 358.245404][ T30] kthread+0x2f0/0x390 [ 358.245423][ T30] ? __pfx_watchdog+0x10/0x10 [ 358.245443][ T30] ? __pfx_kthread+0x10/0x10 [ 358.245462][ T30] ret_from_fork+0x4b/0x80 [ 358.245486][ T30] ? __pfx_kthread+0x10/0x10 [ 358.245506][ T30] ret_from_fork_asm+0x1a/0x30 [ 358.245541][ T30] [ 358.983389][ T30] Kernel Offset: disabled [ 358.987708][ T30] Rebooting in 86400 seconds..