last executing test programs: 38.484313583s ago: executing program 1 (id=873): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x3) r1 = syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "869388", 0x0, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [@fragment={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}]}}}}}}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101900) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x1, 0x0, 0x15}}) preadv(r1, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x9a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, 0x0, 0x0, 0x0, 0x0) 15.097891917s ago: executing program 4 (id=901): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xba, 0xb5, 0x60, 0x8, 0x2040, 0xb753, 0x7777, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe9, 0x0, 0x1, 0x8c, 0x71, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x0, 0xff}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xba, 0xb5, 0x60, 0x8, 0x2040, 0xb753, 0x7777, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe9, 0x0, 0x1, 0x8c, 0x71, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x0, 0xff}}]}}]}}]}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x0, {0x9, 0x3, 0x4, 0x5, 0x7, 0x3}}) 13.656701271s ago: executing program 4 (id=902): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x16, {0x9, 0x21, 0x5, 0xff, 0x1, {0x22, 0xd81}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x40, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x60, 0x1, 0x5}}]}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xff, 0x9, 0x2, 0x10, 0xb5}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xd, 0x1}]}, 0x9, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xfd, &(0x7f0000000300)=@string={0xfd, 0x3, "8b4517825336bd569371f0cc336121c19e3f201a7321b5335100ded62a157f6af84cd7d5b9dd425b1d2ea85a22dc540c14813ffebc80cded5679e0c931bfbab18050572354534c6be0cf6b133a806929a97a0b3cac97ba16f93d4cf44bb146ddbec9e41cfc04132b571426b407c807cd077cfca06a581841b746990e95dd5f1536f26ca3b3f064fd34ecac520c9e51dd01dda58e9cdbf0ad0f2c288e84cd1f464aff8c179465bd44dbf59dfa8346d21b1fdef74d186f25f5f3d0f800d2d530d68425292c57934b17739403109ac008da397c180ccc2fe457909bfa0d8b58ce1daeeee2770611dc6056bd5c829fc4b794ff266216eea93b86547f47"}}, {0x61, &(0x7f0000000400)=@string={0x61, 0x3, "6f8cbfeb0cf2b72b2a4c10b94d8d899e479559103c8aac42fa2517a1fbbf17ca777e623c24b5ab9c653e8684e2022abe4c02cb33934d59c98920a0af25fc457b7376a0eb75cae05a34abd088a36b9363faabaf1a33b3c29193fdb41ea462fe"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x436}}, {0x47, &(0x7f0000000500)=@string={0x47, 0x3, "0a5a3fd0224c4ef3fd710558d343a9c4c06355435444c085b779ea91cf7ad6120d8a26867162bc258d0b960ad2f364d9d7fca66a077c430fc3052d6d1b052f197becf35302"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x810}}, {0x38, &(0x7f0000000740)=@string={0x38, 0x3, "31c1c134a2c9a90d81e8dc5c4c3a768de6ab2d907641b64a5f71c3094fcc65ccedb127983be91b3501b9aacb31a62f03d2ce0bae7833"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x421}}]}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) (async) ioprio_set$uid(0x3, r2, 0x0) (async) ioprio_set$uid(0x3, r2, 0x3) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="fc6a350c9d74a1bf8dab0c0e1501bf31f7a3c8cd98fbe4e7a849c350fe57a5f46c26d71d57bf8752bdc2ece5a3e13892e888aa126f2f8483a4fb84f2992c7860d048220578b1fd666f58c86e28a01518dd21462202ee58dd05a693a3d70d85ee8aba2da2a08bd7f3ff1b57a922094debbe8c7f4d7c261093814dfac57b2cbee8d1c9a1e36341aa81909e80cb257c133ce76b840d7fd73da837ddfdb711"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netlink\x00') (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xb4}}, 0x4000040) syz_emit_ethernet(0x66, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000840)={0x40, 0x0, 0x2, "537f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.470132563s ago: executing program 4 (id=904): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fchdir(0xffffffffffffffff) getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 10.337701168s ago: executing program 4 (id=907): openat$sysfs(0xffffffffffffff9c, 0x0, 0x40102, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x541b, &(0x7f0000000000)=0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r4, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000100)=""/103, &(0x7f0000000180)=""/54, &(0x7f00000001c0)=""/138, 0xdddd0000}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r6, 0x0, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x1}) dup3(r3, r6, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000406a05f80000040000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00221c00000094"], 0x0}, 0x0) 7.960710119s ago: executing program 1 (id=880): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xfffeffff, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xfffeffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2000}, 0xc) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000480)={0x0, "1e16e4c1a3eafa83c022874b320fa2ad"}) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000480)={0x0, "1e16e4c1a3eafa83c022874b320fa2ad"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={0x0, 0x1ff, 0xb3cb, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={0x0, 0x1ff, 0xb3cb, 0x1}) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f00000000c0)) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000240)={'erspan0\x00', 0x4}) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) (async) recvfrom$inet6(r2, 0x0, 0x0, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/57, 0x39}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/98, 0x62}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/98, 0x62}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/227, 0xe3}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/168, 0xa8}], 0x2}, 0x7f}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001380)=""/209, 0xd1}, {&(0x7f0000001280)=""/46, 0x2e}, {&(0x7f0000001680)=""/237, 0xed}], 0x4, &(0x7f0000001480)=""/37, 0x25}}], 0x3, 0x40010163, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000640)={r5, 0x6, 0x0, [0x2], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x2, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x1, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1efc, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8, 0x3, 0x7, 0x0, 0x5, 0x3, 0x800, 0x0, 0x3]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000640)={r5, 0x6, 0x0, [0x2], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x2, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x1, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1efc, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8, 0x3, 0x7, 0x0, 0x5, 0x3, 0x800, 0x0, 0x3]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001e80)={r5, "6afbaeb308877313225ff8c934a34a5e"}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={r5, 0x4, 0x0, [0x7, 0xfffffffffffff919, 0x3, 0x8001], [0x7d3, 0x3, 0x7ff, 0xffffffffffffff42, 0x7ff, 0x3, 0x5, 0xffff, 0x8000000000000000, 0x3, 0x3, 0x8000000000000001, 0x11c2, 0xff, 0x1, 0x8, 0xf52, 0x1485, 0x6, 0x200, 0xffffffffc1d67abe, 0x10001, 0x4, 0x3ff80, 0x2, 0x22c, 0x100000000, 0x20000000, 0x0, 0x100000001, 0x7, 0x65, 0x1, 0x7c4a, 0x8, 0xb3, 0xfffffffffffffff8, 0x9, 0x9, 0x2, 0x9, 0x1, 0x0, 0x5, 0x5, 0x800000000000007f, 0xc36, 0xfffffffffffffffb, 0x5a2f, 0x3ffffffffffd, 0x40, 0x9, 0x5d46, 0x9, 0x9, 0xed3, 0x100000001, 0x5, 0x9, 0x0, 0x4, 0x1, 0xffff, 0x6, 0x9, 0x3f, 0x100000000, 0x1, 0x8, 0x7, 0x0, 0x6, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x80, 0x6, 0xb7, 0xfffffffffffffffe, 0x0, 0x6, 0x3, 0x6, 0x2, 0x1, 0xfffffffc, 0x48b9, 0xfffffffffffffffd, 0xfff, 0x7, 0x3f, 0x1b4, 0x4ef, 0x683e, 0x8, 0xa31, 0xa952, 0x5, 0xf29, 0x2, 0x8, 0x1, 0x3296, 0x3, 0x1ff, 0x9fb1, 0xc9cc, 0x400, 0x8, 0x7, 0x6c9, 0x9, 0x7fff, 0x1, 0x3, 0x50, 0x0, 0x3, 0x5, 0x6, 0x2f]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={r5, 0x4, 0x0, [0x7, 0xfffffffffffff919, 0x3, 0x8001], [0x7d3, 0x3, 0x7ff, 0xffffffffffffff42, 0x7ff, 0x3, 0x5, 0xffff, 0x8000000000000000, 0x3, 0x3, 0x8000000000000001, 0x11c2, 0xff, 0x1, 0x8, 0xf52, 0x1485, 0x6, 0x200, 0xffffffffc1d67abe, 0x10001, 0x4, 0x3ff80, 0x2, 0x22c, 0x100000000, 0x20000000, 0x0, 0x100000001, 0x7, 0x65, 0x1, 0x7c4a, 0x8, 0xb3, 0xfffffffffffffff8, 0x9, 0x9, 0x2, 0x9, 0x1, 0x0, 0x5, 0x5, 0x800000000000007f, 0xc36, 0xfffffffffffffffb, 0x5a2f, 0x3ffffffffffd, 0x40, 0x9, 0x5d46, 0x9, 0x9, 0xed3, 0x100000001, 0x5, 0x9, 0x0, 0x4, 0x1, 0xffff, 0x6, 0x9, 0x3f, 0x100000000, 0x1, 0x8, 0x7, 0x0, 0x6, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x80, 0x6, 0xb7, 0xfffffffffffffffe, 0x0, 0x6, 0x3, 0x6, 0x2, 0x1, 0xfffffffc, 0x48b9, 0xfffffffffffffffd, 0xfff, 0x7, 0x3f, 0x1b4, 0x4ef, 0x683e, 0x8, 0xa31, 0xa952, 0x5, 0xf29, 0x2, 0x8, 0x1, 0x3296, 0x3, 0x1ff, 0x9fb1, 0xc9cc, 0x400, 0x8, 0x7, 0x6c9, 0x9, 0x7fff, 0x1, 0x3, 0x50, 0x0, 0x3, 0x5, 0x6, 0x2f]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={r5, 0x0, 0x1, [0x4, 0x7, 0x3, 0x9, 0x2], [0x6, 0x4, 0x2, 0x71, 0xd4, 0x8, 0x9, 0x3ff, 0x3, 0x6, 0x3, 0x0, 0x8, 0x0, 0xd, 0x1, 0x80000040, 0x80000000, 0x7f, 0x8ab, 0x1, 0x4, 0x10000, 0x0, 0x0, 0xfffffffffffffff1, 0x4, 0x2, 0x1bff, 0x8000000000000000, 0x10001, 0x1, 0xfffffffffffffffc, 0x8, 0xfffffffffffffffa, 0x9, 0x4, 0xfffffffffffffe00, 0x2, 0x7a, 0x5d9, 0x0, 0x5, 0xffffffffbcd4a458, 0x3, 0x5, 0x2285, 0x3, 0x7fffffffffffffff, 0x401, 0x7, 0xffffffffffffffff, 0x1, 0x6, 0x1, 0x5, 0x1000000000000, 0xffffffff, 0x7, 0x3, 0xfffffffffffffff7, 0x5, 0x8000, 0x4, 0x7, 0x7, 0x5ed, 0x8, 0x1, 0x3, 0x1, 0x550, 0x9, 0x2, 0xe469, 0x7, 0x0, 0x3, 0x9877, 0x723, 0xc, 0x3efa, 0x3fd495b1, 0x4, 0x6, 0x18c, 0x4, 0x7fffffffffffffff, 0x1, 0x6a0, 0x1, 0x8, 0xa, 0x100000001, 0x9, 0xec, 0x1000000000000, 0x5, 0x0, 0x1, 0x2, 0x5, 0x8, 0x4, 0xb, 0x1, 0x5, 0x7fffffff, 0xc5, 0xd91, 0xfffffffffffffffe, 0x8, 0x4, 0x8, 0x7fffffffffffffff, 0x7b2, 0x8001, 0x5, 0xffffffffffffffea, 0xfffffffffffffff8, 0x7]}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 7.404206593s ago: executing program 1 (id=912): syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020354090212000100000000090400000002"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'veth0_to_bridge\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x6, 0x1}]}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="8000a600060002ef9f950a8360deed4b78e85400d82ea1bc0170000006000500050000000e367b7db87bbfc2e991fefbd204214fa23ec8cbf0b13dbc9f4a650dba73e32e01d0aa0412fc725e694fbd32838f0d39b0d7c86c47b0273a8c820874fd88ac4a38f2a552e8cc32f9387963204796f8b384fdf7e86a2c29e7017ca24669697d1ea038d14268cdec0e8313cc5f2ddfc036a8993cfd0fcebceae7a1409b7f38ac22c06806e2c6ec"], 0x30}}, 0x0) 7.261024527s ago: executing program 3 (id=913): pipe(0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @remote}, 0x8c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff010000000100000056001f0025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.024792415s ago: executing program 4 (id=915): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fchdir(0xffffffffffffffff) getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.978876199s ago: executing program 3 (id=916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd9, 0xd0, 0xc0, 0x10, 0x1a0a, 0x104, 0xddd4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x3e, 0x60}}]}}]}}, 0x0) (async) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) (async) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) (async) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x1a1a44) (async) poll(&(0x7f0000000100)=[{r0, 0x309}], 0x1, 0x10000) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xc, 0x8001, 0x7, 0xa, 0x26b, 0xf}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}], 0x48, 0x20000000}], 0x1, 0x40000) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 6.757134862s ago: executing program 3 (id=917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa63, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c98012884636086466670841ffe800000000000"], 0xffdd) 6.510843732s ago: executing program 4 (id=919): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 6.206712114s ago: executing program 0 (id=921): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x4f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 6.101912226s ago: executing program 0 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 5.43423983s ago: executing program 2 (id=926): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r0, 0x4) 5.177771793s ago: executing program 2 (id=927): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="53b748bf412183542dd1cd69f07c", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.033170544s ago: executing program 2 (id=928): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.941097251s ago: executing program 2 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 1.149044022s ago: executing program 0 (id=930): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000780)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.0985458s ago: executing program 3 (id=931): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r2}, 0xc) 951.515978ms ago: executing program 0 (id=932): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000086c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 869.13506ms ago: executing program 3 (id=933): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x2, 0x3, 0x8, 0x6, 0xfffffffffffffff8, 0x4}, @func]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'veth0_macvtap\x00', @random='\x00\x00\x00 \x00'}) 772.75178ms ago: executing program 0 (id=934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x6}]}) close(0x3) 746.062119ms ago: executing program 3 (id=935): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff0000000000000000850000005300000085000000230000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e1f5bc0b6e76f82e9a7cde9e8f1b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8d91633a8b9c70e804744dc081ac69cfea08e4e5a06003771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f4395494cdac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b93993909613e8d95f5610c067d9b97c524c210af077707d71e8512e00"/241], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0xffdd) 455.196407ms ago: executing program 1 (id=936): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 417.360803ms ago: executing program 2 (id=937): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) 255.13712ms ago: executing program 1 (id=938): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071123200000000009500000000000000b74bb4f5bd4350d82e7fff50205f0a828b341ca0bfba9df6820a32307975947e0a2f9f2cce540da8b9e95f404945ecd0d81f5bebb55d022c109e3e558d7e05a3997ec775417d537b9e3330f5aaeef5270d4e84ed4b0103121bdde134f4f8f9e488ac8339803c7b7b2e1a3369e8ff000000000000007d5e6f5ca1b3c9fcbbe0cc0a51018fafddffba550ff7f5ecfabeafda91c533d3a6415f11ce0614a9f8bf85c122d1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 140.729269ms ago: executing program 2 (id=939): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1405, 0x800, 0x70bd25, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}}, 0x850) r2 = syz_clone(0x18009000, &(0x7f00000001c0)="a0e74de77c466fd3438ad13eb5dc2f4764eeb217ff2c426f6a7b143b7bc449e6f930322a25665bfdebfd6a22f7eda65a7310c906e1ee93f471b1c91927dd539dc1d9", 0x42, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="ddb8a9449fa165109d048ba402e4fe9c7bd8b25e2da6cba7e131b7097420cd14e87cebf0ea92f53b2937ea5e6a101815c35e630af4582adc4fe138d3a018477e6fe13ffa60660bc76037415d0d274c548beac05bea7cb4566232497e105819046302cd830d7f7fa9ec8f4dd2c14685c88a4e83a1d9126dedc370a5ea83fe0fb9b1989ac9856c7da4136e805a70e3f944bb3ebade110ef4507c998a1b8466e20154259fcdc53a6bb71d774d95a250") sendto$packet(r0, &(0x7f0000000380)="335c9942bbc37ad1bd2f9baddca7d7fc5e8de3a26177c8b1d31971adb4044aaa695c7c88e4aee75e80c40ed429a7e1d1d80221c74110fece3ba75408e396a64e13aa0e24ac77075c0e88ef6d8c6df6358c31ed1f2e48165e17274b5b8e8e8b30f5fbb53d0e2fa6304bcf285bb99739134fd86bc3cae814348e7189b2269957fd145a943119b90af09d03123d0c3e3c5a349f9279acac1c1309b690cdc86eb46377993ef3922f83a6011be930d940fd81b5a1b10647c5e787febe4c58f8be3176b7c5423031b229dbdd35f56ba95c0b7eea4b087912b459f1a235977bd96cc14f07de6bb3d8d31fa2e1de5c22c2", 0xed, 0x20048000, &(0x7f0000000480)={0x11, 0x9, 0x0, 0x1, 0x10, 0x6, @multicast}, 0x14) r3 = syz_open_dev$dri(&(0x7f00000004c0), 0x4, 0x10000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000500)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000006c0)={&(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[{}, {}], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x2, 0x1, 0xa, 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000880)={0x7, r4, r7}) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000008c0)={0x4002, 0x1, 0x0, 0x58}) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000900)) ptrace$getsig(0x4202, r2, 0x2be2afb2, &(0x7f0000000940)) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000009c0)=0x100286, 0x4) pidfd_send_signal(r1, 0x19, &(0x7f0000000a00)={0x24, 0xf6a3, 0xe0000}, 0x0) getsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r3, r3, &(0x7f0000000b40)=0x9, 0x6) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r8, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000d40)={0x0, r6, r5, 0x0, 0x0, 0x1, &(0x7f0000000d00)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000d80)={r9, r5, 0x0, 0x81, 0x3f}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000dc0)=0x1, 0x4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000fc0)={0x1, 0x0, &(0x7f0000000e00)=""/181, &(0x7f0000000ec0)=""/160, &(0x7f0000000f80)=""/41, 0x8000000}) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000001000)={0x2011, 0xf5e2, 0x7, 0x200}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r10, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$can_raw(0x1d, 0x3, 0x1) 9.886475ms ago: executing program 0 (id=940): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r2}, 0x14) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff09", @ANYRES8=r3], 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x1, 0x0, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000126bd7000acdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff03000047000000"], 0x28}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = mmap$IORING_OFF_SQES(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x100000a, 0x10, r3, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x40, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, {0xffff, r8}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r10 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x103382) r11 = memfd_create(&(0x7f00000014c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\xd8\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0$\xc1\xc7\x14\xf7\xba\xb5\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xe4\x8c\xe7\xae\xcc\xb33\xd6\xae\xddc!M^\x82\x84\a\xb4W\xc3\xab\xc3)\xc5\xb5\xe3Zv\xf9Z\xc2\xcc\x80eT\xde\x12\x94M\v/\x12u\x00z\xd5\xf3\xfd(\xd7\xad\xe0\xc1\xdd\x03\xc53\r\xf9\xe1\xcb\x8d\xc8\xb8\xba\xad\xf0rj\xc9\xe0e\x7f\xdd{\xabS[M\x00\xd8\x85?\xc5\x96\x83}W\x8d\xc8\xa6\x82\xfa\xb9\xee\xfa\r\xdd\x89\xda(;i\f\x91\xec\xfb1\t\xb0\x8c\xeeO\x81\xab3\x19b\v\xea\xd2\xaf,l9\xd4\\\xca\xb6y\x03\xc6_\xc9c\x98\x9d\xd6\xc4\xd7N@\x12\x9d\x17\xf1\x15Y\xdbL]\x96\xd4gjD\xfaP\xe0H\xa6\x889\xee8\xb2|\xad8\xddl\xcb2\xef\xb5N1d\xd8\x10\x92QE$]F\x96\xdb\xc6\xb3\xb9R\xb0\xb9\xf7\xe3\nR\x11\x1aLdA\t\x01\x03\x1d\t5\xaa\x82\x1c\x8c\xc4\x00\x00\x00\x00\x00\x00\x00\x00P;|\xa1\xf7\xae\xaa\x92G\xe8?z\xa4\xdf\x8d\"\xdbN\x00\xf7x\x94\x7f\xb6\xa5\xb0\xc4\xa4S\xe5\xc4\xa3fTm5\x84K\xc2\xedY\xady+\xba\xfeLi\xf2\xbc\x92\'\xc7\x04C\x84D^\xd4\x0fI\xb1\xe9\"]\xf4\xe98\xc9\"\xac\x0e\x8b\xb1\x12\xa6\xf7\xa9u\x9b\xcd\xd8\n\x04\x1a\xf8\r?y6\x8bd*\xed\x88<\xee\xd4*\xa9\x15\xff\x01)\xc9@\xbb\x97?\x1f\x19\x10\x8c\x8aOz\xae@\v\xdf\x01\x1b\xc1O\xe3\x9e\x82\x8f\xa1\xd8\xd1\xee\xf3\xaa)\xc4\xe7\xac\xdd\xb1s\xb8S\xfe\xc9g\x13A\x13s\xd3\x86\x12\x1an\x93\xbe\xee#\xbaL\x9anAh\xbb\x8b\xfePi(\x13\x1f\xd50a\xbd/=\xaf\xc4;\xd7\x92\xf9y \xe3m\xff$\xb5[/\a\xc9\xfcR\xdd\x9b\xf7\x14\xd7\x16\x15{~\xce\xa5\xda\x9d3N\xac\xe4\xe2\"\x00\x00\x00\x00\x00\x00\x00\xcc\x7f\x8d\x9c?[\x12\xe5\x80\xe6\xe9@E\xa5]\xe0\xe6\xfd\x9b\x18v\xb9\xf3@Wl5d5\x13\xb2\x12\xafmx7', 0xc) ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000540)={0x0, {}, 0x0, {}, 0x8001, 0x1, 0x3, 0x18, "5361b2a8ea45c7b73e237cb291f2f74a5f64db69cff4c756339051e17e6421ae3d10a8df55356863ecbb732d9491331068d0b38d4aed4876e63e6c8d2c90d43b", "1c93171ad47fae62c5f0d7b52aa168e7153826f9b5b81608c3f8e8d11ff5013f", [0x3, 0xde95]}) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r11) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) 0s ago: executing program 1 (id=941): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@random="5b37182347bc", @random="553a1cedcc04", @val, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @local, @empty}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000340), 0x80) r0 = syz_io_uring_setup(0x24fb, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="07c9dbc3ef49858631e4d5a90c11518a3c2f8ed1110e0d5c69d8f99de03b1929dd894050353d76a6caabe2b60503c6b0d088db7f232da5ea3c3333b3629cd556e20880efa0cb512d3f85d2579ebe0632a4dab9b141b9f7d66357b01f6f5113194c96fc063349e4f6ed6b867cbbbbc32be873b68ed6a1cdf824e8d15fddb49dc4faf83533cda316fb72eada246f2b66cb819ba7c0be2fdcdc1a603d050dfd1c76ff312e4db74eab2623d50eb7d7c834fe2a7ce5affc08faa32adae9b14bc6f69140e0440de4580940c6e9114c77dda31dffb6e677a88bbe88ec7793156a26789bcb9d14f501531d44d164c62a41b4bc597a2f3e19dacec2", 0xf7, 0x4001, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) listen(r3, 0x100) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000940), 0x400400, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000b00)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x35, 0x0, "7d3aa3510ea5e8963a0564aa76dfa00efa7486c67a6f4b0d715d65f64a621731770c7d8b64e794678efe4d3095bb8a1fcf7f234320f52600d87b221d193dd3902c75121e4f4b695377a55c1e0e5d4021"}, 0xd8) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x4, 'a@ro'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0xc9, {0xc9, 0x10, "50d975c18a68a26d54c59e3b3fcef6f715f181b323b844004edfc77988f4dde8305ed5fb0f7ee2a91b4bb5d25abd37afbae5a9bd32e7cc30fb01971f335c5e2ae51ee424c233a81313db799aadf171a36b526d64d8f231ee868a6546472397c781f726759ef855f68a5aab1bedd0ba49cbe3c9852eb8ab20c606c40fc3ac506ac708f9f03748ced3f3b027e56c3dba942a8f458c1b0ea85b59206ee4eff668921617aca680ad39fbd5becae7b4671acbc5331135f5e1a82a7c41a0803688bc29d01066eb535a96"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040a08"], &(0x7f00000001c0)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x7ffffc0, 0xf0f, 0xba53, [0x30, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0x5, 0x40c}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x1e, 0x7, 0x1c, 0x5}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x3, 0xc, "5f8df1c5", "15caaf66"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x3, 0x7, 0x1, 0x6c, 0x9, 0x8}}}, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x0, 0x14, 0x39, "9fbbd1a6cce1e791613ab6d661a816f8fee9e2977f66d47a1dbca809000000000000006e73a68180fe4443a8f372d905d899f87715c260724c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x45}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x8, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x32}, &(0x7f0000000600)={0x40, 0xb, 0x2, "1a00"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000380)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "8ae6"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x0, 0x0, 0x4, "1b2ee791"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) r6 = syz_usb_connect$cdc_ecm(0x2, 0x8f, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000302000040cf408b7440000102030109027d0001010240400904000002020601000a24060000245cbfed3b05240009000d240f0106000000000109000905241504002f24130226710ecca2a93e9c865d6d168957faf6a4ac7cd4ed6fd5282cbfe97dcbdd6f3574ee515cc521997db006e90905810312000701bd976a1cceb3f906088e090503022000012d09d494da2677ad2067f6339c7e797dcf21cfc493d96adb16bf6e27c79576a0ddaf99"], &(0x7f0000000dc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0x3, 0x6, 0x2, 0xff}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000f80)={0x14, &(0x7f0000000e80)={0x40, 0xf, 0xbe, {0xbe, 0x4, "2bec4298a0fe40ca921a6402005016e513f2b6a715bd247e3fd4818ab93033d15d67a4a18533f4408ddf9e55f32b5ddba2733e90a7dc02a3cc213c4e40b00fb3e00537218c74a664beb1fab7c4a39b19c466098a2b735bae2b152964f2052a275cc9fa39ee67a5baa1ca854d687b439f974ca89aad3a1b5df082d9ec613bc8cc0f5d9685d61ee6253cc2aa4151c0de12a9ccc37b74cdeccba3d736753ffdaec9fdfe294b2ac5b27f7ff2064d1e1107fb4b4c56587b564ff7c72bcf8d"}}, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x1c, &(0x7f0000000fc0)={0x20, 0x0, 0x5f, "0cd73603a685f7b7c1d48da446b177b3229d38d552b30cce37705d67f448c383d306052044d189e3f452e9cb95198c5349fa931fae952046482c1a1c8b01083df96552f96f31115c5dd592a47843fd3e3fc1c2ee8c1a8828c6c9d9cbc52592"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x5}}) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000e40)=ANY=[@ANYBLOB="001204"], 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): sts on: batadv_slave_1 [ 377.228729][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.238771][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.249337][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.259617][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.271516][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.282901][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.293712][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.303819][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.314365][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.316711][ T5237] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0015/input/input45 [ 377.326046][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.405800][ T9934] chnl_net:caif_netlink_parms(): no params data found [ 377.412837][ T5282] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 377.449077][ T5282] usb 3-1: device descriptor read/8, error -71 [ 377.464919][ T9961] netlink: 56 bytes leftover after parsing attributes in process `syz.3.783'. [ 377.493669][ T9762] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.503526][ T9762] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.512382][ T9762] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.521818][ T5231] Bluetooth: hci9: command tx timeout [ 377.532724][ T5237] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 377.552569][ T5287] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 377.567326][ T9762] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.690673][ T5282] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 377.730562][ T5282] usb 3-1: device descriptor read/8, error -71 [ 377.780888][ T5287] usb 2-1: unable to get BOS descriptor or descriptor too short [ 377.781881][ T5285] usb 4-1: USB disconnect, device number 37 [ 377.792745][ T5287] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 377.806332][ T5287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.828775][ T5287] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.846033][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.848500][ T5282] usb usb3-port1: unable to enumerate USB device [ 377.860084][ T5287] usb 2-1: Product: syz [ 377.865023][ T5287] usb 2-1: Manufacturer: syz [ 377.870325][ T5287] usb 2-1: SerialNumber: syz [ 378.015918][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.046183][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.100091][ T9934] bridge_slave_0: entered allmulticast mode [ 378.116895][ T5287] usb 2-1: 0:2 : does not exist [ 378.127768][ T9934] bridge_slave_0: entered promiscuous mode [ 378.168700][ T5287] usb 2-1: USB disconnect, device number 62 [ 378.210046][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.226028][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.236492][ T9934] bridge_slave_1: entered allmulticast mode [ 378.249902][ T9934] bridge_slave_1: entered promiscuous mode [ 378.433138][ T8629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.435877][ T9934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.482310][ T9934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.495941][ T8629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.715935][ T8629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.721909][ T9934] team0: Port device team_slave_0 added [ 378.723946][ T8629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.735314][ T9934] team0: Port device team_slave_1 added [ 378.825325][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.839633][ T5287] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 378.868660][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.896992][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.897065][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.927016][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.967572][ T51] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 378.985888][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.998852][ T5287] usb 4-1: Using ep0 maxpacket: 8 [ 379.006855][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.035609][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.057515][ T5287] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.075325][ T5287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.092399][ T5287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.115584][ T5287] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.127432][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 379.131824][ T5287] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.144401][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.166064][ T51] usb 2-1: config 0 has an invalid interface number: 76 but max is 2 [ 379.179241][ T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.189531][ T51] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 379.198919][ T51] usb 2-1: config 0 has no interface number 0 [ 379.205072][ T51] usb 2-1: config 0 interface 76 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 379.217513][ T51] usb 2-1: config 0 interface 76 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.248979][ T51] usb 2-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=aa.13 [ 379.259176][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.268430][ T51] usb 2-1: Product: syz [ 379.273518][ T51] usb 2-1: Manufacturer: syz [ 379.279306][ T9934] hsr_slave_0: entered promiscuous mode [ 379.281744][ T51] usb 2-1: SerialNumber: syz [ 379.297579][ T9934] hsr_slave_1: entered promiscuous mode [ 379.308419][ T51] usb 2-1: config 0 descriptor?? [ 379.322185][ T51] HFC-S_USB 2-1:0.76: probe with driver HFC-S_USB failed with error -5 [ 379.357661][ T5283] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 379.364429][ T9934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.373182][ T5287] usb 4-1: GET_CAPABILITIES returned 0 [ 379.383774][ T9934] Cannot create hsr debugfs directory [ 379.398619][ T5287] usbtmc 4-1:16.0: can't read capabilities [ 379.498922][ T5283] usb 3-1: device descriptor read/64, error -71 [ 379.567158][ T5285] usb 2-1: USB disconnect, device number 63 [ 379.599506][ T5231] Bluetooth: hci9: command tx timeout [ 379.623462][ T5284] usb 4-1: USB disconnect, device number 38 [ 379.737611][ T5283] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 379.794592][ T9934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.888869][ T5283] usb 3-1: device descriptor read/64, error -71 [ 379.990458][ T6392] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.009026][ T5283] usb usb3-port1: attempt power cycle [ 380.143399][ T9934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.294006][ T6392] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.426235][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.458443][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.461706][ T9934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.477767][ T5283] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 380.481262][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.493939][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.498140][ T5283] usb 3-1: device descriptor read/8, error -71 [ 380.503218][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 380.515534][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.672455][ T6392] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.739352][ T5283] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 380.826126][ T9934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.837736][ T5283] usb 3-1: device descriptor read/8, error -71 [ 380.929550][ T6392] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.950312][ T5283] usb usb3-port1: unable to enumerate USB device [ 381.336829][ T9934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.376558][ T9934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.402301][ T6392] bridge_slave_1: left allmulticast mode [ 381.409210][ T6392] bridge_slave_1: left promiscuous mode [ 381.415017][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.429668][ T6392] bridge_slave_0: left allmulticast mode [ 381.436330][ T6392] bridge_slave_0: left promiscuous mode [ 381.443085][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.610690][ T51] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 381.681457][ T5240] Bluetooth: hci9: command tx timeout [ 381.786944][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 381.821751][ T51] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 381.848191][ T51] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 381.861548][ T51] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.896086][ T51] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.907464][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.915513][ T51] usb 2-1: Product: syz [ 381.940474][ T51] usb 2-1: Manufacturer: syz [ 381.945199][ T51] usb 2-1: SerialNumber: syz [ 382.445443][ T6392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.459128][ T51] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 382.477060][ T5285] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 382.497512][ T6392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.520770][ T6392] bond0 (unregistering): Released all slaves [ 382.567419][ T5240] Bluetooth: hci1: command tx timeout [ 382.592258][ T9934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.644811][T10025] tipc: Started in network mode [ 382.650230][T10025] tipc: Node identity eedb0681a41c, cluster identity 4711 [ 382.669824][T10025] tipc: Enabled bearer , priority 10 [ 382.693504][ T5285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.706226][ T5285] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.721666][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 382.722227][T10026] netlink: 'syz.3.796': attribute type 4 has an invalid length. [ 382.730957][ T5285] usb 3-1: SerialNumber: syz [ 382.760585][T10026] netlink: 152 bytes leftover after parsing attributes in process `syz.3.796'. [ 382.773660][T10026] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 382.790527][ T5285] usb 3-1: bad CDC descriptors [ 382.860952][ T9934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.991074][T10015] chnl_net:caif_netlink_parms(): no params data found [ 383.092307][T10035] netlink: 'syz.3.799': attribute type 11 has an invalid length. [ 383.360379][ T6392] hsr_slave_0: left promiscuous mode [ 383.438156][ T6392] hsr_slave_1: left promiscuous mode [ 383.519547][ T51] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 383.565408][ T51] usb 2-1: USB disconnect, device number 64 [ 383.567591][ T5287] usb 3-1: USB disconnect, device number 81 [ 383.600264][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.648475][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.681479][T10054] udevd[10054]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.731043][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.758136][ T5240] Bluetooth: hci9: command tx timeout [ 383.785092][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.794013][ T5295] tipc: Node number set to 1254557313 [ 383.897386][ T5285] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 383.955681][ T6392] veth1_macvtap: left promiscuous mode [ 383.961394][ T6392] veth0_macvtap: left promiscuous mode [ 383.977453][ T6392] veth1_vlan: left promiscuous mode [ 383.985169][ T6392] veth0_vlan: left promiscuous mode [ 384.078719][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 384.098437][ T5285] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 384.107785][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.129363][ T5285] usb 4-1: config 0 descriptor?? [ 384.407352][ T5295] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 384.507800][ T5240] Bluetooth: hci8: SCO packet for unknown connection handle 3152 [ 384.562809][ T5295] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.594445][ T5295] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.607502][ T5295] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.616540][ T5295] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.632385][ T5295] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.646646][ T5240] Bluetooth: hci1: command tx timeout [ 384.661536][ T5295] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.670042][ T5295] usb 3-1: Product: syz [ 384.674256][ T5295] usb 3-1: Manufacturer: syz [ 384.694021][ T5295] cdc_wdm 3-1:1.0: skipping garbage [ 384.701065][ T5295] cdc_wdm 3-1:1.0: skipping garbage [ 384.709184][ T5295] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 384.715283][ T5295] cdc_wdm 3-1:1.0: Unknown control protocol [ 384.925052][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 384.931986][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 384.938772][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 384.945432][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 384.952823][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 384.959463][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 384.966854][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 384.973508][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 384.979957][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 384.986599][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 384.992936][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 384.999587][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.005943][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.012570][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.019096][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.025737][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.032062][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.038694][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.047046][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.053698][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.065039][ T5282] usb 3-1: USB disconnect, device number 82 [ 385.071061][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 385.621335][ T6392] team0 (unregistering): Port device team_slave_1 removed [ 385.699483][ T6392] team0 (unregistering): Port device team_slave_0 removed [ 386.123685][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 386.146183][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 386.454246][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 386.454269][ T29] audit: type=1326 audit(1729765082.282:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.484147][ T5284] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 386.496246][ T29] audit: type=1326 audit(1729765082.282:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.521026][ T29] audit: type=1326 audit(1729765082.312:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.546286][ T29] audit: type=1326 audit(1729765082.312:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.572783][ T29] audit: type=1326 audit(1729765082.312:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.598701][ T29] audit: type=1326 audit(1729765082.312:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.622409][ T29] audit: type=1326 audit(1729765082.312:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.647381][ T29] audit: type=1326 audit(1729765082.312:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.671394][ T29] audit: type=1326 audit(1729765082.312:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.695295][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 386.704801][ T29] audit: type=1326 audit(1729765082.312:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d9817dff9 code=0x7ffc0000 [ 386.729080][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 386.730192][ T5240] Bluetooth: hci1: command tx timeout [ 386.740997][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 386.758844][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.771418][ T5284] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.782396][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 386.801481][ T5284] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 386.811447][ T5284] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 386.820739][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.832575][ T5284] usb 3-1: config 0 descriptor?? [ 386.841833][T10090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 386.910914][ T5240] Bluetooth: hci10: urb ffff88802f951f00 submission failed (90) [ 387.424565][ T5285] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 387.442596][ T5285] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 387.479413][ T5285] asix 4-1:0.0: probe with driver asix failed with error -71 [ 387.504259][ T5285] usb 4-1: USB disconnect, device number 39 [ 387.561598][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.592589][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.647682][T10015] bridge_slave_0: entered allmulticast mode [ 387.676130][T10015] bridge_slave_0: entered promiscuous mode [ 387.761873][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.780660][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.789928][T10015] bridge_slave_1: entered allmulticast mode [ 387.805026][T10015] bridge_slave_1: entered promiscuous mode [ 387.897507][ T51] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 387.962118][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.979570][ T5285] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 388.027494][ T51] usb 2-1: device descriptor read/64, error -71 [ 388.094142][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.128411][ T5283] usb 3-1: USB disconnect, device number 83 [ 388.167446][ T5285] usb 4-1: Using ep0 maxpacket: 32 [ 388.210201][ T5285] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 388.238264][ T5285] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.251628][ T5285] usb 4-1: config 1 interface 0 has no altsetting 0 [ 388.287599][ T51] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 388.296936][ T5285] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.40 [ 388.310922][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.329435][ T5285] usb 4-1: Product: æ…庇袸昪腖꫼잯쿃饂콎齮åµè¥¦á²»í“½éš æ¯¨ç–¡ï¨€ç®É²æ‰”㤱é¤ç‘¸â“ã˜à¬¢ìŒ‰å ·é¢ã²¹â´‰è­œé‡”哶믰Åì®ë­›æ°žá‘웃貚ꤊ✛쓱ꞹ脼ê»ï­ˆåµ°åµ¸â–•ê£‹ä±¶èŒ¯é‘¥æ¼°ìžªæ˜®ì¡‡é‡©á±©ã”ªë³ƒî¹ëˆžë¨±ê´’붠ﱃ앯ᾢ䶎ബ糖풋ﾶ嫜쾧믄暆逑뽑伜ã’奜䒩诪쾤펜é´è˜Ÿï¯¶ëº§å”“㳽扈剠➡ [ 388.364038][ T5285] usb 4-1: Manufacturer: ᇠ[ 388.368782][ T5285] usb 4-1: SerialNumber: 盛舊冦댇둀侸엕핌Ë朅縃匼䙃陂éªç§ë“–椈刜ã¬æºŸæ„Ÿ [ 388.380634][T10015] team0: Port device team_slave_0 added [ 388.437838][ T51] usb 2-1: device descriptor read/64, error -71 [ 388.442845][T10015] team0: Port device team_slave_1 added [ 388.491843][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.559473][ T51] usb usb2-port1: attempt power cycle [ 388.595202][T10099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.612287][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.632726][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.664147][T10099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.725670][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.751344][ T9934] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.769336][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.776472][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.808918][ T5240] Bluetooth: hci1: command tx timeout [ 388.844704][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.851858][ T6392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.862109][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.872278][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.900611][T10099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.903318][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.919713][ T51] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 388.943679][T10099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.948072][ T51] usb 2-1: device descriptor read/8, error -71 [ 388.968082][ T5285] usbhid 4-1:1.0: can't add hid device: -71 [ 388.974234][ T5285] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 389.008180][ T5285] usb 4-1: USB disconnect, device number 40 [ 389.067472][ T5282] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 389.220246][ T51] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 389.246910][ T5282] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.267131][ T5282] usb 3-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.282867][ T51] usb 2-1: device descriptor read/8, error -71 [ 389.309155][ T5282] usb 3-1: config 1 interface 0 has no altsetting 0 [ 389.358606][ T5282] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 389.369697][T10015] hsr_slave_0: entered promiscuous mode [ 389.383229][T10015] hsr_slave_1: entered promiscuous mode [ 389.389171][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 389.399899][ T5282] usb 3-1: SerialNumber: syz [ 389.410953][ T51] usb usb2-port1: unable to enumerate USB device [ 389.426807][T10015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.443260][ T5282] cdc_ether 3-1:1.0: skipping garbage [ 389.457649][T10015] Cannot create hsr debugfs directory [ 389.460884][ T5282] usb 3-1: bad CDC descriptors [ 389.802966][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.864278][ T9934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.907951][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.057156][ T5285] usb 3-1: USB disconnect, device number 84 [ 390.252150][ T9934] veth0_vlan: entered promiscuous mode [ 390.288986][ T9934] veth1_vlan: entered promiscuous mode [ 390.560343][ T9934] veth0_macvtap: entered promiscuous mode [ 390.888605][ T9934] veth1_macvtap: entered promiscuous mode [ 390.994782][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.005632][ T5285] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 391.018772][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.031688][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.044292][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.055508][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.066920][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.077569][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.090384][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.107003][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.127148][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.138813][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.150636][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.161128][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.171969][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.182193][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.198275][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.211401][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.223435][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.257408][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.294472][ T5285] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 391.309672][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.337300][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.345127][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.386400][ T5285] usb 4-1: config 0 descriptor?? [ 391.397317][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.411593][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.426777][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.458662][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.492122][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.506174][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.575273][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.604978][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.629074][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.656921][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.747157][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.764024][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.774228][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.785148][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.795169][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.807828][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.819371][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.830525][ T9934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.839409][ T9934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.848401][ T9934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.857406][ T9934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.161390][T10015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.279604][T10015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.317154][T10015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.346984][T10015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.378033][ T8629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.386632][ T8629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.532659][ T5285] usbhid 4-1:0.0: can't add hid device: -71 [ 392.547685][ T5285] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 392.564631][ T5285] usb 4-1: USB disconnect, device number 41 [ 392.592598][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.639745][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.722252][T10015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.746610][T10015] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.760835][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.768044][ T8628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.905687][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.912922][ T8628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.990620][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.124447][T10015] veth0_vlan: entered promiscuous mode [ 393.162158][T10015] veth1_vlan: entered promiscuous mode [ 393.218774][T10015] veth0_macvtap: entered promiscuous mode [ 393.299842][T10015] veth1_macvtap: entered promiscuous mode [ 393.362191][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 393.362212][ T29] audit: type=1326 audit(1729765089.182:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.3.823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e34d7dff9 code=0x0 [ 393.447734][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 393.479071][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.515261][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.566264][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.619501][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.634956][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.645279][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 393.656386][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.666989][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.667599][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.695172][ T9] usb 2-1: config 0 descriptor?? [ 393.699796][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.797524][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.812006][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.833939][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.908860][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.919879][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 393.925858][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 393.965689][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.985372][ T9] usb 2-1: USB disconnect, device number 69 [ 394.018938][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.076790][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.110203][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.138968][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.164561][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.183347][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.219547][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.283865][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.364061][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.415587][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.456702][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.507357][ T25] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 394.537504][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.619928][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.661077][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.689031][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 394.701990][ T29] audit: type=1326 audit(1729765090.532:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19097dff9 code=0x7ffc0000 [ 394.737334][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.748087][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.759090][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.769993][ T25] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 394.798227][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.825454][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.837504][ T25] usb 2-1: Product: syz [ 394.841712][ T25] usb 2-1: Manufacturer: syz [ 394.858877][ T25] usb 2-1: SerialNumber: syz [ 394.865011][ T29] audit: type=1326 audit(1729765090.562:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19097dff9 code=0x7ffc0000 [ 394.898552][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.922910][ T25] usb 2-1: config 0 descriptor?? [ 394.957893][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.981015][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 395.001665][ T29] audit: type=1326 audit(1729765090.622:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa19097dff9 code=0x7ffc0000 [ 395.036264][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.117256][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.187851][ T29] audit: type=1326 audit(1729765090.642:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19097dff9 code=0x7ffc0000 [ 395.227271][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.245922][T10182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.278804][ T29] audit: type=1326 audit(1729765090.642:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19097dff9 code=0x7ffc0000 [ 395.327279][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.357506][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.372804][ T29] audit: type=1326 audit(1729765090.652:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa19097dff9 code=0x7ffc0000 [ 395.423429][ T29] audit: type=1326 audit(1729765090.652:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19097dff9 code=0x7ffc0000 [ 395.464911][ T29] audit: type=1326 audit(1729765090.672:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fa19097dff9 code=0x7ffc0000 [ 395.487280][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.487310][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.491123][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.501373][ T29] audit: type=1326 audit(1729765090.672:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19097dff9 code=0x7ffc0000 [ 395.668983][T10182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.769393][T10015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.778687][T10015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.787974][T10015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.798966][T10015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.811304][ T5285] usb 2-1: USB disconnect, device number 70 [ 395.982684][T10237] netlink: 'syz.3.828': attribute type 2 has an invalid length. [ 396.014457][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.828'. [ 396.244605][ T8628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.254823][ T8628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.319489][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 396.489621][ T8628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.517410][ T8628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.747454][ T5287] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 396.802033][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 396.899035][ T5287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.914481][ T5287] usb 2-1: config 0 has no interfaces? [ 396.962073][ T5287] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 396.990968][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.042154][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 397.075031][ T5287] usb 2-1: config 0 descriptor?? [ 397.097429][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.149208][ T9] usb 3-1: config 0 descriptor?? [ 397.179393][ T9] cp210x 3-1:0.0: cp210x converter detected [ 397.329350][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.372622][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.463280][ T5287] usb 2-1: string descriptor 0 read error: -71 [ 397.474799][ T5287] usb 2-1: USB disconnect, device number 71 [ 397.507516][ T5285] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 397.595477][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 397.677756][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 397.699366][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.717816][T10293] netlink: 44 bytes leftover after parsing attributes in process `syz.3.835'. [ 397.728467][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.751664][ T5285] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 397.764552][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.778863][ T5285] usb 5-1: config 0 descriptor?? [ 397.815554][ T5287] usb 3-1: USB disconnect, device number 85 [ 397.854510][ T5287] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 397.939357][ T5287] cp210x 3-1:0.0: device disconnected [ 398.170481][T10305] netlink: 'syz.1.836': attribute type 9 has an invalid length. [ 398.188331][T10305] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.836'. [ 398.273244][T10306] netlink: 'syz.1.836': attribute type 9 has an invalid length. [ 398.287800][T10306] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.836'. [ 398.523659][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 398.551555][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 398.639793][ T5240] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 398.650206][ T5240] Bluetooth: hci9: Injecting HCI hardware error event [ 398.659893][ T5231] Bluetooth: hci9: hardware error 0x00 [ 398.894471][ T5285] usbhid 5-1:0.0: can't add hid device: -71 [ 398.934155][ T5285] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 398.989801][ T5285] usb 5-1: USB disconnect, device number 67 [ 399.017041][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 399.017063][ T29] audit: type=1326 audit(1729765094.842:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10317 comm="syz.4.841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd29b7dff9 code=0x0 [ 399.043088][T10320] fuse: blksize only supported for fuseblk [ 399.127843][ T51] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 399.292114][ T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.303824][ T51] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.317600][ T5295] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 399.338200][ T51] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.352817][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.378176][ T51] usb 3-1: Product: syz [ 399.386590][ T51] usb 3-1: Manufacturer: syz [ 399.392453][ T51] usb 3-1: SerialNumber: syz [ 399.478697][ T5295] usb 2-1: Using ep0 maxpacket: 8 [ 399.508790][ T5295] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 399.527751][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.537146][ T5295] usb 2-1: Product: syz [ 399.548091][ T5295] usb 2-1: Manufacturer: syz [ 399.553682][ T5295] usb 2-1: SerialNumber: syz [ 399.563683][ T5295] usb 2-1: config 0 descriptor?? [ 399.813158][ T5295] usb 2-1: USB disconnect, device number 72 [ 400.797996][ T5231] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 400.880656][T10333] xt_bpf: check failed: parse error [ 400.927487][ T5295] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 401.119364][ T5295] usb 2-1: Using ep0 maxpacket: 32 [ 401.180929][ T5295] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 401.216720][ T5295] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.40 [ 401.246036][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.264534][ T5295] usb 2-1: Product: syz [ 401.268920][ T5295] usb 2-1: Manufacturer: syz [ 401.295508][ T5295] usb 2-1: SerialNumber: syz [ 401.320246][ T5295] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 401.343270][T10343] fuse: Bad value for 'user_id' [ 401.401954][T10343] fuse: Bad value for 'user_id' [ 401.523025][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.578567][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.603132][ T5285] usb 2-1: USB disconnect, device number 73 [ 401.878979][ T29] audit: type=1326 audit(1729765097.702:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0b7dff9 code=0x7fc00000 [ 401.965406][ T29] audit: type=1326 audit(1729765097.702:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e0b7dff9 code=0x7fc00000 [ 402.303534][T10353] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.853'. [ 402.348918][ T8628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.547037][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.627618][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.640555][ T8628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.969774][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.990951][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 403.001820][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 403.011029][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 403.022624][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 403.032856][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 403.699805][T10357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.720248][T10357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.752808][T10357] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 403.791241][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.799098][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.843187][T10357] bond0 (unregistering): Released all slaves [ 403.857671][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 403.932043][ T51] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 403.961553][ T8628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.976962][ T51] usb 3-1: USB disconnect, device number 86 [ 404.017529][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 404.028224][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 404.060935][T10065] udevd[10065]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.064980][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 404.088121][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.100179][ T9] usb 2-1: Product: syz [ 404.104504][ T9] usb 2-1: Manufacturer: syz [ 404.109538][ T9] usb 2-1: SerialNumber: syz [ 404.116550][ T9] usb 2-1: config 0 descriptor?? [ 404.123606][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 404.130840][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 404.143767][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47 [ 404.159272][ T9] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 404.178896][ T9] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 404.285671][ T8628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.438071][ T5284] usb 2-1: USB disconnect, device number 74 [ 404.586136][ T8628] bridge_slave_1: left allmulticast mode [ 404.600272][ T8628] bridge_slave_1: left promiscuous mode [ 404.617470][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.644710][ T8628] bridge_slave_0: left allmulticast mode [ 404.710781][ T8628] bridge_slave_0: left promiscuous mode [ 404.716654][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.118368][ T5231] Bluetooth: hci1: command tx timeout [ 405.577770][ T51] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 405.727798][ T51] usb 2-1: device descriptor read/64, error -71 [ 405.987470][ T51] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 406.130334][ T8628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.140627][ T51] usb 2-1: device descriptor read/64, error -71 [ 406.165973][ T8628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.210437][ T8628] bond0 (unregistering): Released all slaves [ 406.254247][T10399] netlink: 'syz.1.863': attribute type 10 has an invalid length. [ 406.262595][ T51] usb usb2-port1: attempt power cycle [ 406.286233][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.293908][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.345936][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.353213][T10399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.360723][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.367954][T10399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.381371][T10399] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 406.395536][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 406.406112][T10401] bridge_slave_1: left allmulticast mode [ 406.417680][T10401] bridge_slave_1: left promiscuous mode [ 406.423471][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.467125][T10401] bridge_slave_0: left allmulticast mode [ 406.477908][T10401] bridge_slave_0: left promiscuous mode [ 406.484381][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.587440][T10401] bond0: (slave bridge0): Releasing backup interface [ 406.637692][ T51] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 406.690098][ T51] usb 2-1: device descriptor read/8, error -71 [ 406.937678][ T51] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 406.993823][ T51] usb 2-1: device descriptor read/8, error -71 [ 407.011556][ T29] audit: type=1326 audit(1729765102.842:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.2.866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15e0b7dff9 code=0x0 [ 407.122307][ T51] usb usb2-port1: unable to enumerate USB device [ 407.136287][ T8628] hsr_slave_0: left promiscuous mode [ 407.151545][ T8628] hsr_slave_1: left promiscuous mode [ 407.170079][ T8628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.191847][T10422] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 407.200985][ T5231] Bluetooth: hci1: command tx timeout [ 407.218663][T10422] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.866'. [ 407.220003][ T8628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.252559][ T8628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.270443][ T8628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.323407][ T8628] veth1_macvtap: left promiscuous mode [ 407.323487][ T8628] veth0_macvtap: left promiscuous mode [ 407.323626][ T8628] veth1_vlan: left promiscuous mode [ 407.323750][ T8628] veth0_vlan: left promiscuous mode [ 408.081455][ T5240] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 408.128421][ T5240] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 408.139723][ T5240] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 408.162457][ T5240] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 408.178929][ T5240] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 408.190894][ T5240] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 408.874877][ T8628] team0 (unregistering): Port device team_slave_1 removed [ 408.984151][ T8628] team0 (unregistering): Port device team_slave_0 removed [ 409.277398][ T5240] Bluetooth: hci1: command tx timeout [ 410.020012][T10361] chnl_net:caif_netlink_parms(): no params data found [ 410.238217][ T5240] Bluetooth: hci10: command tx timeout [ 410.327585][ T5284] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 410.524722][ T5284] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 410.526784][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.553023][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.561631][ T5284] usb 2-1: Product: syz [ 410.577448][ T5284] usb 2-1: Manufacturer: syz [ 410.605851][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.619634][ T5284] usb 2-1: SerialNumber: syz [ 410.642237][ T5284] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 410.657912][T10361] bridge_slave_0: entered allmulticast mode [ 410.664156][ T51] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 410.760996][T10361] bridge_slave_0: entered promiscuous mode [ 410.870785][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.900949][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.950377][T10361] bridge_slave_1: entered allmulticast mode [ 410.988829][T10361] bridge_slave_1: entered promiscuous mode [ 411.078767][ T5282] usb 2-1: USB disconnect, device number 79 [ 411.223994][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.289698][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.358127][ T5240] Bluetooth: hci1: command tx timeout [ 411.444960][T10441] chnl_net:caif_netlink_parms(): no params data found [ 411.476442][T10361] team0: Port device team_slave_0 added [ 411.529249][T10361] team0: Port device team_slave_1 added [ 411.677986][ T5240] Bluetooth: hci0: command 0x0406 tx timeout [ 411.710617][ T51] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 411.718002][ T51] ath9k_htc: Failed to initialize the device [ 411.725243][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.733728][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.759670][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.778393][ T5282] usb 2-1: ath9k_htc: USB layer deinitialized [ 411.829599][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.123674][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.150174][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.176336][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.247088][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.318159][ T5231] Bluetooth: hci10: command tx timeout [ 412.472663][T10361] hsr_slave_0: entered promiscuous mode [ 412.531824][T10361] hsr_slave_1: entered promiscuous mode [ 412.581444][T10361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.607749][T10361] Cannot create hsr debugfs directory [ 412.678690][T10441] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.685881][T10441] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.767717][T10441] bridge_slave_0: entered allmulticast mode [ 412.807650][T10441] bridge_slave_0: entered promiscuous mode [ 412.842033][T10441] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.867576][T10441] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.907698][T10441] bridge_slave_1: entered allmulticast mode [ 412.946907][T10441] bridge_slave_1: entered promiscuous mode [ 413.124233][T10441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.193236][T10441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.298623][T10441] team0: Port device team_slave_0 added [ 413.334605][T10441] team0: Port device team_slave_1 added [ 413.417841][T10441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.437111][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.510286][T10441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.604069][T10441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.626890][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.664359][T10441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.871912][T10441] hsr_slave_0: entered promiscuous mode [ 413.886738][T10441] hsr_slave_1: entered promiscuous mode [ 413.895158][T10441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.927386][T10441] Cannot create hsr debugfs directory [ 414.397542][ T5231] Bluetooth: hci10: command tx timeout [ 414.479157][T10361] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 414.594151][T10441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.665977][T10361] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 414.687126][T10361] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 414.790829][T10441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.838334][T10361] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 414.922615][T10441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.081685][T10441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.229824][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.300438][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.359118][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.366232][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.408031][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.415245][ T8629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.530637][T10441] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.569782][T10441] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.638978][T10441] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.665160][T10441] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.720363][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.888397][T10361] veth0_vlan: entered promiscuous mode [ 415.933991][T10361] veth1_vlan: entered promiscuous mode [ 415.991216][T10441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.055235][T10361] veth0_macvtap: entered promiscuous mode [ 416.091161][T10441] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.128891][T10361] veth1_macvtap: entered promiscuous mode [ 416.160102][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.167250][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.240764][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.247948][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.303699][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.338375][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.377771][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.406096][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.445552][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.475750][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.488918][ T54] Bluetooth: hci10: command tx timeout [ 416.527562][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.556581][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.607760][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.647413][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.690175][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.727385][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.757945][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.798843][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 416.807198][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.838003][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.867499][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.908607][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.946013][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.982717][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.067093][T10441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.110126][T10441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.152148][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.187401][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.225120][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.250243][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.279799][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.317880][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.356719][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.388215][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.427707][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.451622][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.497332][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.537726][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.567794][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.605756][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.638390][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.667031][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.712772][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.746546][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.785815][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.815284][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.846977][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.922565][T10361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.957530][T10361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.966262][T10361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.016011][T10361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.159798][T10441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.281374][ T8629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.311131][ T8629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.355121][T10441] veth0_vlan: entered promiscuous mode [ 418.392721][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.420666][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.440783][T10441] veth1_vlan: entered promiscuous mode [ 418.511813][T10441] veth0_macvtap: entered promiscuous mode [ 418.581413][T10441] veth1_macvtap: entered promiscuous mode [ 418.654419][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.725015][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.790760][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.845764][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.917656][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.978803][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.040471][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.092528][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.141010][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.208782][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.254163][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.305547][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.328287][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 419.339176][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 419.346903][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 419.359859][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 419.368821][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 419.376082][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 419.419127][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.438749][ T5295] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 419.477609][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.520874][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.565568][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.594942][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.617411][ T5295] usb 5-1: device descriptor read/64, error -71 [ 419.637413][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.671757][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.694367][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.715381][T10441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.805909][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.835456][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.887507][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.907559][ T5295] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 419.927430][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.967421][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.996171][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.036829][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.047746][ T5295] usb 5-1: device descriptor read/64, error -71 [ 420.066668][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.099418][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.142403][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.158224][ T5295] usb usb5-port1: attempt power cycle [ 420.177401][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.217287][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.252870][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.295348][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.326072][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.353828][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.394257][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.424813][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.456203][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.507752][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.527434][ T5295] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 420.537303][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.579133][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.594116][ T5295] usb 5-1: device descriptor read/8, error -71 [ 420.615778][T10441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.709747][T10441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.740924][T10441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.777472][T10441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.807244][ C1] sched: DL replenish lagged too much [ 420.822702][T10441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.847523][ T5295] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 420.899484][ T5295] usb 5-1: device descriptor read/8, error -71 [ 421.019665][ T5295] usb usb5-port1: unable to enumerate USB device [ 421.435377][ T5231] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 421.443619][ T5240] Bluetooth: hci11: command tx timeout [ 421.452541][ T5231] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 421.460902][ T5231] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 421.469821][ T5231] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 421.478380][ T5231] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 421.485638][ T5231] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 421.847030][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.885627][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.939952][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.962906][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.000257][T10598] chnl_net:caif_netlink_parms(): no params data found [ 422.513342][ T29] audit: type=1326 audit(1729765118.332:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.549176][ T29] audit: type=1326 audit(1729765118.332:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.586517][ T29] audit: type=1326 audit(1729765118.332:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.618893][ T29] audit: type=1326 audit(1729765118.332:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.657391][ T937] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 422.676548][ T29] audit: type=1326 audit(1729765118.332:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.709072][ T29] audit: type=1326 audit(1729765118.332:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.747770][ T29] audit: type=1326 audit(1729765118.332:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.782186][ T29] audit: type=1326 audit(1729765118.332:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.806210][ T937] usb 4-1: device descriptor read/64, error -71 [ 422.823374][ T29] audit: type=1326 audit(1729765118.332:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.859321][ T29] audit: type=1326 audit(1729765118.332:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ea97dff9 code=0x7ffc0000 [ 422.925062][T10631] chnl_net:caif_netlink_parms(): no params data found [ 422.953086][T10598] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.967677][T10598] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.984102][T10598] bridge_slave_0: entered allmulticast mode [ 423.011941][T10598] bridge_slave_0: entered promiscuous mode [ 423.047453][ T937] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 423.075672][T10598] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.092796][T10598] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.105435][T10598] bridge_slave_1: entered allmulticast mode [ 423.123135][T10598] bridge_slave_1: entered promiscuous mode [ 423.187389][ T937] usb 4-1: device descriptor read/64, error -71 [ 423.268745][T10598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.296562][T10598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.306258][ T937] usb usb4-port1: attempt power cycle [ 423.324722][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.336812][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.356246][T10631] bridge_slave_0: entered allmulticast mode [ 423.366278][T10631] bridge_slave_0: entered promiscuous mode [ 423.384126][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.395616][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.413521][T10631] bridge_slave_1: entered allmulticast mode [ 423.424776][T10631] bridge_slave_1: entered promiscuous mode [ 423.517837][ T54] Bluetooth: hci12: command tx timeout [ 423.527950][ T5231] Bluetooth: hci11: command tx timeout [ 423.657466][ T937] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 423.706527][T10598] team0: Port device team_slave_0 added [ 423.715903][ T937] usb 4-1: device descriptor read/8, error -71 [ 423.750035][T10631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.801127][T10598] team0: Port device team_slave_1 added [ 423.835765][T10631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.964387][T10598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.989368][ T937] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 424.010390][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.064742][ T937] usb 4-1: device descriptor read/8, error -71 [ 424.083224][ T5231] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 424.095730][ T5231] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 424.104769][ T5231] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 424.113066][ T5231] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 424.121312][ T5231] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 424.130113][ T5231] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 424.195762][T10598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.206796][ T937] usb usb4-port1: unable to enumerate USB device [ 424.268277][T10631] team0: Port device team_slave_0 added [ 424.274800][T10598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.287391][ T5296] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 424.305240][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.343697][T10598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.398731][T10631] team0: Port device team_slave_1 added [ 424.454195][ T5296] usb 5-1: unable to get BOS descriptor or descriptor too short [ 424.476252][ T5296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.490521][T10598] hsr_slave_0: entered promiscuous mode [ 424.507970][ T5296] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.527834][T10598] hsr_slave_1: entered promiscuous mode [ 424.537979][T10598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.550603][ T5296] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 424.567422][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.579362][T10598] Cannot create hsr debugfs directory [ 424.590315][T10631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.609089][ T5296] usb 5-1: Product: syz [ 424.613295][ T5296] usb 5-1: Manufacturer: syz [ 424.618532][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.657803][ T5296] usb 5-1: SerialNumber: syz [ 424.737452][T10631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.894011][ T5296] usbhid 5-1:1.0: can't add hid device: -71 [ 424.901383][ T5296] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 424.924958][ T5296] usb 5-1: USB disconnect, device number 72 [ 424.931751][T10631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.954597][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.998999][T10631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.279194][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.297797][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.332771][T10631] hsr_slave_0: entered promiscuous mode [ 425.342830][T10631] hsr_slave_1: entered promiscuous mode [ 425.349596][T10631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.357194][T10631] Cannot create hsr debugfs directory [ 425.599437][ T5231] Bluetooth: hci12: command tx timeout [ 425.603507][ T54] Bluetooth: hci11: command tx timeout [ 425.710319][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.747498][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.849276][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 425.937572][ T51] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 426.022105][T10672] libceph: resolve ' [ 426.022105][T10672] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 426.022105][T10672] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 426.076896][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.111115][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 426.129130][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.142653][ T51] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 426.152108][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.160715][ T51] usb 4-1: Product: syz [ 426.164947][ T51] usb 4-1: Manufacturer: syz [ 426.172287][ T51] usb 4-1: SerialNumber: syz [ 426.189113][ T51] usb 4-1: config 0 descriptor?? [ 426.212275][ T51] usb 4-1: MBOX3: Invalid descriptor size=18. [ 426.238976][ T54] Bluetooth: hci13: command tx timeout [ 426.275795][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.322769][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.415721][ T51] usb 4-1: USB disconnect, device number 46 [ 426.644980][T10598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.690813][T10660] chnl_net:caif_netlink_parms(): no params data found [ 426.789918][ T5296] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 426.852368][T10598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.988355][ T5296] usb 5-1: Using ep0 maxpacket: 16 [ 427.034160][ T5296] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 427.044137][ T5296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.055764][ T5296] usb 5-1: config 0 has no interface number 0 [ 427.065620][ T5296] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 427.075652][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.084125][ T5296] usb 5-1: Product: syz [ 427.088629][ T5296] usb 5-1: Manufacturer: syz [ 427.093289][ T5296] usb 5-1: SerialNumber: syz [ 427.100527][T10598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.101527][ T5296] usb 5-1: config 0 descriptor?? [ 427.120859][ T5296] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 427.128426][ T5296] usb 5-1: No valid video chain found. [ 427.327129][ T5296] usb 5-1: USB disconnect, device number 73 [ 427.350512][T10598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.371090][ T52] bridge_slave_1: left allmulticast mode [ 427.376800][ T52] bridge_slave_1: left promiscuous mode [ 427.431583][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.458236][ T52] bridge_slave_0: left allmulticast mode [ 427.472060][ T52] bridge_slave_0: left promiscuous mode [ 427.489799][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.681282][ T54] Bluetooth: hci12: command tx timeout [ 427.686943][ T54] Bluetooth: hci11: command tx timeout [ 427.762540][ T937] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 427.966710][ T937] usb 4-1: config 0 has no interfaces? [ 428.002798][ T937] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 428.013954][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.023008][ T937] usb 4-1: Product: syz [ 428.027491][ T937] usb 4-1: Manufacturer: syz [ 428.034957][ T937] usb 4-1: SerialNumber: syz [ 428.049092][ T937] usb 4-1: config 0 descriptor?? [ 428.317379][ T54] Bluetooth: hci13: command tx timeout [ 428.379312][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.424143][T10660] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.472890][T10660] bridge_slave_0: entered allmulticast mode [ 428.547826][T10660] bridge_slave_0: entered promiscuous mode [ 428.704717][T10660] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.733481][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.771064][T10660] bridge_slave_1: entered allmulticast mode [ 428.794714][T10660] bridge_slave_1: entered promiscuous mode [ 429.068096][T10660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.202675][T10660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.660280][T10660] team0: Port device team_slave_0 added [ 429.687558][T10660] team0: Port device team_slave_1 added [ 429.757364][ T54] Bluetooth: hci12: command tx timeout [ 430.011942][ T52] hsr_slave_1: left promiscuous mode [ 430.034377][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.059689][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.122670][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.153366][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.263003][ T52] veth1_macvtap: left promiscuous mode [ 430.280792][ T52] veth0_macvtap: left promiscuous mode [ 430.296757][ T52] veth1_vlan: left promiscuous mode [ 430.313649][ T52] veth0_vlan: left promiscuous mode [ 430.411777][ T54] Bluetooth: hci13: command tx timeout [ 431.660638][ T52] team0 (unregistering): Port device team_slave_1 removed [ 431.728788][ T52] team0 (unregistering): Port device team_slave_0 removed [ 432.492662][ T54] Bluetooth: hci13: command tx timeout [ 433.183041][T10710] syz.4.893 (10710): drop_caches: 2 [ 433.375768][T10660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.417820][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.429658][T10714] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.894'. [ 433.487596][T10660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.563746][T10660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.604418][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.632109][T10660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.953036][T10660] hsr_slave_0: entered promiscuous mode [ 434.001376][T10660] hsr_slave_1: entered promiscuous mode [ 434.047364][T10660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.065254][T10660] Cannot create hsr debugfs directory [ 434.295757][T10631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 434.417510][T10631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 434.442055][T10631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.491511][T10631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.527304][ T51] usb 4-1: USB disconnect, device number 47 [ 434.862178][T10598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.897173][T10598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.914970][T10598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 434.967376][ T51] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 435.092063][T10660] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.119798][ T51] usb 4-1: device descriptor read/64, error -71 [ 435.150993][T10598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.233280][T10660] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.368947][ T51] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 435.515656][T10660] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.529636][ T51] usb 4-1: device descriptor read/64, error -71 [ 435.657689][ T51] usb usb4-port1: attempt power cycle [ 435.755550][T10660] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.806206][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.960350][T10631] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.999521][ T51] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 436.018740][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.025985][ T2478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.038327][ T51] usb 4-1: device descriptor read/8, error -71 [ 436.189220][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.196392][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.250311][T10660] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.307884][ T51] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 436.320169][T10660] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.344228][ T51] usb 4-1: device descriptor read/8, error -71 [ 436.369163][T10660] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.429637][T10660] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.448435][T10774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.453943][T10598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.466997][T10774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.479635][ T51] usb usb4-port1: unable to enumerate USB device [ 436.584491][T10598] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.658605][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.665810][ T8627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.688314][ T5284] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 436.781417][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.788582][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.866395][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 436.874773][ T5284] usb 5-1: config 0 has an invalid interface number: 233 but max is 0 [ 436.884617][ T5284] usb 5-1: config 0 has no interface number 0 [ 436.895033][ T5284] usb 5-1: New USB device found, idVendor=2040, idProduct=b753, bcdDevice=77.77 [ 436.904871][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.911647][T10631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.915542][ T5284] usb 5-1: Product: syz [ 436.924129][ T5284] usb 5-1: Manufacturer: syz [ 436.940555][ T5284] usb 5-1: SerialNumber: syz [ 436.971598][T10660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.985696][ T5284] usb 5-1: config 0 descriptor?? [ 437.029963][T10598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 437.097347][T10598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.225345][ T5282] usb 5-1: USB disconnect, device number 74 [ 437.248630][T10660] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.350873][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.358098][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.436899][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.444129][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.484190][T10631] veth0_vlan: entered promiscuous mode [ 437.501394][T10598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.532521][T10631] veth1_vlan: entered promiscuous mode [ 437.686217][T10660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 437.727400][T10660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.763935][T10631] veth0_macvtap: entered promiscuous mode [ 437.773883][T10631] veth1_macvtap: entered promiscuous mode [ 437.931747][T10598] veth0_vlan: entered promiscuous mode [ 437.967067][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.977981][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.991546][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.017797][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.030956][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.071325][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.083264][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.097873][ T5237] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 438.109599][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.122011][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.140295][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.166939][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.178069][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.191914][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.204360][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.215720][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.227923][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.240597][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.252515][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.262684][ T5237] usb 5-1: Using ep0 maxpacket: 8 [ 438.268631][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.269767][ T5237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.295358][ T5237] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 438.308377][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 438.319308][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.321258][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 438.340643][ T5237] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 438.360792][T10631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.370633][ T5237] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 438.381023][ T5237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 438.390371][ T5237] usb 5-1: Product: syz [ 438.403881][ T5237] usb 5-1: Manufacturer: syz [ 438.408661][ T5237] usb 5-1: SerialNumber: syz [ 438.415490][ T5237] usb 5-1: config 0 descriptor?? [ 438.443775][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.457697][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.469057][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.480134][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.490483][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.503668][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.513924][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.526221][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.538762][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.551673][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.564038][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.576043][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.589681][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.603001][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.613269][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.624035][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.634322][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.641755][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.646706][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.664660][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.680134][ T5237] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 438.687363][ T5237] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 438.699258][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.733406][T10631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.748743][T10631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.763579][T10631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.764401][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.811210][ T25] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 438.825764][T10598] veth1_vlan: entered promiscuous mode [ 438.881754][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.894164][T10631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.914094][T10631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.929881][T10631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.938928][ T5237] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 438.947476][T10631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.975159][ T5237] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 438.988251][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 438.995204][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 439.018409][ T25] usb 4-1: config 0 has no interface number 0 [ 439.031955][ T25] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 439.043762][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.053592][ T25] usb 4-1: Product: syz [ 439.057979][ T25] usb 4-1: Manufacturer: syz [ 439.062610][ T25] usb 4-1: SerialNumber: syz [ 439.068485][ T5237] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 439.088337][ T25] usb 4-1: config 0 descriptor?? [ 439.124965][ T5237] usb 5-1: USB disconnect, device number 75 [ 439.307740][T10778] xt_connbytes: Forcing CT accounting to be enabled [ 439.329833][ T25] usb 4-1: selecting invalid altsetting 1 [ 439.335653][ T25] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 439.353319][ T25] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 439.361643][ T25] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 439.383474][ T25] usb 4-1: USB disconnect, device number 52 [ 439.454981][T10660] veth0_vlan: entered promiscuous mode [ 439.472503][T10598] veth0_macvtap: entered promiscuous mode [ 439.543266][ T8627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.594505][ T8627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.631656][T10598] veth1_macvtap: entered promiscuous mode [ 439.695397][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.704071][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.719279][T10660] veth1_vlan: entered promiscuous mode [ 439.809887][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.842239][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.859006][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.870242][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.905876][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.958843][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.015031][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.057302][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.099451][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.110742][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.121210][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.148198][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.174247][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.287126][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.328348][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.334710][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.393443][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.405550][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.440428][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.487544][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.509447][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.536125][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.557595][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.597314][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.625624][T10598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.752692][T10660] veth0_macvtap: entered promiscuous mode [ 440.763246][T10660] veth1_macvtap: entered promiscuous mode [ 440.779735][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.798057][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.809453][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.820296][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.830575][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.847566][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.029353][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.052226][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.072009][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.084298][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.101651][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.112750][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.132296][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.151868][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.182620][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.193385][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.204598][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.215648][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.250358][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.267007][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.279648][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.291616][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.303333][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.317064][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.355532][T10598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.400151][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.412026][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.427826][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.439615][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.450746][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.461787][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.476028][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.487703][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.498018][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.509912][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.522419][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.534247][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.545331][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.557077][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.557390][ T5285] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 441.567179][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.589732][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.601586][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.613450][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.623508][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.634449][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.645497][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.656123][ T5237] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 441.668338][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.682536][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.683033][T10812] netlink: 200 bytes leftover after parsing attributes in process `syz.3.908'. [ 441.708258][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.720618][T10660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.810385][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 441.813056][T10598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.828355][T10598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.837096][T10598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.846567][T10598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.859655][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.875382][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.898555][ T5285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.908250][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.910484][ T5285] usb 3-1: config 0 has no interfaces? [ 441.931694][ T5285] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 441.942313][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.947499][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.951554][ T5285] usb 3-1: Product: syz [ 441.965826][ T5237] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 441.966681][ T5285] usb 3-1: Manufacturer: syz [ 441.982874][ T5285] usb 3-1: SerialNumber: syz [ 442.003198][ T5285] usb 3-1: config 0 descriptor?? [ 442.007701][ T5237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.024086][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.047514][ T5237] usb 5-1: config 0 descriptor?? [ 442.052733][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.071314][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.086327][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.099487][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.125785][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.136044][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.149835][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.167014][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.177893][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.190842][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.207824][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.221230][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.239972][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.250540][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.261805][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.272435][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.288886][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.301723][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.322253][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.353162][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.368610][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.410886][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.424512][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.440513][T10660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.482920][ T5237] wacom 0003:056A:00F8.0016: unknown main item tag 0x0 [ 442.499552][ T5237] wacom 0003:056A:00F8.0016: unknown main item tag 0x0 [ 442.507089][ T5237] wacom 0003:056A:00F8.0016: unknown main item tag 0x0 [ 442.514191][ T5237] wacom 0003:056A:00F8.0016: unknown main item tag 0x0 [ 442.527077][ T5295] usb 3-1: USB disconnect, device number 87 [ 442.536467][ T5237] wacom 0003:056A:00F8.0016: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.4-1/input0 [ 442.556203][T10660] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.623022][T10660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.632912][T10660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.643475][T10660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.792612][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.833816][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.995758][ T8628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.049646][ T8628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.201035][ T8627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.246518][ T8627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.286281][ T8628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.307422][ T8628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.307745][ T5285] usb 5-1: USB disconnect, device number 76 [ 444.319603][T10837] netlink: 'syz.3.913': attribute type 4 has an invalid length. [ 444.416081][ T5284] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 444.627681][ T5284] usb 2-1: Using ep0 maxpacket: 16 [ 444.640136][ T5284] usb 2-1: too many configurations: 84, using maximum allowed: 8 [ 444.699474][ T5284] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 444.719641][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.728829][ T5284] usb 2-1: Product: syz [ 444.733867][ T5284] usb 2-1: Manufacturer: syz [ 444.740573][ T5284] usb 2-1: SerialNumber: syz [ 444.757301][ T5284] r8152-cfgselector 2-1: Unknown version 0x0000 [ 444.767593][ T5284] r8152-cfgselector 2-1: config 0 descriptor?? [ 444.913436][T10849] syzkaller0: entered promiscuous mode [ 444.923249][T10849] syzkaller0: entered allmulticast mode [ 445.488703][ T8628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.603907][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.629837][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.638912][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.651835][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.662426][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 445.673407][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 447.765470][ T5231] Bluetooth: hci1: command tx timeout [ 449.849387][ T5231] Bluetooth: hci1: command tx timeout [ 450.201113][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'. [ 450.339050][ T8628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.474974][ T8628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.910499][ T5282] r8152-cfgselector 2-1: USB disconnect, device number 80 [ 450.973373][ T8628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.225034][T10895] syzkaller0: entered promiscuous mode [ 451.263031][T10895] syzkaller0: entered allmulticast mode [ 451.918594][ T5231] Bluetooth: hci1: command tx timeout [ 451.922896][ T5283] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 452.100607][ T5283] usb 2-1: Using ep0 maxpacket: 32 [ 452.126239][ T5283] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 452.135602][ T5283] usb 2-1: config 0 has no interface number 0 [ 452.147582][ T5283] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 452.160261][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.168703][ T5283] usb 2-1: Product: syz [ 452.172919][ T5283] usb 2-1: Manufacturer: syz [ 452.180030][ T5283] usb 2-1: SerialNumber: syz [ 452.186818][ T5283] usb 2-1: config 0 descriptor?? [ 452.203477][ T5283] smsc95xx v2.0.0 [ 452.644212][ T5283] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 452.656492][ T5283] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 453.909951][ T5283] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 453.928182][ T5283] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 453.998783][ T5231] Bluetooth: hci1: command tx timeout [ 454.641423][T10917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.665343][T10917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.048127][ T30] INFO: task syz.3.621:9051 blocked for more than 143 seconds. [ 455.055768][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 455.064899][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.075252][ T30] task:syz.3.621 state:D stack:25920 pid:9051 tgid:9051 ppid:8890 flags:0x00000004 [ 455.089348][ T30] Call Trace: [ 455.092714][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.095689][ T30] __schedule+0x18af/0x4bd0 [ 455.124498][ T30] ? __pfx___schedule+0x10/0x10 [ 455.136016][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.186088][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 455.195822][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.203904][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 455.210260][ T30] ? schedule+0x90/0x320 [ 455.215560][ T30] schedule+0x14b/0x320 [ 455.220925][ T30] ? down_read+0x6a5/0xa40 [ 455.225414][ T30] schedule_preempt_disabled+0x13/0x30 [ 455.231077][ T30] down_read+0x705/0xa40 [ 455.235392][ T30] ? __pfx_down_read+0x10/0x10 [ 455.240355][ T30] ? release_fault_lock+0x163/0x230 [ 455.245615][ T30] ? release_fault_lock+0xa6/0x230 [ 455.250894][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 455.256449][ T30] do_sync_mmap_readahead+0x499/0x970 [ 455.262003][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 455.268027][ T30] ? count_memcg_event_mm+0x90/0x420 [ 455.273384][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 455.279074][ T30] filemap_fault+0x8c5/0x1950 [ 455.283838][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.293121][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 455.298199][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 455.303369][ T30] ? pte_alloc_one+0x442/0x5d0 [ 455.308483][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 455.313669][ T30] ? __pfx_validate_chain+0x10/0x10 [ 455.319036][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 455.324302][ T30] __do_fault+0x135/0x460 [ 455.328869][ T30] handle_pte_fault+0x1105/0x6800 [ 455.333960][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.341400][ T30] ? mark_lock+0x9a/0x360 [ 455.357618][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 455.363088][ T30] ? __lock_acquire+0x1384/0x2050 [ 455.368343][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 455.373781][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 455.379186][ T30] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 455.385141][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 455.391068][ T30] handle_mm_fault+0x1106/0x1bb0 [ 455.397540][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 455.404425][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 455.409833][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 455.415124][ T30] ? exc_page_fault+0x113/0x8c0 [ 455.420275][ T30] exc_page_fault+0x459/0x8c0 [ 455.425080][ T30] asm_exc_page_fault+0x26/0x30 [ 455.430099][ T30] RIP: 0033:0x7f0ca6851629 [ 455.434563][ T30] RSP: 002b:00007f0ca6c5fb90 EFLAGS: 00010246 [ 455.441082][ T30] RAX: 0000000000000600 RBX: 0000000000000002 RCX: ffffffffffffff3f [ 455.449260][ T30] RDX: 39de4e94d90ded5e RSI: 00000000200000c0 RDI: 000055558c0543c8 [ 455.457483][ T30] RBP: 00007f0ca6b37a80 R08: 00007f0ca6800000 R09: 0000000000000003 [ 455.465512][ T30] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000004b78c [ 455.473633][ T30] R13: 00007f0ca6c5fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 455.481716][ T30] [ 455.484783][ T30] INFO: task syz.3.621:9052 blocked for more than 143 seconds. [ 455.499040][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 455.508176][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.516902][ T30] task:syz.3.621 state:D stack:26104 pid:9052 tgid:9051 ppid:8890 flags:0x00004004 [ 455.528989][ T30] Call Trace: [ 455.532450][ T30] [ 455.535432][ T30] __schedule+0x18af/0x4bd0 [ 455.540137][ T30] ? __pfx___schedule+0x10/0x10 [ 455.545056][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.550301][ T30] ? schedule+0x90/0x320 [ 455.554608][ T30] schedule+0x14b/0x320 [ 455.558913][ T30] ? down_read+0x6a5/0xa40 [ 455.563373][ T30] schedule_preempt_disabled+0x13/0x30 [ 455.569029][ T30] down_read+0x705/0xa40 [ 455.573323][ T30] ? __pfx_down_read+0x10/0x10 [ 455.578266][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 455.583859][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 455.589484][ T30] do_sync_mmap_readahead+0x499/0x970 [ 455.594902][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 455.602531][ T30] ? count_memcg_event_mm+0x90/0x420 [ 455.609777][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 455.615165][ T30] filemap_fault+0x8c5/0x1950 [ 455.619970][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.626388][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 455.631339][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 455.636510][ T30] ? pte_alloc_one+0x442/0x5d0 [ 455.641527][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 455.646714][ T30] __do_fault+0x135/0x460 [ 455.651196][ T30] handle_pte_fault+0x1105/0x6800 [ 455.656266][ T30] ? cpufreq_update_util+0x94/0x250 [ 455.661652][ T30] ? mark_lock+0x9a/0x360 [ 455.666036][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 455.671562][ T30] ? __lock_acquire+0x1384/0x2050 [ 455.676682][ T30] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 455.686159][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.692319][ T30] handle_mm_fault+0x1106/0x1bb0 [ 455.697450][ T30] ? mt_find+0x2a9/0x920 [ 455.704640][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 455.710186][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.716595][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 455.722094][ T30] exc_page_fault+0x2b9/0x8c0 [ 455.726859][ T30] asm_exc_page_fault+0x26/0x30 [ 455.731862][ T30] RIP: 0010:__put_user_4+0x11/0x20 [ 455.737023][ T30] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 455.756821][ T30] RSP: 0018:ffffc900033dfd78 EFLAGS: 00050206 [ 455.763316][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000200000c0 [ 455.771514][ T30] RDX: 0000000000000001 RSI: ffffffff8c0adcc0 RDI: ffffffff8c6102a0 [ 455.779641][ T30] RBP: ffffc900033dfec8 R08: ffffffff901cfeef R09: 1ffffffff2039fdd [ 455.787808][ T30] R10: dffffc0000000000 R11: fffffbfff2039fde R12: 0000000000000000 [ 455.795819][ T30] R13: 1ffff9200067bfc8 R14: 1ffff9200067bfb8 R15: ffff888060b1bb80 [ 455.805481][ T30] ppp_ioctl+0x7f9/0x1cd0 [ 455.811458][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 455.816291][ T30] ? __fget_files+0x3f3/0x470 [ 455.821137][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 455.825952][ T30] __se_sys_ioctl+0xf9/0x170 [ 455.830691][ T30] do_syscall_64+0xf3/0x230 [ 455.835242][ T30] ? clear_bhb_loop+0x35/0x90 [ 455.840301][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.846260][ T30] RIP: 0033:0x7f0ca697dff9 [ 455.850863][ T30] RSP: 002b:00007f0ca77e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.859443][ T30] RAX: ffffffffffffffda RBX: 00007f0ca6b35f80 RCX: 00007f0ca697dff9 [ 455.867557][ T30] RDX: 00000000200000c0 RSI: 00000000c004743e RDI: 0000000000000005 [ 455.875573][ T30] RBP: 00007f0ca69f0296 R08: 0000000000000000 R09: 0000000000000000 [ 455.883729][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.891891][ T30] R13: 0000000000000000 R14: 00007f0ca6b35f80 R15: 00007f0ca6c5fa28 [ 455.900056][ T30] [ 455.903155][ T30] INFO: task syz.3.621:9054 blocked for more than 144 seconds. [ 455.912433][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 455.922069][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.930899][ T30] task:syz.3.621 state:D stack:22136 pid:9054 tgid:9051 ppid:8890 flags:0x00004004 [ 455.941266][ T30] Call Trace: [ 455.944608][ T30] [ 455.947685][ T30] __schedule+0x18af/0x4bd0 [ 455.952274][ T30] ? __pfx___schedule+0x10/0x10 [ 455.957283][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.962369][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 455.968533][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.974928][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 455.980267][ T30] ? schedule+0x90/0x320 [ 455.984571][ T30] schedule+0x14b/0x320 [ 455.988897][ T30] ? down_read+0x6a5/0xa40 [ 455.993371][ T30] schedule_preempt_disabled+0x13/0x30 [ 455.999063][ T30] down_read+0x705/0xa40 [ 456.003374][ T30] ? __pfx_down_read+0x10/0x10 [ 456.009680][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 456.015300][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 456.022312][ T30] do_sync_mmap_readahead+0x499/0x970 [ 456.027880][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 456.033855][ T30] ? count_memcg_event_mm+0x90/0x420 [ 456.039298][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 456.044646][ T30] filemap_fault+0x8c5/0x1950 [ 456.049521][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 456.054718][ T30] ? handle_pte_fault+0x2188/0x6800 [ 456.060110][ T30] ? __pfx_lock_release+0x10/0x10 [ 456.065209][ T30] ? pte_alloc_one+0x442/0x5d0 [ 456.070176][ T30] ? handle_pte_fault+0x2188/0x6800 [ 456.075428][ T30] __do_fault+0x135/0x460 [ 456.080133][ T30] ? handle_pte_fault+0x2188/0x6800 [ 456.085448][ T30] handle_pte_fault+0x2d1c/0x6800 [ 456.090671][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 456.096115][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 456.103302][ T30] ? rcu_is_watching+0x15/0xb0 [ 456.108346][ T30] ? rcu_read_unlock_special+0x497/0x570 [ 456.117061][ T30] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 456.123176][ T30] ? __pfx_lock_release+0x10/0x10 [ 456.128410][ T30] handle_mm_fault+0x1106/0x1bb0 [ 456.133410][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 456.138580][ T30] ? mt_find+0x2a9/0x920 [ 456.142891][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 456.148359][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 456.154756][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 456.160398][ T30] exc_page_fault+0x2b9/0x8c0 [ 456.165146][ T30] asm_exc_page_fault+0x26/0x30 [ 456.170175][ T30] RIP: 0010:__get_user_8+0x11/0x20 [ 456.175351][ T30] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 456.195162][ T30] RSP: 0018:ffffc900033cfed8 EFLAGS: 00050206 [ 456.201394][ T30] RAX: 0000000020000200 RBX: ffffc900033cff10 RCX: ffffc900033cfe03 [ 456.209574][ T30] RDX: 0000000000000000 RSI: ffffffff8c0adcc0 RDI: ffffffff8c6102a0 [ 456.219087][ T30] RBP: ffffc900033cff48 R08: ffffffff901cfeef R09: 1ffffffff2039fdd [ 456.227123][ T30] R10: dffffc0000000000 R11: fffffbfff2039fde R12: 0000000000000002 [ 456.236666][ T30] R13: 0000000000000000 R14: ffffc900033cff58 R15: 0000000020000200 [ 456.245113][ T30] __se_sys_io_setup+0x2d/0x1a0 [ 456.250142][ T30] do_syscall_64+0xf3/0x230 [ 456.254736][ T30] ? clear_bhb_loop+0x35/0x90 [ 456.259570][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.265521][ T30] RIP: 0033:0x7f0ca697dff9 [ 456.270098][ T30] RSP: 002b:00007f0ca77c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 456.278666][ T30] RAX: ffffffffffffffda RBX: 00007f0ca6b36058 RCX: 00007f0ca697dff9 [ 456.286690][ T30] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000002 [ 456.294880][ T30] RBP: 00007f0ca69f0296 R08: 0000000000000000 R09: 0000000000000000 [ 456.302991][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.313577][ T30] R13: 0000000000000000 R14: 00007f0ca6b36058 R15: 00007f0ca6c5fa28 [ 456.328979][ T30] [ 456.332217][ T30] [ 456.332217][ T30] Showing all locks held in the system: [ 456.354333][ T30] 1 lock held by khungtaskd/30: [ 456.377260][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 456.402551][ T30] 3 locks held by kworker/u8:8/2906: [ 456.408086][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 456.426961][ T30] #1: ffffc90009737d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 456.439205][ T30] #2: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 456.448386][ T30] 1 lock held by klogd/4675: [ 456.453986][ T30] #0: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 456.467458][ T30] 2 locks held by getty/4989: [ 456.472201][ T30] #0: ffff88802e4b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 456.483340][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 456.494646][ T30] 3 locks held by kworker/u9:2/5231: [ 456.501012][ T30] #0: ffff888011aa4148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 456.512997][ T30] #1: ffffc90003cf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 456.528732][ T30] #2: ffff8880794fcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 456.538804][ T30] 3 locks held by kworker/1:5/5284: [ 456.544050][ T30] #0: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 456.554189][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 456.566814][ T30] #2: ffffffff8ea34468 (vmap_purge_lock){+.+.}-{3:3}, at: drain_vmap_area_work+0x17/0x40 [ 456.578558][ T30] 3 locks held by kworker/u8:11/6394: [ 456.584013][ T30] 6 locks held by kworker/u8:13/8628: [ 456.591778][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 456.605015][ T30] #1: ffffc90003407d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 456.616075][ T30] #2: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 456.630664][ T30] #3: ffff888079fda0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 456.642703][ T30] #4: ffff888079eec250 (&devlink->lock_key#37){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 456.654001][ T30] #5: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: fib_seq_sum+0x31/0x290 [ 456.663099][ T30] 1 lock held by syz.2.612/8868: [ 456.668151][ T30] 1 lock held by syz.3.621/9051: [ 456.673129][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 456.684640][ T30] 2 locks held by syz.3.621/9052: [ 456.705001][ T30] #0: ffffffff8f4ba848 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 456.714871][ T30] #1: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 456.739492][ T30] 1 lock held by syz.3.621/9054: [ 456.744505][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 456.756512][ T30] 1 lock held by syz.0.668/9291: [ 456.763783][ T30] #0: ffffffff8f4ba848 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 456.773928][ T30] 1 lock held by syz.0.668/9293: [ 456.779733][ T30] #0: ffffffff8f4ba848 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 456.789618][ T30] 1 lock held by syz.1.700/9504: [ 456.795545][ T30] #0: ffffffff8f4ba848 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 456.818434][ T30] 1 lock held by syz.1.700/9507: [ 456.824401][ T30] #0: ffffffff8f4ba848 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 456.837453][ T30] 1 lock held by syz.1.700/9509: [ 456.843461][ T30] #0: ffffffff8f4ba848 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 456.854455][ T30] 1 lock held by syz.0.762/9764: [ 456.860715][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 456.872275][ T30] 4 locks held by syz.0.762/9765: [ 456.877826][ T30] #0: ffff88807d7815f8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 456.886995][ T30] #1: ffff88807b0b8420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 456.898196][ T30] #2: ffff88806506b708 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 456.910684][ T30] #3: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 456.923263][ T30] 1 lock held by syz.0.762/9766: [ 456.932620][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 456.945170][ T30] 1 lock held by syz.0.762/9767: [ 456.951362][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 456.969234][ T30] 1 lock held by syz.3.835/10287: [ 456.974596][ T30] #0: ffffffff8f4ba848 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 456.983741][ T30] 1 lock held by syz.3.835/10290: [ 456.988950][ T30] #0: ffffffff8f4ba848 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 456.997824][ T30] 1 lock held by syz.0.869/10443: [ 457.004058][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 457.021054][ T30] 1 lock held by syz.0.869/10444: [ 457.026954][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 457.041724][ T30] 1 lock held by syz.0.869/10445: [ 457.046806][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 457.058297][ T30] 1 lock held by syz.0.869/10446: [ 457.078580][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 457.091905][ T30] 1 lock held by syz.0.869/10447: [ 457.096991][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 457.117489][ T30] 1 lock held by syz.0.869/10448: [ 457.122682][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 457.137886][ T30] 1 lock held by syz.0.869/10449: [ 457.142978][ T30] #0: ffff888148e66540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 457.155794][ T30] 1 lock held by syz.1.873/10492: [ 457.162953][ T30] #0: ffffffff8f4ba848 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 457.171946][ T30] 2 locks held by syz-executor/10862: [ 457.177482][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 457.186990][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 457.196685][ T30] 2 locks held by syz.3.935/10888: [ 457.202327][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 457.212670][ T30] #1: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 457.225968][ T30] 2 locks held by syz.2.939/10902: [ 457.234143][ T30] #0: ffff888051dfdc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 457.249399][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 457.267448][ T30] 2 locks held by syz.2.939/10905: [ 457.272634][ T30] #0: ffffffff8fcb7968 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 457.288888][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 457.300115][ T30] 1 lock held by syz.0.940/10908: [ 457.306322][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 457.318741][ T30] 1 lock held by syz.0.940/10912: [ 457.324876][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 457.336778][ T30] 1 lock held by syz.0.940/10914: [ 457.344969][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 457.354799][ T30] 4 locks held by syz.1.941/10916: [ 457.360765][ T30] #0: ffff888040580d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 457.371092][ T30] #1: ffff888040580078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 457.381161][ T30] #2: ffffffff8fe3f768 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 457.394169][ T30] #3: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 457.410276][ T30] [ 457.412654][ T30] ============================================= [ 457.412654][ T30] [ 457.423906][ T30] NMI backtrace for cpu 0 [ 457.428311][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 457.438862][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 457.448992][ T30] Call Trace: [ 457.452309][ T30] [ 457.455278][ T30] dump_stack_lvl+0x241/0x360 [ 457.460007][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.465251][ T30] ? __pfx__printk+0x10/0x10 [ 457.469891][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 457.474893][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 457.480418][ T30] ? _printk+0xd5/0x120 [ 457.484641][ T30] ? __pfx__printk+0x10/0x10 [ 457.489281][ T30] ? __wake_up_klogd+0xcc/0x110 [ 457.494181][ T30] ? __pfx__printk+0x10/0x10 [ 457.498819][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 457.503924][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.509936][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 457.515932][ T30] watchdog+0xff4/0x1040 [ 457.520197][ T30] ? watchdog+0x1ea/0x1040 [ 457.524629][ T30] ? __pfx_watchdog+0x10/0x10 [ 457.529338][ T30] kthread+0x2f0/0x390 [ 457.533441][ T30] ? __pfx_watchdog+0x10/0x10 [ 457.538150][ T30] ? __pfx_kthread+0x10/0x10 [ 457.542769][ T30] ret_from_fork+0x4b/0x80 [ 457.547218][ T30] ? __pfx_kthread+0x10/0x10 [ 457.551843][ T30] ret_from_fork_asm+0x1a/0x30 [ 457.556646][ T30] [ 457.562060][ T30] Sending NMI from CPU 0 to CPUs 1: [ 457.569131][ C1] NMI backtrace for cpu 1 [ 457.569147][ C1] CPU: 1 UID: 0 PID: 4675 Comm: klogd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 457.569171][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 457.569183][ C1] RIP: 0010:lock_release+0x15/0xa30 [ 457.569219][ C1] Code: 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 <48> 81 ec 00 01 00 00 49 89 f5 48 89 7c 24 18 65 48 8b 04 25 28 00 [ 457.569235][ C1] RSP: 0018:ffffc9000363f0e0 EFLAGS: 00000082 [ 457.569255][ C1] RAX: f9dd44f56d8cef00 RBX: ffffc9000363f160 RCX: f9dd44f56d8cef00 [ 457.569271][ C1] RDX: dffffc0000000000 RSI: ffffffff81f10f0f RDI: ffff88813fffbd50 [ 457.569286][ C1] RBP: ffffc9000363f110 R08: ffffffff942c9807 R09: 1ffffffff2859300 [ 457.569301][ C1] R10: dffffc0000000000 R11: fffffbfff2859301 R12: dffffc0000000000 [ 457.569316][ C1] R13: ffff88813fffbd50 R14: 1ffff920006c7e28 R15: ffffffff81f10f0f [ 457.569331][ C1] FS: 00007f555ed6c380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 457.569349][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.569362][ C1] CR2: 000055ebdc4d4058 CR3: 000000007c31a000 CR4: 00000000003526f0 [ 457.569379][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.569391][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.569403][ C1] Call Trace: [ 457.569411][ C1] [ 457.569419][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 457.569445][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 457.569474][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 457.569498][ C1] ? nmi_handle+0x2a/0x5a0 [ 457.569525][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 457.569551][ C1] ? nmi_handle+0x14f/0x5a0 [ 457.569570][ C1] ? nmi_handle+0x2a/0x5a0 [ 457.569590][ C1] ? lock_release+0x15/0xa30 [ 457.569618][ C1] ? default_do_nmi+0x63/0x160 [ 457.569643][ C1] ? exc_nmi+0x123/0x1f0 [ 457.569666][ C1] ? end_repeat_nmi+0xf/0x53 [ 457.569686][ C1] ? bad_range+0x5f/0x270 [ 457.569713][ C1] ? bad_range+0x5f/0x270 [ 457.569736][ C1] ? lock_release+0x15/0xa30 [ 457.569763][ C1] ? lock_release+0x15/0xa30 [ 457.569793][ C1] ? lock_release+0x15/0xa30 [ 457.569821][ C1] [ 457.569828][ C1] [ 457.569836][ C1] ? bad_range+0x5f/0x270 [ 457.569859][ C1] seqcount_lockdep_reader_access+0xfc/0x1e0 [ 457.569887][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 457.569925][ C1] bad_range+0x5f/0x270 [ 457.569952][ C1] __free_one_page+0x182/0x870 [ 457.569974][ C1] ? __pfx___free_one_page+0x10/0x10 [ 457.569996][ C1] free_pcppages_bulk+0x3d3/0x5e0 [ 457.570032][ C1] free_unref_page_commit+0x582/0x1140 [ 457.570067][ C1] ? __pfx_free_unref_page_commit+0x10/0x10 [ 457.570096][ C1] ? page_ext_get+0x1d6/0x2a0 [ 457.570120][ C1] free_unref_page+0x6a2/0xf20 [ 457.570153][ C1] __slab_free+0x31b/0x3d0 [ 457.570175][ C1] ? __phys_addr+0xba/0x170 [ 457.570196][ C1] qlist_free_all+0x9a/0x140 [ 457.570216][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 457.570237][ C1] __kasan_slab_alloc+0x23/0x80 [ 457.570259][ C1] __kmalloc_node_track_caller_noprof+0x1cd/0x440 [ 457.570286][ C1] ? __alloc_skb+0x1f3/0x440 [ 457.570306][ C1] ? __alloc_skb+0x1f3/0x440 [ 457.570324][ C1] kmalloc_reserve+0x111/0x2a0 [ 457.570345][ C1] __alloc_skb+0x1f3/0x440 [ 457.570366][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 457.570390][ C1] alloc_skb_with_frags+0xc3/0x820 [ 457.570418][ C1] sock_alloc_send_pskb+0x91a/0xa60 [ 457.570451][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 457.570478][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 457.570507][ C1] unix_dgram_sendmsg+0x6d3/0x1f80 [ 457.570535][ C1] ? aa_sk_perm+0x96d/0xab0 [ 457.570556][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 457.570579][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 457.570603][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 457.570621][ C1] __sock_sendmsg+0x221/0x270 [ 457.570649][ C1] __sys_sendto+0x39b/0x4f0 [ 457.570671][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 457.570702][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 457.570732][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 457.570763][ C1] __x64_sys_sendto+0xde/0x100 [ 457.570784][ C1] do_syscall_64+0xf3/0x230 [ 457.570804][ C1] ? clear_bhb_loop+0x35/0x90 [ 457.570825][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.570855][ C1] RIP: 0033:0x7f555eece9b5 [ 457.570871][ C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 457.570886][ C1] RSP: 002b:00007ffc8be6d298 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 457.570905][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f555eece9b5 [ 457.570925][ C1] RDX: 0000000000000049 RSI: 000055fbdbca6b00 RDI: 0000000000000003 [ 457.570938][ C1] RBP: 000055fbdbc9f910 R08: 0000000000000000 R09: 0000000000000000 [ 457.570951][ C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 457.570963][ C1] R13: 00007f555f05c212 R14: 00007ffc8be6d398 R15: 0000000000000000 [ 457.570984][ C1] [ 458.106630][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 458.113546][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 458.124091][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 458.134170][ T30] Call Trace: [ 458.137469][ T30] [ 458.140416][ T30] dump_stack_lvl+0x241/0x360 [ 458.145130][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.150380][ T30] ? __pfx__printk+0x10/0x10 [ 458.155005][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 458.161020][ T30] ? vscnprintf+0x5d/0x90 [ 458.165372][ T30] panic+0x349/0x880 [ 458.169286][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 458.175462][ T30] ? __pfx_panic+0x10/0x10 [ 458.179895][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 458.185290][ T30] ? __irq_work_queue_local+0x137/0x410 [ 458.190858][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 458.196248][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 458.202424][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 458.208598][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 458.214775][ T30] watchdog+0x1033/0x1040 [ 458.219130][ T30] ? watchdog+0x1ea/0x1040 [ 458.223577][ T30] ? __pfx_watchdog+0x10/0x10 [ 458.228274][ T30] kthread+0x2f0/0x390 [ 458.232357][ T30] ? __pfx_watchdog+0x10/0x10 [ 458.237083][ T30] ? __pfx_kthread+0x10/0x10 [ 458.241696][ T30] ret_from_fork+0x4b/0x80 [ 458.246161][ T30] ? __pfx_kthread+0x10/0x10 [ 458.250777][ T30] ret_from_fork_asm+0x1a/0x30 [ 458.255573][ T30] [ 458.258985][ T30] Kernel Offset: disabled [ 458.263320][ T30] Rebooting in 86400 seconds..