last executing test programs: 10.795267015s ago: executing program 3 (id=823): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="00220c0000000c0002ac"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000006c0)="e000000000000107ff82762f86dd1f1fba2dff09007ad265128380cf53be2749249d7687a200c778", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @empty, 0x5}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000030000008000100ac1414ffbb6e56af829740b4e3097a9040bd4c4b024c57b28945dddc849170a6885bf271c6b291e09ffbbe02312af42643dd13ccc97fcbf985b5349a62541e22c08722b9d4d8a70adb5eab17eac745390e07a59681cc42f40a9e4f915b1335dfab3d13a5f6a81271d5"], 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x0, 0x8, 0x401}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791058000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x12, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x5}, 0x20) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) setuid(0x0) 9.836004668s ago: executing program 0 (id=829): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/60, 0x3c}], 0x1, 0x91, 0x0) (async) lstat64(&(0x7f0000000280)='./file0\x00', 0x0) 9.681894077s ago: executing program 0 (id=831): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff990908"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000105714000a00000100000000090400000203000000092100000001220500090581030000000000"], 0x0) 7.931324285s ago: executing program 3 (id=837): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read(0xffffffffffffffff, &(0x7f0000001e80)=""/96, 0x60) r2 = socket(0x840000000002, 0x80000, 0xfd) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x148, 0x1170, 0x1170, 0x148, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x322], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r4, 0xc99752fbd6bf8f05, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) unshare(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c400000010000100"/20, @ANYRES32=r7, @ANYBLOB="20000000000000009c001680980001800c000700ff070000050000000c000400090000000200000014000a00010400000000000000000000100000000c0004c027428991e16166000c000900070000000600000040000c8014000100000000c08b040000f800000081000000140001000700000052070000306c000088a8000014000100e75b0c091c080000000000008100000010030600080000000d00000048060000080028"], 0xc4}}, 0x0) 7.577664439s ago: executing program 3 (id=839): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000000f530aea144f04649007b4e3ee996ddfbe3ad7a18d572a5b195be4610d159de6515de1b25eb129d0f71b829e7085a6dcb7feac3be22b5a47d4cb403e2adca936f18aade90c91652e4acc6ad438593f89ccb4bb557124ce8f4"], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.355436929s ago: executing program 0 (id=850): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000700), 0x2}}, {{0x0, 0x0, 0x0, 0xfffffffffffffcc0}}, {{0x0, 0x0, &(0x7f0000003a80), 0x1}}], 0x3, 0x40800) r2 = socket$inet6(0xa, 0x806, 0x0) sendmsg$netlink(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000440)={0x118, 0x42, 0x300, 0x70bd28, 0x25dfdbfc, "", [@generic="b9bc227725a3b2bd6896650581d974ab1d44a9bd7f7c6d9a1e5b1d70c7b098f3121ba0af8054d51341027a527c69d826f1452f27d8ece5a4fc37f0677934707d052c364342a4599f5850d1f1b874df04e5f1a789dbdc62e72881fee9477d1434ab36a187261aaa27d6520f374ab853387e4ab63cad418e4373aaa1569b4a9938731167ff89a8888c09384286cd0e3d679dba20ffa1afe56544407b749fef5efd3bb4dbded952b832e6b1b69f70137702805ea9df4cc9", @typed={0x8, 0xf0, 0x0, 0x0, @u32=0x2}, @generic="ebd6966878106dc818fda596cb5c7363607c253183920ce00fda4a02a457a94dc863223f827600be83aceefbb46618968f3e20f932770571d63d45f5c0cf00f2c8c044cbb47ffc207b"]}, 0x118}], 0x1, &(0x7f0000000340)=[@cred={{0x18}}], 0x18, 0x10}, 0x24008001) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e23}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @timestamp, @timestamp, @timestamp, @window, @sack_perm], 0x2132) sendmmsg$inet(r3, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)='R', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) listen(r2, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r8 = syz_io_uring_setup(0x61fb, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r8, 0x381b, 0x0, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000bc0), 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) 5.95436113s ago: executing program 1 (id=851): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800e70200000000000000000a100000000300000000000014000100ff05"], 0x38}}, 0x0) 5.451742791s ago: executing program 2 (id=852): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40201, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000088}) 5.418830751s ago: executing program 0 (id=853): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) rt_tgsigqueueinfo(r1, r1, 0xa, &(0x7f00000005c0)={0x2c, 0xfcd, 0x4b48d544}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x90) 5.330861907s ago: executing program 2 (id=854): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x1440, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7b, 0x8, 0x8}}]}}}]}}]}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@private1}, 0x6e6bc0}, [@mark={0xc}]}, 0x5c}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) (async) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd', 0x2) pwrite64(r4, &(0x7f00000000c0)="a0", 0x1, 0x5b63) (async) fcntl$addseals(r4, 0x409, 0x7) (async) dup(r3) (async) r5 = syz_io_uring_setup(0x6908, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) (async) syz_io_uring_setup(0x1e45, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109002) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x55}) (async) syz_io_uring_submit(r7, r6, &(0x7f00000005c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}) (async) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) (async) epoll_create1(0x0) (async) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222500000096231306e53f0b3cda094f2a9000070900be0083000000000b00"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x14, &(0x7f00000000c0)={0x40, 0xe8b6960c901b5396, 0xd0, {0xd0, 0x27, "428a8ffc27cf89556bda4338a0ea1c6e349dba9e54fc3d1a4a99eb3e34393d44cb78bf4f85f0dbe8dfead13e13d0280d999013a1df119211877ed4b5996809384e66b790f3bcec6e94bfb5409163b6fdd568fbdfdd8f5f8293c1fef06be614b01fcac26c93beeb24fd552291dfbc23ab35667aa25e5054aec1fa5436ba289c6560781af3a75df8f94a8325cc83b47146314e8d7a2b8bb956b04fdf7c2a7afc9e8f2777b024d33a710f5bdd591ca74533de593315c6327ee5278b0054a88d2763a6e354002304a220bde911ae24c8"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003bd000000bd039a213b6eb15956c0f976cc98729e22719287fc7d4912ffbbb33a9796526923105617634fb0fce2a3757f99859f4c546790e91a3c43ee24b18303fb9f98be85f645c1558958e7cec242b906f088b025458de5eb20842975c88a348364b671928c8eb7cf827b7f9c5d44fc0902c98d0509dc953c42ff7edb43544b6a013f675f222bedd803e98f0b69bee768b6e39a328c878c3654868b5925d52307294fb4e438f2ed8281851ec6980cce309d8dad600bb880973dc66b32250ac4f1"], &(0x7f0000000000)={0x0, 0x22, 0x12, {[@main=@item_012={0x2, 0x0, 0xc, "d7bb"}, @local=@item_4={0x3, 0x2, 0x9, "17cc82e8"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_4={0x3, 0x1, 0xb, "ca7f2602"}, @local=@item_012={0x2, 0x2, 0x2, "d4d5"}, @global=@item_012={0x0, 0x1, 0x5}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0xb, 0x1, {0x22, 0xa03}}}}, &(0x7f0000000600)={0x18, &(0x7f0000000380)={0x0, 0x17, 0xf8, "db298c17300ce0e62d500c415d72b18e8abbfe4886e44c1233a7df428ea275a4642e22fdfe0da763d021b191e63d2ce818a44cd05993879daabef0389d00f0bf935fdb1a0d018fa186c4af15434f4a3baf00fdd32cbac4d6a14ce36288089f979bc6d2d3dd323544caf65c49fa772e6fc3d34409a803d6eb8154d1e183ca519e2076981a79eca7599dea07bee3c86b6070ef04acddf63d361dc002ebc912a8c4443fe8bf73ce2962d7a339e58c64c3ed5d85174d1149a1f01baf9ec4d4764e16aad38e9227615d175f32f35ecf71df68eee888a93c4aadf07f6e87acc3e8e820cf2a177ff97301b9e07bb57f1330da7a5ee3ff74f78f4740"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x1, 0xa6, "988eeae1713c1c875e80ceb982a9be763fbe406066d274dc57d8198a10a6d5ae47f2f588a8034630c3328d75dc46c678b85169dcbbd2cd55ee863fd99ec39df10526bf1b5078351a4a02be4e1316b2a453f9c4971ac6799200471e52757c6cb159102b08ddcc7cc54c8dbc4c49d6cf7cc0f4cac03c1d9f83d0163d8515fd10998b8710c6e2b7cda34f7a14e801cc9ddda319ec2a78bf8e6544ebfdce3400b5dfc0cb3b279c98"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7}}) 5.27565654s ago: executing program 1 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = getpgrp(0x0) syz_open_procfs$pagemap(r2, &(0x7f0000000080)) write$tun(r0, 0x0, 0xfdef) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc2c85512, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 5.072027678s ago: executing program 2 (id=856): r0 = fsopen(&(0x7f0000000000)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x3, &(0x7f00000000c0)='acl\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newchain={0x3c, 0x64, 0x0, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_SRC={0x8}]}}]}, 0x3c}}, 0x0) recvmmsg(r3, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1}, 0xfffffffd}], 0x1, 0x1000, 0x0) syz_io_uring_setup(0x68ec, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x10, 0x1b, 0x200, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x4, @void, @value, @void, @value}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f", 0x11}], 0x1) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r10 = dup(r9) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x80000000, 0x0, 0x2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a0001002abd700000000000020000030000000000000002"], 0x30}}, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r11, r4, 0x0) memfd_create(&(0x7f0000000080)='-\x00', 0x4) 4.61953781s ago: executing program 4 (id=858): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xa1e}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64]) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x208) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xb1, [@dev]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$key(0xf, 0x3, 0x2) ioperm(0x0, 0x23d, 0xe) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.531445449s ago: executing program 2 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @nop]}}}}}}}, 0x0) 4.140179983s ago: executing program 3 (id=860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc216, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xf, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x0, 0x8}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}]}}}]}}]}}, 0x0) syz_usb_ep_read(r1, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) 3.644109903s ago: executing program 2 (id=861): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff990908"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000105714000a00000100000000090400000203000000092100000001220500090581030000000000"], 0x0) 3.459210246s ago: executing program 0 (id=862): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read(0xffffffffffffffff, &(0x7f0000001e80)=""/96, 0x60) r2 = socket(0x840000000002, 0x80000, 0xfd) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x148, 0x1170, 0x1170, 0x148, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x322], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r4, 0xc99752fbd6bf8f05, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) unshare(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c400000010000100"/20, @ANYRES32=r7, @ANYBLOB="20000000000000009c001680980001800c000700ff070000050000000c000400090000000200000014000a00010400000000000000000000100000000c0004c027428991e16166000c000900070000000600000040000c8014000100000000c08b040000f800000081000000140001000700000052070000306c000088a8000014000100e75b0c091c080000000000008100000010030600080000000d00000048060000080028"], 0xc4}}, 0x0) 3.37394079s ago: executing program 4 (id=863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x288000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x3c}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8, 0x7, 0x6a66, 0x3, {{0x19, 0x4, 0x0, 0x7, 0x64, 0x67, 0x0, 0x3, 0x0, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_addr={0x44, 0x4c, 0x64, 0x1, 0x3, [{@multicast1, 0x4834}, {@multicast1, 0x65}, {@empty, 0x3}, {@multicast1, 0x5d7beb58}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x800}, {@empty, 0x1000}, {@rand_addr=0x64010102, 0xfffffff8}, {@loopback, 0xfce}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x102, 0x0) sendmmsg(r2, &(0x7f0000000400), 0x0, 0x20044011) r3 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1d, 0x3e6, 0x0, 0x9, 0x9, r2, 0xa4bd, '\x00', r1, 0xffffffffffffffff, 0x10000, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r4, &(0x7f0000000140)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb01001800000000000000ea000000ea000006000000010000000000000b050000000d0000000000000e05000000010000000c0000000800000f0100000005000000050000000300000002000000010400009a0d0000010000006c0e00000200000003000000030000000400000004000000000800007a00000002000000050000000500000002000000f90b0000000200000200000000000000fcffffff140d0000000000000805000000100000000100000f01000000030000000500000088374b29080d0000000000000c030000000400000002000085020000000600000005000000070000000200000004000000ffff0000020000000000000b020000000000003030002e00"], &(0x7f0000001780)=""/4096, 0x10a, 0x1000, 0x1, 0x43, 0x0, @void, @value}, 0x20) mount_setattr(r4, &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000300)={0x0, 0x0, 0x100000}, 0x20) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) socket$can_j1939(0x1d, 0x2, 0x7) 2.827009786s ago: executing program 4 (id=864): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r0, &(0x7f0000000e80)=ANY=[], 0xffdc) r1 = getpid() unshare(0x2a020400) setns(0xffffffffffffffff, 0x8000000) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/rfcomm\x00') pread64(r2, &(0x7f0000004180)=""/4096, 0x1000, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x9) 2.379390091s ago: executing program 0 (id=865): mkdirat(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000001fc0)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000002040), 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209"], 0x0) 2.300305201s ago: executing program 4 (id=866): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa", 0x78}, {&(0x7f0000000d40)="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", 0x17e}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fc", 0x31}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e0", 0xc4}], 0x1}}], 0x2, 0x0) 2.065679839s ago: executing program 1 (id=867): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f96724fc60040f050047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000780000000005119078000000000000000000004e20006490780200000000000000000000007d917b3509d521a4d70aa3ba08972efaf4f5929d155f1362b0dfb6fbf1f7f38f62182f8590f74b6ceb05691a3900f279a2d06e01bc9ec5c94b0edce7f462b4"], 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[], 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000380)=0x2020004000001f, 0x12) dup3(r2, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f00000000c0)={'rose0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 2.031393281s ago: executing program 4 (id=868): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c) syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406"], 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r0, &(0x7f0000000080)="d9fa7099bca42d2021a5e8a6e02217aa18258e72af877527515b1a0e5d31b7e5a20bcdf91198e2f160cc61517845bb3d237b107b839a1d7bc9f76621220275c82b47be1616bd6315bc356882023302d9700356a9185284a0f115b2568d638cf55c248bcc0f3d8c057c8615d035c624bc2ef11cca28fd53dc6f5d132d", 0x7c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 1.933472866s ago: executing program 3 (id=869): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x2100, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) 1.699731766s ago: executing program 1 (id=870): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf773, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) 1.635748057s ago: executing program 3 (id=871): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000000f530aea144f04649007b4e3ee996ddfbe3ad7a18d572a5b195be4610d159de6515de1b25eb129d0f71b829e7085a6dcb7feac3be22b5a47d4cb403e2adca936f18aade90c91652e4acc6ad438593f89ccb4bb557124ce8f4"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.473678691s ago: executing program 1 (id=872): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0xf6ffffff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000001c0)={0x3, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r3}, 0x10) shutdown(r2, 0x1) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0xffff, 0x4, 0x1, 0xfffffffc, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@flushpolicy={0x10, 0x12, 0x105}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.042971463s ago: executing program 1 (id=873): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{}]}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x80000c12) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x140, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./bus\x00', 0x400) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000e4ce81, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x8010500c, &(0x7f0000000100)) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0xc23}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000085000000070000009500000000000000839c791759c07fc52aa27f546073bb373d719bee763784c8eeb56761f8a1c24b8724eac4deedd40378854a85fdb43b88335a68f0"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x2000, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 76.789935ms ago: executing program 4 (id=874): syz_open_dev$video4linux(&(0x7f00000000c0), 0x7, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) read$char_usb(r0, &(0x7f0000001980)=""/179, 0xb3) socket$kcm(0x10, 0x400000002, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x300000000000000}, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) 0s ago: executing program 2 (id=875): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) read(r2, &(0x7f0000001e80)=""/96, 0x60) r3 = socket(0x840000000002, 0x80000, 0xfd) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x148, 0x1170, 0x1170, 0x148, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x322], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r5, 0xc99752fbd6bf8f05, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) unshare(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c400000010000100"/20, @ANYRES32=r8, @ANYBLOB="20000000000000009c001680980001800c000700ff070000050000000c000400090000000200000014000a00010400000000000000000000100000000c0004c027428991e16166000c000900070000000600000040000c8014000100000000c08b040000f800000081000000140001000700000052070000306c000088a8000014000100e75b0c091c080000000000008100000010030600080000000d00000048060000080028"], 0xc4}}, 0x0) kernel console output (not intermixed with test programs): 44863][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.761004][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.813127][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.822486][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.830840][ T8549] bridge_slave_1: entered allmulticast mode [ 236.848057][ T8549] bridge_slave_1: entered promiscuous mode [ 236.868421][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.704'. [ 237.035726][ T5229] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 237.074708][ T8524] hsr_slave_0: entered promiscuous mode [ 237.111480][ T8524] hsr_slave_1: entered promiscuous mode [ 237.127176][ T8524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.153518][ T8524] Cannot create hsr debugfs directory [ 237.172670][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.207486][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.226176][ T5229] usb 3-1: Using ep0 maxpacket: 8 [ 237.234324][ T5229] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 237.242874][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 237.278370][ T5229] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.291937][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.304229][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.325219][ T5229] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 237.344872][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 237.361766][ T5229] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.374321][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.402741][ T8549] team0: Port device team_slave_0 added [ 237.426141][ T8673] dccp_flush_write_queue: CCID did not manage to send all packets [ 237.435026][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.448186][ T5229] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 237.455838][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 237.468989][ T5229] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.490664][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.492789][ T5276] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 237.505116][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.530629][ T2564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.532091][ T5229] usb 3-1: string descriptor 0 read error: -22 [ 237.549724][ T5226] Bluetooth: hci1: command tx timeout [ 237.565317][ T5229] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.571080][ T8549] team0: Port device team_slave_1 added [ 237.574507][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.620424][ T5229] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 237.677867][ T2564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.681119][ T5276] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 237.699048][ T5276] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.729674][ T5276] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 237.740127][ T5276] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.758099][ T5276] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 237.768664][ T5276] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.784840][ T5276] usb 2-1: string descriptor 0 read error: -22 [ 237.791268][ T5276] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.797056][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.800397][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.817907][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.843986][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.857560][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.857938][ T8661] loop7: detected capacity change from 0 to 16384 [ 237.864518][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.897170][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.912740][ T5276] adutux 2-1:168.0: interrupt endpoints not found [ 237.992973][ T2564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.057879][ T8677] loop7: detected capacity change from 16384 to 0 [ 238.142073][ T2564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.162591][ T5277] usb 2-1: USB disconnect, device number 44 [ 238.189426][ T8549] hsr_slave_0: entered promiscuous mode [ 238.197718][ T8549] hsr_slave_1: entered promiscuous mode [ 238.203843][ T8549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.214459][ T8549] Cannot create hsr debugfs directory [ 238.255236][ T5229] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 238.415156][ T5229] usb 5-1: Using ep0 maxpacket: 16 [ 238.436886][ T5229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.465627][ T2564] bridge_slave_1: left allmulticast mode [ 238.474233][ T5229] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 238.477964][ T2564] bridge_slave_1: left promiscuous mode [ 238.493377][ T2564] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.502796][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.511890][ T2564] bridge_slave_0: left allmulticast mode [ 238.512827][ T5229] usb 5-1: Product: syz [ 238.529479][ T2564] bridge_slave_0: left promiscuous mode [ 238.532868][ T5229] usb 5-1: Manufacturer: syz [ 238.539831][ T2564] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.541719][ T5229] usb 5-1: SerialNumber: syz [ 238.562928][ T5229] usb 5-1: config 0 descriptor?? [ 238.588956][ T5226] Bluetooth: hci0: command tx timeout [ 238.615194][ T5286] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 238.785293][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 238.793472][ T5286] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 238.817296][ T5286] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.831994][ T5286] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 238.851853][ T5286] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.879878][ T5286] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 238.890513][ T5286] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.906362][ T5286] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 238.916434][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.924489][ T5286] usb 2-1: Product: syz [ 238.928846][ T5286] usb 2-1: Manufacturer: syz [ 238.933488][ T5286] usb 2-1: SerialNumber: syz [ 239.161859][ T5286] adutux 2-1:168.0: interrupt endpoints not found [ 239.176536][ T2564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.179830][ T5286] usb 2-1: USB disconnect, device number 45 [ 239.202740][ T2564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.222294][ T2564] bond0 (unregistering): Released all slaves [ 239.625175][ T5226] Bluetooth: hci1: command tx timeout [ 239.702939][ T2564] hsr_slave_0: left promiscuous mode [ 239.717870][ T2564] hsr_slave_1: left promiscuous mode [ 239.732022][ T2564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.740811][ T2564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.772018][ T2564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.779776][ T2564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.832544][ T2564] veth1_macvtap: left promiscuous mode [ 239.847620][ T2564] veth0_macvtap: left promiscuous mode [ 239.853282][ T2564] veth1_vlan: left promiscuous mode [ 239.864714][ T2564] veth0_vlan: left promiscuous mode [ 240.113443][ T5278] usb 3-1: USB disconnect, device number 34 [ 240.494892][ T2564] team0 (unregistering): Port device team_slave_1 removed [ 240.541891][ T2564] team0 (unregistering): Port device team_slave_0 removed [ 240.555180][ T5278] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 240.715101][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 240.723928][ T5278] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 240.737641][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.757186][ T5278] usb 3-1: config 0 descriptor?? [ 240.773769][ T5278] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 241.075359][ T5229] usb 5-1: USB disconnect, device number 31 [ 241.162065][ T8524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.253311][ T8524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.273871][ T8524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.303209][ T8524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.724364][ T8732] vivid-003: ================= START STATUS ================= [ 241.744641][ T8732] vivid-003: Radio HW Seek Mode: Bounded [ 241.777234][ T8732] vivid-003: Radio Programmable HW Seek: false [ 241.825353][ T8732] vivid-003: RDS Rx I/O Mode: Block I/O [ 241.831223][ T8732] vivid-003: Generate RBDS Instead of RDS: false [ 241.845498][ T8732] vivid-003: RDS Reception: true [ 241.851731][ T8732] vivid-003: RDS Program Type: 0 inactive [ 241.858005][ T8732] vivid-003: RDS PS Name: inactive [ 241.863467][ T8732] vivid-003: RDS Radio Text: inactive [ 241.868016][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.874717][ T8732] vivid-003: RDS Traffic Announcement: false inactive [ 241.889387][ T8732] vivid-003: RDS Traffic Program: false inactive [ 241.902094][ T8732] vivid-003: RDS Music: false inactive [ 241.909654][ T8732] vivid-003: ================== END STATUS ================== [ 241.948198][ T8732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.718'. [ 241.964741][ T8549] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.988925][ T8549] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.005922][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 242.027653][ T8524] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.074872][ T8549] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 242.116553][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.123777][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.149068][ T8719] netlink: 'syz.2.714': attribute type 10 has an invalid length. [ 242.187721][ T8719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.271053][ T8719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.297671][ T5278] gspca_sonixj: reg_w1 err -110 [ 242.314251][ T8719] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 242.335686][ T5278] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 242.352296][ T8549] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.368977][ T5278] usb 3-1: USB disconnect, device number 35 [ 242.433459][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.440747][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.663796][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.695636][ T5277] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 242.734532][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.804833][ T8549] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.836969][ T8524] veth0_vlan: entered promiscuous mode [ 242.855410][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.857561][ T5277] usb 2-1: config 0 has no interfaces? [ 242.862548][ T6143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.869523][ T5277] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 242.902302][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.909550][ T6143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.931228][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.945925][ T8524] veth1_vlan: entered promiscuous mode [ 242.976410][ T5277] usb 2-1: config 0 descriptor?? [ 243.076802][ T8524] veth0_macvtap: entered promiscuous mode [ 243.098687][ T8524] veth1_macvtap: entered promiscuous mode [ 243.202553][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.236536][ T25] usb 2-1: USB disconnect, device number 46 [ 243.255402][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.285275][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.310605][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.325632][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.339651][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.355332][ T5279] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 243.368279][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.417955][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.445862][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.464786][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.491675][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.502504][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.514168][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.524499][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.539193][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.552134][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.562316][ T5279] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 243.573899][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.590787][ T8549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.596606][ T5279] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 243.610760][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.629300][ T5279] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 243.640875][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.668534][ T5279] usb 3-1: string descriptor 0 read error: -22 [ 243.683535][ T8524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.694264][ T5279] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 243.696317][ T8524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.704560][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.722792][ T8524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.734693][ T5279] adutux 3-1:168.0: interrupt endpoints not found [ 243.734803][ T8524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.742004][ T5286] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 243.856635][ T8549] veth0_vlan: entered promiscuous mode [ 243.912163][ T8549] veth1_vlan: entered promiscuous mode [ 243.955054][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 243.969361][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.978741][ T5286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.996010][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.001661][ T5279] usb 3-1: USB disconnect, device number 36 [ 244.015743][ T5286] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.042177][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.054907][ T5286] usb 5-1: Product: syz [ 244.059516][ T5286] usb 5-1: Manufacturer: syz [ 244.064369][ T5286] usb 5-1: SerialNumber: syz [ 244.093816][ T2564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.103554][ T5286] usb 5-1: config 0 descriptor?? [ 244.111843][ T2564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.140334][ T8549] veth0_macvtap: entered promiscuous mode [ 244.212459][ T8549] veth1_macvtap: entered promiscuous mode [ 244.280041][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.294816][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.314101][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.326006][ T8786] FAULT_INJECTION: forcing a failure. [ 244.326006][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 244.339176][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: syz.1.724 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 244.349497][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 244.359605][ T8786] Call Trace: [ 244.362930][ T8786] [ 244.365912][ T8786] dump_stack_lvl+0x241/0x360 [ 244.370646][ T8786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.375897][ T8786] ? __pfx__printk+0x10/0x10 [ 244.380559][ T8786] should_fail_ex+0x3b0/0x4e0 [ 244.385468][ T8786] ? ___neigh_create+0x691/0x2470 [ 244.390647][ T8786] should_failslab+0xac/0x100 [ 244.395369][ T8786] ? ___neigh_create+0x691/0x2470 [ 244.400798][ T8786] __kmalloc_noprof+0xd8/0x400 [ 244.405626][ T8786] ___neigh_create+0x691/0x2470 [ 244.410540][ T8786] ? __ipv6_neigh_lookup_noref+0x533/0x730 [ 244.416404][ T8786] ip6_finish_output2+0x1700/0x1730 [ 244.420438][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.421646][ T8786] ? ip6_finish_output2+0x75c/0x1730 [ 244.435660][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.436708][ T8786] ? __pfx_lock_release+0x10/0x10 [ 244.452284][ T8786] ? __pfx_ip6_finish_output2+0x10/0x10 [ 244.457985][ T8786] ? ip6_mtu+0x81/0x3f0 [ 244.460249][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.462159][ T8786] ip6_finish_output+0x41e/0x810 [ 244.474023][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.476881][ T8786] ip6_xmit+0xef8/0x18b0 [ 244.476913][ T8786] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 244.491210][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.491570][ T8786] ? __pfx_ip6_xmit+0x10/0x10 [ 244.504265][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.507021][ T8786] tcp_v6_send_response+0x12f2/0x2310 [ 244.507090][ T8786] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 244.507130][ T8786] ? __lock_acquire+0x1384/0x2050 [ 244.507198][ T8786] tcp_v6_send_reset+0xdbd/0x16e0 [ 244.507245][ T8786] ? tcp_v6_send_reset+0x2ec/0x16e0 [ 244.507282][ T8786] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 244.507318][ T8786] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 244.557049][ T8786] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 244.562473][ T8786] ? inet6_lookup_listener+0x1d1/0x2d0 [ 244.567995][ T8786] tcp_v6_do_rcv+0xaec/0x13a0 [ 244.572727][ T8786] ? __asan_memcpy+0x40/0x70 [ 244.577380][ T8786] ? tcp_v6_fill_cb+0x1e2/0x470 [ 244.582292][ T8786] tcp_v6_rcv+0x220a/0x2fb0 [ 244.587332][ T8786] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 244.592247][ T8786] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 244.597155][ T8786] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 244.602054][ T8786] ip6_protocol_deliver_rcu+0xc79/0x1580 [ 244.607767][ T8786] ? ip6_input_finish+0xdc/0x2d0 [ 244.612935][ T8786] ip6_input_finish+0x187/0x2d0 [ 244.617840][ T8786] ? __pfx_ip6_input_finish+0x10/0x10 [ 244.623261][ T8786] NF_HOOK+0x3a4/0x450 [ 244.627384][ T8786] ? NF_HOOK+0x9a/0x450 [ 244.631603][ T8786] ? __pfx_NF_HOOK+0x10/0x10 [ 244.636250][ T8786] ? __pfx_ip6_input_finish+0x10/0x10 [ 244.641688][ T8786] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 244.645357][ T5279] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 244.646922][ T8786] NF_HOOK+0x3a4/0x450 [ 244.646960][ T8786] ? skb_orphan+0x4b/0xd0 [ 244.662939][ T8786] ? NF_HOOK+0x9a/0x450 [ 244.667149][ T8786] ? __pfx_NF_HOOK+0x10/0x10 [ 244.671792][ T8786] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 244.677050][ T8786] ? __pfx_ipv6_rcv+0x10/0x10 [ 244.681772][ T8786] __netif_receive_skb+0x1ea/0x650 [ 244.686985][ T8786] ? __pfx_lock_acquire+0x10/0x10 [ 244.692059][ T8786] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 244.698363][ T8786] ? __pfx___netif_receive_skb+0x10/0x10 [ 244.704058][ T8786] ? __kasan_slab_alloc+0x66/0x80 [ 244.709122][ T8786] ? read_tsc+0x9/0x20 [ 244.713238][ T8786] ? timekeeping_get_ns+0x2c0/0x420 [ 244.718495][ T8786] ? netif_receive_skb+0x131/0x890 [ 244.723669][ T8786] ? netif_receive_skb+0x131/0x890 [ 244.728844][ T8786] netif_receive_skb+0x1e8/0x890 [ 244.733875][ T8786] ? tun_rx_batched+0x160/0x8f0 [ 244.738776][ T8786] ? __pfx_netif_receive_skb+0x10/0x10 [ 244.744297][ T8786] ? tun_rx_batched+0x160/0x8f0 [ 244.749199][ T8786] tun_rx_batched+0x1b7/0x8f0 [ 244.753926][ T8786] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.760401][ T8786] ? __pfx_lock_acquire+0x10/0x10 [ 244.765485][ T8786] ? __pfx_tun_rx_batched+0x10/0x10 [ 244.770767][ T8786] tun_get_user+0x3056/0x47e0 [ 244.775502][ T8786] ? tun_get_user+0x2b44/0x47e0 [ 244.780420][ T8786] ? __lock_acquire+0x1384/0x2050 [ 244.785519][ T8786] ? __pfx_tun_get_user+0x10/0x10 [ 244.790622][ T8786] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 244.796175][ T8786] ? tun_get+0x1e/0x2f0 [ 244.800386][ T8786] ? __pfx_lock_release+0x10/0x10 [ 244.805492][ T8786] ? tun_get+0x1e/0x2f0 [ 244.809697][ T8786] ? tun_get+0x27d/0x2f0 [ 244.813998][ T8786] tun_chr_write_iter+0x10d/0x1f0 [ 244.819080][ T8786] vfs_write+0xa6d/0xc90 [ 244.823384][ T8786] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 244.828990][ T8786] ? __pfx_vfs_write+0x10/0x10 [ 244.833827][ T8786] ? __fdget_pos+0x19a/0x320 [ 244.838473][ T8786] ksys_write+0x1a0/0x2c0 [ 244.842866][ T8786] ? __pfx_ksys_write+0x10/0x10 [ 244.847775][ T8786] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 244.854408][ T8786] ? lockdep_hardirqs_on+0x99/0x150 [ 244.859663][ T8786] __do_fast_syscall_32+0xb4/0x110 [ 244.864826][ T8786] ? exc_page_fault+0x590/0x8c0 [ 244.869728][ T8786] do_fast_syscall_32+0x34/0x80 [ 244.874628][ T8786] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.881024][ T8786] RIP: 0023:0xf7f0f579 [ 244.885133][ T8786] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 244.895378][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 244.904756][ T8786] RSP: 002b:00000000f5696530 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 244.904792][ T8786] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000200003c0 [ 244.904810][ T8786] RDX: 000000000000004a RSI: 00000000f739bff4 RDI: 0000000000000000 [ 244.904825][ T8786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.904840][ T8786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.904856][ T8786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.932583][ T5279] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 244.934342][ T8786] [ 245.055018][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.099023][ T5279] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 245.109620][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.134871][ T5279] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 245.145577][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.164307][ T5279] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 245.173643][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.181771][ T5279] usb 3-1: Product: syz [ 245.186218][ T5279] usb 3-1: Manufacturer: syz [ 245.190840][ T5279] usb 3-1: SerialNumber: syz [ 245.305172][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 245.315984][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.350122][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.360428][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.372501][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.395519][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.419346][ T5279] adutux 3-1:168.0: interrupt endpoints not found [ 245.435248][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.454192][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.464098][ T5279] usb 3-1: USB disconnect, device number 37 [ 245.476280][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.494998][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.505593][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.528595][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.547794][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.562157][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.575149][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.598445][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.616905][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.639582][ T8549] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.655118][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.674711][ T8549] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.685040][ T25] usb 2-1: config 0 descriptor?? [ 245.709081][ T8549] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.718748][ T8549] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.887937][ T6143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.905163][ T5276] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 245.909622][ T6143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.958302][ T2564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.972029][ T2564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.087510][ T5276] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 246.102506][ T5276] usb 4-1: can't read configurations, error -61 [ 246.276325][ T5276] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 246.316681][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 246.333472][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 246.383554][ T25] usb 2-1: USB disconnect, device number 47 [ 246.405260][ T5278] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 246.414770][ T8850] vivid-000: ================= START STATUS ================= [ 246.422891][ T8850] vivid-000: Radio HW Seek Mode: Bounded [ 246.429207][ T8850] vivid-000: Radio Programmable HW Seek: false [ 246.440251][ T8850] vivid-000: RDS Rx I/O Mode: Block I/O [ 246.447725][ T8850] vivid-000: Generate RBDS Instead of RDS: false [ 246.456034][ T8850] vivid-000: RDS Reception: true [ 246.461216][ T8850] vivid-000: RDS Program Type: 0 inactive [ 246.467664][ T5276] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 246.475768][ T8850] vivid-000: RDS PS Name: inactive [ 246.491769][ T8850] vivid-000: RDS Radio Text: inactive [ 246.497847][ T5276] usb 4-1: can't read configurations, error -61 [ 246.510314][ T8850] vivid-000: RDS Traffic Announcement: false inactive [ 246.525086][ T5276] usb usb4-port1: attempt power cycle [ 246.533306][ T8850] vivid-000: RDS Traffic Program: false inactive [ 246.541734][ T8850] vivid-000: RDS Music: false inactive [ 246.550177][ T8850] vivid-000: ================== END STATUS ================== [ 246.601601][ T5277] usb 5-1: USB disconnect, device number 32 [ 246.607791][ T5278] usb 1-1: Using ep0 maxpacket: 32 [ 246.621963][ T5278] usb 1-1: config 0 has no interfaces? [ 246.630168][ T5278] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 246.646021][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.664664][ T5278] usb 1-1: Product: syz [ 246.690864][ T5278] usb 1-1: Manufacturer: syz [ 246.700439][ T5278] usb 1-1: SerialNumber: syz [ 246.721709][ T8850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.728'. [ 246.746176][ T5278] usb 1-1: config 0 descriptor?? [ 246.773344][ T8861] bridge0: entered allmulticast mode [ 246.794474][ T8861] bridge0: left allmulticast mode [ 246.795651][ T25] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 246.876118][ T5276] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 246.927939][ T5276] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 246.953635][ T5276] usb 4-1: can't read configurations, error -61 [ 246.975327][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 246.997816][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.028914][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 247.063583][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 247.096802][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 247.115814][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 247.125111][ T5276] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 247.132226][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 247.157640][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.159073][ T5276] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 247.179272][ T25] usb 2-1: New USB device found, idVendor=1199, idProduct=6835, bcdDevice=95.23 [ 247.180052][ T5276] usb 4-1: can't read configurations, error -61 [ 247.194569][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.197705][ T5276] usb usb4-port1: unable to enumerate USB device [ 247.216178][ T25] usb 2-1: Product: syz [ 247.220391][ T25] usb 2-1: Manufacturer: syz [ 247.231030][ T25] usb 2-1: SerialNumber: syz [ 247.252047][ T25] usb 2-1: config 0 descriptor?? [ 247.347429][ T5279] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 247.398401][ T8877] netlink: 72 bytes leftover after parsing attributes in process `syz.2.734'. [ 247.407856][ T8877] netlink: 72 bytes leftover after parsing attributes in process `syz.2.734'. [ 247.469414][ T25] sierra 2-1:0.0: Sierra USB modem converter detected [ 247.489476][ T25] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 247.502392][ T25] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 247.516075][ T25] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 247.518772][ T5279] usb 5-1: device descriptor read/64, error -71 [ 247.549203][ T25] usb 2-1: USB disconnect, device number 48 [ 247.633805][ T937] usb 1-1: USB disconnect, device number 23 [ 247.640865][ T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 247.660583][ T25] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 247.697668][ T25] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 247.712002][ T25] sierra 2-1:0.0: device disconnected [ 247.786495][ T5279] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 247.835195][ T5276] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 247.935148][ T5279] usb 5-1: device descriptor read/64, error -71 [ 247.988166][ T5276] usb 3-1: device descriptor read/64, error -71 [ 248.038830][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 248.049023][ T5279] usb usb5-port1: attempt power cycle [ 248.179413][ T5277] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 248.225195][ T5276] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 248.305237][ T5286] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 248.336986][ T5277] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 248.349199][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 248.360020][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.365105][ T5276] usb 3-1: device descriptor read/64, error -71 [ 248.370567][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.390711][ T5277] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 248.401896][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 248.412085][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.421982][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.425281][ T5279] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 248.436973][ T5277] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 248.443279][ T5286] usb 2-1: device descriptor read/64, error -71 [ 248.453538][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 248.472371][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.483039][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.509341][ T5277] usb 1-1: string descriptor 0 read error: -22 [ 248.513872][ T5276] usb usb3-port1: attempt power cycle [ 248.518078][ T5277] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 248.525917][ T5279] usb 5-1: device descriptor read/8, error -71 [ 248.532381][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.559168][ T5277] adutux 1-1:168.0: interrupt endpoints not found [ 248.735277][ T5286] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 248.770281][ T937] usb 1-1: USB disconnect, device number 24 [ 248.785693][ T5279] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 248.805967][ T5279] usb 5-1: device descriptor read/8, error -71 [ 248.865120][ T5286] usb 2-1: device descriptor read/64, error -71 [ 248.885289][ T5276] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 248.895111][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 248.912796][ T5276] usb 3-1: device descriptor read/8, error -71 [ 248.919318][ T5279] usb usb5-port1: unable to enumerate USB device [ 248.975458][ T5286] usb usb2-port1: attempt power cycle [ 249.045088][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 249.051932][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.064809][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 249.074734][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.088037][ T25] usb 4-1: Product: syz [ 249.092308][ T25] usb 4-1: Manufacturer: syz [ 249.098629][ T25] usb 4-1: SerialNumber: syz [ 249.105251][ T25] usb 4-1: config 0 descriptor?? [ 249.175280][ T5276] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 249.196447][ T5276] usb 3-1: device descriptor read/8, error -71 [ 249.219526][ T5277] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 249.305539][ T5276] usb usb3-port1: unable to enumerate USB device [ 249.325198][ T5286] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 249.345832][ T5286] usb 2-1: device descriptor read/8, error -71 [ 249.375145][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 249.386507][ T5277] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 249.397054][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.406973][ T5277] usb 1-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 249.416881][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.432420][ T5277] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 249.442848][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.452758][ T5277] usb 1-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 249.462688][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.477527][ T5277] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 249.489618][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.499787][ T5277] usb 1-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 249.509705][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.525811][ T5277] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.535055][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.543081][ T5277] usb 1-1: Product: syz [ 249.547415][ T5277] usb 1-1: Manufacturer: syz [ 249.552038][ T5277] usb 1-1: SerialNumber: syz [ 249.585326][ T5286] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 249.611491][ T5286] usb 2-1: device descriptor read/8, error -71 [ 249.731312][ T5286] usb usb2-port1: unable to enumerate USB device [ 249.769476][ T5277] adutux 1-1:168.0: interrupt endpoints not found [ 249.778585][ T5277] usb 1-1: USB disconnect, device number 25 [ 250.215985][ T8897] vivid-004: ================= START STATUS ================= [ 250.223892][ T8897] vivid-004: Radio HW Seek Mode: Bounded [ 250.230215][ T8897] vivid-004: Radio Programmable HW Seek: false [ 250.239921][ T8897] vivid-004: RDS Rx I/O Mode: Block I/O [ 250.245972][ T8897] vivid-004: Generate RBDS Instead of RDS: false [ 250.252430][ T8897] vivid-004: RDS Reception: true [ 250.258149][ T8897] vivid-004: RDS Program Type: 0 inactive [ 250.264139][ T8897] vivid-004: RDS PS Name: inactive [ 250.270089][ T8897] vivid-004: RDS Radio Text: inactive [ 250.290585][ T8897] vivid-004: RDS Traffic Announcement: false inactive [ 250.300792][ T8897] vivid-004: RDS Traffic Program: false inactive [ 250.315102][ T8897] vivid-004: RDS Music: false inactive [ 250.320854][ T8897] vivid-004: ================== END STATUS ================== [ 250.364495][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'. [ 250.716427][ T5277] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 250.825217][ T5276] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 250.877034][ T5277] usb 1-1: config 0 has no interfaces? [ 250.882646][ T5277] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 250.892839][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.903022][ T5277] usb 1-1: config 0 descriptor?? [ 250.975173][ T5276] usb 5-1: device descriptor read/64, error -71 [ 251.015183][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 251.132387][ T5286] usb 1-1: USB disconnect, device number 26 [ 251.165138][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 251.176604][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 251.187122][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.199504][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.209357][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.219500][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.233391][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.235264][ T5276] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 251.242875][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.385331][ T5276] usb 5-1: device descriptor read/64, error -71 [ 251.455208][ T5279] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 251.469387][ T25] usb 3-1: usb_control_msg returned -32 [ 251.475347][ T25] usbtmc 3-1:16.0: can't read capabilities [ 251.509813][ T5276] usb usb5-port1: attempt power cycle [ 251.587477][ T9] usb 4-1: USB disconnect, device number 23 [ 251.638159][ T5279] usb 2-1: config 0 has no interfaces? [ 251.639975][ T29] audit: type=1326 audit(1727140433.371:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.749" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x0 [ 251.643935][ T5279] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.665076][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.681708][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.691539][ T5279] usb 2-1: config 0 descriptor?? [ 251.724220][ T8920] netlink: 'syz.3.749': attribute type 12 has an invalid length. [ 251.857626][ T5276] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 251.863179][ T25] usb 3-1: USB disconnect, device number 42 [ 251.897523][ T5276] usb 5-1: device descriptor read/8, error -71 [ 252.100928][ T25] usb 2-1: USB disconnect, device number 53 [ 252.175112][ T5276] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 252.199845][ T5276] usb 5-1: device descriptor read/8, error -71 [ 252.323224][ T5276] usb usb5-port1: unable to enumerate USB device [ 252.685066][ T5276] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 252.789129][ T8943] vivid-002: ================= START STATUS ================= [ 252.814372][ T8943] vivid-002: Radio HW Seek Mode: Bounded [ 252.834589][ T8943] vivid-002: Radio Programmable HW Seek: false [ 252.843154][ T8943] vivid-002: RDS Rx I/O Mode: Block I/O [ 252.883182][ T8949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.898632][ T8943] vivid-002: Generate RBDS Instead of RDS: false [ 252.910111][ T8949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.922543][ T8943] vivid-002: RDS Reception: true [ 252.931313][ T8949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.943140][ T8949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.961524][ T8943] vivid-002: RDS Program Type: 0 inactive [ 252.971870][ T8943] vivid-002: RDS PS Name: inactive [ 252.981842][ T8943] vivid-002: RDS Radio Text: inactive [ 252.983281][ T5276] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 252.998078][ T8943] vivid-002: RDS Traffic Announcement: false inactive [ 253.004552][ T5276] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 253.025478][ T8943] vivid-002: RDS Traffic Program: false inactive [ 253.035523][ T5277] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 253.046080][ T8943] vivid-002: RDS Music: false inactive [ 253.051399][ T5276] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.061776][ T8943] vivid-002: ================== END STATUS ================== [ 253.066347][ T5276] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.107262][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 253.126732][ T5276] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 253.148542][ T5276] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 253.165671][ T5276] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.198685][ T5276] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.229350][ T5276] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 253.244440][ T5276] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 253.249279][ T5277] usb 2-1: config 0 has no interfaces? [ 253.258614][ T5276] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.278269][ T5276] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.287414][ T5277] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 253.295219][ T5276] usb 3-1: string descriptor 0 read error: -22 [ 253.315624][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.322836][ T5276] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 253.329278][ T5277] usb 2-1: Product: syz [ 253.337379][ T5277] usb 2-1: Manufacturer: syz [ 253.341899][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.342434][ T5277] usb 2-1: SerialNumber: syz [ 253.370026][ T5277] usb 2-1: config 0 descriptor?? [ 253.372683][ T5276] adutux 3-1:168.0: interrupt endpoints not found [ 253.505148][ T5279] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 253.623535][ T5229] usb 3-1: USB disconnect, device number 43 [ 253.661182][ T8965] FAULT_INJECTION: forcing a failure. [ 253.661182][ T8965] name failslab, interval 1, probability 0, space 0, times 0 [ 253.679419][ T29] audit: type=1326 audit(1727140435.411:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.1.757" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x0 [ 253.700764][ T5279] usb 4-1: Using ep0 maxpacket: 16 [ 253.705437][ T5279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.717332][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.735187][ T8965] CPU: 0 UID: 0 PID: 8965 Comm: syz.4.763 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 253.745596][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 253.755698][ T8965] Call Trace: [ 253.759001][ T8965] [ 253.762032][ T8965] dump_stack_lvl+0x241/0x360 [ 253.766754][ T8965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.771972][ T8965] ? __pfx__printk+0x10/0x10 [ 253.776580][ T8965] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 253.782583][ T8965] ? __pfx___might_resched+0x10/0x10 [ 253.787892][ T8965] should_fail_ex+0x3b0/0x4e0 [ 253.792593][ T8965] should_failslab+0xac/0x100 [ 253.797285][ T8965] ? __alloc_skb+0x1c3/0x440 [ 253.801892][ T8965] kmem_cache_alloc_node_noprof+0x71/0x320 [ 253.807719][ T8965] __alloc_skb+0x1c3/0x440 [ 253.812168][ T8965] ? __pfx___alloc_skb+0x10/0x10 [ 253.817135][ T8965] pfkey_sendmsg+0x1da/0x1050 [ 253.821834][ T8965] ? __lock_acquire+0x1384/0x2050 [ 253.826887][ T8965] ? __pfx___might_resched+0x10/0x10 [ 253.832197][ T8965] ? mark_lock+0x9a/0x360 [ 253.836540][ T8965] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 253.841676][ T8965] ? aa_sk_perm+0x96d/0xab0 [ 253.846197][ T8965] ? __pfx_aa_sk_perm+0x10/0x10 [ 253.851057][ T8965] ? __might_fault+0xaa/0x120 [ 253.855775][ T8965] ? __pfx_lock_release+0x10/0x10 [ 253.860907][ T8965] ? aa_sock_msg_perm+0x91/0x160 [ 253.865864][ T8965] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 253.871016][ T8965] __sock_sendmsg+0x221/0x270 [ 253.875709][ T8965] ____sys_sendmsg+0x52a/0x7e0 [ 253.880498][ T8965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.885818][ T8965] __sys_sendmsg+0x2aa/0x390 [ 253.890518][ T8965] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.895649][ T8965] ? vfs_write+0x7bf/0xc90 [ 253.900117][ T8965] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 253.906732][ T8965] ? lockdep_hardirqs_on+0x99/0x150 [ 253.911945][ T8965] __do_fast_syscall_32+0xb4/0x110 [ 253.917074][ T8965] ? exc_page_fault+0x590/0x8c0 [ 253.921943][ T8965] do_fast_syscall_32+0x34/0x80 [ 253.926816][ T8965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.933601][ T8965] RIP: 0023:0xf7fb0579 [ 253.937681][ T8965] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 253.957312][ T8965] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 253.965749][ T8965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 253.973731][ T8965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.981712][ T8965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.989703][ T8965] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 253.997682][ T8965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.005675][ T8965] [ 254.017383][ T5279] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.028138][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.037497][ T5279] usb 4-1: Product: syz [ 254.041907][ T5279] usb 4-1: Manufacturer: syz [ 254.046918][ T5279] usb 4-1: SerialNumber: syz [ 254.053940][ T5279] usb 4-1: config 0 descriptor?? [ 254.127943][ T8971] @: renamed from vlan0 (while UP) [ 254.365936][ T5229] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 254.525404][ T5229] usb 3-1: Using ep0 maxpacket: 8 [ 254.532434][ T5229] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 254.549724][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.560152][ T5229] usb 3-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 254.570651][ T5229] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.591793][ T5229] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 254.602933][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.613303][ T5229] usb 3-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 254.623547][ T5229] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.638835][ T5229] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 254.645402][ T5279] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 254.650243][ T5229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.673153][ T8990] vivid-004: ================= START STATUS ================= [ 254.681398][ T8990] vivid-004: Radio HW Seek Mode: Bounded [ 254.687279][ T8990] vivid-004: Radio Programmable HW Seek: false [ 254.693573][ T8990] vivid-004: RDS Rx I/O Mode: Block I/O [ 254.699448][ T5229] usb 3-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 254.709457][ T5229] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.722830][ T8990] vivid-004: Generate RBDS Instead of RDS: false [ 254.729788][ T8990] vivid-004: RDS Reception: true [ 254.734817][ T5229] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 254.734852][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.753079][ T5229] usb 3-1: Product: syz [ 254.753908][ T8990] vivid-004: RDS Program Type: 0 [ 254.764056][ T5229] usb 3-1: Manufacturer: syz [ 254.779720][ T8990] inactive [ 254.782428][ T5229] usb 3-1: SerialNumber: syz [ 254.784381][ T8990] [ 254.792962][ T8990] vivid-004: RDS PS Name: inactive [ 254.800253][ T8990] vivid-004: RDS Radio Text: inactive [ 254.812283][ T8990] vivid-004: RDS Traffic Announcement: false inactive [ 254.834535][ T8990] vivid-004: RDS Traffic Program: false inactive [ 254.845036][ T5279] usb 1-1: Using ep0 maxpacket: 32 [ 254.853624][ T5279] usb 1-1: config 0 has an invalid interface number: 129 but max is 0 [ 254.865279][ T8990] vivid-004: RDS Music: false inactive [ 254.872767][ T5279] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 254.883669][ T5279] usb 1-1: config 0 has no interface number 0 [ 254.905705][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 254.914867][ T8990] vivid-004: ================== END STATUS ================== [ 254.934335][ T5279] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=9c.e0 [ 254.959242][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.992388][ T5279] usb 1-1: config 0 descriptor?? [ 255.026143][ T5229] adutux 3-1:168.0: interrupt endpoints not found [ 255.053233][ T5229] usb 3-1: USB disconnect, device number 44 [ 255.201501][ T8997] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 255.224541][ T5279] usb 1-1: string descriptor 0 read error: -71 [ 255.237782][ T5279] ipw 1-1:0.129: IPWireless converter converter detected [ 255.259881][ T5279] usb 1-1: USB disconnect, device number 28 [ 255.273976][ T5279] ipw 1-1:0.129: device disconnected [ 255.733329][ T29] audit: type=1800 audit(1727140437.461:287): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.774" name="/" dev="fuse" ino=1 res=0 errno=0 [ 255.775722][ T5279] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 255.824103][ T5278] usb 2-1: USB disconnect, device number 54 [ 255.879951][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.889610][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.986720][ T5279] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.022973][ T5279] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 256.055229][ T5279] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 256.075303][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.098950][ T5279] usb 5-1: config 0 descriptor?? [ 256.288673][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.386911][ T5229] usb 4-1: USB disconnect, device number 24 [ 256.681801][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.823976][ T9032] vivid-001: ================= START STATUS ================= [ 256.838443][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.857933][ T9032] vivid-001: Radio HW Seek Mode: Bounded [ 256.863812][ T9032] vivid-001: Radio Programmable HW Seek: false [ 256.870365][ T9032] vivid-001: RDS Rx I/O Mode: Block I/O [ 256.895166][ T5229] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 256.905149][ T9032] vivid-001: Generate RBDS Instead of RDS: false [ 256.911725][ T9032] vivid-001: RDS Reception: true [ 256.917136][ T9032] vivid-001: RDS Program Type: 0 inactive [ 256.925793][ T9032] vivid-001: RDS PS Name: inactive [ 256.931194][ T9032] vivid-001: RDS Radio Text: inactive [ 256.983628][ T9032] vivid-001: RDS Traffic Announcement: false inactive [ 257.067543][ T9032] vivid-001: RDS Traffic Program: false inactive [ 257.104896][ T9032] vivid-001: RDS Music: false inactive [ 257.122012][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.153065][ T5229] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 257.184431][ T5229] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 257.214061][ T9032] vivid-001: ================== END STATUS ================== [ 257.220318][ T5229] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.253345][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.783'. [ 257.292932][ T5229] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.343934][ T5229] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 257.362997][ T5229] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 257.373842][ T5229] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.396104][ T9043] x_tables: duplicate underflow at hook 3 [ 257.415426][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.425204][ T5229] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.438657][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.450847][ T5228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.458160][ T5229] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 257.473989][ T5229] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 257.484399][ T5229] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.495403][ T5229] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.527288][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.559456][ T5229] usb 4-1: string descriptor 0 read error: -22 [ 257.565889][ T5229] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 257.575173][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.584098][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.597573][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 257.611547][ T5228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.626212][ T5229] adutux 4-1:168.0: interrupt endpoints not found [ 257.664000][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.742533][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.784456][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.796304][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.815310][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.826971][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.842569][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.850360][ T5286] usb 4-1: USB disconnect, device number 25 [ 257.883299][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.895102][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.353709][ T11] bridge_slave_1: left allmulticast mode [ 258.360683][ T5276] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 258.387416][ T11] bridge_slave_1: left promiscuous mode [ 258.393273][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.395219][ T5278] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 258.471035][ T11] bridge_slave_0: left allmulticast mode [ 258.477463][ T11] bridge_slave_0: left promiscuous mode [ 258.483218][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.483627][ T5279] Bluetooth: Can't get state to change to load ram patch err [ 258.545000][ T5279] Bluetooth: Loading patch file failed [ 258.562808][ T5279] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 258.570135][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 258.585510][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 258.593597][ T5278] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 258.605438][ T5276] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 258.608704][ T5278] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.620117][ T5279] usb 5-1: USB disconnect, device number 41 [ 258.643607][ T5276] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.658742][ T5278] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.670600][ T5276] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 258.704704][ T5276] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.715138][ T5278] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.744715][ T5276] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 258.767896][ T5278] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.780984][ T5276] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.804487][ T5276] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 258.814856][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.815724][ T5276] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.852246][ T9051] netlink: 164 bytes leftover after parsing attributes in process `syz.0.788'. [ 258.855098][ T5278] usb 2-1: Product: syz [ 258.884993][ T5276] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 258.894509][ T5278] usb 2-1: Manufacturer: syz [ 258.899971][ T5278] usb 2-1: SerialNumber: syz [ 258.906205][ T5276] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.919945][ T9051] netlink: 164 bytes leftover after parsing attributes in process `syz.0.788'. [ 258.935013][ T5276] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 258.969551][ T5276] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.018063][ T5276] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 259.033617][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.063720][ T5276] usb 4-1: Product: syz [ 259.070997][ T5276] usb 4-1: Manufacturer: syz [ 259.098851][ T5276] usb 4-1: SerialNumber: syz [ 259.315379][ T5278] usb 2-1: USB disconnect, device number 55 [ 259.330694][ T5276] adutux 4-1:168.0: interrupt endpoints not found [ 259.376198][ T5276] usb 4-1: USB disconnect, device number 26 [ 259.389800][ T5232] udevd[5232]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.706221][ T5226] Bluetooth: hci3: command tx timeout [ 259.832530][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.859534][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.893182][ T11] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 259.915503][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 259.938505][ T11] bond0 (unregistering): Released all slaves [ 260.015155][ T5278] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 260.083830][ T9048] chnl_net:caif_netlink_parms(): no params data found [ 260.195135][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 260.208498][ T5278] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.209414][ T5276] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 260.225507][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.291062][ T5278] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 260.325269][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.333605][ T5278] usb 1-1: Product: syz [ 260.339871][ T5278] usb 1-1: Manufacturer: syz [ 260.344855][ T5278] usb 1-1: SerialNumber: syz [ 260.355949][ T5278] usb 1-1: config 0 descriptor?? [ 260.405369][ T5276] usb 4-1: device descriptor read/64, error -71 [ 260.508422][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.798'. [ 260.588716][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.618032][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.639928][ T9048] bridge_slave_0: entered allmulticast mode [ 260.653430][ T9048] bridge_slave_0: entered promiscuous mode [ 260.685118][ T5276] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 260.708421][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.749023][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.757170][ T9048] bridge_slave_1: entered allmulticast mode [ 260.764642][ T9048] bridge_slave_1: entered promiscuous mode [ 260.806269][ T11] hsr_slave_0: left promiscuous mode [ 260.819555][ T11] hsr_slave_1: left promiscuous mode [ 260.843405][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.861516][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.869045][ T5276] usb 4-1: device descriptor read/64, error -71 [ 260.923897][ T11] veth1_macvtap: left promiscuous mode [ 260.941417][ T11] veth0_macvtap: left promiscuous mode [ 260.951632][ T11] veth1_vlan: left promiscuous mode [ 260.960013][ T11] veth0_vlan: left promiscuous mode [ 260.995692][ T5276] usb usb4-port1: attempt power cycle [ 261.256967][ T9131] can: request_module (can-proto-0) failed. [ 261.280589][ T9131] netlink: 72 bytes leftover after parsing attributes in process `syz.1.801'. [ 261.335149][ T5276] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 261.367111][ T5276] usb 4-1: device descriptor read/8, error -71 [ 261.630919][ T11] team0 (unregistering): Port device team_slave_1 removed [ 261.638730][ T5276] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 261.666561][ T5276] usb 4-1: device descriptor read/8, error -71 [ 261.698508][ T11] team0 (unregistering): Port device team_slave_0 removed [ 261.788870][ T5276] usb usb4-port1: unable to enumerate USB device [ 261.798030][ T5226] Bluetooth: hci3: command tx timeout [ 262.200988][ T9129] netlink: 36 bytes leftover after parsing attributes in process `syz.1.801'. [ 262.291896][ T9048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.351544][ T9048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.403089][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.428056][ T9048] team0: Port device team_slave_0 added [ 262.435267][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.445752][ T9048] team0: Port device team_slave_1 added [ 262.523820][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.532161][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.556743][ T9144] ipt_REJECT: TCP_RESET invalid for non-tcp [ 262.570299][ T9048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.608113][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.616278][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.644151][ T9048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.748914][ T9048] hsr_slave_0: entered promiscuous mode [ 262.770488][ T9048] hsr_slave_1: entered promiscuous mode [ 262.805692][ T9048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.825162][ T9048] Cannot create hsr debugfs directory [ 262.861002][ T25] usb 1-1: USB disconnect, device number 29 [ 263.325468][ T5286] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 263.411992][ T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 263.527395][ T5286] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 263.535901][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.810'. [ 263.545830][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 263.583081][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.585907][ T25] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 263.633250][ T5286] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.642268][ T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 263.685265][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 263.690416][ T5286] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 263.714728][ T25] usb 1-1: Product: syz [ 263.723605][ T25] usb 1-1: Manufacturer: syz [ 263.725092][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 263.761370][ T25] usb 1-1: SerialNumber: syz [ 263.763566][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.791295][ T25] usb 1-1: config 0 descriptor?? [ 263.805196][ T5286] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.814340][ T25] ims_pcu 1-1:0.0: Zero length descriptor [ 263.831160][ T25] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 263.840952][ T5286] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 263.861841][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 263.872137][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.882250][ T5286] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.904307][ T5226] Bluetooth: hci3: command tx timeout [ 263.912640][ T5286] usb 5-1: string descriptor 0 read error: -22 [ 263.929516][ T5286] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 263.946361][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.999441][ T5286] adutux 5-1:168.0: interrupt endpoints not found [ 264.091658][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.135600][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.146347][ T5286] usb 1-1: USB disconnect, device number 30 [ 264.146823][ T9048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.232186][ T5276] usb 5-1: USB disconnect, device number 42 [ 264.254622][ T9048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.272987][ T9048] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.338952][ T9048] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.543014][ T9048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.606831][ T9048] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.634135][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.641369][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.683860][ T9182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.697999][ T9182] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 264.719626][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.726817][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.734631][ T5276] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 264.811205][ T9048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.822022][ T9048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.854606][ T9048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.895610][ T5276] usb 5-1: Using ep0 maxpacket: 8 [ 264.903777][ T5276] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 264.937177][ T5276] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 264.974442][ T5276] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 264.995658][ T5229] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 265.007235][ T9182] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 265.010649][ T5276] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.013167][ T9182] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 265.048862][ T5276] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 265.061654][ T9048] veth0_vlan: entered promiscuous mode [ 265.102672][ T5276] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 265.114601][ T5276] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 265.127794][ T5276] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.162916][ T9182] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 265.188542][ T9182] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 265.191571][ T9048] veth1_vlan: entered promiscuous mode [ 265.197726][ T5229] usb 2-1: Using ep0 maxpacket: 16 [ 265.204541][ T5276] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 265.221451][ T5276] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 265.222289][ T5229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.245974][ T5276] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 265.270275][ T9182] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.279918][ T5276] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.303597][ T5276] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 265.312963][ T5229] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.318601][ T9182] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 265.339587][ T5229] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.342345][ T9048] veth0_macvtap: entered promiscuous mode [ 265.348906][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.363769][ T5229] usb 2-1: Product: syz [ 265.371856][ T5229] usb 2-1: Manufacturer: syz [ 265.378280][ T5229] usb 2-1: SerialNumber: syz [ 265.391026][ T9048] veth1_macvtap: entered promiscuous mode [ 265.407707][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.422514][ T5229] usb 2-1: config 0 descriptor?? [ 265.454417][ T5276] usb 5-1: Product: syz [ 265.483292][ T5276] usb 5-1: Manufacturer: syz [ 265.504661][ T5276] usb 5-1: SerialNumber: syz [ 265.697391][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.719056][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.733388][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.754881][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.780893][ T5276] adutux 5-1:168.0: interrupt endpoints not found [ 265.808933][ T5276] usb 5-1: USB disconnect, device number 43 [ 265.815096][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.866000][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.889316][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.911155][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.941800][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.955798][ T5226] Bluetooth: hci3: command tx timeout [ 265.966108][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.996747][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.069101][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.090462][ T9182] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.098162][ T9182] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 266.118916][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.134228][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.152345][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.163287][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.178775][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.202927][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.219858][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.244149][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.263258][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.282137][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.320672][ T9048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.353485][ T9048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.373753][ T9048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.409218][ T9048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.691367][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.719780][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.798713][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.830437][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.966989][ T9251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.822'. [ 267.190725][ T9258] netlink: 'syz.0.824': attribute type 3 has an invalid length. [ 267.312555][ T5279] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 267.363256][ T9266] netlink: 'syz.4.826': attribute type 30 has an invalid length. [ 267.398310][ T9267] FAULT_INJECTION: forcing a failure. [ 267.398310][ T9267] name failslab, interval 1, probability 0, space 0, times 0 [ 267.425174][ T9267] CPU: 1 UID: 0 PID: 9267 Comm: syz.2.825 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 267.435495][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 267.445587][ T9267] Call Trace: [ 267.448891][ T9267] [ 267.451843][ T9267] dump_stack_lvl+0x241/0x360 [ 267.456570][ T9267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.461815][ T9267] ? __pfx__printk+0x10/0x10 [ 267.466447][ T9267] ? ref_tracker_alloc+0x332/0x490 [ 267.471592][ T9267] should_fail_ex+0x3b0/0x4e0 [ 267.476351][ T9267] ? skb_clone+0x20c/0x390 [ 267.480810][ T9267] should_failslab+0xac/0x100 [ 267.485526][ T9267] ? skb_clone+0x20c/0x390 [ 267.489992][ T9267] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 267.495422][ T9267] skb_clone+0x20c/0x390 [ 267.499726][ T9267] __netlink_deliver_tap+0x3cc/0x7c0 [ 267.505093][ T9267] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.510360][ T9267] netlink_deliver_tap+0x19d/0x1b0 [ 267.515523][ T9267] netlink_unicast+0x7c4/0x990 [ 267.520338][ T9267] ? __pfx_netlink_unicast+0x10/0x10 [ 267.525678][ T9267] ? __virt_addr_valid+0x183/0x530 [ 267.530825][ T9267] ? __check_object_size+0x48e/0x900 [ 267.536159][ T9267] netlink_sendmsg+0x8e4/0xcb0 [ 267.540980][ T9267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.543842][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 267.546372][ T9267] ? __pfx_lock_release+0x10/0x10 [ 267.546409][ T9267] ? aa_sock_msg_perm+0x91/0x160 [ 267.561525][ T9267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.566792][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.567092][ T9267] __sock_sendmsg+0x221/0x270 [ 267.583254][ T9267] ____sys_sendmsg+0x52a/0x7e0 [ 267.588074][ T9267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.588870][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 267.593400][ T9267] __sys_sendmsg+0x2aa/0x390 [ 267.609138][ T9267] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.614294][ T9267] ? vfs_write+0x7bf/0xc90 [ 267.618802][ T9267] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 267.625210][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.625421][ T9267] ? lockdep_hardirqs_on+0x99/0x150 [ 267.641766][ T9267] __do_fast_syscall_32+0xb4/0x110 [ 267.646926][ T9267] ? exc_page_fault+0x590/0x8c0 [ 267.651825][ T9267] do_fast_syscall_32+0x34/0x80 [ 267.656732][ T9267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.663109][ T9267] RIP: 0023:0xf7f9f579 [ 267.665004][ T5279] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 267.667185][ T9267] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.667208][ T9267] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 267.667236][ T9267] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 267.698043][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.704371][ T9267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.704394][ T9267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.704410][ T9267] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.736674][ T5279] usb 4-1: config 0 descriptor?? [ 267.744628][ T9267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.744667][ T9267] [ 267.817653][ T9253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.828974][ T5277] usb 2-1: USB disconnect, device number 56 [ 267.833099][ T5279] hub 4-1:0.0: USB hub found [ 267.894414][ T9267] netlink: 72 bytes leftover after parsing attributes in process `syz.2.825'. [ 267.909523][ T9267] netlink: 72 bytes leftover after parsing attributes in process `syz.2.825'. [ 267.945361][ T5229] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 267.980921][ T9277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.047983][ T5279] hub 4-1:0.0: 2 ports detected [ 268.086219][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.105261][ T5229] usb 5-1: Using ep0 maxpacket: 32 [ 268.112972][ T5229] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 268.121732][ T5229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.143945][ T5229] usb 5-1: config 0 has no interface number 0 [ 268.152115][ T5229] usb 5-1: config 0 interface 169 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.174779][ T5229] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=58.19 [ 268.190816][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.200943][ T9277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.228196][ T5229] usb 5-1: Product: syz [ 268.235080][ T5229] usb 5-1: Manufacturer: syz [ 268.239730][ T5229] usb 5-1: SerialNumber: syz [ 268.263185][ T5229] usb 5-1: config 0 descriptor?? [ 268.280445][ T5229] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 268.303838][ T5229] usb 5-1: No valid video chain found. [ 268.386127][ T5277] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 268.535275][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 268.564006][ T5229] usb 5-1: USB disconnect, device number 44 [ 268.579012][ T5277] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 268.621313][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 268.646765][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.663457][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.689626][ T5277] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 268.705903][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 268.722900][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.744606][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.786988][ T9] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 268.802467][ T9] usb 3-1: config 0 has no interface number 0 [ 268.816885][ T9] usb 3-1: config 0 interface 79 has no altsetting 0 [ 268.843830][ T9] usb 3-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92 [ 268.858020][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.863716][ T5277] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 268.873665][ T9] usb 3-1: Product: syz [ 268.896163][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 268.926324][ T9] usb 3-1: Manufacturer: syz [ 268.941853][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.956469][ T9] usb 3-1: SerialNumber: syz [ 268.981530][ T9309] binder: 9308:9309 ioctl c0046209 0 returned -22 [ 268.983759][ T9] usb 3-1: config 0 descriptor?? [ 268.991338][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.057086][ T5277] usb 1-1: string descriptor 0 read error: -22 [ 269.070529][ T9] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 269.090116][ T5277] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 269.121070][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 269.126464][ T9309] netlink: 'syz.1.834': attribute type 10 has an invalid length. [ 269.142537][ T9] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 269.145420][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.168431][ T9] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 269.179646][ T9309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.189904][ T9315] fuse: Bad value for 'user_id' [ 269.194833][ T9315] fuse: Bad value for 'user_id' [ 269.208168][ T5279] usb 4-1: USB disconnect, device number 31 [ 269.220519][ T5277] adutux 1-1:168.0: interrupt endpoints not found [ 269.224523][ T9] usb 3-1: media controller created [ 269.250676][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.310216][ T9309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.312972][ T9315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.835'. [ 269.340098][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 269.349397][ T9] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 269.425452][ T9309] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 269.448472][ T5277] usb 1-1: USB disconnect, device number 31 [ 269.516511][ T9] rc_core: IR keymap rc-dtt200u not found [ 269.529708][ T9] Registered IR keymap rc-empty [ 269.538018][ T9] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 269.573752][ T9] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input32 [ 269.598947][ T9] dvb-usb: schedule remote query interval to 300 msecs. [ 269.613595][ T9] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 269.630662][ T9] usb 3-1: USB disconnect, device number 45 [ 269.728689][ T9] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 269.805067][ T25] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 269.915296][ T5277] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 269.977304][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.837'. [ 270.007511][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 270.021099][ T25] usb 5-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 270.046825][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.075088][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 270.090826][ T25] usb 5-1: Product: syz [ 270.102186][ T5277] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 270.125121][ T25] usb 5-1: Manufacturer: syz [ 270.129783][ T25] usb 5-1: SerialNumber: syz [ 270.135108][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 270.166815][ T5277] usb 1-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 270.177127][ T25] usb 5-1: config 0 descriptor?? [ 270.197647][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.246544][ T5277] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 270.268233][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 270.298280][ T5277] usb 1-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 270.325130][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.355840][ T5277] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 270.363442][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 270.386504][ T5277] usb 1-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 270.398820][ T5277] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.418402][ T5277] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 270.438989][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.458939][ T5277] usb 1-1: Product: syz [ 270.463226][ T5277] usb 1-1: Manufacturer: syz [ 270.478081][ T5277] usb 1-1: SerialNumber: syz [ 270.515090][ T5229] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 270.594179][ T9355] netlink: 64 bytes leftover after parsing attributes in process `syz.2.840'. [ 270.614512][ T9356] tipc: Started in network mode [ 270.620619][ T9] IPVS: starting estimator thread 0... [ 270.626642][ T9356] tipc: Node identity ac1414aa, cluster identity 4711 [ 270.634644][ T9356] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.642579][ T9356] tipc: Enabled bearer , priority 10 [ 270.677528][ T5229] usb 4-1: Using ep0 maxpacket: 16 [ 270.704038][ T5229] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.725456][ T9357] IPVS: using max 17 ests per chain, 40800 per kthread [ 270.736002][ T5229] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.747698][ T5277] adutux 1-1:168.0: interrupt endpoints not found [ 270.758038][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.771818][ T5277] usb 1-1: USB disconnect, device number 32 [ 270.777238][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.778711][ T5229] usb 4-1: Product: syz [ 270.815551][ T5229] usb 4-1: Manufacturer: syz [ 270.820284][ T5229] usb 4-1: SerialNumber: syz [ 270.876295][ T5229] usb 4-1: config 0 descriptor?? [ 270.905066][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.970903][ T25] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 271.041099][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 271.055141][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.070222][ T25] dib0700: firmware download failed at 7 with -22 [ 271.113928][ T9371] netlink: 72 bytes leftover after parsing attributes in process `syz.1.845'. [ 271.122355][ T25] usb 5-1: USB disconnect, device number 45 [ 271.165072][ T9371] netlink: 72 bytes leftover after parsing attributes in process `syz.1.845'. [ 271.195033][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.335084][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.485142][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.565332][ T1182] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 271.604894][ T9400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'. [ 271.628115][ T5279] tipc: Node number set to 2886997162 [ 271.745022][ T1182] usb 5-1: Using ep0 maxpacket: 8 [ 271.770770][ T1182] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 271.775174][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.795551][ T1182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.811552][ T1182] usb 5-1: config 0 descriptor?? [ 271.849031][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 272.035039][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.129006][ T1182] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 272.150307][ T1182] asix 5-1:0.0: probe with driver asix failed with error -71 [ 272.185271][ T1182] usb 5-1: USB disconnect, device number 46 [ 272.550317][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.565125][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.587558][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.423737][ T5279] usb 4-1: USB disconnect, device number 32 [ 274.455187][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 274.706623][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.778685][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'. [ 274.829653][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.187319][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 275.255807][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 275.302792][ T9] usb 4-1: can't read configurations, error -71 [ 275.705991][ C0] net_ratelimit: 2 callbacks suppressed [ 275.706015][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.803101][ T9506] netlink: 'syz.1.867': attribute type 5 has an invalid length. [ 275.860324][ T9506] fuse: Unknown parameter 'fd0x0000000000000006' [ 275.895310][ T937] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 275.949519][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 275.982669][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 276.085145][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 276.096893][ T937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.107637][ T5286] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 276.151992][ T937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.195005][ T937] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.247719][ T937] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 276.289951][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.298209][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 276.319732][ T5286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.373868][ T5286] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 276.385311][ T937] hub 1-1:1.0: bad descriptor, ignoring hub [ 276.405673][ T937] hub 1-1:1.0: probe with driver hub failed with error -5 [ 276.422292][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.443955][ T937] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 276.458583][ T5286] usb 5-1: Product: syz [ 276.473668][ T9516] bridge0: entered allmulticast mode [ 276.482185][ T5286] usb 5-1: Manufacturer: syz [ 276.505484][ T5286] usb 5-1: SerialNumber: syz [ 276.529942][ T5286] usb 5-1: config 0 descriptor?? [ 276.535230][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 276.665522][ T937] usb 1-1: USB disconnect, device number 33 [ 276.725216][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 276.746699][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.761392][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.839907][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 276.871207][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.909347][ T9] usb 4-1: Product: syz [ 276.913586][ T9] usb 4-1: Manufacturer: syz [ 276.967766][ T9] usb 4-1: SerialNumber: syz [ 277.001444][ T9] usb 4-1: config 0 descriptor?? [ 277.015568][ T937] usb 5-1: USB disconnect, device number 47 [ 277.785030][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.835029][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.865158][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.915001][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.945005][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.985006][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.025346][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.065009][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.110133][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.145012][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.992932][ T0] sched: DL replenish lagged too much [ 288.185020][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.225015][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.264996][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 291.304999][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.345510][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.385001][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.425004][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.465004][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.515000][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.545005][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.585030][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.835200][ T937] usb 4-1: USB disconnect, device number 35 [ 299.625010][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.665289][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.665547][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.679227][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.687344][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.704985][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.715852][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.723620][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 301.731422][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.867058][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.900887][ T5226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.916573][ T5226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.925471][ T5226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.933151][ T5226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 301.942319][ T5226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.022240][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.037051][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.045554][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.082991][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.090887][ T5228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 302.099422][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.308233][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.329481][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.338685][ T5226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.351511][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.361938][ T5226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 302.370605][ T5226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.447530][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.457693][ T5228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.471140][ T5228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.481670][ T5228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.489428][ T5228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 302.496961][ T5228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.745016][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.785006][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.866580][ T5228] Bluetooth: hci1: command tx timeout [ 304.036146][ T5228] Bluetooth: hci3: command tx timeout [ 304.185285][ T5228] Bluetooth: hci0: command tx timeout [ 304.425154][ T5228] Bluetooth: hci2: command tx timeout [ 304.585481][ T5228] Bluetooth: hci4: command tx timeout [ 304.825126][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.865003][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.955400][ T5228] Bluetooth: hci1: command tx timeout [ 306.105317][ T5228] Bluetooth: hci3: command tx timeout [ 306.265252][ T5228] Bluetooth: hci0: command tx timeout [ 306.512180][ T5228] Bluetooth: hci2: command tx timeout [ 306.665136][ T5228] Bluetooth: hci4: command tx timeout [ 306.904994][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.945074][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.025487][ T5228] Bluetooth: hci1: command tx timeout [ 308.185227][ T5228] Bluetooth: hci3: command tx timeout [ 308.345462][ T5228] Bluetooth: hci0: command tx timeout [ 308.585068][ T5228] Bluetooth: hci2: command tx timeout [ 308.745023][ T5228] Bluetooth: hci4: command tx timeout [ 308.986529][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.025386][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.105262][ T5228] Bluetooth: hci1: command tx timeout [ 310.266417][ T5228] Bluetooth: hci3: command tx timeout [ 310.425140][ T5228] Bluetooth: hci0: command tx timeout [ 310.665243][ T5228] Bluetooth: hci2: command tx timeout [ 310.825246][ T5228] Bluetooth: hci4: command tx timeout [ 311.065055][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.104997][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.144991][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.185001][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.225023][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.265021][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.310667][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.327478][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.333816][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.345001][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.384993][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.425002][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.464991][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.504999][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.544990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.584989][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.625358][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.664990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.705148][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.744992][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.784987][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.824990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.865000][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.905003][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.944991][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.984984][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.025054][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.064996][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.104995][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.144994][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.184995][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.224998][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.265120][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.304994][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.344989][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.384982][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.424983][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.464979][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.504978][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.554981][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.584981][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.624988][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.665199][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.704986][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.744982][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.784981][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.824990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.864990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.905113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.954990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.985148][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.865730][ T5226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.875994][ T5226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.897173][ T5226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.925873][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.933595][ T5226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 361.947773][ T5226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.005802][ T5228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.020311][ T5228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.027459][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.036291][ T5228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.044301][ T5228] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.055833][ T5228] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 362.085414][ T5228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.706463][ T5228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.717125][ T5228] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.725452][ T5228] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.734500][ T5228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.742880][ T5228] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 362.750756][ T5228] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.816421][ T5226] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 362.825841][ T5226] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 362.833813][ T5226] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 362.847425][ T5226] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 362.855358][ T5226] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 362.862704][ T5226] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 362.996457][ T5226] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 363.006840][ T5226] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 363.016466][ T5226] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 363.024485][ T5226] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 363.035091][ T5226] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 363.042544][ T5226] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 363.075000][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.035014][ T5226] Bluetooth: hci5: command tx timeout [ 364.105051][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.186288][ T5226] Bluetooth: hci6: command tx timeout [ 364.825095][ T5226] Bluetooth: hci7: command tx timeout [ 364.985225][ T5226] Bluetooth: hci8: command tx timeout [ 365.065317][ T5226] Bluetooth: hci9: command tx timeout [ 365.145042][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.105152][ T5226] Bluetooth: hci5: command tx timeout [ 366.185025][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.265364][ T5226] Bluetooth: hci6: command tx timeout [ 366.905078][ T5226] Bluetooth: hci7: command tx timeout [ 367.065417][ T5226] Bluetooth: hci8: command tx timeout [ 367.155348][ T5226] Bluetooth: hci9: command tx timeout [ 367.225033][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.185276][ T5226] Bluetooth: hci5: command tx timeout [ 368.265029][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.345285][ T5226] Bluetooth: hci6: command tx timeout [ 368.985052][ T5226] Bluetooth: hci7: command tx timeout [ 369.145254][ T5226] Bluetooth: hci8: command tx timeout [ 369.225199][ T5226] Bluetooth: hci9: command tx timeout [ 369.305033][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.265207][ T5226] Bluetooth: hci5: command tx timeout [ 370.345032][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.425499][ T5226] Bluetooth: hci6: command tx timeout [ 371.065279][ T5226] Bluetooth: hci7: command tx timeout [ 371.225201][ T5226] Bluetooth: hci8: command tx timeout [ 371.305161][ T5226] Bluetooth: hci9: command tx timeout [ 371.385035][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.425044][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.465031][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.505228][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.545157][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.585042][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.625008][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.675029][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.762347][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.774955][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.705018][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.745023][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.785023][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.825024][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.877265][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.914973][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.944987][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.985008][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.025086][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.064946][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.104955][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.144973][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.184976][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.224963][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.264974][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.304975][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.344963][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.384958][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.424978][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.464976][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.515042][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.544976][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.584965][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.624979][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.664974][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.704971][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.744971][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.784960][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.825032][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.864963][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.904967][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.944972][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.984962][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.025066][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.064963][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.104944][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.145014][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.184949][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.224963][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.264968][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.304953][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.344971][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.385562][ T5228] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 422.394832][ T5228] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 422.403286][ T5228] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 422.411611][ T5228] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 422.422119][ T5228] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 422.435249][ T5228] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 422.540464][ T5226] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 422.550614][ T5226] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 422.559227][ T5226] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 422.567450][ T5226] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 422.575733][ T5226] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 422.593304][ T5226] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 423.384962][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.478993][ T5226] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 423.489123][ T5226] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 423.500973][ T5226] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 423.509594][ T5226] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 423.517888][ T5226] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 423.525623][ T5226] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 423.695650][ T5228] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 423.707538][ T5228] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 423.719931][ T5228] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 423.736604][ T5228] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 423.764355][ T5240] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 423.772369][ T5240] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 423.803103][ T5226] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 423.813564][ T5226] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 423.822604][ T5226] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 423.831180][ T5226] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 423.841964][ T5226] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 423.850348][ T5226] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 424.424952][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.505291][ T5226] Bluetooth: hci10: command tx timeout [ 424.665111][ T5226] Bluetooth: hci11: command tx timeout [ 425.465019][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.625239][ T9586] Bluetooth: hci12: command tx timeout [ 425.865097][ T9586] Bluetooth: hci13: command tx timeout [ 425.945284][ T9586] Bluetooth: hci14: command tx timeout [ 426.514977][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.585321][ T9586] Bluetooth: hci10: command tx timeout [ 426.745189][ T9586] Bluetooth: hci11: command tx timeout [ 426.925477][ T5240] Bluetooth: hci4: command 0x0406 tx timeout [ 426.931627][ T9586] Bluetooth: hci0: command 0x0406 tx timeout [ 426.940627][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 426.946839][ T9586] Bluetooth: hci3: command 0x0406 tx timeout [ 426.952905][ T9586] Bluetooth: hci2: command 0x0406 tx timeout [ 427.544943][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.705173][ T5226] Bluetooth: hci12: command tx timeout [ 427.945177][ T5226] Bluetooth: hci13: command tx timeout [ 428.025588][ T5226] Bluetooth: hci14: command tx timeout [ 428.584953][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.665353][ T5226] Bluetooth: hci10: command tx timeout [ 428.825134][ T5226] Bluetooth: hci11: command tx timeout [ 429.624951][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.785086][ T5226] Bluetooth: hci12: command tx timeout [ 430.025265][ T5226] Bluetooth: hci13: command tx timeout [ 430.105255][ T5226] Bluetooth: hci14: command tx timeout [ 430.664950][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.745360][ T5226] Bluetooth: hci10: command tx timeout [ 430.905187][ T5226] Bluetooth: hci11: command tx timeout [ 431.704959][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.865376][ T5226] Bluetooth: hci12: command tx timeout [ 432.105040][ T5226] Bluetooth: hci13: command tx timeout [ 432.185285][ T5226] Bluetooth: hci14: command tx timeout [ 432.744940][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.785039][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.824958][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.864958][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.904951][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.944950][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.984949][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.025100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.188898][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.199290][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.064945][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.105302][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.144940][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.184943][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.224951][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.264943][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.304945][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.344943][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.384953][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.425829][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.464940][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.504940][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.544932][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.265474][ T30] INFO: task kworker/u8:16:6137 blocked for more than 143 seconds. [ 454.273442][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 454.312362][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.375027][ T30] task:kworker/u8:16 state:D stack:22040 pid:6137 tgid:6137 ppid:2 flags:0x00004000 [ 454.465009][ T30] Workqueue: netns cleanup_net [ 454.469868][ T30] Call Trace: [ 454.473179][ T30] [ 454.543966][ T30] __schedule+0x1895/0x4b30 [ 454.569806][ T30] ? __pfx___schedule+0x10/0x10 [ 454.585127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.605233][ T30] ? __pfx_lock_release+0x10/0x10 [ 454.610419][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 454.657262][ T30] ? kthread_data+0x52/0xd0 [ 454.661916][ T30] ? schedule+0x90/0x320 [ 454.707346][ T30] ? wq_worker_sleeping+0x66/0x240 [ 454.712553][ T30] ? schedule+0x90/0x320 [ 454.760456][ T30] schedule+0x14b/0x320 [ 454.764701][ T30] schedule_preempt_disabled+0x13/0x30 [ 454.810381][ T30] __mutex_lock+0x6a7/0xd70 [ 454.844989][ T30] ? __mutex_lock+0x52a/0xd70 [ 454.849756][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 454.885385][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 454.890529][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 454.924220][ T30] cleanup_net+0x615/0xcc0 [ 454.933522][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 454.944970][ T30] ? process_scheduled_works+0x976/0x1850 [ 454.950853][ T30] process_scheduled_works+0xa63/0x1850 [ 454.965359][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.971419][ T30] ? assign_work+0x364/0x3d0 [ 454.983829][ T30] worker_thread+0x870/0xd30 [ 454.988973][ T30] ? __kthread_parkme+0x169/0x1d0 [ 454.994061][ T30] ? __pfx_worker_thread+0x10/0x10 [ 455.013741][ T30] kthread+0x2f0/0x390 [ 455.018264][ T30] ? __pfx_worker_thread+0x10/0x10 [ 455.023431][ T30] ? __pfx_kthread+0x10/0x10 [ 455.034939][ T30] ret_from_fork+0x4b/0x80 [ 455.040748][ T30] ? __pfx_kthread+0x10/0x10 [ 455.051933][ T30] ret_from_fork_asm+0x1a/0x30 [ 455.060876][ T30] [ 455.064291][ T30] INFO: task kworker/u8:19:6143 blocked for more than 144 seconds. [ 455.074876][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 455.082203][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.100940][ T30] task:kworker/u8:19 state:D stack:20400 pid:6143 tgid:6143 ppid:2 flags:0x00004000 [ 455.114515][ T30] Workqueue: events_unbound linkwatch_event [ 455.125146][ T30] Call Trace: [ 455.128480][ T30] [ 455.131458][ T30] __schedule+0x1895/0x4b30 [ 455.144248][ T30] ? __pfx___schedule+0x10/0x10 [ 455.152614][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.164879][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 455.170402][ T30] ? kthread_data+0x52/0xd0 [ 455.183082][ T30] ? schedule+0x90/0x320 [ 455.187687][ T30] ? wq_worker_sleeping+0x66/0x240 [ 455.192872][ T30] ? schedule+0x90/0x320 [ 455.204875][ T30] schedule+0x14b/0x320 [ 455.209111][ T30] schedule_preempt_disabled+0x13/0x30 [ 455.224654][ T30] __mutex_lock+0x6a7/0xd70 [ 455.236502][ T30] ? __mutex_lock+0x52a/0xd70 [ 455.241286][ T30] ? linkwatch_event+0xe/0x60 [ 455.257597][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 455.262712][ T30] ? process_scheduled_works+0x976/0x1850 [ 455.274136][ T30] linkwatch_event+0xe/0x60 [ 455.283650][ T30] process_scheduled_works+0xa63/0x1850 [ 455.294240][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.302997][ T30] ? assign_work+0x364/0x3d0 [ 455.313153][ T30] worker_thread+0x870/0xd30 [ 455.320590][ T30] ? __kthread_parkme+0x169/0x1d0 [ 455.330678][ T30] ? __pfx_worker_thread+0x10/0x10 [ 455.339957][ T30] kthread+0x2f0/0x390 [ 455.344099][ T30] ? __pfx_worker_thread+0x10/0x10 [ 455.355000][ T30] ? __pfx_kthread+0x10/0x10 [ 455.359650][ T30] ret_from_fork+0x4b/0x80 [ 455.364119][ T30] ? __pfx_kthread+0x10/0x10 [ 455.375591][ T30] ret_from_fork_asm+0x1a/0x30 [ 455.380483][ T30] [ 455.383643][ T30] INFO: task syz-executor:9535 blocked for more than 144 seconds. [ 455.400023][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 455.410211][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.424363][ T30] task:syz-executor state:D stack:26704 pid:9535 tgid:9535 ppid:1 flags:0x20004006 [ 455.437629][ T30] Call Trace: [ 455.440949][ T30] [ 455.443932][ T30] __schedule+0x1895/0x4b30 [ 455.456218][ T30] ? __pfx___schedule+0x10/0x10 [ 455.461224][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.474229][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 455.480252][ T30] ? schedule+0x90/0x320 [ 455.484542][ T30] schedule+0x14b/0x320 [ 455.494878][ T30] schedule_preempt_disabled+0x13/0x30 [ 455.500396][ T30] __mutex_lock+0x6a7/0xd70 [ 455.513242][ T30] ? __mutex_lock+0x52a/0xd70 [ 455.518274][ T30] ? register_nexthop_notifier+0x84/0x290 [ 455.524054][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 455.534923][ T30] ? __asan_memset+0x23/0x50 [ 455.539580][ T30] register_nexthop_notifier+0x84/0x290 [ 455.554889][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 455.560854][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 455.575448][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 455.581684][ T30] ? __asan_memset+0x23/0x50 [ 455.593902][ T30] ops_init+0x31e/0x590 [ 455.598446][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 455.603880][ T30] setup_net+0x287/0x9e0 [ 455.614905][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 455.620520][ T30] ? __pfx_setup_net+0x10/0x10 [ 455.625453][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.643842][ T30] copy_net_ns+0x33f/0x570 [ 455.650399][ T30] create_new_namespaces+0x425/0x7b0 [ 455.662639][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 455.670018][ T30] ksys_unshare+0x619/0xc10 [ 455.674592][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 455.687317][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 455.693474][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 455.709783][ T30] __ia32_sys_unshare+0x37/0x40 [ 455.714705][ T30] __do_fast_syscall_32+0xb4/0x110 [ 455.722593][ T30] ? exc_page_fault+0x590/0x8c0 [ 455.732571][ T30] do_fast_syscall_32+0x34/0x80 [ 455.740146][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.753329][ T30] RIP: 0023:0xf740d579 [ 455.760848][ T30] RSP: 002b:00000000f755ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 455.774499][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 455.785229][ T30] RDX: 00000000f73fbff4 RSI: 00000000f72d2a6a RDI: 0000000030000000 [ 455.793603][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.804873][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.821954][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.831483][ T30] [ 455.834628][ T30] INFO: task syz-executor:9537 blocked for more than 144 seconds. [ 455.848681][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 455.859817][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.876837][ T30] task:syz-executor state:D stack:26480 pid:9537 tgid:9537 ppid:1 flags:0x20004004 [ 455.894522][ T30] Call Trace: [ 455.898179][ T30] [ 455.901150][ T30] __schedule+0x1895/0x4b30 [ 455.913196][ T30] ? __pfx___schedule+0x10/0x10 [ 455.918571][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.923668][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 455.938248][ T30] ? schedule+0x90/0x320 [ 455.942556][ T30] schedule+0x14b/0x320 [ 455.952077][ T30] schedule_preempt_disabled+0x13/0x30 [ 455.960954][ T30] __mutex_lock+0x6a7/0xd70 [ 455.971057][ T30] ? __mutex_lock+0x52a/0xd70 [ 455.978603][ T30] ? register_nexthop_notifier+0x84/0x290 [ 455.984398][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 455.995077][ T30] ? __asan_memset+0x23/0x50 [ 455.999730][ T30] register_nexthop_notifier+0x84/0x290 [ 456.011630][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 456.017824][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 456.024128][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 456.034769][ T30] ? __asan_memset+0x23/0x50 [ 456.043189][ T30] ops_init+0x31e/0x590 [ 456.051173][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 456.061632][ T30] setup_net+0x287/0x9e0 [ 456.071132][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 456.078691][ T30] ? __pfx_setup_net+0x10/0x10 [ 456.083543][ T30] copy_net_ns+0x33f/0x570 [ 456.094447][ T30] create_new_namespaces+0x425/0x7b0 [ 456.101254][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 456.114893][ T30] ksys_unshare+0x619/0xc10 [ 456.119468][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 456.124546][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 456.139958][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 456.151648][ T30] __ia32_sys_unshare+0x37/0x40 [ 456.159840][ T30] __do_fast_syscall_32+0xb4/0x110 [ 456.172406][ T30] ? exc_page_fault+0x590/0x8c0 [ 456.180065][ T30] do_fast_syscall_32+0x34/0x80 [ 456.193402][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.202510][ T30] RIP: 0023:0xf73bd579 [ 456.211627][ T30] RSP: 002b:00000000f750ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 456.222829][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 456.234987][ T30] RDX: 00000000f73abff4 RSI: 00000000f7282a6a RDI: 0000000030000000 [ 456.243009][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.258266][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 456.284529][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.293029][ T30] [ 456.304173][ T30] INFO: task syz-executor:9538 blocked for more than 145 seconds. [ 456.312438][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 456.327188][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.341115][ T30] task:syz-executor state:D stack:26480 pid:9538 tgid:9538 ppid:1 flags:0x20004006 [ 456.356417][ T30] Call Trace: [ 456.359744][ T30] [ 456.362711][ T30] __schedule+0x1895/0x4b30 [ 456.373387][ T30] ? __pfx___schedule+0x10/0x10 [ 456.381068][ T30] ? __pfx_lock_release+0x10/0x10 [ 456.391216][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 456.400801][ T30] ? schedule+0x90/0x320 [ 456.410592][ T30] schedule+0x14b/0x320 [ 456.417693][ T30] schedule_preempt_disabled+0x13/0x30 [ 456.423210][ T30] __mutex_lock+0x6a7/0xd70 [ 456.434043][ T30] ? __mutex_lock+0x52a/0xd70 [ 456.439185][ T30] ? register_nexthop_notifier+0x84/0x290 [ 456.452296][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 456.460812][ T30] ? __asan_memset+0x23/0x50 [ 456.471421][ T30] register_nexthop_notifier+0x84/0x290 [ 456.479476][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 456.490342][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 456.499426][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 456.510803][ T30] ? __asan_memset+0x23/0x50 [ 456.518674][ T30] ops_init+0x31e/0x590 [ 456.522892][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 456.538020][ T30] setup_net+0x287/0x9e0 [ 456.542503][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 456.553282][ T30] ? __pfx_setup_net+0x10/0x10 [ 456.560688][ T30] copy_net_ns+0x33f/0x570 [ 456.570071][ T30] create_new_namespaces+0x425/0x7b0 [ 456.580331][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 456.591186][ T30] ksys_unshare+0x619/0xc10 [ 456.598450][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 456.603542][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 456.614653][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 456.624005][ T30] __ia32_sys_unshare+0x37/0x40 [ 456.634931][ T30] __do_fast_syscall_32+0xb4/0x110 [ 456.640114][ T30] ? exc_page_fault+0x590/0x8c0 [ 456.651773][ T30] do_fast_syscall_32+0x34/0x80 [ 456.657014][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.663402][ T30] RIP: 0023:0xf7f2f579 [ 456.667668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.684642][ T30] RSP: 002b:00000000f751ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 456.702149][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 456.710554][ T30] RDX: 00000000f73bbff4 RSI: 00000000f7292a6a RDI: 0000000030000000 [ 456.724923][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.732960][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 456.750722][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.761878][ T30] [ 456.770012][ T30] INFO: task syz-executor:9541 blocked for more than 145 seconds. [ 456.781200][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 456.794178][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.805030][ T30] task:syz-executor state:D stack:26480 pid:9541 tgid:9541 ppid:1 flags:0x20004004 [ 456.822254][ T30] Call Trace: [ 456.825922][ T30] [ 456.828909][ T30] __schedule+0x1895/0x4b30 [ 456.833479][ T30] ? __pfx___schedule+0x10/0x10 [ 456.844890][ T30] ? __pfx_lock_release+0x10/0x10 [ 456.849980][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 456.864637][ T30] ? schedule+0x90/0x320 [ 456.869355][ T30] schedule+0x14b/0x320 [ 456.873565][ T30] schedule_preempt_disabled+0x13/0x30 [ 456.887277][ T30] __mutex_lock+0x6a7/0xd70 [ 456.891849][ T30] ? __mutex_lock+0x52a/0xd70 [ 456.901699][ T30] ? register_nexthop_notifier+0x84/0x290 [ 456.912688][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 456.924991][ T30] ? __asan_memset+0x23/0x50 [ 456.929655][ T30] register_nexthop_notifier+0x84/0x290 [ 456.942401][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 456.948620][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 456.962405][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 456.970948][ T30] ? __asan_memset+0x23/0x50 [ 456.983430][ T30] ops_init+0x31e/0x590 [ 456.988081][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 456.993509][ T30] setup_net+0x287/0x9e0 [ 457.005396][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 457.011003][ T30] ? __pfx_setup_net+0x10/0x10 [ 457.022130][ T30] copy_net_ns+0x33f/0x570 [ 457.028237][ T30] create_new_namespaces+0x425/0x7b0 [ 457.033595][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 457.044972][ T30] ksys_unshare+0x619/0xc10 [ 457.049549][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 457.054613][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 457.067827][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 457.074567][ T30] __ia32_sys_unshare+0x37/0x40 [ 457.086175][ T30] __do_fast_syscall_32+0xb4/0x110 [ 457.091352][ T30] ? exc_page_fault+0x590/0x8c0 [ 457.103523][ T30] do_fast_syscall_32+0x34/0x80 [ 457.108788][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.122377][ T30] RIP: 0023:0xf7f16579 [ 457.126776][ T30] RSP: 002b:00000000f74fff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 457.142397][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 457.156803][ T30] RDX: 00000000f739bff4 RSI: 00000000f7272a6a RDI: 0000000030000000 [ 457.172179][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.180570][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 457.194873][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.202996][ T30] [ 457.214006][ T30] INFO: task syz-executor:9542 blocked for more than 146 seconds. [ 457.222265][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 457.234916][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.243640][ T30] task:syz-executor state:D stack:26704 pid:9542 tgid:9542 ppid:1 flags:0x20004006 [ 457.262614][ T30] Call Trace: [ 457.266543][ T30] [ 457.269517][ T30] __schedule+0x1895/0x4b30 [ 457.274095][ T30] ? __pfx___schedule+0x10/0x10 [ 457.285417][ T30] ? __pfx_lock_release+0x10/0x10 [ 457.292417][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 457.303866][ T30] ? schedule+0x90/0x320 [ 457.328310][ T30] schedule+0x14b/0x320 [ 457.332555][ T30] schedule_preempt_disabled+0x13/0x30 [ 457.343364][ T30] __mutex_lock+0x6a7/0xd70 [ 457.350635][ T30] ? __mutex_lock+0x52a/0xd70 [ 457.360310][ T30] ? register_nexthop_notifier+0x84/0x290 [ 457.370458][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 457.380841][ T30] ? __asan_memset+0x23/0x50 [ 457.388196][ T30] register_nexthop_notifier+0x84/0x290 [ 457.394591][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 457.405711][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 457.412027][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 457.425180][ T30] ? __asan_memset+0x23/0x50 [ 457.429851][ T30] ops_init+0x31e/0x590 [ 457.434073][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 457.446609][ T30] setup_net+0x287/0x9e0 [ 457.450921][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 457.463494][ T30] ? __pfx_setup_net+0x10/0x10 [ 457.472832][ T30] copy_net_ns+0x33f/0x570 [ 457.484553][ T30] create_new_namespaces+0x425/0x7b0 [ 457.491799][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 457.504947][ T30] ksys_unshare+0x619/0xc10 [ 457.509533][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 457.514611][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 457.528329][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 457.538872][ T30] __ia32_sys_unshare+0x37/0x40 [ 457.543790][ T30] __do_fast_syscall_32+0xb4/0x110 [ 457.554410][ T30] ? exc_page_fault+0x590/0x8c0 [ 457.563383][ T30] do_fast_syscall_32+0x34/0x80 [ 457.572074][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.582334][ T30] RIP: 0023:0xf7f33579 [ 457.590284][ T30] RSP: 002b:00000000f751ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 457.603723][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 457.617685][ T30] RDX: 00000000f73bbff4 RSI: 00000000f7292a6a RDI: 0000000030000000 [ 457.630535][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.642429][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 457.654315][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.671478][ T30] [ 457.674726][ T30] [ 457.674726][ T30] Showing all locks held in the system: [ 457.683149][ T30] 1 lock held by khungtaskd/30: [ 457.695226][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 457.705327][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.722703][ T30] 3 locks held by kworker/u8:3/53: [ 457.729536][ T30] #0: ffff88802d711948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 457.747970][ T30] #1: ffffc90000be7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 457.765738][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 457.783301][ T30] 4 locks held by kworker/1:2/1182: [ 457.790335][ T30] 2 locks held by getty/4984: [ 457.801088][ T30] #0: ffff88802e3ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 457.813333][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 457.831331][ T30] 3 locks held by kworker/1:3/5229: [ 457.836926][ T30] 3 locks held by kworker/1:5/5277: [ 457.842169][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 457.864579][ T30] #1: ffffc90003fe7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 457.883092][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 457.893131][ T30] 3 locks held by kworker/0:4/5279: [ 457.905070][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 457.923970][ T30] #1: ffffc90004007d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 457.942320][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 457.957515][ T30] 4 locks held by kworker/u8:16/6137: [ 457.962930][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 457.981900][ T30] #1: ffffc9000456fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 457.993038][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 458.004917][ T30] #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 458.023776][ T30] 3 locks held by kworker/u8:19/6143: [ 458.030038][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 458.044933][ T30] #1: ffffc9000457fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 458.065353][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 458.074422][ T30] 2 locks held by syz-executor/8524: [ 458.085420][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 458.094483][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 458.113563][ T30] 2 locks held by syz-executor/9535: [ 458.120298][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.137317][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.151277][ T30] 2 locks held by syz-executor/9537: [ 458.160354][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.173695][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.189407][ T30] 2 locks held by syz-executor/9538: [ 458.194743][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.217446][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.234570][ T30] 2 locks held by syz-executor/9541: [ 458.242505][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.259313][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.274911][ T30] 2 locks held by syz-executor/9542: [ 458.280243][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.298502][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.314813][ T30] 2 locks held by syz-executor/9554: [ 458.322929][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.337564][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.364888][ T30] 2 locks held by syz-executor/9555: [ 458.370236][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.387239][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.404251][ T30] 2 locks held by syz-executor/9559: [ 458.412184][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.430426][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.442207][ T30] 2 locks held by syz-executor/9560: [ 458.453874][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.466166][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.482596][ T30] 2 locks held by syz-executor/9562: [ 458.489572][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.504945][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.525418][ T30] 2 locks held by syz-executor/9570: [ 458.530748][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.546700][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.563905][ T30] 2 locks held by syz-executor/9572: [ 458.571909][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.585030][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.601872][ T30] 2 locks held by syz-executor/9577: [ 458.607517][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.621876][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.637278][ T30] 2 locks held by syz-executor/9582: [ 458.642602][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.657812][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.673835][ T30] 2 locks held by syz-executor/9583: [ 458.682955][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 458.696418][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 458.711693][ T30] [ 458.714059][ T30] ============================================= [ 458.714059][ T30] [ 458.732916][ T30] NMI backtrace for cpu 0 [ 458.737290][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 458.747475][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 458.757562][ T30] Call Trace: [ 458.760887][ T30] [ 458.763847][ T30] dump_stack_lvl+0x241/0x360 [ 458.768568][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.773809][ T30] ? __pfx__printk+0x10/0x10 [ 458.778453][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 458.783441][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 458.788942][ T30] ? _printk+0xd5/0x120 [ 458.793151][ T30] ? __pfx__printk+0x10/0x10 [ 458.797781][ T30] ? __wake_up_klogd+0xcc/0x110 [ 458.802674][ T30] ? __pfx__printk+0x10/0x10 [ 458.807307][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 458.812378][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 458.818399][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 458.824427][ T30] watchdog+0xff4/0x1040 [ 458.828712][ T30] ? watchdog+0x1ea/0x1040 [ 458.833183][ T30] ? __pfx_watchdog+0x10/0x10 [ 458.837901][ T30] kthread+0x2f0/0x390 [ 458.842004][ T30] ? __pfx_watchdog+0x10/0x10 [ 458.846722][ T30] ? __pfx_kthread+0x10/0x10 [ 458.851343][ T30] ret_from_fork+0x4b/0x80 [ 458.855890][ T30] ? __pfx_kthread+0x10/0x10 [ 458.860514][ T30] ret_from_fork_asm+0x1a/0x30 [ 458.865348][ T30] [ 458.868672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.876145][ T30] Sending NMI from CPU 0 to CPUs 1: [ 458.881401][ C1] NMI backtrace for cpu 1 [ 458.881416][ C1] CPU: 1 UID: 0 PID: 5229 Comm: kworker/1:3 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 458.881438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 458.881451][ C1] Workqueue: events nsim_dev_trap_report_work [ 458.881483][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 458.881509][ C1] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 d7 03 00 65 8b 15 00 1e 6f 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 458.881526][ C1] RSP: 0018:ffffc90003bdf540 EFLAGS: 00000087 [ 458.881542][ C1] RAX: ffffffff84baf129 RBX: 00000000eb28a52e RCX: ffff88802cba0000 [ 458.881557][ C1] RDX: 0000000080000001 RSI: 000000008b4b0293 RDI: 00000000c3824286 [ 458.881571][ C1] RBP: 000000008b3cce62 R08: 000000005ed60c84 R09: 000000009895e49e [ 458.881584][ C1] R10: 00000000e076a5a8 R11: 0000000091ea4980 R12: 00000000c3824286 [ 458.881597][ C1] R13: 0000000078ad8c6e R14: 000000001444434a R15: 00000000a48ca4f4 [ 458.881611][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 458.881627][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.881641][ C1] CR2: 00007ffcec56fe40 CR3: 000000000e734000 CR4: 00000000003506f0 [ 458.881657][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 458.881669][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 458.881682][ C1] Call Trace: [ 458.881689][ C1] [ 458.881698][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 458.881727][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 458.881756][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 458.881784][ C1] ? nmi_handle+0x2a/0x5a0 [ 458.881810][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 458.881835][ C1] ? nmi_handle+0x14f/0x5a0 [ 458.881853][ C1] ? nmi_handle+0x2a/0x5a0 [ 458.881872][ C1] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 458.881900][ C1] ? default_do_nmi+0x63/0x160 [ 458.881918][ C1] ? exc_nmi+0x123/0x1f0 [ 458.881935][ C1] ? end_repeat_nmi+0xf/0x53 [ 458.881962][ C1] ? chacha_permute+0x4f9/0x1050 [ 458.881985][ C1] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 458.882008][ C1] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 458.882031][ C1] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 458.882054][ C1] [ 458.882061][ C1] [ 458.882067][ C1] chacha_permute+0x4f9/0x1050 [ 458.882104][ C1] chacha_block_generic+0x9f/0x1340 [ 458.882127][ C1] ? __pfx_chacha_block_generic+0x10/0x10 [ 458.882149][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 458.882179][ C1] ? ret_from_fork+0x4b/0x80 [ 458.882206][ C1] ? crng_make_state+0x368/0xa80 [ 458.882229][ C1] crng_make_state+0x38d/0xa80 [ 458.882250][ C1] ? crng_make_state+0x196/0xa80 [ 458.882269][ C1] ? __pfx_crng_make_state+0x10/0x10 [ 458.882304][ C1] _get_random_bytes+0xd7/0x2c0 [ 458.882323][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 458.882345][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 458.882378][ C1] ? skb_put+0x114/0x1f0 [ 458.882405][ C1] nsim_dev_trap_report_work+0x630/0xaa0 [ 458.882439][ C1] ? process_scheduled_works+0x976/0x1850 [ 458.882464][ C1] process_scheduled_works+0xa63/0x1850 [ 458.882502][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.882531][ C1] ? assign_work+0x364/0x3d0 [ 458.882557][ C1] worker_thread+0x870/0xd30 [ 458.882588][ C1] ? __kthread_parkme+0x169/0x1d0 [ 458.882616][ C1] ? __pfx_worker_thread+0x10/0x10 [ 458.882641][ C1] kthread+0x2f0/0x390 [ 458.882657][ C1] ? __pfx_worker_thread+0x10/0x10 [ 458.882682][ C1] ? __pfx_kthread+0x10/0x10 [ 458.882699][ C1] ret_from_fork+0x4b/0x80 [ 458.882724][ C1] ? __pfx_kthread+0x10/0x10 [ 458.882742][ C1] ret_from_fork_asm+0x1a/0x30 [ 458.882775][ C1] [ 459.273788][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 459.280705][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 459.290992][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 459.301106][ T30] Call Trace: [ 459.304413][ T30] [ 459.307374][ T30] dump_stack_lvl+0x241/0x360 [ 459.312106][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.317351][ T30] ? __pfx__printk+0x10/0x10 [ 459.321980][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 459.328017][ T30] ? vscnprintf+0x5d/0x90 [ 459.332395][ T30] panic+0x349/0x880 [ 459.336339][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 459.342545][ T30] ? __pfx_panic+0x10/0x10 [ 459.347003][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 459.352417][ T30] ? __irq_work_queue_local+0x137/0x410 [ 459.358010][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 459.363426][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 459.369621][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 459.375827][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 459.382035][ T30] watchdog+0x1033/0x1040 [ 459.386413][ T30] ? watchdog+0x1ea/0x1040 [ 459.390874][ T30] ? __pfx_watchdog+0x10/0x10 [ 459.395587][ T30] kthread+0x2f0/0x390 [ 459.399682][ T30] ? __pfx_watchdog+0x10/0x10 [ 459.404395][ T30] ? __pfx_kthread+0x10/0x10 [ 459.409019][ T30] ret_from_fork+0x4b/0x80 [ 459.413485][ T30] ? __pfx_kthread+0x10/0x10 [ 459.418104][ T30] ret_from_fork_asm+0x1a/0x30 [ 459.422932][ T30] [ 459.426290][ T30] Kernel Offset: disabled [ 459.430630][ T30] Rebooting in 86400 seconds..