last executing test programs: 6.312966078s ago: executing program 1 (id=950): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 6.184176503s ago: executing program 1 (id=952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_usb_connect(0x5, 0xba2, &(0x7f0000003880)={{0x12, 0x1, 0x201, 0xe0, 0xa2, 0xc3, 0x8, 0x257a, 0x162f, 0x6bc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb90, 0x3, 0x6, 0xb, 0xc0, 0xd, [{{0x9, 0x4, 0x9, 0x4, 0x8, 0x24, 0xfb, 0xf0, 0x7f, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x90e, 0xfffd}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x40, 0x1, 0xfc, 0x9, "10"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x0, 0x47, "94f8c63e"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xa, 0x8, 0x0, "c01a09dc0d4a93f808"}]}], [{{0x9, 0x5, 0x7, 0x10, 0x1bf, 0x4, 0x1, 0x3, [@generic={0xbb, 0x2, "c4eb82fb3c6777ac8d11f237761ad48a4f6f7748d2dbeb0c7557228656bcd0ed986e95e67b46a1d5049abbb5d5df380edd810ef748c39ef9028f8b0dd5c442201d078e5e9837e950c5ea622e7bc3716def6b97233595365057d08f269b76f5a755081134e4010cfe017bf76db6259e0e758fb6a64fbcdb2d6c4b44cb03398e88c9ae1208d83ff56645c55beebe686f0842f9fec1af06e0bf148fb7de1f14aa02a2ac70cdedf6541e119267552ab28244402a00924db40a623f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x9, 0xa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x3}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x9, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x30, 0x3b}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x6, 0x9e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x8, 0x6, 0x3, [@generic={0x102, 0xd, "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"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0xbe, 0x74, 0x0, [@generic={0x62, 0x8, "0332c2dae852253220f0bb2722b920a49af5b7224c0e6b5cf60559836db4ad811ceda8f89bf6eae9edf66eeecf1a3f2a211a669990a32668d626103230d7aa29afc57e334f996bfe339ae13202959ec4a83fa24373a2bc4961fd2a80ea948efe"}, @generic={0xf3, 0x3a, "cc10a892f874415c8fb4e1d4ff0a12c6dfcc5e7d4305daa298a04ab96772698c3c1e8a7e06afa937d93207ac4a1727e9f3cd2147431b36b7ca88a4879197ab453c6dc6e9ff0ee7a7e5fd46b5e1e63940165436f9f9e4a479f2eefbd2684f82fda198861608410cc4c3c9b4417495077b50708578b84fbd98d7afc2dc552c7d3b1f19f271e6083e73e227e5786dda409573318a11ba3e671f3e88eaff187cd17a5cbf84664a7f9bb4251513add8009ac8d9f83806f7d671e778cc928c052d6ad508bf2116049e1c7d37f984a05d0974f363bb4c783c7c7e06a66901e8735ce36f2bfc4cfa6932417c041e447bd7861703f6"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xfe, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x4}, @generic={0xa0, 0x64, "aa44c35ecc70b2d89c75b065c5c2f6d818e79304f1a6f53b9bd4a13fc5a34ae06f0adf69ef588315388d3d3ee241cf24f1b774376fefce75a2a5697377df51f8535dd20d4ec94a8b75e977408bac278fa8026515d2db8c5d1a7708282c36397eb30c197e15611e82275b8d5bb2cc8bcf3ec3735733e96245f66ca0d809737d17903acba871de77c40982132f1f0612c5f8f5cec540ce9957489276874038"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x46, 0x80, 0x81, [@generic={0xa4, 0x23, "72f77dd40cdb7512ff578e87f28d0062c4c1faabced2333e01b84e04310b420e21da83a7ce93bd298b5334dc2fdb00a5690a261b7f408bfa170eea21748335fbb3bbe191b6dcd69e95ee8d61d69b98815b6b95eaf1c25577d7ac17f1a6cad17254b8dfd97be25e44959ad67c49f52b770e933e3ce675bb73d7d13bcf9b2062bcf0bce6c1a02a4168f57fe5f47d538b36107475f85ee771a96e458ae99f55e92fc257"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x401}]}}]}}, {{0x9, 0x4, 0xb, 0x4, 0x1, 0x5c, 0x54, 0x25, 0x9, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "48e390f86a"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xb, 0xff, 0x8b, 0x3}, [@obex={0x5, 0x24, 0x15, 0x9}, @country_functional={0xa, 0x24, 0x7, 0xb, 0x9, [0x7, 0x8]}, @ncm={0x6, 0x24, 0x1a, 0x7fff, 0xb}, @mdlm_detail={0x6, 0x24, 0x13, 0x0, "b6e9"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x2, 0x6}]}], [{{0x9, 0x5, 0xb, 0x4, 0x8, 0x9, 0x60, 0xd6, [@generic={0x59, 0x6, "2057ca86be346ec17991953e26995b7357e6ee8680202424c5611f64caa4cadd03c7a38079f1e249133a4344c1ee0564d38625dabd20dd49c155d98edb454b24cb97f8532150ecff943f30844bf4ffcc3232d66e7fdbee"}]}}]}}, {{0x9, 0x4, 0x1a, 0xa, 0xd, 0x2, 0x2, 0xff, 0x8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b512"}, {0x5, 0x24, 0x0, 0x314f}, {0xd, 0x24, 0xf, 0x1, 0x13, 0x3, 0x4, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x40}]}], [{{0x9, 0x5, 0xf, 0x4, 0x20, 0x3, 0x0, 0x5, [@generic={0x7b, 0x21, "8c6e7bd8ca7f480441b485b66292c320931bb9362080527ad43f9ff3cd09a3692ad0d55c7609218a4f3f71816fdff94ac51c11ad407a0194cdc7ab20b254c98954b56fea17316c3ca675b1ffec3f8582d959ca5a61371a4aa4ff991a7c5efa14ad6ec51a273ec57e7e016dc70b1b3c33b08394e800a07e98e5"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xf8, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x83, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x6, 0x6, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x2, 0x2, 0x5, [@generic={0xb0, 0xf, "8f74a6bc7c2035530c12b889e7a68339fccbe2f2a0035bedce3d259314cc5d7dd68ccaa3b10712922b35233b0dbc631ec21e17e3d401cefeae56c6da5ccee73348d5f117774c77623e5f9ec11fb98e2721524ac78990eab8353221eb693fecb155dbd3e1aa3a1d9f8679897f6fae84416b92a092368e5ae8e4b158cd003f6962f8ece63d530a9b0ffd28eb46b709c079e1779ef171372a959b268155a6b4fdb3e887d41b2ab2952a1721dd220a8f"}, @generic={0x95, 0x24, "312ea8a4400d132faae212d5eac3f34ef7eede095f14278b2791c6d5062a595963c7b830beb9f39c9f53314ca51cc5b6be0a2cf5d1688eb0f0be871cb1e44261811870ba1acf547d135cf3956990fed9beda84efbca8d2cad5b411306da249a3436891cfeb2e26ad9a394c2ae750474e3372ea98cffc8eb7470067bf9ee53e23330ea80b3297f170d74881e98837a2e4e27a8a"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x42, 0x9, 0x9, [@generic={0xe0, 0x22, "78d8bac57cd524d8225ebfd402183da9128b68bb61ebe41b67762e4db5ed55c1f7d015c5d9010e718c937c1d7fdc22350bd41b6db95b7833bf39e34a47efef0baa5b24e7cb19f410c29f64951756a75ffc635983c8e16c677df7404baa079e55bb81f4c40a519a6941f5bcbefaf94593c4ab20109267539f10b2b2c01748a8f55a8fb67faca0ad758536cd5c1dc4aac741d530496b40bd8e8fb2d5b798053cb43b10f68dd35fa2c8016c97a215d3b4296b99ebe0dd38c22385976a91dd3788458ab8f1e17b95697834945a4afa91d1a65d72fa188c806a081335430229e2"}, @generic={0x11, 0x22, "b58b86fe8de29dab24cdea5c311a4c"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x7}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x6e, 0x8, 0x8, [@generic={0xbe, 0xb, "ea0ea0d5160e81a4c4156873a2f6d7df24fd03d49f9425e4ecb1f08eee73dd04b9e7e640fd9d852402873058c5d63b474ee6989e4eaa57439e0781bcd7271b61e47dfae7b456693cd99b8819b535c0e17e5cd9134fe3e5f30963be229617f85b75ac75e8dcb4932bb2b5e4631c7de85e23c19bf17ce1290b222d20b22e2ff39f863fcbf95f574d3181353d65ad6a944eb3bd44b175fc3a5f62034e70b36544d812d15a53f697bf10434bbac924b4c83052c2a5df38e89f9b96f87a43"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x1, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x4, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x40, 0x4}, @generic={0x40, 0x21, "81f0fb8496091c4cd1b8f2de5eff6317feba858f3ed6a448a9cf3e0fb8fc917e768cb0793b245ae418b0ec04bb08f096ac760c8c85fb2ecfd0d7a9fd5afe"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xfc, 0x4, 0x5, [@generic={0xff, 0xa, "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"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x5, 0x1, 0x9, [@generic={0x20, 0x6, "b541bda8c0cb49dbd279fc2cf2e53c2e697c729464cd623852bb3655d3df"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x20, 0xa0, 0x78, [@generic={0x41, 0x22, "aff07b7c537b483db3a8fe419425a5b081bf747bf67ba207590c7f8cf3217b3288704367835616382d6546437ce20045e6a1fb7eb66b9687edf9239e52ef1b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xf, 0x40, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe4, 0xb3}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1, 0x4, 0xf2, 0x0, 0x80}, 0x39, &(0x7f0000000440)={0x5, 0xf, 0x39, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xf00f, 0x10, [0x3fcf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x4, 0x9, 0xffff, 0xfe}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x5, 0x7, 0x9, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x56, 0x0, 0x3, 0x6, 0x6}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x809}}, {0xa7, &(0x7f00000004c0)=@string={0xa7, 0x3, "9b3b6bf381040305b408e67c9cbe827f6567607d7f103772f4f3a7aea666a4daf76b24ec5a31044153a090385d3ed95f0606ee65b2c1060d2f2f98e889ec0d60a47e2387ddd05bd1a216562983b943a3af901a510e5c338861a9d0817364fbba606f23e437b5b758f365e18d53d86cb72c7849bde7379ed694a0321855e20da248a75dddc0c4592d2c7b7d740e93e34be6fddedf14cb5d9d3fb18ecf77d7654016b68b5a91"}}, {0x2, &(0x7f0000000580)=@string={0x2}}, {0x65, &(0x7f00000005c0)=@string={0x65, 0x3, "2066c12db102100a6f9cb73e7868249ceeef3f3c8b6bbb00868c0ba8aa67fa1b475bef846f4d0b61c9e2741585ed8ca714cd3592365618c2f79bf19c63108c4d1b670cbafafa5057f05a0c6dc47c7ac950ca3e7a8727f81454a24e7670f1429f810425"}}, {0x78, &(0x7f0000000640)=@string={0x78, 0x3, "e354b631926c288e0a4baffdfcb8e3a9bb33b835b388184c5f28251955ede7c6f3b33d83cd47c20b6be5af1dc6895c049de0274d51ac11992d708d09df5be9ba0ecbc97f6ff40671a039317494002edcde3654c09ba21a337af71ab36d9833ee4924fdd60990322a672f06aff5571fd84ea5c18844f5"}}, {0xc2, &(0x7f00000007c0)=@string={0xc2, 0x3, "ca3473e18f6fd33ad0be26095c2038338fd355a90a7100c227b1c24b1d6d412af2b5448442c86fb567688c3672d2201a4bb749fac637b7c7d54e09a0844a838b9bba3d64d570fb1d779e235f44f87038827160d8e70fd9a56dd10e2f386903fe3ee77f5b3977eba37d096c877006059d7abe60b486dadf057696d2422ab93089da98556fa6e1cceb5d6211ff2a0478b45e71bcd5a32fc98c20604ca516106a59a1b7e9990847e0de6de4f3859fdde08cb7c3dc8c03bd768558346c4a14649dca"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x24, &(0x7f0000000ac0)={0x20, 0x3, 0xcc, {0xcc, 0x23, "444b4f6abe12d07e885671a23022b997dcf57eaeed15a848b34251c1991fd1121f91858d1f4d65517799c99069408e0db5e4bcd19a55b2f1b7ddde1d5b644e6fb296686c3f2f0c73d47d32dfda7bd73e6470fb18cd334b895a93cc91d23de552256868797e270d5ace6ec3c5ab8cd1773093b7ad6f569d6aef3cb9d92d912de4629a429635554aa319a1d3538b5384696f3fb8fcda3642ac829dfeb040693e559e0bb5ca36fb34f21c1a1d55276c5ea76f62c5914a7cbdb40e3b66c6a71fc81624c12ba66859f6050c78"}}, &(0x7f0000000c80)={0x0, 0x3, 0xae, @string={0xae, 0x3, "e3e109e004f9ab0036e63932be25378f34ed3fb2cb3f7cd00a470311edf8489972bed6dc5aadd191c5f9e8c4deb56808499a009e26e71db378d7b33e982a01d61e2853f133be744362eab0e57beedf1fb54fc09e39e1a54b5cd0cc8fb1e9bf392700075879415dd0329839a53475185d559712e85ab1c1a2039dc9760c8de96e2dcb9b51773809af7c68dbefd2190bf06b3f934dd94e21f4e62b75c64788edf052ea5857b19e7cfd16eb0098"}}, &(0x7f0000000740)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0xa, "dee25f83"}, @local=@item_4={0x3, 0x2, 0x5, "16d00514"}, @main=@item_4={0x3, 0x0, 0xa, "1379b0b9"}, @main=@item_012={0x1, 0x0, 0x6, "e0"}, @local=@item_4={0x3, 0x2, 0xa, '=or#'}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0xac4}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000dc0)={0x0, 0x8, 0xbb, "04bcc818b9aa667c0f661fa236bc631f0e9027b79d6ebd863c91b809178b7206f92644b1bc602367630723a1f4678f005eb941e16b114580c57701b8b74d897392f3cb83babfdfd58f0801c14fd58f96094e58077f174f8a3fe270a9703da18315b403c4cefe99913c7dad9e43fe452c36fca9a564bfb42864ff977273bc9f13b2781a060f89088737d2d97d1ff5d2a3cc61bd413aeef769a8297d3660675aff10e470e677fe04cd75b0b490016c84bff1ab8c21065b062296bf3e"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000ec0)={0x20, 0x1, 0xa6, "eedf559c875e598b4b0e927eed0a8b4298c431dd7dc08545ec415a524c8df9322fec5498ca41ea543b59e309d3f68aba030d6cb37c7f273ca0bd90677c0e8311bb38a4fcbd0238b44474c5f3f0ec13ffad65cfe39ffbb9bd1945f2ed99a3b0a257ae0e3083e91a765bebd6fc381dd8769f6ee949142fa5251fe4e849c4084a8c3d7147048af06d549cd4d07c66c015bcc83abfe68764c38449002346fce859d142f45ea2b8d6"}, &(0x7f0000000d40)={0x20, 0x3, 0x1, 0x5}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x800, 0x73}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x80) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) fcntl$setownex(r8, 0xf, &(0x7f00000003c0)={0x0, r9}) r10 = fcntl$getown(r0, 0x9) fcntl$lock(r4, 0x26, &(0x7f0000000400)={0x2, 0x2, 0x3, 0x4, r10}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r11 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r11, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r11, &(0x7f00000000c0), 0xfec8) recvmmsg(r11, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/163, 0xa3}], 0x1}}], 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r12, @ANYBLOB="05"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 6.101976762s ago: executing program 4 (id=954): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x74}, 0x1, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) 4.018138319s ago: executing program 1 (id=961): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16, @ANYBLOB="2309000000000000020001000000000600020008000a0000ff"], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000000000018100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000001740)=0x10006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 3.864737827s ago: executing program 0 (id=963): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_i']) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.755165478s ago: executing program 1 (id=964): io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1a1081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x1}]) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0x29, {0x29, 0x23, "5e75c391f90740e9a030f5986c2529710871ff118a480911945cdbbbc0a221693b0e9f1cacb4f3"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000480)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xd, 0xf000, 0x1, [0xff0000, 0x0]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0xfb, 0x5, "24bc41eb", "f7304176"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x1, 0x40, 0xff, 0xc, 0x704}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x15}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0xab}, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x536, 0x40, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x60}, &(0x7f0000000600)={0x40, 0xb, 0x2, "3ca3"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3d46}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000740)={0x40, 0x19, 0x2, '$\a'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xcd}, &(0x7f0000000800)={0x40, 0x1e, 0x1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xc}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b00)={0x3, 0x0, [{0xd000, 0x1000, &(0x7f0000001540)=""/4096}, {0x0, 0x43, &(0x7f0000000940)=""/67}, {0x14000, 0xaa, &(0x7f0000000a40)=""/170}]}) 3.733564352s ago: executing program 2 (id=965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) 3.633520592s ago: executing program 0 (id=966): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmmsg$inet(r4, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='W', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x0, 0x3}}, 0x10, 0x0, 0x0, &(0x7f00000009c0)}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000e40)=ANY=[], 0x7f9e) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, 0x0, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 3.632802951s ago: executing program 2 (id=967): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="044301000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x1ff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x17}}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4140aecd, &(0x7f0000000040)) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_usb_connect(0x0, 0x88c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xd6, 0xdc, 0xc4, 0x8, 0x19d2, 0x2, 0xa68d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x87a, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x10, 0xa2, 0x81, 0x3c, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0xb, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x4, 0x6, 0x4}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x6, 0x3, "8e1ac5e0"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x0, 0x2, [@generic={0x102, 0x22, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6}]}}, {{0x9, 0x5, 0xd, 0x8, 0x6630630ffb0022f1, 0xb, 0x5, 0x3, [@generic={0x8b, 0xf, "8b24bd738b24b51754fc830dfe6a9b18a203f5feefc97314622786449432cc8e9aee7f8a76f9f0e1acbde766b8cf34c0c3ed749d704574554c84f609c94110a8935a529f46b3283c05b4ac701288bfcc89710d17072e21fa41d09205294fbfc93ee669c68a20833b39ac2de22aab0f8cf850eca782f8879aadc8e4bcc538a12d4c277ad42848b25d93"}, @generic={0xce, 0x3, "3b0fa02c9fc511210e0d80355950989fafd61d7b656d824a8153ba8f9ff561b1ca3357da7028d6bb1f2a954be71f70fa0e229184e40d631144f22c3cd6c209c4d0710b48a6b504e814baa5cb6433362b5ba7e5bcc362f51d2749a685664306e5a7d89a22151d3214da322b76bd0185711e02221e70537df91cbb7adb7f4e908ca8d2c4c763177b3373b72032c44eec9bfc9552bb4c2829d6347edc5a8cd2eba7a9eb0dc5f1c5c9c273304584628992ac312cf78a09f16b6b66002ae6c8faea8c694b0beccc29d3b3b47c943e"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x11f0}, @generic={0x5a, 0x9, "9da9db3ee095773d3549e552997cb164a42f7932e4022c884d3a0beea3e89783ab2f8d84c7836064f01c52e9bee5638f1ad417a5950d1b8db310a57352864883dff659fc4a0a7aa805733ed181b516ed711a27c6886f0ffb"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x8, 0x0, 0x76, [@generic={0x85, 0x36, "2cf8a07e8967864c887378cc2c58416e6da51bc21d5300e4883ad2fb73767685360d7f08538c96e08d7b7697c17bce0af3d1bb1df41e7b860f49dcd62fa2e37dd036c17bffdadc53fad886ec4b284e65c8e230b9ae9ec82c995e8a4b9c54d188e08fbde0bdd2761275449a574c32c41bcf5b9218aa431ad09b940db2a6c6e6e1f28c06"}, @generic={0xc1, 0x5, "b892c529bb02760755d70c0349d40dae22a42f6ac630f5658b0fffa84b39aa8de687a26ec56e7acae0c5553ef19acd5b71cc9154ec6b0a1bfb22be0cca0d9155428d362b49d496ef45548eff07e275b249d0f6a7436fded41c9f674feaa6698e73d1019928e0b0cfb31026a3cc5b762bbb119eb6b5bf7584c06a12eab395e5d4cd36e56a5d8ee69d6be3bc9eb1a83059358f8f4d5f95b74ca1296059e68c60d5f41090a98b5f6939f5c6541207ff909e940814f8c826af4b969c43af072ee1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xe, 0x80, 0x2, [@generic={0xb0, 0xb, "93fc10d5414347642343a13c25603d9e2f82cf8679e1a42ea63ae6a0f97ecf9a9a956e21454f76ebf9f5bf2949f2956685a727f2da9069b7e349aab111128152121e58e404415d87794920b14c5656ecd44ebce2fd530296815f06bff81ba8cf3482e24750450710a547bef5fa710768104b011e3d7f5f7ca3ef7af95e795e7a6fc7d043c438f2510ed009f8a848e9a72f35fb3e83c4b699f552a4fa0bb16a9b01bf3a1d8933a9e46b69acd345e7"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0xfc, 0x4, 0x8, [@generic={0xeb, 0x0, "2fc6c892402897a165a236bc2fe7ac8f7b20aa439b778c0823d0b3713d09b0c0490f9106e05bc69a4fecc85c579a7ae3c0cbb509dcdd466512aaa881dfc6b3e754a17c1828ced928f29eb939fea12f4892013ded7b975c2a3ef016bdd09b614d6ad157ea20202bc9e5d17bac757240fa2f67d8e0a07959965141d3f54d66e40a32a2db39a2d7b76ffcbee377fd7e1b72bc30e0d58d406dd232156cb866be0289c1c0896d0c455b76d44ddb7787c09bc26a875256f54a83a851b09d9d9e8de325ab642d5b52c3e13d8bb95df0804bb6af15a900dc03d902a834c2ad15c69c0556060bdb3540483f73f2"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x12, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0xa8d8}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0xf1, 0x1}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x80, 0x6, [@generic={0x14, 0x3, "d489be4764591ffebbf817b8783ef1284b2a"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x0, 0x40, 0x3, [@generic={0x82, 0x31, "1d4bf48cb759b6316f140c19b6663736599c1e30e2cfbc8330546b947624691d27206a91792ce75f0166f2fb61afaf1fdff6430448319cb04a5b87ac6ba947d7378bfdd18cfd2f056f83073b82a6316f6b39d9e9522c7a4859e5bbb0f2ba6168e324f280a7f96395e574414eab583acb537194bdfb11764878ee1cebf054e07b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x4}]}}, {{0x9, 0x5, 0x7, 0x11, 0x200, 0xf9, 0x0, 0xe}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0xa, 0x82, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}]}}, {{0x9, 0x5, 0x2, 0x1d, 0x3ff, 0x8, 0xcb, 0xe, [@generic={0x7a, 0xc, "08542047196b2469286249f3bbdda6193e9dd8a29974f4e96533f82cfa62565f71d6be2d3296277a7afc2a4eab44d79d44e63e3725dfeb49e61ef0ffd6c1184dd5588604a77adc719f972a6c2adb0a21f24302358464b79d75a88e6fabfdbe4f77deca84ca693a3c657bad4ef096d148f19f8561e9b87b89"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x3, 0x4, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x0, 0x2, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x80, 0x9, 0x5, [@generic={0xcf, 0xa, "decf9dba11c1b595c14570d78c678c22a625d55c10adceafa6983ba80a622955ea225f9a0b3154103cbbd4442fd3e51474fca445ae3e8073365d4badb2e5bb4fda2b1fbecf175ddc3113e2a22b2ac2a9bb9198a21c95e02571befc464d3132868e9b69c61433031ff3b4fe20b30db013242348d722283eb7d83a2762c70a70070ae80ce0e26759fd2a3997d0c48535bd239ba549a09fcf979035ded614c7b09511b55553ccd80d75b24fcc76b5fe48ae4b8f43372890209cb5cb4e812791bcf92af243a374717a14ed22892a7a"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xff}]}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) 2.959578168s ago: executing program 4 (id=968): socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 2.900595215s ago: executing program 1 (id=969): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x60, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) timer_create(0x3, 0x0, &(0x7f00000003c0)) syz_open_dev$ptys(0xc, 0x3, 0x0) timer_delete(0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="400003"], 0x1c}}, 0x0) 2.749030148s ago: executing program 4 (id=970): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1}, {&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000140)="669e88886f33ec6140a4b14796f9a80a81489eee5af11eaadb6d5d973ad129d7d9a8c666f72f3c72f65efbe79ad0f8b1d0e960e783c72494defc0770467f105efae9b524a27f920854da4c310b441006efae6ef2f54729a1c4f8260262580681a987648eef6be6c744b595df0b9e1ad540d859129451dc5cdead05da6f4d46d672", 0x81}, {&(0x7f0000000040)="6d7443a4b3882fe828d6b6670432b124a3f030f4ce5a7b0f386f2412b2974586ff756a62bfdd32ab24aaa46f63b327e5d45c7c38675488fb5491045269e740", 0x3f}, {&(0x7f0000000200)="b785f662215e5e9fddbc51", 0xb}, {&(0x7f0000000240)="3349b7f1001ab3a62c0891f3ee67355530899d84dd694205df6f3701115c15ad5e371969c027fbe904047ca5a88cd82469fc47dc77a0ea695883b37a0b7979659fcae768d4c803aa499720fa905b4f440b87bab73a7823a7cfdf8ed23b561b03a6dad279caf67565c08450d944dea90386e66e9f5a0509496d4264cb983c0e04b5eb2893b19bf91dd1437cf867ad38d547c539746e513588d5748ec7c37f8349ddd1", 0xa2}, {&(0x7f0000000300)="781551be8a057ba5f7f90cbe0c6b1b2f582fed787fac9187f4c11602784575b4713210eb50bcb6dd8a169c2e4f97feed4e245b98478e803cc904373166b6d6bef9186a43ae964e2d85cfdf96e2bc2e8d2dff4b5c4b399d63df9d267810f815bebabda98a7e8be0ca555ab38ddc", 0x6d}, {&(0x7f0000000380)="5d78e1a87b454645494ec855838d9f1430fd4365e5a0948fa8bf7523419468db0a86293ab737e2f512cff13d3ef267", 0x2f}], 0x6, &(0x7f0000000500)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18}, @authinfo={0x18}, @authinfo={0x18}, @authinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @private}, @authinfo={0x18}, @sndinfo={0x20}], 0xc8}], 0x2, 0x0) 2.639666152s ago: executing program 1 (id=971): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000000000bc00000000000000060000000000000001"]) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000b19a3640d219751284000002030109022b000207000000090400010079319c000904"], 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2.639384202s ago: executing program 0 (id=972): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000001540)=ANY=[@ANYBLOB="03000090e0ec62c122083e14aeaa774fee50006a43d42682c6e82cdd220e05e29fa3f79c7b52b61a7e6f41d7aa43b598739d826c249396af41527f8e5a7c5ff297919ed04f1a71c5ccae02a5b2ccd8000100124c70a9f4272923e50d1c98e119318d87e86909069b85fe955b12ed6a3118676eab414767f6a6bc2a99eb1f00cd9d143103d8d1e3fd211f7812b283cbc2517b3aeb"], 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="190300000000000000003d2000000e0001006e657464657673696d0000000f0002006e657464657673696d30"], 0x34}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="747e616e8b666e6f3d00480852f600", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) 2.257886538s ago: executing program 4 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x0, @pix_mp={0x8d23, 0x0, 0x3831354f, 0x0, 0x7, [{0x0, 0x1}, {0x0, 0x8000}, {0xefe, 0x1}, {0x9}, {0x7}, {0x400, 0x8}, {}, {0x7}], 0xa, 0x2, 0x0, 0x2, 0x6}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000280)=@ax25={{0x3, @bcast}, [@bcast, @null, @null, @netrom, @bcast, @rose, @bcast, @default]}, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/101}]}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)=""/67}, {&(0x7f0000000600)=""/250}, {&(0x7f0000000700)=""/48}], 0x0, &(0x7f0000000780)=""/184}, 0xe5}], 0x886b, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000540)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') 1.547577409s ago: executing program 3 (id=975): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000440)) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) socket(0x1d, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000008000b4000000000440004804000018008000100636d7000340002800800014000000008040003801c0003800400efff10000100e95ad08ace06b78831d498c12c00000008000240000000000900010073797a30"], 0xe0}}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x4, 0x0, 0x1007}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 1.447737559s ago: executing program 2 (id=976): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_i']) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.442276858s ago: executing program 0 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) 1.327881967s ago: executing program 2 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="bd", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001980)="1a27f94ec2a0a289d21d70d3add7b38b452370583b3969d65703272b37762b9c6d4a4433d07eaa77bf0d06a2c3c782a1879426b88206c882bdd33ff6ef92e0a50afd5e3551a6f6b50ca7a60b6f20a9f6c4c07f6889f0ff03491ebc3645ddb5cfeaf0c6044eb443afcebdfd111c9c88108dbfcfc1f941b8b925a7d91f213425a12b1c12c9293736a2279e9476ed0a3b31d6d095f5285f166431c292f50d09000000000000009fb8f5c472f31372a77b1da2fcaeafc55ff011c540d29317d476a8a5f44ed0937b18e4fd59d74850f0eee4d46dca4e46bad311687d28c46872af87e79e35b832d1d6f1ff7bf9629a26bcf2e169520784202a40c5572149b6750992eedc8c58b7472da69da3c5c93855f4578d14955ffe7b6547ff633de6a82588eda45aabf7e4b2bde2a7a6098c978fe06a293ce2ac6755712e27fcfc29291e538bc39574f71dcb8fd9a373c0f7e4c6a82fb3ae3b05d0c3ed2bd09950a6dc3bf06587aab2ac3e899141f40fd86fc0139c4a2d26dac6bfbc784c92e3164d5d6afb3b387f417caaef7f8b15e323d066a02a524e997ebc302f5985d19caec412ce9447397609bfb656fcdcd102cb940eb8d4371594f77e27c0defbbdb4699a0eca4c27670cb1279c34f51efc1c1a355bb103a7ff6ccf09cb88affeec2ea3c1afbf20a1ea8b3089fb3e490328a80bc4288239b69148c610a73da6ccf65e49685fb5b1a3bbd5ba74ad754a1d7c06ba75b3d8e5cd512f3ad799084b1f4eccb6738c2ef4e5ca1bd4c11f0e5d7ab375edad4f5b2f8a128236931eea0ee5031ca825f5aa86bd8234796a6dd0fce8a3e2d4328000bb1e965d856adee87435006a6d26135040c257adfdfda6724cc048416dfe7e90c63588f803ede5a860e8451c3a0fe5ebaf0a957159ab456a33375a9985da14e00b83cf5f38c38272723c5f54da126247463450adcfd06226e5662d77a71de5bbc55908b8df93afb65946fa8e391072c387be28db9945336b70adb9bbc5863797dbdae736cdab6855ee1ac5d63c3b6a80522ec31235f941012bd69c81a590cbeaf1f671808059e812a37ac5bb9e180ef33d0c928d117baf5f326b3fea71bb0fdad3549f698480d49d870f5d4e9ad1492a808bc29f00cd52b1ed4878251506637b12c853946a1a7cf320c5f7dc39551ffee31628473b6965f5dc0e60fc7f424cb29c6827d53cfe8a9711c23fc52b8ba88a92a9fa22b63cb20c8e11d9c534a57b08a8cdd6ed0cfb790bb94b2385271623077d6a8f34efe79fa38a078f4ea9d19fc555d947781dc100b6985b3356c2aef8686bce184357558f114c16af1f4bbed90a76fae38bb39f934f52b6ff7d1e83972558d5214c03ba651d1d40f74e55d3fdfa240f0eb5e503a25802abb70390cf0823f032d2135a29b3789ae7e004fee9a6a2dc94d3a1c842ce66299a87fc724a45b75f60322a6d7b3f37afe5ee747d9050acd1e32b53a18a0c393c8e5bf01fa98480865c023b60519121b5c9bc842b7784f5834dd180f891a9cb5501b0d9771be6c5c6841cfd54831d6558c5f6496e03a062d858b5755eee58e2a60bc1d26ca964def8fe55583de249e973d5b48dc9f93adf638e57e4d935fa4f44fd2bdcde9039c0d370ee72e9aaae2c0ad6866dc01033767152928fedc6c80ed2ae888d2438749f7c2583d70dc1e28b92fd9e3c3e088943afb386022b9dad353e04474c811c465e0f19cccea7e1895912df0f9bf76c7c9d141f0aaa4507a84bc57d283c6b8fe2e2e5d419a4273faee7c335e3119c16a91d03fbb5a17292ed35ea0c244058d8fc09e922c9244e9813318d0e00b47419682a7324b93be34c0eefed082be903b7a1c27059a2532e3acf3fa4ac3b14abe42fbc176236ea712efcfa77a4e4815a68b3ef76d57c95922e8aeacd80d84c5b1cacb2b0b77b8e7dd5dd0678fc3fbbfb64d9af7433f3a9b64a", 0x564}], 0x1}}], 0x1, 0x0) 986.177054ms ago: executing program 0 (id=979): io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1a1081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x1}]) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0x29, {0x29, 0x23, "5e75c391f90740e9a030f5986c2529710871ff118a480911945cdbbbc0a221693b0e9f1cacb4f3"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000480)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xd, 0xf000, 0x1, [0xff0000, 0x0]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0xfb, 0x5, "24bc41eb", "f7304176"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x1, 0x40, 0xff, 0xc, 0x704}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x15}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0xab}, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x536, 0x40, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x60}, &(0x7f0000000600)={0x40, 0xb, 0x2, "3ca3"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3d46}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000740)={0x40, 0x19, 0x2, '$\a'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xcd}, &(0x7f0000000800)={0x40, 0x1e, 0x1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xc}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b00)={0x3, 0x0, [{0xd000, 0x1000, &(0x7f0000001540)=""/4096}, {0x0, 0x43, &(0x7f0000000940)=""/67}, {0x14000, 0xaa, &(0x7f0000000a40)=""/170}]}) 950.3269ms ago: executing program 4 (id=980): socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 627.734929ms ago: executing program 4 (id=981): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0), 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 545.541105ms ago: executing program 3 (id=982): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x94}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 442.746247ms ago: executing program 2 (id=983): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x83, &(0x7f0000000080), 0x8) 382.037302ms ago: executing program 3 (id=984): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1}, {&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000140)="669e88886f33ec6140a4b14796f9a80a81489eee5af11eaadb6d5d973ad129d7d9a8c666f72f3c72f65efbe79ad0f8b1d0e960e783c72494defc0770467f105efae9b524a27f920854da4c310b441006efae6ef2f54729a1c4f8260262580681a987648eef6be6c744b595df0b9e1ad540d859129451dc5cdead05da6f4d46d672", 0x81}, {&(0x7f0000000040)="6d7443a4b3882fe828d6b6670432b124a3f030f4ce5a7b0f386f2412b2974586ff756a62bfdd32ab24aaa46f63b327e5d45c7c38675488fb5491045269e740", 0x3f}, {&(0x7f0000000200)="b785f662215e5e9fddbc51", 0xb}, {&(0x7f0000000240)="3349b7f1001ab3a62c0891f3ee67355530899d84dd694205df6f3701115c15ad5e371969c027fbe904047ca5a88cd82469fc47dc77a0ea695883b37a0b7979659fcae768d4c803aa499720fa905b4f440b87bab73a7823a7cfdf8ed23b561b03a6dad279caf67565c08450d944dea90386e66e9f5a0509496d4264cb983c0e04b5eb2893b19bf91dd1437cf867ad38d547c539746e513588d5748ec7c37f8349ddd1", 0xa2}, {&(0x7f0000000300)="781551be8a057ba5f7f90cbe0c6b1b2f582fed787fac9187f4c11602784575b4713210eb50bcb6dd8a169c2e4f97feed4e245b98478e803cc904373166b6d6bef9186a43ae964e2d85cfdf96e2bc2e8d2dff4b5c4b399d63df9d267810f815bebabda98a7e8be0ca555ab38ddc", 0x6d}, {&(0x7f0000000380)="5d78e1a87b454645494ec855838d9f1430fd4365e5a0948fa8bf7523419468db0a86293ab737e2f512cff13d3ef267", 0x2f}], 0x6, &(0x7f0000000500)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18}, @authinfo={0x18}, @authinfo={0x18}, @authinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @private}, @authinfo={0x18}, @sndinfo={0x20}], 0xc8}], 0x2, 0x0) 313.959357ms ago: executing program 3 (id=985): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 243.317977ms ago: executing program 3 (id=986): r0 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x94}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 119.678277ms ago: executing program 3 (id=987): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="044301000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x1ff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x17}}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4140aecd, &(0x7f0000000040)) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_usb_connect(0x0, 0x88c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xd6, 0xdc, 0xc4, 0x8, 0x19d2, 0x2, 0xa68d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x87a, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x10, 0xa2, 0x81, 0x3c, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0xb, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x4, 0x6, 0x4}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x6, 0x3, "8e1ac5e0"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x0, 0x2, [@generic={0x102, 0x22, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6}]}}, {{0x9, 0x5, 0xd, 0x8, 0x6630630ffb0022f1, 0xb, 0x5, 0x3, [@generic={0x8b, 0xf, "8b24bd738b24b51754fc830dfe6a9b18a203f5feefc97314622786449432cc8e9aee7f8a76f9f0e1acbde766b8cf34c0c3ed749d704574554c84f609c94110a8935a529f46b3283c05b4ac701288bfcc89710d17072e21fa41d09205294fbfc93ee669c68a20833b39ac2de22aab0f8cf850eca782f8879aadc8e4bcc538a12d4c277ad42848b25d93"}, @generic={0xce, 0x3, "3b0fa02c9fc511210e0d80355950989fafd61d7b656d824a8153ba8f9ff561b1ca3357da7028d6bb1f2a954be71f70fa0e229184e40d631144f22c3cd6c209c4d0710b48a6b504e814baa5cb6433362b5ba7e5bcc362f51d2749a685664306e5a7d89a22151d3214da322b76bd0185711e02221e70537df91cbb7adb7f4e908ca8d2c4c763177b3373b72032c44eec9bfc9552bb4c2829d6347edc5a8cd2eba7a9eb0dc5f1c5c9c273304584628992ac312cf78a09f16b6b66002ae6c8faea8c694b0beccc29d3b3b47c943e"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x11f0}, @generic={0x5a, 0x9, "9da9db3ee095773d3549e552997cb164a42f7932e4022c884d3a0beea3e89783ab2f8d84c7836064f01c52e9bee5638f1ad417a5950d1b8db310a57352864883dff659fc4a0a7aa805733ed181b516ed711a27c6886f0ffb"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x8, 0x0, 0x76, [@generic={0x85, 0x36, "2cf8a07e8967864c887378cc2c58416e6da51bc21d5300e4883ad2fb73767685360d7f08538c96e08d7b7697c17bce0af3d1bb1df41e7b860f49dcd62fa2e37dd036c17bffdadc53fad886ec4b284e65c8e230b9ae9ec82c995e8a4b9c54d188e08fbde0bdd2761275449a574c32c41bcf5b9218aa431ad09b940db2a6c6e6e1f28c06"}, @generic={0xc1, 0x5, "b892c529bb02760755d70c0349d40dae22a42f6ac630f5658b0fffa84b39aa8de687a26ec56e7acae0c5553ef19acd5b71cc9154ec6b0a1bfb22be0cca0d9155428d362b49d496ef45548eff07e275b249d0f6a7436fded41c9f674feaa6698e73d1019928e0b0cfb31026a3cc5b762bbb119eb6b5bf7584c06a12eab395e5d4cd36e56a5d8ee69d6be3bc9eb1a83059358f8f4d5f95b74ca1296059e68c60d5f41090a98b5f6939f5c6541207ff909e940814f8c826af4b969c43af072ee1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xe, 0x80, 0x2, [@generic={0xb0, 0xb, "93fc10d5414347642343a13c25603d9e2f82cf8679e1a42ea63ae6a0f97ecf9a9a956e21454f76ebf9f5bf2949f2956685a727f2da9069b7e349aab111128152121e58e404415d87794920b14c5656ecd44ebce2fd530296815f06bff81ba8cf3482e24750450710a547bef5fa710768104b011e3d7f5f7ca3ef7af95e795e7a6fc7d043c438f2510ed009f8a848e9a72f35fb3e83c4b699f552a4fa0bb16a9b01bf3a1d8933a9e46b69acd345e7"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0xfc, 0x4, 0x8, [@generic={0xeb, 0x0, "2fc6c892402897a165a236bc2fe7ac8f7b20aa439b778c0823d0b3713d09b0c0490f9106e05bc69a4fecc85c579a7ae3c0cbb509dcdd466512aaa881dfc6b3e754a17c1828ced928f29eb939fea12f4892013ded7b975c2a3ef016bdd09b614d6ad157ea20202bc9e5d17bac757240fa2f67d8e0a07959965141d3f54d66e40a32a2db39a2d7b76ffcbee377fd7e1b72bc30e0d58d406dd232156cb866be0289c1c0896d0c455b76d44ddb7787c09bc26a875256f54a83a851b09d9d9e8de325ab642d5b52c3e13d8bb95df0804bb6af15a900dc03d902a834c2ad15c69c0556060bdb3540483f73f2"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x12, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0xa8d8}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0xf1, 0x1}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x80, 0x6, [@generic={0x14, 0x3, "d489be4764591ffebbf817b8783ef1284b2a"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x0, 0x40, 0x3, [@generic={0x82, 0x31, "1d4bf48cb759b6316f140c19b6663736599c1e30e2cfbc8330546b947624691d27206a91792ce75f0166f2fb61afaf1fdff6430448319cb04a5b87ac6ba947d7378bfdd18cfd2f056f83073b82a6316f6b39d9e9522c7a4859e5bbb0f2ba6168e324f280a7f96395e574414eab583acb537194bdfb11764878ee1cebf054e07b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x4}]}}, {{0x9, 0x5, 0x7, 0x11, 0x200, 0xf9, 0x0, 0xe}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0xa, 0x82, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}]}}, {{0x9, 0x5, 0x2, 0x1d, 0x3ff, 0x8, 0xcb, 0xe, [@generic={0x7a, 0xc, "08542047196b2469286249f3bbdda6193e9dd8a29974f4e96533f82cfa62565f71d6be2d3296277a7afc2a4eab44d79d44e63e3725dfeb49e61ef0ffd6c1184dd5588604a77adc719f972a6c2adb0a21f24302358464b79d75a88e6fabfdbe4f77deca84ca693a3c657bad4ef096d148f19f8561e9b87b89"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x3, 0x4, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x0, 0x2, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x80, 0x9, 0x5, [@generic={0xcf, 0xa, "decf9dba11c1b595c14570d78c678c22a625d55c10adceafa6983ba80a622955ea225f9a0b3154103cbbd4442fd3e51474fca445ae3e8073365d4badb2e5bb4fda2b1fbecf175ddc3113e2a22b2ac2a9bb9198a21c95e02571befc464d3132868e9b69c61433031ff3b4fe20b30db013242348d722283eb7d83a2762c70a70070ae80ce0e26759fd2a3997d0c48535bd239ba549a09fcf979035ded614c7b09511b55553ccd80d75b24fcc76b5fe48ae4b8f43372890209cb5cb4e812791bcf92af243a374717a14ed22892a7a"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xff}]}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) 24.840214ms ago: executing program 0 (id=988): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000f5ff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000da82850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x76, 0x4e, 0x10, 0x5752, 0x75b9, 0xae00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x4000000fffd) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000050210600480012800b00010067656e6576650000380002800500090001000000080001000100000005000c000000000005000c0000000000"], 0x70}}, 0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x4) sendmsg$nl_route(r2, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="58000000200001002dbd7000fddbdf250a1400d305000001040001001400030069cb0d00006c3000000000000000000014000200fc02000000000000000000000000000114000200ff010000000000000000000000005701"], 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x20040080) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, r5, 0x0) syz_io_uring_submit(r6, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000002740), &(0x7f0000002780)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') 0s ago: executing program 2 (id=989): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000500)={0x18, &(0x7f0000000000)={0x0, 0x0, 0x10, {0x10, 0x0, "365f369fae84c828d1bd99081a4c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r9 = openat$udambuf(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r9, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="000000402202"]) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x888a, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_WEIGHT]}, 0x3c}}, 0x4000000) accept4$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18001f7cb848000000000000008500006301380000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 148.962356][ T6438] loop2: detected capacity change from 0 to 8 [ 149.013241][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 149.055394][ T6438] SQUASHFS error: lzo decompression failed, data probably corrupt [ 149.173235][ T6438] SQUASHFS error: Failed to read block 0x91: -5 [ 149.187847][ T6438] SQUASHFS error: Unable to read metadata cache entry [8f] [ 149.199386][ T6438] SQUASHFS error: Unable to read inode 0x11f [ 149.350496][ T6438] loop2: detected capacity change from 0 to 256 [ 149.372817][ T6438] vfat: Unknown parameter '' [ 149.658236][ T6442] loop2: detected capacity change from 0 to 1764 [ 149.669227][ T5103] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 150.083669][ T2915] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 150.163731][ T5153] usb 4-1: USB disconnect, device number 6 [ 150.239691][ T5153] option 4-1:7.0: device disconnected [ 150.556017][ T6461] ip6tnl0: entered promiscuous mode [ 150.595841][ T6461] vlan2: entered promiscuous mode [ 150.653695][ T6461] ip6tnl0: left promiscuous mode [ 151.214909][ T6474] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 151.443113][ T5153] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 151.714451][ T5153] usb 2-1: not running at top speed; connect to a high speed hub [ 151.723105][ T5103] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 151.744484][ T5153] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 151.806551][ T6478] syz.0.389 (6478): drop_caches: 2 [ 151.823516][ T5153] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 151.840959][ T6478] syz.0.389 (6478): drop_caches: 2 [ 151.875462][ T5153] usb 2-1: config 1 interface 0 has no altsetting 0 [ 151.963546][ T5153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.012896][ T5153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.043578][ T5153] usb 2-1: Product: 簲줪裇킇扶ꈟ笡칳傼㍢ [ 152.050508][ T5153] usb 2-1: Manufacturer: 복꿙墼蠠狟풂銢̹㑯槺ှꮜ쩙ѩ伀齨謵〘嵂踎戳愢묬陦籑ꄚ邙隷Ἥ᦮뫆솰杵륣៝머硐䧧뀄樍➕ [ 152.095405][ T5153] usb 2-1: SerialNumber: syz [ 152.133784][ T6473] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.165111][ T6473] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.210834][ T29] audit: type=1107 audit(1721221176.617:156): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']i>' [ 152.252906][ T6466] syz.3.386 (6466): drop_caches: 2 [ 152.255355][ T6466] syz.3.386 (6466): drop_caches: 2 [ 152.464582][ T4880] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 152.543305][ T6470] kAFS: unable to lookup cell '.Sjˡ8' [ 152.594009][ T928] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.597098][ T5153] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 152.648720][ T12] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 152.651170][ T5153] usb 2-1: USB disconnect, device number 9 [ 152.673228][ T4880] usb 3-1: Using ep0 maxpacket: 16 [ 152.710954][ T4880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.759613][ T4880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 152.792924][ T4880] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 152.885990][ T4880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.895359][ T928] usb 5-1: Using ep0 maxpacket: 8 [ 152.901130][ T4880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 152.916972][ T928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.932604][ T4880] usb 3-1: SerialNumber: syz [ 152.952275][ T928] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 152.974273][ T6486] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.985043][ T4880] cdc_acm 3-1:1.0: skipping garbage [ 153.000312][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.011239][ T928] usb 5-1: config 0 descriptor?? [ 153.040082][ T928] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 153.229954][ T4880] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 153.287108][ T4880] usb 3-1: USB disconnect, device number 9 [ 153.475600][ T928] gspca_vc032x: reg_w err -71 [ 153.480476][ T928] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 153.526652][ T928] usb 5-1: USB disconnect, device number 10 [ 153.820066][ T5103] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 153.889321][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.975840][ T1054] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 154.057977][ T6522] loop0: detected capacity change from 0 to 128 [ 154.146112][ T29] audit: type=1800 audit(1721221178.547:157): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.405" name="bus" dev="loop0" ino=1048596 res=0 errno=0 [ 154.474528][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 154.481883][ T25] usb 4-1: config 0 has no interfaces? [ 154.490398][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.500062][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.508279][ T25] usb 4-1: Product: syz [ 154.512535][ T25] usb 4-1: Manufacturer: syz [ 154.519337][ T25] usb 4-1: SerialNumber: syz [ 154.557179][ T25] usb 4-1: config 0 descriptor?? [ 154.606606][ T6516] syz.1.403 (6516): drop_caches: 2 [ 154.623468][ T6516] syz.1.403 (6516): drop_caches: 2 [ 154.949959][ T5103] Bluetooth: hci3: unexpected event for opcode 0x001c [ 155.161908][ T54] Bluetooth: hci3: hardware error 0xf0 [ 155.257384][ T25] usb 4-1: USB disconnect, device number 7 [ 155.553685][ T5192] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 155.623126][ T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 155.693097][ T4880] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 155.735083][ T5192] usb 3-1: not running at top speed; connect to a high speed hub [ 155.753946][ T5192] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.765165][ T5192] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 155.776318][ T5192] usb 3-1: config 1 interface 0 has no altsetting 0 [ 155.786064][ T5192] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.798010][ T5192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.806137][ T5192] usb 3-1: Product: 簲줪裇킇扶ꈟ笡칳傼㍢ [ 155.813054][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 155.818267][ T5192] usb 3-1: Manufacturer: 복꿙墼蠠狟풂銢̹㑯槺ှꮜ쩙ѩ伀齨謵〘嵂踎戳愢묬陦籑ꄚ邙隷Ἥ᦮뫆솰杵륣៝머硐䧧뀄樍➕ [ 155.834905][ T5192] usb 3-1: SerialNumber: syz [ 155.841178][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.852748][ T46] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 155.864237][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 155.878869][ T6539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.888344][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.900423][ T6539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.909126][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.917790][ T46] usb 5-1: SerialNumber: syz [ 155.918471][ T4880] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 155.933201][ T4880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.950079][ T6544] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 155.956599][ T4880] usb 2-1: config 0 descriptor?? [ 155.998806][ T46] cdc_acm 5-1:1.0: skipping garbage [ 156.045515][ T2915] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 156.155517][ T6539] kAFS: unable to lookup cell '.Sjˡ8' [ 156.188784][ T5192] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 156.214902][ T46] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 156.236369][ T5192] usb 3-1: USB disconnect, device number 10 [ 156.249485][ T46] usb 5-1: USB disconnect, device number 11 [ 157.154726][ T6561] ip6tnl0: entered promiscuous mode [ 157.207770][ T6561] vlan2: entered promiscuous mode [ 157.293233][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 157.543983][ T6561] ip6tnl0: left promiscuous mode [ 158.033221][ T928] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 158.098468][ T2915] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 158.168197][ T4880] pegasus 2-1:0.0: setup Pegasus II specific registers [ 158.261062][ T928] usb 1-1: not running at top speed; connect to a high speed hub [ 158.280021][ T928] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 158.304969][ T928] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 158.325429][ T4880] pegasus 2-1:0.0: can't locate MII phy, using default [ 158.342904][ T928] usb 1-1: config 1 interface 0 has no altsetting 0 [ 158.373496][ T928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.389699][ T4880] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 8e:79:99:5e:96:0d [ 158.398536][ T928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.411517][ T4880] usb 2-1: USB disconnect, device number 10 [ 158.417869][ T928] usb 1-1: Product: 簲줪裇킇扶ꈟ笡칳傼㍢ [ 158.435920][ T928] usb 1-1: Manufacturer: 복꿙墼蠠狟풂銢̹㑯槺ှꮜ쩙ѩ伀齨謵〘嵂踎戳愢묬陦籑ꄚ邙隷Ἥ᦮뫆솰杵륣៝머硐䧧뀄樍➕ [ 158.496131][ T928] usb 1-1: SerialNumber: syz [ 158.524722][ T6572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.540562][ T6572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.867745][ T6570] kAFS: unable to lookup cell '.Sjˡ8' [ 158.918478][ T928] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 158.965363][ T928] usb 1-1: USB disconnect, device number 12 [ 159.328024][ T54] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 160.939541][ T12] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 161.166270][ T6653] fuse: Bad value for 'fd' [ 161.403374][ T54] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 161.923177][ T46] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 162.157197][ T46] usb 5-1: string descriptor 0 read error: -22 [ 162.180166][ T46] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 162.194936][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.238702][ T46] usb 5-1: config 0 descriptor?? [ 162.493151][ T5192] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.777719][ T5192] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 163.425540][ T5192] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 163.464138][ T5192] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 163.569705][ T5192] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 163.583171][ T5192] usb 4-1: Product: syz [ 163.592121][ T5192] usb 4-1: SerialNumber: syz [ 163.748967][ T5192] option 4-1:7.0: GSM modem (1-port) converter detected [ 163.759993][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.820250][ T46] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 163.885490][ T29] audit: type=1107 audit(1721221188.287:158): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']i>' [ 163.910334][ T46] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 163.963500][ T46] dib0700: firmware download failed at 7 with -22 [ 163.992156][ T1107] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 164.032763][ T46] usb 5-1: USB disconnect, device number 12 [ 164.213237][ T5150] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.405179][ T5150] usb 1-1: Using ep0 maxpacket: 8 [ 164.429568][ T5150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.458771][ T5150] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 164.500135][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.552899][ T5150] usb 1-1: config 0 descriptor?? [ 164.591317][ T5150] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 164.798243][ T5150] gspca_vc032x: reg_r err -71 [ 164.834851][ T5150] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 164.867588][ T5150] usb 1-1: USB disconnect, device number 13 [ 165.697429][ T5150] usb 4-1: USB disconnect, device number 8 [ 165.709123][ T5150] option 4-1:7.0: device disconnected [ 165.720131][ T46] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 165.730395][ T52] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 165.893148][ T6725] trusted_key: encrypted_key: insufficient parameters specified [ 166.013076][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 166.020508][ T46] usb 3-1: config 0 has an invalid interface number: 27 but max is 0 [ 166.041897][ T46] usb 3-1: config 0 has no interface number 0 [ 166.055168][ T6725] trusted_key: encrypted_key: insufficient parameters specified [ 166.086775][ T46] usb 3-1: config 0 interface 27 altsetting 0 endpoint 0xF has invalid maxpacket 1927, setting to 64 [ 166.109220][ T46] usb 3-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.127295][ T46] usb 3-1: config 0 interface 27 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 166.204078][ T46] usb 3-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.267950][ T46] usb 3-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.301155][ T46] usb 3-1: config 0 interface 27 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 166.316969][ T46] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 166.369294][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.399909][ T5192] IPVS: starting estimator thread 0... [ 166.427737][ T46] usb 3-1: config 0 descriptor?? [ 166.455639][ T6712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.503471][ T6736] IPVS: using max 19 ests per chain, 45600 per kthread [ 166.560061][ T6738] usb usb8: usbfs: process 6738 (syz.4.466) did not claim interface 0 before use [ 166.728290][ T46] pegasus 3-1:0.27: probe with driver pegasus failed with error -71 [ 166.785755][ T46] usb 3-1: USB disconnect, device number 11 [ 167.564141][ T46] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 167.617753][ T1107] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 167.794941][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 167.817271][ T46] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 167.832000][ T46] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 167.844987][ T46] usb 2-1: config 1 interface 0 has no altsetting 0 [ 167.898086][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.907354][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.918716][ T46] usb 2-1: Product: 簲줪裇킇扶ꈟ笡칳傼㍢ [ 167.944118][ T46] usb 2-1: Manufacturer: 복꿙墼蠠狟풂銢̹㑯槺ှꮜ쩙ѩ伀齨謵〘嵂踎戳愢묬陦籑ꄚ邙隷Ἥ᦮뫆솰杵륣៝머硐䧧뀄樍➕ [ 167.962303][ T46] usb 2-1: SerialNumber: syz [ 168.014830][ T6746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.041521][ T6746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.073121][ T5157] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 168.284902][ T5157] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 168.321002][ T5157] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 168.405383][ T6742] kAFS: unable to lookup cell '.Sjˡ8' [ 168.415895][ T5157] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 168.453693][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 168.495026][ T5157] usb 1-1: Product: syz [ 168.503346][ T46] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 168.535688][ T5157] usb 1-1: SerialNumber: syz [ 168.574479][ T46] usb 2-1: USB disconnect, device number 11 [ 168.674087][ T5157] option 1-1:7.0: GSM modem (1-port) converter detected [ 168.783137][ T5192] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 168.971767][ T6772] loop3: detected capacity change from 0 to 128 [ 169.041144][ T5192] usb 5-1: not running at top speed; connect to a high speed hub [ 169.341469][ T29] audit: type=1800 audit(1721221193.467:159): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.480" name="bus" dev="loop3" ino=1048597 res=0 errno=0 [ 169.419204][ T5192] usb 5-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 169.458720][ T5192] usb 5-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 169.521132][ T5192] usb 5-1: config 1 interface 0 has no altsetting 0 [ 169.544800][ T5192] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.572823][ T5192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.608713][ T5192] usb 5-1: Product: 簲줪裇킇扶ꈟ笡칳傼㍢ [ 169.649756][ T5192] usb 5-1: Manufacturer: 복꿙墼蠠狟풂銢̹㑯槺ှꮜ쩙ѩ伀齨謵〘嵂踎戳愢묬陦籑ꄚ邙隷Ἥ᦮뫆솰杵륣៝머硐䧧뀄樍➕ [ 169.782791][ T5192] usb 5-1: SerialNumber: syz [ 169.909693][ T6767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.961304][ T6767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.357824][ T6764] kAFS: unable to lookup cell '.Sjˡ8' [ 170.419268][ T5192] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 170.512709][ T5192] usb 5-1: USB disconnect, device number 13 [ 170.724013][ T4880] usb 1-1: USB disconnect, device number 14 [ 170.746587][ T4880] option 1-1:7.0: device disconnected [ 171.173075][ T5192] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.527836][ T5192] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 171.680391][ T5192] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 171.749070][ T5192] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 171.946065][ T5192] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 171.974400][ T5192] usb 3-1: Product: syz [ 171.978699][ T5192] usb 3-1: SerialNumber: syz [ 172.061735][ T5192] option 3-1:7.0: GSM modem (1-port) converter detected [ 172.118554][ T63] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 172.383676][ T58] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 172.534431][ T5192] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 172.633057][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 172.654898][ T58] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 172.670971][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.690420][ T58] usb 4-1: config 0 descriptor?? [ 172.701465][ T58] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 172.754323][ T5192] usb 1-1: Using ep0 maxpacket: 32 [ 172.772294][ T5192] usb 1-1: config 0 has an invalid interface number: 27 but max is 0 [ 172.781976][ T5192] usb 1-1: config 0 has no interface number 0 [ 172.788547][ T5192] usb 1-1: config 0 interface 27 altsetting 0 endpoint 0xF has invalid maxpacket 1927, setting to 64 [ 172.803207][ T5192] usb 1-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.827632][ T5192] usb 1-1: config 0 interface 27 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 172.843910][ T5192] usb 1-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.869941][ T5192] usb 1-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.882372][ T5192] usb 1-1: config 0 interface 27 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 172.896583][ T5192] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 172.919987][ T5192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.942105][ T5192] usb 1-1: config 0 descriptor?? [ 172.958015][ T6787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 173.243907][ T5192] pegasus 1-1:0.27: probe with driver pegasus failed with error -71 [ 173.345480][ T5192] usb 1-1: USB disconnect, device number 15 [ 173.600015][ T6809] vlan0: entered promiscuous mode [ 173.629419][ T6809] vlan0: entered allmulticast mode [ 173.694377][ T6809] veth0_vlan: entered allmulticast mode [ 173.758305][ T5150] usb 3-1: USB disconnect, device number 12 [ 173.762407][ T6809] team0: Port device vlan0 added [ 173.787166][ T5150] option 3-1:7.0: device disconnected [ 173.837242][ T6818] loop1: detected capacity change from 0 to 128 [ 173.863780][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 173.913106][ T29] audit: type=1800 audit(1721221198.317:160): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.497" name="bus" dev="loop1" ino=1048598 res=0 errno=0 [ 173.959559][ T58] gspca_sunplus: reg_w_riv err -71 [ 173.988883][ T58] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 174.031815][ T58] usb 4-1: USB disconnect, device number 9 [ 174.143047][ T5192] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.343069][ T5192] usb 5-1: Using ep0 maxpacket: 8 [ 174.479857][ T5192] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.493651][ T5192] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 174.503443][ T5192] usb 5-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 174.514785][ T5192] usb 5-1: config 0 has no interface number 0 [ 174.521342][ T5192] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 174.544277][ T5192] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 53214, setting to 1024 [ 174.584309][ T5192] usb 5-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 174.594593][ T5192] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 174.608766][ T5192] usb 5-1: New USB device found, idVendor=19d2, idProduct=0002, bcdDevice=a6.8d [ 174.619162][ T5192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.648113][ T5192] usb 5-1: config 0 descriptor?? [ 174.861626][ T5192] usb 5-1: string descriptor 0 read error: -71 [ 174.884310][ T5192] usb 5-1: USB disconnect, device number 14 [ 175.722608][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 175.903421][ T6856] loop0: detected capacity change from 0 to 7 [ 175.938482][ T6856] Dev loop0: unable to read RDB block 7 [ 175.944441][ T6856] loop0: unable to read partition table [ 175.950297][ T6856] loop0: partition table beyond EOD, truncated [ 175.957877][ T6856] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 175.957877][ T6856] ) failed (rc=-5) [ 176.393057][ T12] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 176.648630][ T6887] loop0: detected capacity change from 0 to 7 [ 176.670456][ T6887] Dev loop0: unable to read RDB block 7 [ 176.676444][ T6887] loop0: unable to read partition table [ 176.685460][ T6887] loop0: partition table beyond EOD, truncated [ 176.691736][ T6887] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 176.691736][ T6887] ) failed (rc=-5) [ 176.833136][ T4880] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 177.025592][ T4880] usb 1-1: not running at top speed; connect to a high speed hub [ 177.035502][ T4880] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 177.052851][ T4880] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 177.064080][ T4880] usb 1-1: config 1 interface 0 has no altsetting 0 [ 177.074688][ T4880] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.089264][ T4880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.101982][ T4880] usb 1-1: Product: 簲줪裇킇扶ꈟ笡칳傼㍢ [ 177.108967][ T4880] usb 1-1: Manufacturer: 복꿙墼蠠狟풂銢̹㑯槺ှꮜ쩙ѩ伀齨謵〘嵂踎戳愢묬陦籑ꄚ邙隷Ἥ᦮뫆솰杵륣៝머硐䧧뀄樍➕ [ 177.128377][ T4880] usb 1-1: SerialNumber: syz [ 177.746542][ T6879] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.770961][ T6879] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.879111][ T12] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 178.019026][ T6873] kAFS: unable to lookup cell '.Sjˡ8' [ 178.197683][ T4880] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 178.361174][ T4880] usb 1-1: USB disconnect, device number 16 [ 178.975966][ T6926] loop3: detected capacity change from 0 to 128 [ 179.443645][ T29] audit: type=1800 audit(1721221203.547:161): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.539" name="bus" dev="loop3" ino=1048599 res=0 errno=0 [ 179.599605][ T6931] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 179.645954][ T29] audit: type=1107 audit(1721221204.057:162): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']i>' [ 179.922580][ T4553] Dev loop0: unable to read RDB block 7 [ 179.945204][ T4553] loop0: unable to read partition table [ 179.967162][ T4553] loop0: partition table beyond EOD, truncated [ 182.010839][ T2915] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 182.174856][ T6964] trusted_key: encrypted_key: insufficient parameters specified [ 182.238972][ T6964] trusted_key: encrypted_key: insufficient parameters specified [ 182.674984][ T29] audit: type=1107 audit(1721221207.067:163): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']i>' [ 183.973827][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.992730][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.000685][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.017681][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.027337][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 184.035215][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.253279][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 184.397522][ T2915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.474030][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 184.505488][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.517518][ T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 184.527534][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 184.550851][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.555190][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 184.633821][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.663288][ T46] usb 2-1: SerialNumber: syz [ 184.746515][ T6984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.801753][ T46] cdc_acm 2-1:1.0: skipping garbage [ 184.889541][ T2915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.943479][ T6981] lo speed is unknown, defaulting to 1000 [ 185.143446][ T2915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.213943][ T46] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 185.262430][ T46] usb 2-1: USB disconnect, device number 12 [ 185.290666][ T2915] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 185.522459][ T2915] batman_adv: batadv1: Removing interface: netdevsim0 [ 185.534291][ T2915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.184336][ T5103] Bluetooth: hci2: command tx timeout [ 186.442504][ T29] audit: type=1107 audit(1721221210.847:164): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']i>' [ 186.529401][ T1107] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 186.633212][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 186.668141][ T2915] bridge_slave_1: left allmulticast mode [ 186.680069][ T2915] bridge_slave_1: left promiscuous mode [ 186.694933][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.704935][ T928] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 186.843197][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 186.847443][ T2915] bridge_slave_0: left allmulticast mode [ 186.850264][ T46] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 186.863069][ T2915] bridge_slave_0: left promiscuous mode [ 186.874626][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.892889][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.910206][ T46] usb 5-1: config 0 descriptor?? [ 186.960668][ T46] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 186.960808][ T928] usb 1-1: Using ep0 maxpacket: 8 [ 187.237559][ T928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.316912][ T928] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 187.381553][ T928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.429647][ T928] usb 1-1: config 0 descriptor?? [ 187.458771][ T928] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 187.855787][ T928] gspca_vc032x: reg_w err -71 [ 187.870064][ T928] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 187.892863][ T928] usb 1-1: USB disconnect, device number 17 [ 187.957089][ T2915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.990972][ T2915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.007527][ T2915] bond0 (unregistering): Released all slaves [ 188.020277][ T2915] bond1 (unregistering): Released all slaves [ 188.205452][ T5103] Bluetooth: hci2: command tx timeout [ 188.266727][ T7042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.574'. [ 188.296614][ T46] gspca_sunplus: reg_w_riv err -71 [ 188.301807][ T46] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 188.349557][ T7045] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 188.360779][ T7045] netlink: 224 bytes leftover after parsing attributes in process `syz.3.574'. [ 188.427384][ T46] usb 5-1: USB disconnect, device number 15 [ 188.459106][ T7046] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 188.484892][ T7046] netlink: 224 bytes leftover after parsing attributes in process `syz.3.574'. [ 188.553160][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 188.604682][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 189.473272][ T928] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 190.013472][ T928] usb 2-1: Using ep0 maxpacket: 32 [ 190.061359][ T928] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 190.094455][ T928] usb 2-1: config 0 has no interface number 0 [ 190.180072][ T928] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0xF has invalid maxpacket 1927, setting to 64 [ 190.233332][ T928] usb 2-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.276043][ T928] usb 2-1: config 0 interface 27 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 190.293010][ T5103] Bluetooth: hci2: command tx timeout [ 190.298570][ T928] usb 2-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.323980][ T6981] chnl_net:caif_netlink_parms(): no params data found [ 190.332762][ T928] usb 2-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.363048][ T928] usb 2-1: config 0 interface 27 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 190.373828][ T928] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 190.397785][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.422285][ T928] usb 2-1: config 0 descriptor?? [ 190.437133][ T7068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.552846][ T1054] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 190.722360][ T928] pegasus 2-1:0.27: probe with driver pegasus failed with error -71 [ 191.124596][ T928] usb 2-1: USB disconnect, device number 13 [ 191.249782][ T2915] hsr_slave_0: left promiscuous mode [ 191.263648][ T2915] hsr_slave_1: left promiscuous mode [ 191.303308][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.321536][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.354615][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.419241][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.488261][ T2915] veth1_macvtap: left promiscuous mode [ 191.495405][ T2915] veth0_macvtap: left promiscuous mode [ 191.501469][ T2915] veth1_vlan: left promiscuous mode [ 191.507716][ T2915] veth0_vlan: left promiscuous mode [ 191.576074][ T7108] netlink: 32 bytes leftover after parsing attributes in process `syz.3.586'. [ 191.667944][ T7109] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 191.709745][ T7109] netlink: 224 bytes leftover after parsing attributes in process `syz.3.586'. [ 191.808711][ T7112] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 191.823114][ T7112] netlink: 224 bytes leftover after parsing attributes in process `syz.3.586'. [ 191.851021][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 192.354850][ T5151] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 192.365076][ T5103] Bluetooth: hci2: command tx timeout [ 192.575362][ T5151] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 192.598741][ T5151] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 192.647883][ T5151] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 192.659739][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 192.673985][ T5151] usb 2-1: Product: syz [ 192.691013][ T5151] usb 2-1: SerialNumber: syz [ 192.723790][ T5151] option 2-1:7.0: GSM modem (1-port) converter detected [ 192.931715][ T2915] team0 (unregistering): Port device team_slave_1 removed [ 193.031214][ T2915] team0 (unregistering): Port device team_slave_0 removed [ 193.980620][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 194.108757][ T7126] veth0_vlan: left allmulticast mode [ 194.238001][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.295411][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.321442][ T6981] bridge_slave_0: entered allmulticast mode [ 194.331877][ T6981] bridge_slave_0: entered promiscuous mode [ 194.349489][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.357399][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.378465][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.408891][ T6981] bridge_slave_1: entered allmulticast mode [ 194.432138][ T6981] bridge_slave_1: entered promiscuous mode [ 194.458487][ T52] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 194.563657][ T5151] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 194.712909][ T6981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.788034][ T6981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.813336][ T25] usb 2-1: USB disconnect, device number 14 [ 194.820541][ T25] option 2-1:7.0: device disconnected [ 194.833564][ T5151] usb 5-1: Using ep0 maxpacket: 8 [ 194.862360][ T5151] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.899596][ T5151] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 194.925338][ T5151] usb 5-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 194.942611][ T5151] usb 5-1: config 0 has no interface number 0 [ 194.951345][ T5151] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 194.984528][ T5151] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 53214, setting to 1024 [ 195.428819][ T6981] team0: Port device team_slave_0 added [ 195.791690][ T7149] team0: Port device vlan2 added [ 195.836187][ T5151] usb 5-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 195.846725][ T5151] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 195.859733][ T5151] usb 5-1: New USB device found, idVendor=19d2, idProduct=0002, bcdDevice=a6.8d [ 195.874533][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.885558][ T6981] team0: Port device team_slave_1 added [ 195.904966][ T5151] usb 5-1: config 0 descriptor?? [ 196.099749][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.130057][ T5151] usb 5-1: string descriptor 0 read error: -71 [ 196.147121][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.214914][ T5151] usb 5-1: USB disconnect, device number 16 [ 196.680370][ T6981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.727590][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.760180][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.795769][ T4880] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 196.796275][ T6981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.067068][ T6981] hsr_slave_0: entered promiscuous mode [ 197.073428][ T4880] usb 2-1: Using ep0 maxpacket: 32 [ 197.079253][ T6981] hsr_slave_1: entered promiscuous mode [ 197.100092][ T4880] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 197.101577][ T6981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.117404][ T4880] usb 2-1: config 0 has no interface number 0 [ 197.124571][ T6981] Cannot create hsr debugfs directory [ 197.162082][ T4880] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0xF has invalid maxpacket 1927, setting to 64 [ 197.185465][ T4880] usb 2-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.196919][ T4880] usb 2-1: config 0 interface 27 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 197.208750][ T4880] usb 2-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.237554][ T4880] usb 2-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.296111][ T4880] usb 2-1: config 0 interface 27 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 197.336352][ T4880] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 197.379962][ T4880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.405636][ T4880] usb 2-1: config 0 descriptor?? [ 197.419874][ T7159] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.633528][ T5150] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 197.639721][ T1107] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 197.676112][ T4880] pegasus 2-1:0.27: probe with driver pegasus failed with error -71 [ 197.747413][ T4880] usb 2-1: USB disconnect, device number 15 [ 197.869096][ T5150] usb 5-1: string descriptor 0 read error: -22 [ 197.881483][ T5150] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 197.935360][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.961843][ T5150] usb 5-1: config 0 descriptor?? [ 198.568734][ T7179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.619013][ T5150] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 198.665663][ T5150] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 198.699477][ T5150] dib0700: firmware download failed at 7 with -22 [ 198.757753][ T5150] usb 5-1: USB disconnect, device number 17 [ 198.823472][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 198.829163][ T6981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.963312][ T6981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.001314][ T6981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.026785][ T25] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 199.043139][ T5151] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 199.052631][ T6981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.074003][ T25] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 199.106028][ T25] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 199.118772][ T25] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 199.127531][ T25] usb 1-1: Product: syz [ 199.137987][ T25] usb 1-1: SerialNumber: syz [ 199.178549][ T25] option 1-1:7.0: GSM modem (1-port) converter detected [ 199.253810][ T5151] usb 4-1: Using ep0 maxpacket: 8 [ 199.290458][ T5151] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.312550][ T5151] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.331811][ T5151] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.371442][ T5151] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.430702][ T6981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.443098][ T5151] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.472318][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.514773][ T7218] 9pnet_fd: Insufficient options for proto=fd [ 199.522069][ T6981] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.785986][ T4880] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.793395][ T4880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.926906][ T5151] usb 4-1: GET_CAPABILITIES returned 0 [ 199.932712][ T5151] usbtmc 4-1:16.0: can't read capabilities [ 200.251886][ T4880] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.259078][ T4880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.415845][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.503938][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.513032][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.522089][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.531145][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.540196][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.755245][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.764328][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.773360][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.785317][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.794428][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.803502][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.812570][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.859522][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.868614][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.877687][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.963142][ T4880] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 200.977891][ T5151] usb 4-1: USB disconnect, device number 10 [ 201.263746][ T4880] usb 5-1: Using ep0 maxpacket: 8 [ 201.283995][ T4880] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.310641][ T4880] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 201.341763][ T4880] usb 5-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 201.399012][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.424856][ T4880] usb 5-1: config 0 has no interface number 0 [ 201.430992][ T4880] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 201.453412][ T928] usb 1-1: USB disconnect, device number 18 [ 201.508126][ T4880] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 53214, setting to 1024 [ 201.520643][ T928] option 1-1:7.0: device disconnected [ 201.544553][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 201.564787][ T4880] usb 5-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 201.634664][ T4880] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 201.670375][ T6981] veth0_vlan: entered promiscuous mode [ 201.710011][ T4880] usb 5-1: New USB device found, idVendor=19d2, idProduct=0002, bcdDevice=a6.8d [ 201.726223][ T6981] veth1_vlan: entered promiscuous mode [ 201.764221][ T4880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.817623][ T4880] usb 5-1: config 0 descriptor?? [ 201.835895][ T6981] veth0_macvtap: entered promiscuous mode [ 201.876512][ T6981] veth1_macvtap: entered promiscuous mode [ 201.938125][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.983272][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.012244][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.045552][ T4880] usb 5-1: string descriptor 0 read error: -71 [ 202.067507][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.094629][ T4880] usb 5-1: USB disconnect, device number 18 [ 202.115499][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.156547][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.191424][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.212837][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.236204][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.256653][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.282101][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.313160][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.338781][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.358874][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.402479][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.422796][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.443532][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.452432][ T5150] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 202.468238][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.509349][ T6981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.553150][ T6981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.589239][ T6981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.610979][ T6981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.624184][ T29] audit: type=1107 audit(1721221227.017:165): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']i>' [ 202.673255][ T5150] usb 1-1: Using ep0 maxpacket: 32 [ 202.685496][ T5150] usb 1-1: config 0 has an invalid interface number: 27 but max is 0 [ 202.711232][ T5150] usb 1-1: config 0 has no interface number 0 [ 202.719604][ T928] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.735231][ T5150] usb 1-1: config 0 interface 27 altsetting 0 endpoint 0xF has invalid maxpacket 1927, setting to 64 [ 202.773417][ T5150] usb 1-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.793799][ T5150] usb 1-1: config 0 interface 27 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 202.813125][ T5150] usb 1-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.837380][ T5150] usb 1-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.839665][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.853966][ T5150] usb 1-1: config 0 interface 27 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 202.870278][ T5150] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 202.891577][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.899151][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.909669][ T5150] usb 1-1: config 0 descriptor?? [ 202.914880][ T5157] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.937539][ T928] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 202.953758][ T7261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.969222][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.977402][ T928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.004258][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.018254][ T928] usb 4-1: config 0 descriptor?? [ 203.124673][ T5157] usb 2-1: Using ep0 maxpacket: 8 [ 203.139194][ T5157] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.159820][ T5157] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 203.173443][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.234223][ T5157] usb 2-1: config 0 descriptor?? [ 203.253719][ T5150] pegasus 1-1:0.27: probe with driver pegasus failed with error -71 [ 203.276589][ T5157] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 203.324255][ T7287] 9pnet_fd: Insufficient options for proto=fd [ 203.332910][ T5150] usb 1-1: USB disconnect, device number 19 [ 203.744000][ T5157] gspca_vc032x: reg_w err -71 [ 203.918631][ T5157] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 204.002578][ T5157] usb 2-1: USB disconnect, device number 16 [ 204.313574][ T7302] loop4: detected capacity change from 0 to 4096 [ 204.322181][ T7302] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 204.618374][ T928] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 204.646851][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 204.953789][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.626'. [ 204.959714][ T7331] loop4: detected capacity change from 0 to 128 [ 205.138759][ T7339] fuse: Bad value for 'fd' [ 205.179305][ T29] audit: type=1326 audit(1721221229.577:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.0.626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ba7d75a19 code=0x0 [ 205.270579][ T7343] trusted_key: encrypted_key: insufficient parameters specified [ 205.291413][ T7343] trusted_key: encrypted_key: insufficient parameters specified [ 205.303295][ T5103] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 205.446106][ T46] usb 4-1: USB disconnect, device number 11 [ 205.577979][ T5103] Bluetooth: hci2: hardware error 0xf0 [ 205.648781][ T7353] 9pnet_fd: Insufficient options for proto=fd [ 206.187291][ T63] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 206.223791][ T8] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 206.383207][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 206.409969][ T7377] syz.3.634 (7377): drop_caches: 2 [ 206.472881][ T7382] loop4: detected capacity change from 0 to 4096 [ 206.499828][ T8] usb 1-1: string descriptor 0 read error: -22 [ 206.510654][ T7382] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 206.522120][ T8] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 206.562034][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.570359][ T7377] syz.3.634 (7377): drop_caches: 2 [ 206.599029][ T8] usb 1-1: config 0 descriptor?? [ 207.052739][ T7396] usb usb8: usbfs: process 7396 (syz.4.642) did not claim interface 0 before use [ 207.303450][ T7363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.343367][ T8] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 207.353230][ T928] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 207.385414][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 207.395311][ T8] dib0700: firmware download failed at 7 with -22 [ 207.415546][ T8] usb 1-1: USB disconnect, device number 20 [ 207.597791][ T928] usb 3-1: not running at top speed; connect to a high speed hub [ 207.621552][ T928] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 207.621594][ T928] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 207.621625][ T928] usb 3-1: config 1 interface 0 has no altsetting 0 [ 207.624203][ T928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.624232][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.624254][ T928] usb 3-1: Product: 簲줪裇킇扶ꈟ笡칳傼㍢ [ 207.624271][ T928] usb 3-1: Manufacturer: 복꿙墼蠠狟풂銢̹㑯槺ှꮜ쩙ѩ伀齨謵〘嵂踎戳愢묬陦籑ꄚ邙隷Ἥ᦮뫆솰杵륣៝머硐䧧뀄樍➕ [ 207.624292][ T928] usb 3-1: SerialNumber: syz [ 207.627324][ T7390] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 207.627493][ T7390] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 207.665398][ T5103] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 207.854814][ T7405] ip6gre0: entered promiscuous mode [ 207.927576][ T7405] vlan2: entered promiscuous mode [ 208.001667][ T7405] ip6gre0: left promiscuous mode [ 208.002403][ T7390] kAFS: unable to lookup cell '.Sjˡ8' [ 208.122673][ T928] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 208.183240][ T928] usb 3-1: USB disconnect, device number 13 [ 208.227366][ T5098] udevd[5098]: setting mode of /dev/bus/usb/003/013 to 020664 failed: No such file or directory [ 208.329700][ T5098] udevd[5098]: setting owner of /dev/bus/usb/003/013 to uid=0, gid=0 failed: No such file or directory [ 208.359072][ T5157] IPVS: starting estimator thread 0... [ 208.463272][ T7412] IPVS: using max 19 ests per chain, 45600 per kthread [ 208.574049][ T63] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 208.868560][ T5157] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 209.322319][ T5157] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.358884][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 209.374894][ T7427] loop1: detected capacity change from 0 to 4096 [ 209.383960][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 209.406686][ T7427] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 209.444110][ T5157] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.534433][ T5157] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.582837][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.611571][ T5157] usb 1-1: config 0 descriptor?? [ 209.646145][ T7415] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.735647][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 209.935074][ T25] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 209.969074][ T25] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 210.003877][ T25] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 210.022781][ T25] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 210.045227][ T25] usb 4-1: Product: syz [ 210.089357][ T25] usb 4-1: SerialNumber: syz [ 210.120422][ T25] option 4-1:7.0: GSM modem (1-port) converter detected [ 210.610152][ T7434] syz.2.654 (7434): drop_caches: 2 [ 210.690093][ T7434] syz.2.654 (7434): drop_caches: 2 [ 211.299719][ T5157] usbhid 1-1:0.0: can't add hid device: -71 [ 211.332074][ T5157] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 211.397059][ T5157] usb 1-1: USB disconnect, device number 21 [ 211.490368][ T1054] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 212.446977][ T5151] usb 4-1: USB disconnect, device number 12 [ 212.516103][ T5151] option 4-1:7.0: device disconnected [ 212.618434][ T7467] loop4: detected capacity change from 0 to 4096 [ 212.651254][ T7467] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 212.903299][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 213.017644][ T7483] syz.2.671 (7483): drop_caches: 2 [ 213.023770][ T7483] syz.2.671 (7483): drop_caches: 2 [ 213.087765][ T7490] loop4: detected capacity change from 0 to 8 [ 213.108183][ T7490] SQUASHFS error: lzo decompression failed, data probably corrupt [ 213.143122][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 213.162476][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.175296][ T7490] SQUASHFS error: Failed to read block 0x91: -5 [ 213.184287][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 213.199104][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.224400][ T25] usb 2-1: config 0 descriptor?? [ 213.252154][ T7490] SQUASHFS error: Unable to read metadata cache entry [8f] [ 213.265878][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 213.272558][ T7490] SQUASHFS error: Unable to read inode 0x11f [ 213.328647][ T7490] loop4: detected capacity change from 0 to 256 [ 213.355970][ T7490] vfat: Unknown parameter '' [ 213.523185][ T5157] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 213.667538][ T7496] loop4: detected capacity change from 0 to 1764 [ 213.745695][ T5157] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 213.818533][ T5157] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 213.860635][ T5157] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 213.887847][ T5157] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 213.905431][ T25] gspca_vc032x: reg_r err -71 [ 213.929248][ T5157] usb 4-1: Product: syz [ 213.943045][ T5157] usb 4-1: SerialNumber: syz [ 213.964678][ T25] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 214.000872][ T25] usb 2-1: USB disconnect, device number 17 [ 214.029813][ T5157] option 4-1:7.0: GSM modem (1-port) converter detected [ 214.220564][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 214.831758][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 215.309112][ T46] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 215.329112][ T46] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 215.366481][ T7515] loop0: detected capacity change from 0 to 7 [ 215.395639][ T46] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 215.400949][ T7515] Dev loop0: unable to read RDB block 7 [ 215.428018][ T7515] loop0: unable to read partition table [ 215.431221][ T46] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 215.465305][ T7515] loop0: partition table beyond EOD, truncated [ 215.492549][ T46] usb 3-1: Product: syz [ 215.499510][ T46] usb 3-1: SerialNumber: syz [ 215.509635][ T7515] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 215.509635][ T7515] ) failed (rc=-5) [ 215.530571][ T46] option 3-1:7.0: GSM modem (1-port) converter detected [ 215.567862][ T4553] Dev loop0: unable to read RDB block 7 [ 215.591054][ T4553] loop0: unable to read partition table [ 215.609040][ T4553] loop0: partition table beyond EOD, truncated [ 215.955522][ T7526] loop1: detected capacity change from 0 to 8 [ 215.980003][ T7526] SQUASHFS error: lzo decompression failed, data probably corrupt [ 216.031190][ T7526] SQUASHFS error: Failed to read block 0x91: -5 [ 216.038773][ T8] usb 4-1: USB disconnect, device number 13 [ 216.073260][ T7526] SQUASHFS error: Unable to read metadata cache entry [8f] [ 216.080898][ T7526] SQUASHFS error: Unable to read inode 0x11f [ 216.104111][ T8] option 4-1:7.0: device disconnected [ 216.163275][ T7526] loop1: detected capacity change from 0 to 256 [ 216.179023][ T4553] Dev loop0: unable to read RDB block 7 [ 216.190245][ T7526] vfat: Unknown parameter '' [ 216.198689][ T4553] loop0: unable to read partition table [ 216.222747][ T4553] loop0: partition table beyond EOD, truncated [ 216.448467][ T7533] loop1: detected capacity change from 0 to 1764 [ 216.885175][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 216.905529][ T4553] Dev loop0: unable to read RDB block 7 [ 216.942319][ T4553] loop0: unable to read partition table [ 216.949864][ T4553] loop0: partition table beyond EOD, truncated [ 216.953233][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 217.098988][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 217.106901][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.132692][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 217.142859][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 217.163347][ T8] usb 4-1: device descriptor read/64, error -71 [ 217.164531][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.179619][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 217.188154][ T25] usb 5-1: SerialNumber: syz [ 217.207536][ T7528] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.212733][ T7541] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 217.216821][ T25] cdc_acm 5-1:1.0: skipping garbage [ 217.441376][ T25] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 217.447953][ T58] usb 3-1: USB disconnect, device number 14 [ 217.463969][ T58] option 3-1:7.0: device disconnected [ 217.473997][ T25] usb 5-1: USB disconnect, device number 19 [ 217.500354][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 217.683245][ T8] usb 4-1: device descriptor read/64, error -71 [ 217.924378][ T8] usb usb4-port1: attempt power cycle [ 218.773086][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 218.826829][ T8] usb 4-1: device descriptor read/8, error -71 [ 219.123111][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 219.324260][ T8] usb 4-1: device descriptor read/8, error -71 [ 219.353978][ T7570] loop1: detected capacity change from 0 to 8 [ 219.386367][ T7570] SQUASHFS error: lzo decompression failed, data probably corrupt [ 219.396815][ T7570] SQUASHFS error: Failed to read block 0x91: -5 [ 219.417018][ T7570] SQUASHFS error: Unable to read metadata cache entry [8f] [ 219.426002][ T7570] SQUASHFS error: Unable to read inode 0x11f [ 219.473852][ T8] usb usb4-port1: unable to enumerate USB device [ 219.541801][ T7570] loop1: detected capacity change from 0 to 256 [ 219.605248][ T4553] Dev loop0: unable to read RDB block 7 [ 219.645258][ T7570] vfat: Unknown parameter '' [ 219.653108][ T4553] loop0: unable to read partition table [ 219.682016][ T4553] loop0: partition table beyond EOD, truncated [ 219.975738][ T7578] syz.0.703 (7578): drop_caches: 2 [ 219.990482][ T7578] syz.0.703 (7578): drop_caches: 2 [ 220.051416][ T7579] loop1: detected capacity change from 0 to 1764 [ 220.283051][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 220.647032][ T25] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 220.657227][ T25] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 220.747740][ T25] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 220.763218][ T25] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 220.781478][ T25] usb 4-1: Product: syz [ 220.791031][ T25] usb 4-1: SerialNumber: syz [ 220.834126][ T25] option 4-1:7.0: GSM modem (1-port) converter detected [ 221.243134][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 221.366722][ T7604] xt_hashlimit: invalid rate [ 221.424136][ T4553] Dev loop0: unable to read RDB block 7 [ 221.476983][ T8] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 221.502517][ T4553] loop0: unable to read partition table [ 221.515558][ T7605] syz.1.711 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 221.526023][ T8] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 221.537320][ T4553] loop0: partition table beyond EOD, truncated [ 221.557807][ T8] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 221.579356][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'. [ 221.601905][ T8] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 221.649014][ T8] usb 3-1: Product: syz [ 221.673493][ T8] usb 3-1: SerialNumber: syz [ 221.710230][ T7604] syz.4.710 (7604): attempted to duplicate a private mapping with mremap. This is not supported. [ 221.744994][ T8] option 3-1:7.0: GSM modem (1-port) converter detected [ 223.040589][ T928] usb 4-1: USB disconnect, device number 18 [ 223.219538][ T928] option 4-1:7.0: device disconnected [ 223.727368][ T8] usb 3-1: USB disconnect, device number 15 [ 223.895590][ T8] option 3-1:7.0: device disconnected [ 224.364314][ T4553] Dev loop0: unable to read RDB block 7 [ 224.392480][ T4553] loop0: unable to read partition table [ 224.408126][ T4553] loop0: partition table beyond EOD, truncated [ 224.491405][ T7633] 9pnet_fd: Insufficient options for proto=fd [ 224.508412][ T4553] Dev loop0: unable to read RDB block 7 [ 224.529689][ T4553] loop0: unable to read partition table [ 224.575415][ T4553] loop0: partition table beyond EOD, truncated [ 224.593522][ T7641] usb usb8: usbfs: process 7641 (syz.0.720) did not claim interface 0 before use [ 224.763250][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 224.772908][ T7645] loop1: detected capacity change from 0 to 128 [ 224.943082][ T4553] Dev loop0: unable to read RDB block 7 [ 224.954901][ T4553] loop0: unable to read partition table [ 224.973710][ T4553] loop0: partition table beyond EOD, truncated [ 225.031701][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 225.046867][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.070389][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 225.084132][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 225.096651][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.124479][ T8] usb 3-1: config 0 descriptor?? [ 225.135369][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 225.273015][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 225.298423][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.308903][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 225.329071][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.393156][ T25] usb 4-1: config 0 descriptor?? [ 225.432888][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 225.796775][ T8] gspca_vc032x: reg_r err -71 [ 225.802733][ T8] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 225.826412][ T25] gspca_vc032x: reg_w err -71 [ 225.840624][ T8] usb 3-1: USB disconnect, device number 16 [ 225.876532][ T25] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 225.952012][ T25] usb 4-1: USB disconnect, device number 19 [ 225.999542][ T4553] Dev loop0: unable to read RDB block 7 [ 226.068533][ T4553] loop0: unable to read partition table [ 226.091268][ T4553] loop0: partition table beyond EOD, truncated [ 226.150488][ T7656] xt_hashlimit: invalid rate [ 226.322497][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 226.794666][ T4553] Dev loop0: unable to read RDB block 7 [ 226.800308][ T4553] loop0: unable to read partition table [ 226.903596][ T4553] loop0: partition table beyond EOD, truncated [ 227.183754][ T58] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 227.707992][ T4553] Dev loop0: unable to read RDB block 7 [ 227.718413][ T4553] loop0: unable to read partition table [ 227.732360][ T4553] loop0: partition table beyond EOD, truncated [ 227.806706][ T7680] loop1: detected capacity change from 0 to 128 [ 227.843028][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 227.869546][ T29] audit: type=1800 audit(1721221252.277:167): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.732" name="bus" dev="loop1" ino=1048603 res=0 errno=0 [ 227.934641][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.944426][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.952785][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.960914][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.969573][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.977224][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.320198][ T58] usb 3-1: config 0 has an invalid interface number: 27 but max is 0 [ 228.329106][ T58] usb 3-1: config 0 has no interface number 0 [ 228.347290][ T58] usb 3-1: config 0 interface 27 altsetting 0 endpoint 0xF has invalid maxpacket 1927, setting to 64 [ 228.358338][ T58] usb 3-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.369314][ T58] usb 3-1: config 0 interface 27 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 228.379311][ T58] usb 3-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.390261][ T58] usb 3-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.402891][ T58] usb 3-1: config 0 interface 27 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 228.414004][ T58] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 228.433042][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.460605][ T58] usb 3-1: config 0 descriptor?? [ 228.470304][ T7668] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 228.584058][ T4553] Dev loop0: unable to read RDB block 7 [ 228.589848][ T2915] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.598394][ T4553] loop0: unable to read partition table [ 228.633208][ T4553] loop0: partition table beyond EOD, truncated [ 228.781559][ T2915] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.795776][ T58] pegasus 3-1:0.27: probe with driver pegasus failed with error -71 [ 228.842019][ T58] usb 3-1: USB disconnect, device number 17 [ 229.135895][ T2915] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.158723][ T7679] lo speed is unknown, defaulting to 1000 [ 229.169970][ T7684] 9pnet_fd: Insufficient options for proto=fd [ 229.217837][ T2915] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 229.327359][ T2915] batman_adv: batadv1: Removing interface: netdevsim0 [ 229.346623][ T4553] Dev loop0: unable to read RDB block 7 [ 229.354529][ T2915] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.366293][ T4553] loop0: unable to read partition table [ 229.380783][ T4553] loop0: partition table beyond EOD, truncated [ 229.570214][ T4553] Dev loop0: unable to read RDB block 7 [ 229.603492][ T4553] loop0: unable to read partition table [ 229.609969][ T4553] loop0: partition table beyond EOD, truncated [ 229.741776][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.738'. [ 229.758546][ T2915] bridge_slave_1: left allmulticast mode [ 229.764811][ T2915] bridge_slave_1: left promiscuous mode [ 229.770524][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.781554][ T2915] bridge_slave_0: left allmulticast mode [ 229.793079][ T2915] bridge_slave_0: left promiscuous mode [ 229.798773][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.043219][ T54] Bluetooth: hci3: command tx timeout [ 230.523949][ T2915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.564474][ T2915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.590622][ T2915] bond0 (unregistering): Released all slaves [ 230.616537][ T2915] bond1 (unregistering): Released all slaves [ 230.699555][ T4553] Dev loop0: unable to read RDB block 7 [ 230.723451][ T4553] loop0: unable to read partition table [ 230.737825][ T4553] loop0: partition table beyond EOD, truncated [ 232.123093][ T54] Bluetooth: hci3: command tx timeout [ 232.133038][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 232.143816][ T5150] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 232.410265][ T46] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 232.420990][ T5150] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 232.447413][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 232.448799][ T46] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 232.464625][ T5150] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 232.485424][ T46] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 232.504317][ T46] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 232.532295][ T46] usb 3-1: Product: syz [ 232.535630][ T5150] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 232.564486][ T46] usb 3-1: SerialNumber: syz [ 232.595900][ T46] option 3-1:7.0: GSM modem (1-port) converter detected [ 232.616540][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 232.682310][ T5150] usb 1-1: Product: syz [ 232.698991][ T5150] usb 1-1: SerialNumber: syz [ 232.781016][ T5150] option 1-1:7.0: GSM modem (1-port) converter detected [ 233.349011][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.379469][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.398424][ T7679] bridge_slave_0: entered allmulticast mode [ 233.418610][ T7679] bridge_slave_0: entered promiscuous mode [ 233.453858][ T2915] hsr_slave_0: left promiscuous mode [ 233.467399][ T2915] hsr_slave_1: left promiscuous mode [ 233.488409][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.509530][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.550431][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.581678][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.669059][ T2915] veth1_macvtap: left promiscuous mode [ 233.680989][ T2915] veth0_macvtap: left promiscuous mode [ 233.696374][ T2915] veth1_vlan: left promiscuous mode [ 233.706005][ T2915] veth0_vlan: left promiscuous mode [ 234.203233][ T54] Bluetooth: hci3: command tx timeout [ 234.275757][ T25] usb 3-1: USB disconnect, device number 18 [ 234.314061][ T25] option 3-1:7.0: device disconnected [ 235.018267][ T5157] usb 1-1: USB disconnect, device number 22 [ 235.028227][ T5157] option 1-1:7.0: device disconnected [ 235.058090][ T4553] Dev loop0: unable to read RDB block 7 [ 235.064266][ T4553] loop0: unable to read partition table [ 235.070108][ T4553] loop0: partition table beyond EOD, truncated [ 235.085089][ T2915] team0 (unregistering): Port device vlan0 removed [ 236.282550][ T2915] team0 (unregistering): Port device team_slave_1 removed [ 236.290633][ T54] Bluetooth: hci3: command tx timeout [ 236.397461][ T2915] team0 (unregistering): Port device team_slave_0 removed [ 236.823187][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.750'. [ 236.843305][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.853350][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.860646][ T7679] bridge_slave_1: entered allmulticast mode [ 236.890508][ T7679] bridge_slave_1: entered promiscuous mode [ 236.928175][ T7785] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.128908][ T4553] Dev loop0: unable to read RDB block 7 [ 237.156826][ T4553] loop0: unable to read partition table [ 237.162697][ T4553] loop0: partition table beyond EOD, truncated [ 237.211835][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.256632][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.337947][ T4553] Dev loop0: unable to read RDB block 7 [ 237.352999][ T4553] loop0: unable to read partition table [ 237.369115][ T4553] loop0: partition table beyond EOD, truncated [ 237.443077][ T5157] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 237.653621][ T5157] usb 2-1: Using ep0 maxpacket: 8 [ 237.697000][ T5157] usb 2-1: config 6 has an invalid interface number: 9 but max is 2 [ 237.733378][ T5157] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 237.766900][ T5157] usb 2-1: config 6 has an invalid interface number: 26 but max is 2 [ 237.792079][ T5157] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 237.815042][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 237.821413][ T5157] usb 2-1: config 6 has no interface number 0 [ 237.832575][ T5157] usb 2-1: config 6 has no interface number 1 [ 237.842088][ T5157] usb 2-1: config 6 interface 9 altsetting 4 endpoint 0x7 has invalid maxpacket 447, setting to 64 [ 237.866602][ T5157] usb 2-1: config 6 interface 9 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 16 [ 237.897073][ T5157] usb 2-1: config 6 interface 9 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 237.945848][ T5157] usb 2-1: config 6 interface 9 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 238.136443][ T5157] usb 2-1: config 6 interface 9 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 238.149801][ T5157] usb 2-1: config 6 interface 26 altsetting 10 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 238.161514][ T5157] usb 2-1: config 6 interface 26 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 238.172888][ T5157] usb 2-1: config 6 interface 26 altsetting 10 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 238.196845][ T5157] usb 2-1: config 6 interface 26 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 238.200012][ T7679] team0: Port device team_slave_0 added [ 238.337962][ T5157] usb 2-1: config 6 interface 26 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 238.371050][ T5157] usb 2-1: config 6 interface 26 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 238.672720][ T5157] usb 2-1: config 6 interface 26 altsetting 10 has a duplicate endpoint with address 0x9, skipping [ 239.018998][ T5157] usb 2-1: config 6 interface 26 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 239.049496][ T5157] usb 2-1: config 6 interface 9 has no altsetting 0 [ 239.066551][ T7679] team0: Port device team_slave_1 added [ 239.076928][ T5157] usb 2-1: config 6 interface 26 has no altsetting 0 [ 239.128740][ T5157] usb 2-1: New USB device found, idVendor=257a, idProduct=162f, bcdDevice=6b.c3 [ 239.160209][ T5157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.179436][ T5157] usb 2-1: Manufacturer: 㮛ҁԃࢴ糦뺜羂来絠ၿ爷꺧暦毷ㅚ䄄ꁓ㢐㹝忙؆旮솲ആ⼯怍纤蜣택텛ᚢ⥖릃ꍃ邯儚導蠳ꥡ臐摳뫻潠딷墷旳跡띬砬뵉㟧횞ꂔᠲꈍꝈ쓀ⵙ第瑽錎䯣﷦쬔鵝넿쾎흷䁥똖媋 [ 239.230156][ T5157] usb 2-1: SerialNumber: 映ⷁʱਐ鱯㺷桸鰤㰿残»貆ꠋ枪᯺孇蓯䵯愋ᕴꞌ촔鈵嘶수鯷鳱ၣ䶌望먌﫺坐嫰洌糄쥺쩐稾➇ᓸꉔ癎齂ҁ [ 239.312890][ T7800] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.363315][ T7800] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.425377][ T4553] Dev loop0: unable to read RDB block 7 [ 239.432650][ T4553] loop0: unable to read partition table [ 239.455165][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.463206][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.609383][ T4553] loop0: partition table beyond EOD, truncated [ 239.727781][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.740974][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.803337][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.872605][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.112502][ T7831] 9pnet_fd: Insufficient options for proto=fd [ 240.130177][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.193154][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.232853][ T7679] hsr_slave_0: entered promiscuous mode [ 240.253724][ T7679] hsr_slave_1: entered promiscuous mode [ 240.281160][ T4553] Dev loop0: unable to read RDB block 7 [ 240.312096][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 240.363119][ T4553] loop0: unable to read partition table [ 240.368994][ T4553] loop0: partition table beyond EOD, truncated [ 240.381214][ T7842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'. [ 240.402029][ T5157] option 2-1:6.9: GSM modem (1-port) converter detected [ 240.453070][ T5157] usb 2-1: bad CDC descriptors [ 240.459129][ T5157] option 2-1:6.26: GSM modem (1-port) converter detected [ 240.519192][ T2915] IPVS: stop unused estimator thread 0... [ 240.554039][ T5157] usb 2-1: USB disconnect, device number 18 [ 240.880004][ T5157] option 2-1:6.9: device disconnected [ 241.147742][ T5157] option 2-1:6.26: device disconnected [ 241.776995][ T4553] Dev loop0: unable to read RDB block 7 [ 241.858622][ T4553] loop0: unable to read partition table [ 242.025155][ T4553] loop0: partition table beyond EOD, truncated [ 242.633506][ T58] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 242.802424][ T7885] ip6gre0: entered promiscuous mode [ 242.825631][ T58] usb 4-1: not running at top speed; connect to a high speed hub [ 242.866833][ T7885] vlan2: entered promiscuous mode [ 242.883968][ T58] usb 4-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 242.911953][ T7885] ip6gre0: left promiscuous mode [ 242.932481][ T58] usb 4-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 242.965133][ T58] usb 4-1: config 1 interface 0 has no altsetting 0 [ 243.000810][ T58] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.019285][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.048109][ T58] usb 4-1: Product: 簲줪裇킇扶ꈟ笡칳傼㍢ [ 243.068288][ T58] usb 4-1: Manufacturer: 복꿙墼蠠狟풂銢̹㑯槺ှꮜ쩙ѩ伀齨謵〘嵂踎戳愢묬陦籑ꄚ邙隷Ἥ᦮뫆솰杵륣៝머硐䧧뀄樍➕ [ 243.140459][ T58] usb 4-1: SerialNumber: syz [ 243.162833][ T7852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 243.183411][ T7852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 243.221691][ T7883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 243.470363][ T7852] kAFS: unable to lookup cell '.Sjˡ8' [ 243.524084][ T58] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 243.598414][ T58] usb 4-1: USB disconnect, device number 20 [ 243.681210][ T7894] cgroup: noprefix used incorrectly [ 243.889836][ T7679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.928227][ T7679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.982607][ T7679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.010464][ T7679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.331024][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.442737][ T7679] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.497008][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.504231][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.582967][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.590161][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.831559][ T4553] Dev loop0: unable to read RDB block 7 [ 244.837520][ T4553] loop0: unable to read partition table [ 244.860444][ T4553] loop0: partition table beyond EOD, truncated [ 245.156490][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.781'. [ 246.045447][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 246.210632][ T7936] fuse: Bad value for 'fd' [ 246.631313][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.716731][ T4553] Dev loop0: unable to read RDB block 7 [ 246.742772][ T4553] loop0: unable to read partition table [ 246.773965][ T4553] loop0: partition table beyond EOD, truncated [ 247.313926][ T58] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 247.361079][ T46] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 247.546672][ T58] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 247.568485][ T46] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 247.580222][ T58] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 247.598913][ T7679] veth0_vlan: entered promiscuous mode [ 247.617469][ T46] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 247.637821][ T58] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 247.660440][ T58] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 247.686668][ T7679] veth1_vlan: entered promiscuous mode [ 247.694059][ T46] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 247.712986][ T58] usb 2-1: Product: syz [ 247.720160][ T46] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 247.730739][ T58] usb 2-1: SerialNumber: syz [ 247.754447][ T58] option 2-1:7.0: GSM modem (1-port) converter detected [ 247.765401][ T46] usb 1-1: Product: syz [ 247.769592][ T46] usb 1-1: SerialNumber: syz [ 247.831821][ T7679] veth0_macvtap: entered promiscuous mode [ 247.845301][ T46] option 1-1:7.0: GSM modem (1-port) converter detected [ 247.893472][ T7679] veth1_macvtap: entered promiscuous mode [ 248.011623][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.071852][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.132623][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.177749][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.199969][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.229015][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.252014][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.267380][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.298452][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.337267][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.386844][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.441746][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.518023][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.549717][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.623299][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.651987][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.670506][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.712164][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.811729][ T7679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.880998][ T7679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.937607][ T7679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.984528][ T7679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.404178][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.463807][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.583031][ T7720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.595315][ T7720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.845264][ T46] usb 1-1: USB disconnect, device number 23 [ 249.908787][ T46] option 1-1:7.0: device disconnected [ 249.944884][ T58] usb 2-1: USB disconnect, device number 19 [ 250.121553][ T4553] Dev loop0: unable to read RDB block 7 [ 250.136828][ T58] option 2-1:7.0: device disconnected [ 250.147726][ T4553] loop0: unable to read partition table [ 250.161014][ T4553] loop0: partition table beyond EOD, truncated [ 252.328000][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'. [ 252.379087][ T4553] Dev loop0: unable to read RDB block 7 [ 252.404926][ T4553] loop0: unable to read partition table [ 252.431507][ T4553] loop0: partition table beyond EOD, truncated [ 252.438926][ T8024] 9pnet_fd: Insufficient options for proto=fd [ 253.004358][ T4553] Dev loop0: unable to read RDB block 7 [ 253.009993][ T4553] loop0: unable to read partition table [ 253.063216][ T4553] loop0: partition table beyond EOD, truncated [ 253.323581][ T5155] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 253.513197][ T5150] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 254.151265][ T8041] trusted_key: encrypted_key: insufficient parameters specified [ 254.317676][ T5155] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 254.368917][ T5155] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 254.394451][ T5150] usb 1-1: Using ep0 maxpacket: 16 [ 254.417997][ T5150] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.444965][ T5155] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 254.491350][ T5150] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 254.513079][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 254.521161][ T5155] usb 3-1: Product: syz [ 254.590474][ T5150] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 254.671605][ T5155] usb 3-1: SerialNumber: syz [ 254.907451][ T5150] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.661415][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.700162][ T5155] usb 3-1: can't set config #7, error -71 [ 255.712221][ T5150] usb 1-1: SerialNumber: syz [ 255.752034][ T5155] usb 3-1: USB disconnect, device number 19 [ 255.788290][ T8032] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 255.807980][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.020867][ T5150] cdc_acm 1-1:1.0: skipping garbage [ 256.498443][ T5150] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 256.550638][ T4553] Dev loop0: unable to read RDB block 7 [ 256.618712][ T5150] usb 1-1: USB disconnect, device number 24 [ 256.661028][ T4553] loop0: unable to read partition table [ 256.673277][ T4553] loop0: partition table beyond EOD, truncated [ 257.026315][ T8082] 9pnet_fd: Insufficient options for proto=fd [ 257.078571][ T58] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 257.394641][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 257.403903][ T4553] Dev loop0: unable to read RDB block 7 [ 257.409537][ T4553] loop0: unable to read partition table [ 257.414867][ T58] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 258.123547][ T58] usb 4-1: config 0 has no interface number 0 [ 258.129692][ T58] usb 4-1: config 0 interface 27 altsetting 0 endpoint 0xF has invalid maxpacket 1927, setting to 64 [ 258.155989][ T4553] loop0: partition table beyond EOD, truncated [ 258.166008][ T58] usb 4-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.196302][ T58] usb 4-1: config 0 interface 27 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 258.222988][ T58] usb 4-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.257775][ T58] usb 4-1: config 0 interface 27 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.293372][ T58] usb 4-1: config 0 interface 27 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 258.333079][ T58] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 258.353138][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.403922][ T4553] Dev loop0: unable to read RDB block 7 [ 258.431373][ T58] usb 4-1: config 0 descriptor?? [ 258.443254][ T4553] loop0: unable to read partition table [ 258.455249][ T8076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.463367][ T5153] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 258.481509][ T4553] loop0: partition table beyond EOD, truncated [ 258.706571][ T5153] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 258.742675][ T58] pegasus 4-1:0.27: probe with driver pegasus failed with error -71 [ 258.763138][ T5153] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 258.793329][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 258.794853][ T58] usb 4-1: USB disconnect, device number 21 [ 258.813307][ T5153] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 258.838289][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 258.884384][ T5153] usb 2-1: Product: syz [ 258.913710][ T5153] usb 2-1: SerialNumber: syz [ 258.941907][ T5153] option 2-1:7.0: GSM modem (1-port) converter detected [ 259.023110][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 259.065472][ T8] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 259.103946][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.135954][ T8] usb 1-1: config 0 has no interface number 0 [ 259.160096][ T8] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.204674][ T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 259.216917][ T8] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 259.246763][ T8] usb 1-1: Product: syz [ 259.258863][ T8] usb 1-1: SerialNumber: syz [ 259.291266][ T8] usb 1-1: config 0 descriptor?? [ 259.330439][ T8] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 259.373096][ T5153] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 259.575190][ T5153] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 259.602754][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.612667][ T8] usb 1-1: USB disconnect, device number 25 [ 259.661416][ T5153] usb 5-1: config 0 descriptor?? [ 260.008671][ T58] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 260.203486][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 260.222608][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.235232][ T58] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 260.262005][ T58] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 260.289543][ T58] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.316249][ T5155] usb 2-1: USB disconnect, device number 20 [ 260.335659][ T5155] option 2-1:7.0: device disconnected [ 260.367455][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 260.375901][ T58] usb 4-1: SerialNumber: syz [ 260.425751][ T8112] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 260.483859][ T58] cdc_acm 4-1:1.0: skipping garbage [ 261.025509][ T5153] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 261.093015][ T58] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 261.159940][ T4553] Dev loop0: unable to read RDB block 7 [ 261.214060][ T5153] usb 5-1: USB disconnect, device number 20 [ 261.265490][ T4553] loop0: unable to read partition table [ 261.271575][ T58] usb 4-1: USB disconnect, device number 22 [ 261.326359][ T4553] loop0: partition table beyond EOD, truncated [ 263.561457][ T8149] loop2: detected capacity change from 0 to 4096 [ 263.570295][ T8149] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 265.071837][ T4553] Dev loop0: unable to read RDB block 7 [ 265.087719][ T4553] loop0: unable to read partition table [ 265.108829][ T4553] loop0: partition table beyond EOD, truncated [ 265.202556][ T4553] Dev loop0: unable to read RDB block 7 [ 265.214504][ T4553] loop0: unable to read partition table [ 265.228855][ T4553] loop0: partition table beyond EOD, truncated [ 265.356253][ T4553] Dev loop0: unable to read RDB block 7 [ 265.367124][ T4553] loop0: unable to read partition table [ 265.392351][ T4553] loop0: partition table beyond EOD, truncated [ 265.423329][ T58] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 265.880023][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.942709][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.988830][ T8188] loop1: detected capacity change from 0 to 4096 [ 266.010164][ T58] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 266.036410][ T8188] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 266.064294][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.084663][ T58] usb 5-1: config 0 descriptor?? [ 266.379650][ T4553] Dev loop0: unable to read RDB block 7 [ 266.396860][ T4553] loop0: unable to read partition table [ 266.420682][ T4553] loop0: partition table beyond EOD, truncated [ 266.505902][ T8198] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 266.536004][ T58] lg-g15 0003:046D:C222.0002: unknown main item tag 0x1 [ 266.545137][ T58] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 266.552178][ T58] lg-g15 0003:046D:C222.0002: item fetching failed at offset 10/11 [ 266.597647][ T58] lg-g15 0003:046D:C222.0002: probe with driver lg-g15 failed with error -22 [ 266.716597][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 267.639926][ T8230] loop3: detected capacity change from 0 to 4096 [ 267.665015][ T58] usb 5-1: USB disconnect, device number 21 [ 267.683950][ T8230] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 267.779147][ T8236] netlink: 84 bytes leftover after parsing attributes in process `syz.2.865'. [ 268.323537][ T5150] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 268.550307][ T4553] Dev loop0: unable to read RDB block 7 [ 268.565783][ T4553] loop0: unable to read partition table [ 268.573634][ T8253] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 268.573992][ T8260] loop4: detected capacity change from 0 to 8 [ 268.595943][ T5150] usb 2-1: Using ep0 maxpacket: 32 [ 268.601552][ T4553] loop0: partition table beyond EOD, truncated [ 268.637649][ T5150] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 268.663216][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.683028][ T5150] usb 2-1: config 0 descriptor?? [ 268.716441][ T5150] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 268.753570][ T8260] SQUASHFS error: lzo decompression failed, data probably corrupt [ 268.784341][ T8260] SQUASHFS error: Failed to read block 0x91: -5 [ 268.798463][ T8260] SQUASHFS error: Unable to read metadata cache entry [8f] [ 268.816794][ T4553] Dev loop0: unable to read RDB block 7 [ 268.819811][ T8260] SQUASHFS error: Unable to read inode 0x11f [ 268.855079][ T4553] loop0: unable to read partition table [ 268.870651][ T4553] loop0: partition table beyond EOD, truncated [ 268.924630][ T8260] loop4: detected capacity change from 0 to 256 [ 268.932240][ T8] IPVS: starting estimator thread 0... [ 268.951948][ T8260] vfat: Unknown parameter '' [ 269.052256][ T4553] Dev loop0: unable to read RDB block 7 [ 269.058313][ T8268] usb usb8: usbfs: process 8268 (syz.2.877) did not claim interface 0 before use [ 269.073621][ T8267] IPVS: using max 18 ests per chain, 43200 per kthread [ 269.096402][ T4553] loop0: unable to read partition table [ 269.128452][ T4553] loop0: partition table beyond EOD, truncated [ 269.246361][ T8271] loop4: detected capacity change from 0 to 1764 [ 269.487445][ T4553] Dev loop0: unable to read RDB block 7 [ 269.513898][ T4553] loop0: unable to read partition table [ 269.519875][ T4553] loop0: partition table beyond EOD, truncated [ 269.617191][ T8278] netlink: 84 bytes leftover after parsing attributes in process `syz.0.880'. [ 269.741874][ T5150] gspca_sunplus: reg_w_riv err -71 [ 269.763334][ T5150] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 269.801112][ T5150] usb 2-1: USB disconnect, device number 21 [ 269.919519][ T4553] Dev loop0: unable to read RDB block 7 [ 269.928082][ T4553] loop0: unable to read partition table [ 269.934348][ T4553] loop0: partition table beyond EOD, truncated [ 270.098733][ T4553] Dev loop0: unable to read RDB block 7 [ 270.115884][ T4553] loop0: unable to read partition table [ 270.134179][ T4553] loop0: partition table beyond EOD, truncated [ 270.143489][ T8293] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 270.150338][ T8293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 270.184753][ T8298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.239942][ T8293] vhci_hcd vhci_hcd.0: Device attached [ 270.241753][ T8298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.495380][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 271.285710][ T928] vhci_hcd: vhci_device speed not set [ 271.305062][ T4553] Dev loop0: unable to read RDB block 7 [ 271.310669][ T4553] loop0: unable to read partition table [ 271.323336][ T4553] loop0: partition table beyond EOD, truncated [ 271.365754][ T928] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 271.433130][ T8303] loop2: detected capacity change from 0 to 4096 [ 271.452387][ T8303] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 271.577094][ T4553] Dev loop0: unable to read RDB block 7 [ 271.582732][ T4553] loop0: unable to read partition table [ 271.637247][ T4553] loop0: partition table beyond EOD, truncated [ 271.783032][ C1] eth0: bad gso: type: 1, size: 1408 [ 271.820109][ T4553] Dev loop0: unable to read RDB block 7 [ 271.837101][ T4553] loop0: unable to read partition table [ 271.853592][ T4553] loop0: partition table beyond EOD, truncated [ 272.106543][ T8318] netlink: 84 bytes leftover after parsing attributes in process `syz.1.897'. [ 272.351065][ T8296] vhci_hcd: connection reset by peer [ 272.361074][ T1095] vhci_hcd: stop threads [ 272.374261][ T1095] vhci_hcd: release socket [ 272.392586][ T1095] vhci_hcd: disconnect device [ 272.630104][ T8328] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 272.636665][ T8328] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.658968][ T4553] Dev loop0: unable to read RDB block 7 [ 272.669999][ T4553] loop0: unable to read partition table [ 272.682004][ T8328] vhci_hcd vhci_hcd.0: Device attached [ 272.693414][ T4553] loop0: partition table beyond EOD, truncated [ 272.747608][ T8328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.767894][ T8328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.873130][ T8] vhci_hcd: vhci_device speed not set [ 272.954644][ T8] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 273.310903][ T4553] Dev loop0: unable to read RDB block 7 [ 273.414678][ T4553] loop0: unable to read partition table [ 273.543495][ T4553] loop0: partition table beyond EOD, truncated [ 273.894737][ T4553] Dev loop0: unable to read RDB block 7 [ 273.900375][ T4553] loop0: unable to read partition table [ 273.953515][ T4553] loop0: partition table beyond EOD, truncated [ 273.994064][ T8351] netlink: 84 bytes leftover after parsing attributes in process `syz.4.910'. [ 274.161244][ T4553] Dev loop0: unable to read RDB block 7 [ 274.172680][ T4553] loop0: unable to read partition table [ 274.191199][ T4553] loop0: partition table beyond EOD, truncated [ 274.383684][ T4553] Dev loop0: unable to read RDB block 7 [ 274.389327][ T4553] loop0: unable to read partition table [ 274.395789][ T4553] loop0: partition table beyond EOD, truncated [ 274.770618][ T8376] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 274.777172][ T8376] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 274.821646][ T8379] 9pnet_fd: Insufficient options for proto=fd [ 274.836192][ T8376] vhci_hcd vhci_hcd.0: Device attached [ 274.862270][ T8383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.916650][ T8376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.997299][ T8330] vhci_hcd: connection reset by peer [ 275.017186][ T2915] vhci_hcd: stop threads [ 275.033044][ T46] vhci_hcd: vhci_device speed not set [ 275.040420][ T2915] vhci_hcd: release socket [ 275.080190][ T2915] vhci_hcd: disconnect device [ 275.127302][ T46] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 275.673911][ T58] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 275.925245][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.958881][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.974440][ T8377] vhci_hcd: connection reset by peer [ 275.986129][ T1107] vhci_hcd: stop threads [ 275.990921][ T1107] vhci_hcd: release socket [ 275.996530][ T58] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 276.007105][ T1107] vhci_hcd: disconnect device [ 276.017804][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.060076][ T58] usb 5-1: config 0 descriptor?? [ 276.405273][ T4553] Dev loop0: unable to read RDB block 7 [ 276.414627][ T4553] loop0: unable to read partition table [ 276.438386][ T4553] loop0: partition table beyond EOD, truncated [ 276.500739][ T58] lg-g15 0003:046D:C222.0003: unknown main item tag 0x1 [ 276.527452][ T58] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 276.541454][ T58] lg-g15 0003:046D:C222.0003: item fetching failed at offset 10/11 [ 276.550641][ T58] lg-g15 0003:046D:C222.0003: probe with driver lg-g15 failed with error -22 [ 276.712083][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 276.758421][ T928] vhci_hcd: vhci_device speed not set [ 277.521319][ T8395] batman_adv: batadv1: Adding interface: netdevsim0 [ 277.588116][ T8395] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.624936][ T8395] batman_adv: batadv1: Interface activated: netdevsim0 [ 277.642802][ T4553] Dev loop0: unable to read RDB block 7 [ 277.684849][ T4553] loop0: unable to read partition table [ 277.693847][ T4553] loop0: partition table beyond EOD, truncated [ 277.936847][ T8437] tipc: Can't bind to reserved service type 0 [ 277.987829][ T8437] can: request_module (can-proto-0) failed. [ 277.998356][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 278.008891][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 278.083203][ T5150] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 278.123168][ T8] vhci_hcd: vhci_device speed not set [ 278.236032][ T5155] usb 5-1: USB disconnect, device number 22 [ 278.294943][ T5150] usb 3-1: string descriptor 0 read error: -22 [ 278.320421][ T5150] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 278.353842][ T5150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.392797][ T5150] usb 3-1: config 0 descriptor?? [ 278.548948][ T4553] Dev loop0: unable to read RDB block 7 [ 278.583186][ T4553] loop0: unable to read partition table [ 278.593975][ T4553] loop0: partition table beyond EOD, truncated [ 278.757982][ T8453] ip6gre0: entered promiscuous mode [ 278.779153][ T8453] vlan2: entered promiscuous mode [ 278.808548][ T8453] ip6gre0: left promiscuous mode [ 278.940553][ T8435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.968753][ T5150] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 279.002855][ T5150] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 279.023765][ T4553] Dev loop0: unable to read RDB block 7 [ 279.033639][ T5150] dib0700: firmware download failed at 7 with -22 [ 279.044189][ T4553] loop0: unable to read partition table [ 279.059726][ T5150] usb 3-1: USB disconnect, device number 20 [ 279.060355][ T4553] loop0: partition table beyond EOD, truncated [ 279.463032][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 279.501548][ T5155] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 279.525429][ T4880] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 279.553130][ T928] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 279.643121][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 279.656715][ T8] usb 2-1: config 6 has an invalid interface number: 9 but max is 2 [ 279.666908][ T8] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 279.675969][ T8] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 279.690741][ T8] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 279.702152][ T8] usb 2-1: config 6 has no interface number 0 [ 279.708685][ T8] usb 2-1: config 6 interface 9 altsetting 4 endpoint 0x7 has invalid maxpacket 447, setting to 64 [ 279.719875][ T8] usb 2-1: config 6 interface 9 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 16 [ 279.729825][ T4880] usb 4-1: Using ep0 maxpacket: 16 [ 279.735545][ T8] usb 2-1: config 6 interface 9 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 279.747975][ T5155] usb 1-1: not running at top speed; connect to a high speed hub [ 279.756202][ T8] usb 2-1: config 6 interface 9 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 279.756772][ T928] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 279.777601][ T5155] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 279.788604][ T8] usb 2-1: config 6 interface 9 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 279.802486][ T4880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.817904][ T5155] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 279.829015][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.837108][ T4880] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 279.847052][ T8] usb 2-1: config 6 interface 9 has no altsetting 0 [ 279.853771][ T5155] usb 1-1: config 1 interface 0 has no altsetting 0 [ 279.861619][ T4880] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 279.875846][ T928] usb 5-1: config 0 descriptor?? [ 279.884966][ T5155] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.894304][ T8] usb 2-1: New USB device found, idVendor=257a, idProduct=162f, bcdDevice=6b.c3 [ 279.905331][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.913685][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.921974][ T5155] usb 1-1: Product: 簲줪裇킇扶ꈟ笡칳傼㍢ [ 279.933234][ T4880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.942370][ T4880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 279.950519][ T8] usb 2-1: Manufacturer: 㮛ҁԃࢴ糦뺜羂来絠ၿ爷꺧暦毷ㅚ䄄ꁓ㢐㹝忙؆旮솲ആ⼯怍纤蜣택텛ᚢ⥖릃ꍃ邯儚導蠳ꥡ臐摳뫻潠딷墷旳跡띬砬뵉㟧횞ꂔᠲꈍꝈ쓀ⵙ第瑽錎䯣﷦쬔鵝넿쾎흷䁥똖媋 [ 279.975161][ T5155] usb 1-1: Manufacturer: 복꿙墼蠠狟풂銢̹㑯槺ှꮜ쩙ѩ伀齨謵〘嵂踎戳愢묬陦籑ꄚ邙隷Ἥ᦮뫆솰杵륣៝머硐䧧뀄樍➕ [ 279.990922][ T4880] usb 4-1: SerialNumber: syz [ 279.997038][ T5155] usb 1-1: SerialNumber: syz [ 280.004735][ T8] usb 2-1: SerialNumber: 映ⷁʱਐ鱯㺷桸鰤㰿残»貆ꠋ枪᯺孇蓯䵯愋ᕴꞌ촔鈵嘶수鯷鳱ၣ䶌望먌﫺坐嫰洌糄쥺쩐稾➇ᓸꉔ癎齂ҁ [ 280.024067][ T8471] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 280.034392][ T8472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 280.040666][ T4880] cdc_acm 4-1:1.0: skipping garbage [ 280.047239][ T8472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 280.059012][ C0] hrtimer: interrupt took 93280 ns [ 280.059583][ T8469] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.072666][ T8469] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.255313][ T4880] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 280.283484][ T46] vhci_hcd: vhci_device speed not set [ 280.286129][ T5155] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 280.306003][ T4880] usb 4-1: USB disconnect, device number 23 [ 280.336959][ T5155] usb 1-1: USB disconnect, device number 26 [ 280.609407][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.648085][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.683859][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 280.718876][ T8] option 2-1:6.9: GSM modem (1-port) converter detected [ 280.767981][ T8] usb 2-1: USB disconnect, device number 22 [ 280.802306][ T8] option 2-1:6.9: device disconnected [ 280.967360][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 280.991494][ T8489] can: request_module (can-proto-0) failed. [ 280.991786][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 281.023605][ T4553] Dev loop0: unable to read RDB block 7 [ 281.030061][ T4553] loop0: unable to read partition table [ 281.038857][ T4553] loop0: partition table beyond EOD, truncated [ 281.153444][ T8495] ip6gre0: entered promiscuous mode [ 281.161618][ T8495] vlan2: entered promiscuous mode [ 281.171256][ T8495] ip6gre0: left promiscuous mode [ 281.303049][ T5155] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 281.325286][ T928] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 281.390754][ T4553] Dev loop0: unable to read RDB block 7 [ 281.411652][ T4553] loop0: unable to read partition table [ 281.425309][ T4553] loop0: partition table beyond EOD, truncated [ 281.515174][ T5155] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 281.545027][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.561781][ T5155] usb 4-1: config 0 descriptor?? [ 281.688403][ T4553] Dev loop0: unable to read RDB block 7 [ 281.703280][ T4553] loop0: unable to read partition table [ 281.711879][ T4553] loop0: partition table beyond EOD, truncated [ 281.796045][ T8509] vlan0: entered promiscuous mode [ 281.801177][ T8509] vlan0: entered allmulticast mode [ 281.820716][ T8509] veth0_vlan: entered allmulticast mode [ 281.858499][ T8509] team0: Port device vlan0 added [ 282.183274][ T46] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 282.303423][ T928] usb 5-1: USB disconnect, device number 23 [ 282.363577][ T5155] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 282.373351][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 282.381903][ T46] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.391046][ T46] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 282.400350][ T46] usb 3-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 282.411266][ T46] usb 3-1: config 0 has no interface number 0 [ 282.417826][ T46] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 282.431822][ T5155] usb 4-1: USB disconnect, device number 24 [ 282.432317][ T46] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 53214, setting to 1024 [ 282.450350][ T46] usb 3-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 282.463223][ T46] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 282.477165][ T46] usb 3-1: New USB device found, idVendor=19d2, idProduct=0002, bcdDevice=a6.8d [ 282.486621][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.497591][ T46] usb 3-1: config 0 descriptor?? [ 282.716258][ T46] usb 3-1: string descriptor 0 read error: -71 [ 282.726712][ T4553] Dev loop0: unable to read RDB block 7 [ 282.732360][ T4553] loop0: unable to read partition table [ 282.753653][ T4553] loop0: partition table beyond EOD, truncated [ 282.768221][ T46] usb 3-1: USB disconnect, device number 21 [ 283.253338][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 283.493421][ T25] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 283.504289][ T25] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 283.743226][ T25] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 283.796666][ T25] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 283.805726][ T25] usb 2-1: Product: syz [ 283.810143][ T25] usb 2-1: SerialNumber: syz [ 283.829444][ T25] option 2-1:7.0: GSM modem (1-port) converter detected [ 283.987841][ T4553] Dev loop0: unable to read RDB block 7 [ 284.182026][ T4553] loop0: unable to read partition table [ 284.218600][ T4553] loop0: partition table beyond EOD, truncated [ 284.511713][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 284.522251][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 284.553489][ T8547] can: request_module (can-proto-0) failed. [ 285.273760][ T8571] vlan0: entered promiscuous mode [ 285.282743][ T8571] vlan0: entered allmulticast mode [ 285.352064][ T4553] Dev loop0: unable to read RDB block 7 [ 285.361756][ T8571] veth0_vlan: entered allmulticast mode [ 285.371490][ T4553] loop0: unable to read partition table [ 285.386325][ T4553] loop0: partition table beyond EOD, truncated [ 285.413171][ T8571] [ 285.413180][ T8571] ============================================ [ 285.413187][ T8571] WARNING: possible recursive locking detected [ 285.413199][ T8571] 6.10.0-next-20240717-syzkaller #0 Not tainted [ 285.413211][ T8571] -------------------------------------------- [ 285.413217][ T8571] syz.3.987/8571 is trying to acquire lock: [ 285.413228][ T8571] ffff88806448cd40 (team->team_lock_key#4){+.+.}-{3:3}, at: team_port_change_check+0x51/0x1e0 [ 285.413295][ T8571] [ 285.413295][ T8571] but task is already holding lock: [ 285.413302][ T8571] ffff88806448cd40 (team->team_lock_key#4){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 285.413358][ T8571] [ 285.413358][ T8571] other info that might help us debug this: [ 285.413366][ T8571] Possible unsafe locking scenario: [ 285.413366][ T8571] [ 285.413372][ T8571] CPU0 [ 285.413377][ T8571] ---- [ 285.413382][ T8571] lock(team->team_lock_key#4); [ 285.413401][ T8571] lock(team->team_lock_key#4); [ 285.413419][ T8571] [ 285.413419][ T8571] *** DEADLOCK *** [ 285.413419][ T8571] [ 285.413425][ T8571] May be due to missing lock nesting notation [ 285.413425][ T8571] [ 285.413432][ T8571] 2 locks held by syz.3.987/8571: [ 285.413444][ T8571] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 285.413506][ T8571] #1: ffff88806448cd40 (team->team_lock_key#4){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 285.413564][ T8571] [ 285.413564][ T8571] stack backtrace: [ 285.413576][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.3.987 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 285.413602][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.413619][ T8571] Call Trace: [ 285.413627][ T8571] [ 285.413636][ T8571] dump_stack_lvl+0x241/0x360 [ 285.413674][ T8571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.413705][ T8571] ? __pfx__printk+0x10/0x10 [ 285.413734][ T8571] ? lockdep_unlock+0x16a/0x300 [ 285.413772][ T8571] print_deadlock_bug+0x483/0x620 [ 285.413798][ T8571] validate_chain+0x15e2/0x5920 [ 285.413827][ T8571] ? mark_lock+0x9a/0x360 [ 285.413859][ T8571] ? __lock_acquire+0x1384/0x2050 [ 285.413888][ T8571] ? __pfx_validate_chain+0x10/0x10 [ 285.413912][ T8571] ? __pfx_validate_chain+0x10/0x10 [ 285.413944][ T8571] ? mark_lock+0x9a/0x360 [ 285.413978][ T8571] ? mark_lock+0x9a/0x360 [ 285.414006][ T8571] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.414037][ T8571] __lock_acquire+0x1384/0x2050 [ 285.414075][ T8571] lock_acquire+0x1ed/0x550 [ 285.414102][ T8571] ? team_port_change_check+0x51/0x1e0 [ 285.414127][ T8571] ? __pfx_lock_acquire+0x10/0x10 [ 285.414154][ T8571] ? mark_lock+0x9a/0x360 [ 285.414183][ T8571] ? __pfx___might_resched+0x10/0x10 [ 285.414211][ T8571] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 285.414240][ T8571] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 285.414268][ T8571] ? ip_mc_up+0x1da/0x300 [ 285.414287][ T8571] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.414321][ T8571] __mutex_lock+0x136/0xd70 [ 285.414348][ T8571] ? team_port_change_check+0x51/0x1e0 [ 285.414369][ T8571] ? __pfx_igmp_group_added+0x10/0x10 [ 285.414388][ T8571] ? ip_mc_up+0x1da/0x300 [ 285.414406][ T8571] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 285.414433][ T8571] ? bond_netdev_event+0xdd/0xf20 [ 285.414456][ T8571] ? team_port_change_check+0x51/0x1e0 [ 285.414476][ T8571] ? __pfx___mutex_lock+0x10/0x10 [ 285.414507][ T8571] ? __asan_memset+0x23/0x50 [ 285.414540][ T8571] team_port_change_check+0x51/0x1e0 [ 285.414563][ T8571] team_device_event+0x4e6/0x5b0 [ 285.414582][ T8571] ? notifier_call_chain+0x162/0x3e0 [ 285.414612][ T8571] notifier_call_chain+0x19f/0x3e0 [ 285.414645][ T8571] __dev_notify_flags+0x207/0x400 [ 285.414665][ T8571] ? dev_set_rx_mode+0xb8/0x2e0 [ 285.414686][ T8571] ? __pfx___dev_notify_flags+0x10/0x10 [ 285.414704][ T8571] ? __dev_change_flags+0x515/0x6f0 [ 285.414727][ T8571] ? __pfx___dev_change_flags+0x10/0x10 [ 285.414774][ T8571] ? dsa_user_netdevice_event+0x714/0x2970 [ 285.414812][ T8571] dev_change_flags+0xf0/0x1a0 [ 285.414836][ T8571] vlan_device_event+0x1b81/0x1de0 [ 285.414870][ T8571] ? phonet_device_notify+0x20e/0x8c0 [ 285.414902][ T8571] ? rt6_multipath_rebalance+0x7a0/0x880 [ 285.414933][ T8571] ? br_device_event+0x148/0x970 [ 285.414957][ T8571] ? __pfx_phonet_device_notify+0x10/0x10 [ 285.414990][ T8571] ? __pfx_vlan_device_event+0x10/0x10 [ 285.415021][ T8571] ? __pfx_br_device_event+0x10/0x10 [ 285.415044][ T8571] ? raw_notifier+0x9d/0x740 [ 285.415065][ T8571] ? isotp_notifier+0xa4/0x6b0 [ 285.415092][ T8571] ? cgw_notifier+0xd8/0x3b0 [ 285.415116][ T8571] ? packet_notifier+0x76/0xa30 [ 285.415144][ T8571] notifier_call_chain+0x19f/0x3e0 [ 285.415180][ T8571] dev_open+0x13a/0x1b0 [ 285.415211][ T8571] ? __pfx_dev_open+0x10/0x10 [ 285.415242][ T8571] ? team_add_slave+0x69e/0x2760 [ 285.415270][ T8571] ? team_add_slave+0x69e/0x2760 [ 285.415299][ T8571] ? team_add_slave+0x8b5/0x2760 [ 285.415331][ T8571] team_add_slave+0x9c8/0x2760 [ 285.415371][ T8571] ? __dev_change_flags+0x579/0x6f0 [ 285.415392][ T8571] ? __pfx_team_add_slave+0x10/0x10 [ 285.415422][ T8571] ? __pfx___dev_change_flags+0x10/0x10 [ 285.415440][ T8571] ? is_bpf_text_address+0x285/0x2a0 [ 285.415464][ T8571] ? kernel_text_address+0xa7/0xe0 [ 285.415487][ T8571] ? nla_strscpy+0x100/0x180 [ 285.415515][ T8571] ? mutex_is_locked+0x12/0x50 [ 285.415539][ T8571] do_setlink+0xe70/0x41f0 [ 285.415574][ T8571] ? stack_trace_save+0x118/0x1d0 [ 285.415607][ T8571] ? __pfx_stack_trace_save+0x10/0x10 [ 285.415642][ T8571] ? __pfx_do_setlink+0x10/0x10 [ 285.415689][ T8571] ? __nla_validate_parse+0x26ce/0x3090 [ 285.415712][ T8571] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 285.415744][ T8571] ? rtnl_newlink+0xe9/0x2070 [ 285.415778][ T8571] ? __pfx___nla_validate_parse+0x10/0x10 [ 285.415815][ T8571] ? nla_strscpy+0x100/0x180 [ 285.415838][ T8571] ? full_name_hash+0x93/0xe0 [ 285.415862][ T8571] ? validate_linkmsg+0x71e/0x900 [ 285.415887][ T8571] rtnl_newlink+0x17a9/0x2070 [ 285.415921][ T8571] ? rtnl_newlink+0x471/0x2070 [ 285.415952][ T8571] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.415976][ T8571] ? __pfx___mutex_trylock_common+0x10/0x10 [ 285.416011][ T8571] ? __pfx_lock_release+0x10/0x10 [ 285.416048][ T8571] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.416074][ T8571] rtnetlink_rcv_msg+0x744/0xd00 [ 285.416102][ T8571] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 285.416134][ T8571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.416168][ T8571] ? ref_tracker_free+0x643/0x7e0 [ 285.416194][ T8571] netlink_rcv_skb+0x1e3/0x430 [ 285.416224][ T8571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.416255][ T8571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.416300][ T8571] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.416332][ T8571] netlink_unicast+0x7f0/0x990 [ 285.416365][ T8571] ? __pfx_netlink_unicast+0x10/0x10 [ 285.416392][ T8571] ? __virt_addr_valid+0x183/0x530 [ 285.416414][ T8571] ? __check_object_size+0x49c/0x900 [ 285.416439][ T8571] ? bpf_lsm_netlink_send+0x9/0x10 [ 285.416471][ T8571] netlink_sendmsg+0x8e4/0xcb0 [ 285.416497][ T8571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.416517][ T8571] ? __import_iovec+0x536/0x820 [ 285.416540][ T8571] ? aa_sock_msg_perm+0x91/0x160 [ 285.416565][ T8571] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 285.416583][ T8571] ? security_socket_sendmsg+0x87/0xb0 [ 285.416615][ T8571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.416633][ T8571] __sock_sendmsg+0x221/0x270 [ 285.416666][ T8571] ____sys_sendmsg+0x525/0x7d0 [ 285.416696][ T8571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.416731][ T8571] __sys_sendmsg+0x2b0/0x3a0 [ 285.416764][ T8571] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.416811][ T8571] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.416842][ T8571] ? do_syscall_64+0x100/0x230 [ 285.416875][ T8571] ? do_syscall_64+0xb6/0x230 [ 285.416906][ T8571] do_syscall_64+0xf3/0x230 [ 285.416935][ T8571] ? clear_bhb_loop+0x35/0x90 [ 285.416962][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.416993][ T8571] RIP: 0033:0x7f3ebeb75a19 [ 285.417015][ T8571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.417038][ T8571] RSP: 002b:00007f3ebe5ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.417060][ T8571] RAX: ffffffffffffffda RBX: 00007f3ebed03f60 RCX: 00007f3ebeb75a19 [ 285.417076][ T8571] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 285.417089][ T8571] RBP: 00007f3ebebe4e49 R08: 0000000000000000 R09: 0000000000000000 [ 285.417102][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.417114][ T8571] R13: 000000000000000b R14: 00007f3ebed03f60 R15: 00007ffe40ca3f78 [ 285.417138][ T8571] [ 286.329910][ T5151] usb 2-1: USB disconnect, device number 23 [ 286.337966][ T5151] option 2-1:7.0: device disconnected [ 286.523013][ T5155] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 286.583264][ T928] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 286.653115][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 286.706327][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.717299][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.727243][ T5155] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 286.736698][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.745967][ T5155] usb 3-1: config 0 descriptor?? [ 286.763442][ T928] usb 1-1: Using ep0 maxpacket: 16 [ 286.772137][ T928] usb 1-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00 [ 286.781254][ T928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.789320][ T928] usb 1-1: Product: syz [ 286.796473][ T928] usb 1-1: Manufacturer: syz [ 286.801087][ T928] usb 1-1: SerialNumber: syz [ 286.807899][ T928] usb 1-1: config 0 descriptor?? [ 286.815286][ T928] usb-storage 1-1:0.0: USB Mass Storage device detected [ 286.832969][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 286.839487][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.847643][ T8] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 286.856409][ T8] usb 4-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 286.868427][ T8] usb 4-1: config 0 has no interface number 0 [ 286.877208][ T8] usb 4-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 286.888817][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 53214, setting to 1024 [ 286.902098][ T8] usb 4-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 286.922228][ T8] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 286.935542][ T8] usb 4-1: New USB device found, idVendor=19d2, idProduct=0002, bcdDevice=a6.8d [ 286.944656][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.954582][ T8] usb 4-1: config 0 descriptor?? [ 287.086446][ T8573] caif:caif_disconnect_client(): nothing to disconnect [ 287.094887][ T5151] usb 1-1: USB disconnect, device number 27 [ 287.156687][ T5155] lg-g15 0003:046D:C222.0004: unknown main item tag 0x1 [ 287.166267][ T5155] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 287.174958][ T5155] lg-g15 0003:046D:C222.0004: item fetching failed at offset 10/11 [ 287.183956][ T5155] lg-g15 0003:046D:C222.0004: probe with driver lg-g15 failed with error -22 [ 287.633845][ T4553] Dev loop0: unable to read RDB block 7 [ 287.639531][ T4553] loop0: unable to read partition table [ 287.647494][ T4553] loop0: partition table beyond EOD, truncated [ 290.443185][ C1] DEBUG: holding rtnl_mutex for 518 jiffies. [ 290.449229][ C1] task:syz.3.987 state:D stack:20144 pid:8571 tgid:8570 ppid:5097 flags:0x00004006 [ 290.459449][ C1] Call Trace: [ 290.462748][ C1] [ 290.465717][ C1] __schedule+0x1800/0x4a60 [ 290.470254][ C1] ? __pfx___schedule+0x10/0x10 [ 290.475136][ C1] ? __pfx_lock_release+0x10/0x10 [ 290.480185][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 290.485674][ C1] ? schedule+0x90/0x320 [ 290.489931][ C1] schedule+0x14b/0x320 [ 290.494122][ C1] schedule_preempt_disabled+0x13/0x30 [ 290.499783][ C1] __mutex_lock+0x6a4/0xd70 [ 290.504333][ C1] ? __mutex_lock+0x527/0xd70 [ 290.509042][ C1] ? team_port_change_check+0x51/0x1e0 [ 290.514525][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 290.519572][ C1] ? __asan_memset+0x23/0x50 [ 290.524199][ C1] team_port_change_check+0x51/0x1e0 [ 290.529496][ C1] team_device_event+0x4e6/0x5b0 [ 290.534464][ C1] ? notifier_call_chain+0x162/0x3e0 [ 290.539778][ C1] notifier_call_chain+0x19f/0x3e0 [ 290.544944][ C1] __dev_notify_flags+0x207/0x400 [ 290.549996][ C1] ? dev_set_rx_mode+0xb8/0x2e0 [ 290.554889][ C1] ? __pfx___dev_notify_flags+0x10/0x10 [ 290.560474][ C1] ? __dev_change_flags+0x515/0x6f0 [ 290.565713][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 290.571291][ C1] ? dsa_user_netdevice_event+0x714/0x2970 [ 290.577200][ C1] dev_change_flags+0xf0/0x1a0 [ 290.581995][ C1] vlan_device_event+0x1b81/0x1de0 [ 290.587160][ C1] ? phonet_device_notify+0x20e/0x8c0 [ 290.592566][ C1] ? rt6_multipath_rebalance+0x7a0/0x880 [ 290.598246][ C1] ? br_device_event+0x148/0x970 [ 290.603223][ C1] ? __pfx_phonet_device_notify+0x10/0x10 [ 290.608963][ C1] ? __pfx_vlan_device_event+0x10/0x10 [ 290.614450][ C1] ? __pfx_br_device_event+0x10/0x10 [ 290.619746][ C1] ? raw_notifier+0x9d/0x740 [ 290.624364][ C1] ? isotp_notifier+0xa4/0x6b0 [ 290.629192][ C1] ? cgw_notifier+0xd8/0x3b0 [ 290.633825][ C1] ? packet_notifier+0x76/0xa30 [ 290.638703][ C1] notifier_call_chain+0x19f/0x3e0 [ 290.643860][ C1] dev_open+0x13a/0x1b0 [ 290.648037][ C1] ? __pfx_dev_open+0x10/0x10 [ 290.652742][ C1] ? team_add_slave+0x69e/0x2760 [ 290.657723][ C1] ? team_add_slave+0x69e/0x2760 [ 290.662695][ C1] ? team_add_slave+0x8b5/0x2760 [ 290.667687][ C1] team_add_slave+0x9c8/0x2760 [ 290.672483][ C1] ? __dev_change_flags+0x579/0x6f0 [ 290.677713][ C1] ? __pfx_team_add_slave+0x10/0x10 [ 290.682951][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 290.688513][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 290.693839][ C1] ? kernel_text_address+0xa7/0xe0 [ 290.698969][ C1] ? nla_strscpy+0x100/0x180 [ 290.703601][ C1] ? mutex_is_locked+0x12/0x50 [ 290.708377][ C1] do_setlink+0xe70/0x41f0 [ 290.712852][ C1] ? stack_trace_save+0x118/0x1d0 [ 290.717903][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 290.723316][ C1] ? __pfx_do_setlink+0x10/0x10 [ 290.728169][ C1] ? __nla_validate_parse+0x26ce/0x3090 [ 290.733742][ C1] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 290.739334][ C1] ? rtnl_newlink+0xe9/0x2070 [ 290.744058][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 290.749813][ C1] ? nla_strscpy+0x100/0x180 [ 290.754438][ C1] ? full_name_hash+0x93/0xe0 [ 290.759139][ C1] ? validate_linkmsg+0x71e/0x900 [ 290.764213][ C1] rtnl_newlink+0x17a9/0x2070 [ 290.768936][ C1] ? rtnl_newlink+0x471/0x2070 [ 290.773742][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 290.778795][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 290.784742][ C1] ? __pfx_lock_release+0x10/0x10 [ 290.789790][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 290.794862][ C1] rtnetlink_rcv_msg+0x744/0xd00 [ 290.799830][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 290.804984][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.810476][ C1] ? ref_tracker_free+0x643/0x7e0 [ 290.815546][ C1] netlink_rcv_skb+0x1e3/0x430 [ 290.820339][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.825846][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.831191][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 290.836442][ C1] netlink_unicast+0x7f0/0x990 [ 290.841242][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 290.846571][ C1] ? __virt_addr_valid+0x183/0x530 [ 290.851712][ C1] ? __check_object_size+0x49c/0x900 [ 290.857033][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 290.862184][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 290.867000][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.872307][ C1] ? __import_iovec+0x536/0x820 [ 290.877198][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 290.882159][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 290.887477][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 290.892978][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.898272][ C1] __sock_sendmsg+0x221/0x270 [ 290.902983][ C1] ____sys_sendmsg+0x525/0x7d0 [ 290.907770][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.913096][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 290.917702][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.922842][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.929206][ C1] ? do_syscall_64+0x100/0x230 [ 290.934025][ C1] ? do_syscall_64+0xb6/0x230 [ 290.938729][ C1] do_syscall_64+0xf3/0x230 [ 290.943273][ C1] ? clear_bhb_loop+0x35/0x90 [ 290.947977][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.953908][ C1] RIP: 0033:0x7f3ebeb75a19 [ 290.958334][ C1] RSP: 002b:00007f3ebe5ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.966782][ C1] RAX: ffffffffffffffda RBX: 00007f3ebed03f60 RCX: 00007f3ebeb75a19 [ 290.974782][ C1] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 290.982849][ C1] RBP: 00007f3ebebe4e49 R08: 0000000000000000 R09: 0000000000000000 [ 290.990876][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.998879][ C1] R13: 000000000000000b R14: 00007f3ebed03f60 R15: 00007ffe40ca3f78 [ 291.006886][ C1] [ 291.009923][ C1] DEBUG: waiting rtnl_mutex for 573 jiffies. [ 291.015949][ C1] task:kworker/1:0 state:D stack:22192 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 291.026152][ C1] Workqueue: events linkwatch_event [ 291.031354][ C1] Call Trace: [ 291.034655][ C1] [ 291.037597][ C1] __schedule+0x1800/0x4a60 [ 291.042135][ C1] ? __pfx___schedule+0x10/0x10 [ 291.047029][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.053074][ C1] ? __pfx_lock_release+0x10/0x10 [ 291.058126][ C1] ? kick_pool+0x1bd/0x620 [ 291.062566][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.067805][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 291.073051][ C1] ? schedule+0x90/0x320 [ 291.077312][ C1] schedule+0x14b/0x320 [ 291.081491][ C1] schedule_preempt_disabled+0x13/0x30 [ 291.087012][ C1] __mutex_lock+0x6a4/0xd70 [ 291.091546][ C1] ? __mutex_lock+0x527/0xd70 [ 291.096277][ C1] ? linkwatch_event+0xe/0x60 [ 291.101066][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 291.106134][ C1] ? get_rtnl_holder+0x144/0x190 [ 291.111083][ C1] ? process_scheduled_works+0x945/0x1830 [ 291.116899][ C1] linkwatch_event+0xe/0x60 [ 291.121420][ C1] process_scheduled_works+0xa2c/0x1830 [ 291.127037][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.133072][ C1] ? assign_work+0x364/0x3d0 [ 291.137681][ C1] worker_thread+0x86d/0xd40 [ 291.142305][ C1] ? __kthread_parkme+0x169/0x1d0 [ 291.147376][ C1] ? __pfx_worker_thread+0x10/0x10 [ 291.152503][ C1] kthread+0x2f0/0x390 [ 291.156599][ C1] ? __pfx_worker_thread+0x10/0x10 [ 291.161737][ C1] ? __pfx_kthread+0x10/0x10 [ 291.166374][ C1] ret_from_fork+0x4b/0x80 [ 291.170863][ C1] ? __pfx_kthread+0x10/0x10 [ 291.175482][ C1] ret_from_fork_asm+0x1a/0x30 [ 291.180274][ C1] [ 291.183319][ C1] DEBUG: waiting rtnl_mutex for 579 jiffies. [ 291.189300][ C1] task:syz.3.987 state:D stack:26960 pid:8572 tgid:8570 ppid:5097 flags:0x00000004 [ 291.199509][ C1] Call Trace: [ 291.202863][ C1] [ 291.205837][ C1] __schedule+0x1800/0x4a60 [ 291.210373][ C1] ? __pfx___schedule+0x10/0x10 [ 291.215251][ C1] ? __pfx_lock_release+0x10/0x10 [ 291.220294][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 291.225780][ C1] ? schedule+0x90/0x320 [ 291.230042][ C1] schedule+0x14b/0x320 [ 291.234233][ C1] schedule_preempt_disabled+0x13/0x30 [ 291.239711][ C1] __mutex_lock+0x6a4/0xd70 [ 291.244273][ C1] ? __mutex_lock+0x527/0xd70 [ 291.248975][ C1] ? dev_ethtool+0x21e/0x1bc0 [ 291.253689][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 291.258741][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 291.263541][ C1] ? get_rtnl_holder+0x144/0x190 [ 291.268496][ C1] dev_ethtool+0x21e/0x1bc0 [ 291.273036][ C1] ? dev_load+0x21/0x1f0 [ 291.277295][ C1] ? __pfx_dev_ethtool+0x10/0x10 [ 291.282245][ C1] ? dev_load+0x21/0x1f0 [ 291.286528][ C1] dev_ioctl+0x785/0x1340 [ 291.290881][ C1] sock_do_ioctl+0x240/0x460 [ 291.295502][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 291.300640][ C1] sock_ioctl+0x629/0x8e0 [ 291.305028][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 291.309900][ C1] ? __fget_files+0x29/0x470 [ 291.314536][ C1] ? __fget_files+0x3f6/0x470 [ 291.319234][ C1] ? __fget_files+0x29/0x470 [ 291.323902][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 291.328862][ C1] ? security_file_ioctl+0x87/0xb0 [ 291.334008][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 291.338878][ C1] __se_sys_ioctl+0xfc/0x170 [ 291.343514][ C1] do_syscall_64+0xf3/0x230 [ 291.348041][ C1] ? clear_bhb_loop+0x35/0x90 [ 291.352732][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.358644][ C1] RIP: 0033:0x7f3ebeb75a19 [ 291.363095][ C1] RSP: 002b:00007f3ebe5de048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.371527][ C1] RAX: ffffffffffffffda RBX: 00007f3ebed04038 RCX: 00007f3ebeb75a19 [ 291.379523][ C1] RDX: 0000000020000080 RSI: 0000000000008946 RDI: 0000000000000008 [ 291.387525][ C1] RBP: 00007f3ebebe4e49 R08: 0000000000000000 R09: 0000000000000000 [ 291.395516][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.403520][ C1] R13: 000000000000006e R14: 00007f3ebed04038 R15: 00007ffe40ca3f78 [ 291.411517][ C1] [ 291.414572][ C1] DEBUG: waiting rtnl_mutex for 602 jiffies. [ 291.420554][ C1] task:kworker/u8:5 state:D stack:21936 pid:1054 tgid:1054 ppid:2 flags:0x00004000 [ 291.430757][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 291.436781][ C1] Call Trace: [ 291.440074][ C1] [ 291.443039][ C1] __schedule+0x1800/0x4a60 [ 291.447578][ C1] ? __pfx___schedule+0x10/0x10 [ 291.452453][ C1] ? __pfx_lock_release+0x10/0x10 [ 291.457517][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 291.463011][ C1] ? kthread_data+0x52/0xd0 [ 291.467533][ C1] ? schedule+0x90/0x320 [ 291.471804][ C1] ? wq_worker_sleeping+0x66/0x240 [ 291.476988][ C1] ? schedule+0x90/0x320 [ 291.481267][ C1] schedule+0x14b/0x320 [ 291.485467][ C1] schedule_preempt_disabled+0x13/0x30 [ 291.490948][ C1] __mutex_lock+0x6a4/0xd70 [ 291.495481][ C1] ? mark_lock+0x9a/0x360 [ 291.499840][ C1] ? __mutex_lock+0x527/0xd70 [ 291.504559][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 291.509690][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 291.514761][ C1] ? get_rtnl_holder+0x144/0x190 [ 291.519712][ C1] addrconf_dad_work+0xd0/0x16f0 [ 291.524703][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 291.530198][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.536589][ C1] ? process_scheduled_works+0x945/0x1830 [ 291.542338][ C1] process_scheduled_works+0xa2c/0x1830 [ 291.547954][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.553986][ C1] ? assign_work+0x364/0x3d0 [ 291.558597][ C1] worker_thread+0x86d/0xd40 [ 291.563229][ C1] ? __kthread_parkme+0x169/0x1d0 [ 291.568278][ C1] ? __pfx_worker_thread+0x10/0x10 [ 291.573420][ C1] kthread+0x2f0/0x390 [ 291.577505][ C1] ? __pfx_worker_thread+0x10/0x10 [ 291.582634][ C1] ? __pfx_kthread+0x10/0x10 [ 291.587244][ C1] ret_from_fork+0x4b/0x80 [ 291.591692][ C1] ? __pfx_kthread+0x10/0x10 [ 291.596308][ C1] ret_from_fork_asm+0x1a/0x30 [ 291.601135][ C1] [ 291.604194][ C1] DEBUG: waiting rtnl_mutex for 619 jiffies. [ 291.610200][ C1] task:syz.2.989 state:D stack:27696 pid:8575 tgid:8574 ppid:6981 flags:0x00004004 [ 291.620399][ C1] Call Trace: [ 291.623710][ C1] [ 291.626648][ C1] __schedule+0x1800/0x4a60 [ 291.631193][ C1] ? schedule+0x90/0x320 [ 291.635476][ C1] ? lock_release+0xbf/0xa30 [ 291.640094][ C1] ? __pfx___schedule+0x10/0x10 [ 291.644985][ C1] ? __pfx_lock_release+0x10/0x10 [ 291.650036][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 291.655527][ C1] ? mutex_spin_on_owner+0x26c/0x330 [ 291.660829][ C1] ? schedule+0x90/0x320 [ 291.665118][ C1] schedule+0x14b/0x320 [ 291.669299][ C1] schedule_preempt_disabled+0x13/0x30 [ 291.674813][ C1] __mutex_lock+0x6a4/0xd70 [ 291.679359][ C1] ? __mutex_lock+0x527/0xd70 [ 291.684086][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 291.689232][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 291.694302][ C1] ? security_capable+0x90/0xb0 [ 291.699166][ C1] ? get_rtnl_holder+0x144/0x190 [ 291.704194][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 291.709173][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 291.714341][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.719832][ C1] ? ref_tracker_free+0x643/0x7e0 [ 291.724920][ C1] netlink_rcv_skb+0x1e3/0x430 [ 291.729724][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.735239][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.740570][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.745801][ C1] netlink_unicast+0x7f0/0x990 [ 291.750620][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 291.755958][ C1] ? __virt_addr_valid+0x183/0x530 [ 291.761124][ C1] ? __check_object_size+0x49c/0x900 [ 291.766444][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 291.771593][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 291.776410][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.781716][ C1] ? count_memcg_event_mm+0x94/0x420 [ 291.787047][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 291.792042][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 291.797370][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 291.802865][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.808197][ C1] __sock_sendmsg+0x221/0x270 [ 291.812928][ C1] __sys_sendto+0x3a4/0x4f0 [ 291.817459][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 291.822503][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 291.827577][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.833942][ C1] ? __pfx___up_read+0x10/0x10 [ 291.838733][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.845131][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.850693][ C1] __x64_sys_sendto+0xde/0x100 [ 291.855491][ C1] do_syscall_64+0xf3/0x230 [ 291.860042][ C1] ? clear_bhb_loop+0x35/0x90 [ 291.864764][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.870684][ C1] RIP: 0033:0x7fafc59777ac [ 291.875132][ C1] RSP: 002b:00007fafc6679ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 291.883585][ C1] RAX: ffffffffffffffda RBX: 00007fafc6679fd0 RCX: 00007fafc59777ac [ 291.892362][ C1] RDX: 0000000000000020 RSI: 00007fafc667a020 RDI: 0000000000000004 [ 291.900370][ C1] RBP: 0000000000000000 R08: 00007fafc6679f24 R09: 000000000000000c [ 291.908377][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 291.916365][ C1] R13: 00007fafc6679f78 R14: 00007fafc667a020 R15: 0000000000000000 [ 291.924383][ C1] [ 291.927415][ C1] DEBUG: waiting rtnl_mutex for 560 jiffies. [ 291.933415][ C1] task:syz.3.987 state:D stack:27064 pid:8578 tgid:8570 ppid:5097 flags:0x00000004 [ 291.943622][ C1] Call Trace: [ 291.946912][ C1] [ 291.949858][ C1] __schedule+0x1800/0x4a60 [ 291.954415][ C1] ? schedule+0x90/0x320 [ 291.958678][ C1] ? lock_release+0xbf/0xa30 [ 291.963330][ C1] ? __pfx___schedule+0x10/0x10 [ 291.964253][ T8] usb 4-1: string descriptor 0 read error: -32 [ 291.968186][ C1] ? __pfx_lock_release+0x10/0x10 [ 291.979382][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 291.984911][ C1] ? schedule+0x90/0x320 [ 291.989185][ C1] schedule+0x14b/0x320 [ 291.993397][ C1] schedule_preempt_disabled+0x13/0x30 [ 291.998877][ C1] __mutex_lock+0x6a4/0xd70 [ 292.003411][ C1] ? __mutex_lock+0x527/0xd70 [ 292.008103][ C1] ? packet_diag_dump+0xbb9/0x22c0 [ 292.013238][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 292.018280][ C1] ? from_kuid_munged+0x1ed/0x7b0 [ 292.023339][ C1] ? nla_put+0x131/0x1e0 [ 292.027597][ C1] ? get_rtnl_holder+0x144/0x190 [ 292.032528][ C1] packet_diag_dump+0xbb9/0x22c0 [ 292.037508][ C1] ? __pfx_packet_diag_dump+0x10/0x10 [ 292.042950][ C1] ? __build_skb_around+0x245/0x3d0 [ 292.048160][ C1] ? __alloc_skb+0x28f/0x440 [ 292.052759][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 292.058342][ C1] netlink_dump+0x647/0xd80 [ 292.062881][ C1] ? __pfx_netlink_dump+0x10/0x10 [ 292.067963][ C1] ? __netlink_lookup+0x780/0x890 [ 292.073028][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 292.078154][ C1] __netlink_dump_start+0x59f/0x780 [ 292.083391][ C1] packet_diag_handler_dump+0x1e4/0x290 [ 292.088993][ C1] ? __pfx_packet_diag_handler_dump+0x10/0x10 [ 292.095106][ C1] ? __pfx_packet_diag_dump+0x10/0x10 [ 292.100497][ C1] ? sock_diag_lock_handler+0x19/0x280 [ 292.105977][ C1] ? __pfx_packet_diag_handler_dump+0x10/0x10 [ 292.112070][ C1] sock_diag_rcv_msg+0x3dc/0x5f0 [ 292.117046][ C1] netlink_rcv_skb+0x1e3/0x430 [ 292.121838][ C1] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 292.127330][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.132645][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.137873][ C1] netlink_unicast+0x7f0/0x990 [ 292.142657][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 292.147992][ C1] ? __virt_addr_valid+0x183/0x530 [ 292.153128][ C1] ? __check_object_size+0x49c/0x900 [ 292.158410][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 292.163549][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 292.168327][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.173629][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 292.178590][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 292.183908][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 292.189395][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.194710][ C1] __sock_sendmsg+0x221/0x270 [ 292.199421][ C1] sock_write_iter+0x2dd/0x400 [ 292.204240][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 292.209575][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 292.214968][ C1] ? security_file_permission+0x7f/0xa0 [ 292.220527][ C1] vfs_write+0xa72/0xc90 [ 292.224805][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 292.230107][ C1] ? __pfx_vfs_write+0x10/0x10 [ 292.234895][ C1] ? do_futex+0x33b/0x560 [ 292.239253][ C1] ksys_write+0x1a0/0x2c0 [ 292.243611][ C1] ? xfd_validate_state+0x6e/0x150 [ 292.248744][ C1] ? __pfx_ksys_write+0x10/0x10 [ 292.253626][ C1] ? rcu_is_watching+0x15/0xb0 [ 292.258402][ C1] ? rcu_is_watching+0x15/0xb0 [ 292.263183][ C1] do_syscall_64+0xf3/0x230 [ 292.267714][ C1] ? clear_bhb_loop+0x35/0x90 [ 292.272392][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.278311][ C1] RIP: 0033:0x7f3ebeb75a19 [ 292.282734][ C1] RSP: 002b:00007f3ebe5bd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.291187][ C1] RAX: ffffffffffffffda RBX: 00007f3ebed04110 RCX: 00007f3ebeb75a19 [ 292.299205][ C1] RDX: 0000000000000027 RSI: 0000000020000040 RDI: 0000000000000004 [ 292.307218][ C1] RBP: 00007f3ebebe4e49 R08: 0000000000000000 R09: 0000000000000000 [ 292.315223][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.323235][ C1] R13: 000000000000006e R14: 00007f3ebed04110 R15: 00007ffe40ca3f78 [ 292.331242][ C1] [ 292.334309][ C1] INFO: lockdep is turned off. [ 293.403247][ C1] DEBUG: holding rtnl_mutex for 814 jiffies. [ 293.409271][ C1] task:syz.3.987 state:D stack:20144 pid:8571 tgid:8570 ppid:5097 flags:0x00004006 [ 293.419483][ C1] Call Trace: [ 293.422779][ C1] [ 293.425731][ C1] __schedule+0x1800/0x4a60 [ 293.430239][ C1] ? __pfx___schedule+0x10/0x10 [ 293.435111][ C1] ? __pfx_lock_release+0x10/0x10 [ 293.440152][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 293.445632][ C1] ? schedule+0x90/0x320 [ 293.449885][ C1] schedule+0x14b/0x320 [ 293.454060][ C1] schedule_preempt_disabled+0x13/0x30 [ 293.459551][ C1] __mutex_lock+0x6a4/0xd70 [ 293.464080][ C1] ? __mutex_lock+0x527/0xd70 [ 293.468771][ C1] ? team_port_change_check+0x51/0x1e0 [ 293.474244][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 293.479286][ C1] ? __asan_memset+0x23/0x50 [ 293.483907][ C1] team_port_change_check+0x51/0x1e0 [ 293.489299][ C1] team_device_event+0x4e6/0x5b0 [ 293.494257][ C1] ? notifier_call_chain+0x162/0x3e0 [ 293.499558][ C1] notifier_call_chain+0x19f/0x3e0 [ 293.504698][ C1] __dev_notify_flags+0x207/0x400 [ 293.509731][ C1] ? dev_set_rx_mode+0xb8/0x2e0 [ 293.514620][ C1] ? __pfx___dev_notify_flags+0x10/0x10 [ 293.520181][ C1] ? __dev_change_flags+0x515/0x6f0 [ 293.525523][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 293.531210][ C1] ? dsa_user_netdevice_event+0x714/0x2970 [ 293.537074][ C1] dev_change_flags+0xf0/0x1a0 [ 293.541857][ C1] vlan_device_event+0x1b81/0x1de0 [ 293.547031][ C1] ? phonet_device_notify+0x20e/0x8c0 [ 293.552430][ C1] ? rt6_multipath_rebalance+0x7a0/0x880 [ 293.558092][ C1] ? br_device_event+0x148/0x970 [ 293.563067][ C1] ? __pfx_phonet_device_notify+0x10/0x10 [ 293.568833][ C1] ? __pfx_vlan_device_event+0x10/0x10 [ 293.574318][ C1] ? __pfx_br_device_event+0x10/0x10 [ 293.579628][ C1] ? raw_notifier+0x9d/0x740 [ 293.584245][ C1] ? isotp_notifier+0xa4/0x6b0 [ 293.589025][ C1] ? cgw_notifier+0xd8/0x3b0 [ 293.593638][ C1] ? packet_notifier+0x76/0xa30 [ 293.598505][ C1] notifier_call_chain+0x19f/0x3e0 [ 293.603681][ C1] dev_open+0x13a/0x1b0 [ 293.607880][ C1] ? __pfx_dev_open+0x10/0x10 [ 293.612550][ C1] ? team_add_slave+0x69e/0x2760 [ 293.617507][ C1] ? team_add_slave+0x69e/0x2760 [ 293.622487][ C1] ? team_add_slave+0x8b5/0x2760 [ 293.627452][ C1] team_add_slave+0x9c8/0x2760 [ 293.632264][ C1] ? __dev_change_flags+0x579/0x6f0 [ 293.637486][ C1] ? __pfx_team_add_slave+0x10/0x10 [ 293.642705][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 293.648269][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 293.653575][ C1] ? kernel_text_address+0xa7/0xe0 [ 293.658680][ C1] ? nla_strscpy+0x100/0x180 [ 293.663291][ C1] ? mutex_is_locked+0x12/0x50 [ 293.668076][ C1] do_setlink+0xe70/0x41f0 [ 293.672510][ C1] ? stack_trace_save+0x118/0x1d0 [ 293.677584][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 293.683005][ C1] ? __pfx_do_setlink+0x10/0x10 [ 293.687880][ C1] ? __nla_validate_parse+0x26ce/0x3090 [ 293.693480][ C1] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 293.699046][ C1] ? rtnl_newlink+0xe9/0x2070 [ 293.703755][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 293.709499][ C1] ? nla_strscpy+0x100/0x180 [ 293.714105][ C1] ? full_name_hash+0x93/0xe0 [ 293.718805][ C1] ? validate_linkmsg+0x71e/0x900 [ 293.723861][ C1] rtnl_newlink+0x17a9/0x2070 [ 293.728554][ C1] ? rtnl_newlink+0x471/0x2070 [ 293.733354][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 293.738393][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 293.744329][ C1] ? __pfx_lock_release+0x10/0x10 [ 293.749380][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 293.754429][ C1] rtnetlink_rcv_msg+0x744/0xd00 [ 293.759386][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 293.764526][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 293.770035][ C1] ? ref_tracker_free+0x643/0x7e0 [ 293.775098][ C1] netlink_rcv_skb+0x1e3/0x430 [ 293.779901][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 293.785438][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.790753][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.795989][ C1] netlink_unicast+0x7f0/0x990 [ 293.800781][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 293.806093][ C1] ? __virt_addr_valid+0x183/0x530 [ 293.811220][ C1] ? __check_object_size+0x49c/0x900 [ 293.816532][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 293.821663][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 293.826465][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.831763][ C1] ? __import_iovec+0x536/0x820 [ 293.836640][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 293.841599][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 293.846908][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 293.852384][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.857710][ C1] __sock_sendmsg+0x221/0x270 [ 293.862441][ C1] ____sys_sendmsg+0x525/0x7d0 [ 293.867242][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.872554][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 293.877164][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.882362][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.888728][ C1] ? do_syscall_64+0x100/0x230 [ 293.893543][ C1] ? do_syscall_64+0xb6/0x230 [ 293.898226][ C1] do_syscall_64+0xf3/0x230 [ 293.902723][ C1] ? clear_bhb_loop+0x35/0x90 [ 293.907436][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.913353][ C1] RIP: 0033:0x7f3ebeb75a19 [ 293.917761][ C1] RSP: 002b:00007f3ebe5ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.926201][ C1] RAX: ffffffffffffffda RBX: 00007f3ebed03f60 RCX: 00007f3ebeb75a19 [ 293.934195][ C1] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 293.942158][ C1] RBP: 00007f3ebebe4e49 R08: 0000000000000000 R09: 0000000000000000 [ 293.950147][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.958156][ C1] R13: 000000000000000b R14: 00007f3ebed03f60 R15: 00007ffe40ca3f78 [ 293.966167][ C1] [ 293.969193][ C1] DEBUG: waiting rtnl_mutex for 869 jiffies. [ 293.975183][ C1] task:kworker/1:0 state:D stack:22192 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 293.985375][ C1] Workqueue: events linkwatch_event [ 293.990573][ C1] Call Trace: [ 293.993865][ C1] [ 293.996805][ C1] __schedule+0x1800/0x4a60 [ 294.001333][ C1] ? __pfx___schedule+0x10/0x10 [ 294.006227][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 294.012226][ C1] ? __pfx_lock_release+0x10/0x10 [ 294.017299][ C1] ? kick_pool+0x1bd/0x620 [ 294.021740][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.026960][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 294.032179][ C1] ? schedule+0x90/0x320 [ 294.036449][ C1] schedule+0x14b/0x320 [ 294.040623][ C1] schedule_preempt_disabled+0x13/0x30 [ 294.046108][ C1] __mutex_lock+0x6a4/0xd70 [ 294.050631][ C1] ? __mutex_lock+0x527/0xd70 [ 294.055358][ C1] ? linkwatch_event+0xe/0x60 [ 294.060044][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 294.065116][ C1] ? get_rtnl_holder+0x144/0x190 [ 294.070069][ C1] ? process_scheduled_works+0x945/0x1830 [ 294.075830][ C1] linkwatch_event+0xe/0x60 [ 294.080341][ C1] process_scheduled_works+0xa2c/0x1830 [ 294.085945][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.091955][ C1] ? assign_work+0x364/0x3d0 [ 294.096574][ C1] worker_thread+0x86d/0xd40 [ 294.101202][ C1] ? __kthread_parkme+0x169/0x1d0 [ 294.106256][ C1] ? __pfx_worker_thread+0x10/0x10 [ 294.111386][ C1] kthread+0x2f0/0x390 [ 294.115478][ C1] ? __pfx_worker_thread+0x10/0x10 [ 294.120605][ C1] ? __pfx_kthread+0x10/0x10 [ 294.125246][ C1] ret_from_fork+0x4b/0x80 [ 294.129684][ C1] ? __pfx_kthread+0x10/0x10 [ 294.134301][ C1] ret_from_fork_asm+0x1a/0x30 [ 294.139095][ C1] [ 294.142107][ C1] DEBUG: waiting rtnl_mutex for 874 jiffies. [ 294.148118][ C1] task:syz.3.987 state:D stack:26960 pid:8572 tgid:8570 ppid:5097 flags:0x00000004 [ 294.158320][ C1] Call Trace: [ 294.161599][ C1] [ 294.164572][ C1] __schedule+0x1800/0x4a60 [ 294.169099][ C1] ? __pfx___schedule+0x10/0x10 [ 294.173983][ C1] ? __pfx_lock_release+0x10/0x10 [ 294.179035][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 294.184530][ C1] ? schedule+0x90/0x320 [ 294.188796][ C1] schedule+0x14b/0x320 [ 294.192973][ C1] schedule_preempt_disabled+0x13/0x30 [ 294.198446][ C1] __mutex_lock+0x6a4/0xd70 [ 294.202985][ C1] ? __mutex_lock+0x527/0xd70 [ 294.207676][ C1] ? dev_ethtool+0x21e/0x1bc0 [ 294.212362][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 294.217412][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 294.222193][ C1] ? get_rtnl_holder+0x144/0x190 [ 294.227189][ C1] dev_ethtool+0x21e/0x1bc0 [ 294.231716][ C1] ? dev_load+0x21/0x1f0 [ 294.235992][ C1] ? __pfx_dev_ethtool+0x10/0x10 [ 294.240948][ C1] ? dev_load+0x21/0x1f0 [ 294.245216][ C1] dev_ioctl+0x785/0x1340 [ 294.249561][ C1] sock_do_ioctl+0x240/0x460 [ 294.254176][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 294.259311][ C1] sock_ioctl+0x629/0x8e0 [ 294.263669][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 294.268549][ C1] ? __fget_files+0x29/0x470 [ 294.273162][ C1] ? __fget_files+0x3f6/0x470 [ 294.277846][ C1] ? __fget_files+0x29/0x470 [ 294.282428][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 294.287407][ C1] ? security_file_ioctl+0x87/0xb0 [ 294.292532][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 294.297437][ C1] __se_sys_ioctl+0xfc/0x170 [ 294.302055][ C1] do_syscall_64+0xf3/0x230 [ 294.306589][ C1] ? clear_bhb_loop+0x35/0x90 [ 294.311284][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.317210][ C1] RIP: 0033:0x7f3ebeb75a19 [ 294.321633][ C1] RSP: 002b:00007f3ebe5de048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.330087][ C1] RAX: ffffffffffffffda RBX: 00007f3ebed04038 RCX: 00007f3ebeb75a19 [ 294.338114][ C1] RDX: 0000000020000080 RSI: 0000000000008946 RDI: 0000000000000008 [ 294.346158][ C1] RBP: 00007f3ebebe4e49 R08: 0000000000000000 R09: 0000000000000000 [ 294.354151][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.362130][ C1] R13: 000000000000006e R14: 00007f3ebed04038 R15: 00007ffe40ca3f78 [ 294.370137][ C1] [ 294.373173][ C1] DEBUG: waiting rtnl_mutex for 898 jiffies. [ 294.379133][ C1] task:kworker/u8:5 state:D stack:21936 pid:1054 tgid:1054 ppid:2 flags:0x00004000 [ 294.389309][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 294.395363][ C1] Call Trace: [ 294.398650][ C1] [ 294.401581][ C1] __schedule+0x1800/0x4a60 [ 294.406136][ C1] ? __pfx___schedule+0x10/0x10 [ 294.411007][ C1] ? __pfx_lock_release+0x10/0x10 [ 294.416114][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 294.421610][ C1] ? kthread_data+0x52/0xd0 [ 294.426164][ C1] ? schedule+0x90/0x320 [ 294.430430][ C1] ? wq_worker_sleeping+0x66/0x240 [ 294.435582][ C1] ? schedule+0x90/0x320 [ 294.439841][ C1] schedule+0x14b/0x320 [ 294.444032][ C1] schedule_preempt_disabled+0x13/0x30 [ 294.449517][ C1] __mutex_lock+0x6a4/0xd70 [ 294.454066][ C1] ? mark_lock+0x9a/0x360 [ 294.458394][ C1] ? __mutex_lock+0x527/0xd70 [ 294.463089][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 294.468218][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 294.473287][ C1] ? get_rtnl_holder+0x144/0x190 [ 294.478246][ C1] addrconf_dad_work+0xd0/0x16f0 [ 294.483209][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 294.488678][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.495047][ C1] ? process_scheduled_works+0x945/0x1830 [ 294.500779][ C1] process_scheduled_works+0xa2c/0x1830 [ 294.506364][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.512378][ C1] ? assign_work+0x364/0x3d0 [ 294.516994][ C1] worker_thread+0x86d/0xd40 [ 294.521618][ C1] ? __kthread_parkme+0x169/0x1d0 [ 294.526689][ C1] ? __pfx_worker_thread+0x10/0x10 [ 294.531824][ C1] kthread+0x2f0/0x390 [ 294.535919][ C1] ? __pfx_worker_thread+0x10/0x10 [ 294.541052][ C1] ? __pfx_kthread+0x10/0x10 [ 294.545673][ C1] ret_from_fork+0x4b/0x80 [ 294.550115][ C1] ? __pfx_kthread+0x10/0x10 [ 294.554723][ C1] ret_from_fork_asm+0x1a/0x30 [ 294.559530][ C1] [ 294.562545][ C1] DEBUG: waiting rtnl_mutex for 914 jiffies. [ 294.568537][ C1] task:syz.2.989 state:D stack:27696 pid:8575 tgid:8574 ppid:6981 flags:0x00004004 [ 294.578754][ C1] Call Trace: [ 294.582036][ C1] [ 294.584990][ C1] __schedule+0x1800/0x4a60 [ 294.589520][ C1] ? schedule+0x90/0x320 [ 294.593788][ C1] ? lock_release+0xbf/0xa30 [ 294.598409][ C1] ? __pfx___schedule+0x10/0x10 [ 294.603306][ C1] ? __pfx_lock_release+0x10/0x10 [ 294.608365][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 294.613853][ C1] ? mutex_spin_on_owner+0x26c/0x330 [ 294.619160][ C1] ? schedule+0x90/0x320 [ 294.623439][ C1] schedule+0x14b/0x320 [ 294.627617][ C1] schedule_preempt_disabled+0x13/0x30 [ 294.633105][ C1] __mutex_lock+0x6a4/0xd70 [ 294.637630][ C1] ? __mutex_lock+0x527/0xd70 [ 294.642316][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 294.647479][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 294.652524][ C1] ? security_capable+0x90/0xb0 [ 294.657481][ C1] ? get_rtnl_holder+0x144/0x190 [ 294.662433][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 294.667408][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 294.672541][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 294.678024][ C1] ? ref_tracker_free+0x643/0x7e0 [ 294.683092][ C1] netlink_rcv_skb+0x1e3/0x430 [ 294.687855][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 294.693354][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.698682][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.703911][ C1] netlink_unicast+0x7f0/0x990 [ 294.708697][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 294.714013][ C1] ? __virt_addr_valid+0x183/0x530 [ 294.719162][ C1] ? __check_object_size+0x49c/0x900 [ 294.724481][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 294.729637][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 294.734430][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.739726][ C1] ? count_memcg_event_mm+0x94/0x420 [ 294.745038][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 294.749993][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 294.755305][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 294.760801][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.766126][ C1] __sock_sendmsg+0x221/0x270 [ 294.770825][ C1] __sys_sendto+0x3a4/0x4f0 [ 294.775361][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 294.780403][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 294.785459][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.791812][ C1] ? __pfx___up_read+0x10/0x10 [ 294.796614][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.802986][ C1] ? rcu_is_watching+0x15/0xb0 [ 294.807756][ C1] __x64_sys_sendto+0xde/0x100 [ 294.812510][ C1] do_syscall_64+0xf3/0x230 [ 294.817035][ C1] ? clear_bhb_loop+0x35/0x90 [ 294.821736][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.827683][ C1] RIP: 0033:0x7fafc59777ac [ 294.832110][ C1] RSP: 002b:00007fafc6679ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 294.840550][ C1] RAX: ffffffffffffffda RBX: 00007fafc6679fd0 RCX: 00007fafc59777ac [ 294.848575][ C1] RDX: 0000000000000020 RSI: 00007fafc667a020 RDI: 0000000000000004 [ 294.856573][ C1] RBP: 0000000000000000 R08: 00007fafc6679f24 R09: 000000000000000c [ 294.864573][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 294.872537][ C1] R13: 00007fafc6679f78 R14: 00007fafc667a020 R15: 0000000000000000 [ 294.880543][ C1] [ 294.883590][ C1] DEBUG: waiting rtnl_mutex for 856 jiffies. [ 294.889559][ C1] task:syz.3.987 state:D stack:27064 pid:8578 tgid:8570 ppid:5097 flags:0x00000004 [ 294.899734][ C1] Call Trace: [ 294.903043][ C1] [ 294.905969][ C1] __schedule+0x1800/0x4a60 [ 294.910470][ C1] ? schedule+0x90/0x320 [ 294.914728][ C1] ? lock_release+0xbf/0xa30 [ 294.919339][ C1] ? __pfx___schedule+0x10/0x10 [ 294.924220][ C1] ? __pfx_lock_release+0x10/0x10 [ 294.929271][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 294.934771][ C1] ? schedule+0x90/0x320 [ 294.939048][ C1] schedule+0x14b/0x320 [ 294.943236][ C1] schedule_preempt_disabled+0x13/0x30 [ 294.948708][ C1] __mutex_lock+0x6a4/0xd70 [ 294.953245][ C1] ? __mutex_lock+0x527/0xd70 [ 294.957952][ C1] ? packet_diag_dump+0xbb9/0x22c0 [ 294.963093][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 294.968132][ C1] ? from_kuid_munged+0x1ed/0x7b0 [ 294.973174][ C1] ? nla_put+0x131/0x1e0 [ 294.977428][ C1] ? get_rtnl_holder+0x144/0x190 [ 294.982364][ C1] packet_diag_dump+0xbb9/0x22c0 [ 294.987339][ C1] ? __pfx_packet_diag_dump+0x10/0x10 [ 294.992728][ C1] ? __build_skb_around+0x245/0x3d0 [ 294.997945][ C1] ? __alloc_skb+0x28f/0x440 [ 295.002563][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 295.008172][ C1] netlink_dump+0x647/0xd80 [ 295.012712][ C1] ? __pfx_netlink_dump+0x10/0x10 [ 295.017780][ C1] ? __netlink_lookup+0x780/0x890 [ 295.022835][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 295.027998][ C1] __netlink_dump_start+0x59f/0x780 [ 295.033251][ C1] packet_diag_handler_dump+0x1e4/0x290 [ 295.038829][ C1] ? __pfx_packet_diag_handler_dump+0x10/0x10 [ 295.044942][ C1] ? __pfx_packet_diag_dump+0x10/0x10 [ 295.050349][ C1] ? sock_diag_lock_handler+0x19/0x280 [ 295.055851][ C1] ? __pfx_packet_diag_handler_dump+0x10/0x10 [ 295.061955][ C1] sock_diag_rcv_msg+0x3dc/0x5f0 [ 295.066934][ C1] netlink_rcv_skb+0x1e3/0x430 [ 295.071703][ C1] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 295.077187][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.082523][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.087745][ C1] netlink_unicast+0x7f0/0x990 [ 295.092531][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 295.097832][ C1] ? __virt_addr_valid+0x183/0x530 [ 295.102975][ C1] ? __check_object_size+0x49c/0x900 [ 295.108257][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 295.113411][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 295.118199][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.123506][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 295.128458][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 295.133758][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 295.139247][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.144547][ C1] __sock_sendmsg+0x221/0x270 [ 295.149252][ C1] sock_write_iter+0x2dd/0x400 [ 295.154039][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 295.159350][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 295.164757][ C1] ? security_file_permission+0x7f/0xa0 [ 295.170319][ C1] vfs_write+0xa72/0xc90 [ 295.174603][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 295.179905][ C1] ? __pfx_vfs_write+0x10/0x10 [ 295.184687][ C1] ? do_futex+0x33b/0x560 [ 295.189037][ C1] ksys_write+0x1a0/0x2c0 [ 295.193408][ C1] ? xfd_validate_state+0x6e/0x150 [ 295.198545][ C1] ? __pfx_ksys_write+0x10/0x10 [ 295.203424][ C1] ? rcu_is_watching+0x15/0xb0 [ 295.208203][ C1] ? rcu_is_watching+0x15/0xb0 [ 295.212992][ C1] do_syscall_64+0xf3/0x230 [ 295.217519][ C1] ? clear_bhb_loop+0x35/0x90 [ 295.222195][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.228110][ C1] RIP: 0033:0x7f3ebeb75a19 [ 295.232557][ C1] RSP: 002b:00007f3ebe5bd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.240989][ C1] RAX: ffffffffffffffda RBX: 00007f3ebed04110 RCX: 00007f3ebeb75a19 [ 295.248982][ C1] RDX: 0000000000000027 RSI: 0000000020000040 RDI: 0000000000000004 [ 295.257060][ C1] RBP: 00007f3ebebe4e49 R08: 0000000000000000 R09: 0000000000000000 [ 295.265076][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.273070][ C1] R13: 000000000000006e R14: 00007f3ebed04110 R15: 00007ffe40ca3f78 [ 295.281054][ C1] [ 295.284091][ C1] DEBUG: waiting rtnl_mutex for 792 jiffies. [ 295.290091][ C1] task:syz.2.989 state:D stack:27728 pid:8577 tgid:8574 ppid:6981 flags:0x00000004 [ 295.300272][ C1] Call Trace: [ 295.303594][ C1] [ 295.306517][ C1] __schedule+0x1800/0x4a60 [ 295.311024][ C1] ? schedule+0x90/0x320 [ 295.315285][ C1] ? lock_release+0xbf/0xa30 [ 295.319891][ C1] ? __pfx___schedule+0x10/0x10 [ 295.324759][ C1] ? __pfx_lock_release+0x10/0x10 [ 295.329807][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 295.335293][ C1] ? schedule+0x90/0x320 [ 295.339546][ C1] schedule+0x14b/0x320 [ 295.343722][ C1] schedule_preempt_disabled+0x13/0x30 [ 295.349192][ C1] __mutex_lock+0x6a4/0xd70 [ 295.353714][ C1] ? __mutex_lock+0x527/0xd70 [ 295.358427][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 295.363562][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 295.368785][ C1] ? security_capable+0x90/0xb0 [ 295.373671][ C1] ? get_rtnl_holder+0x144/0x190 [ 295.378637][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 295.383614][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 295.388746][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.394236][ C1] ? ref_tracker_free+0x643/0x7e0 [ 295.399283][ C1] netlink_rcv_skb+0x1e3/0x430 [ 295.404076][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.409568][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.414887][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.420104][ C1] netlink_unicast+0x7f0/0x990 [ 295.424910][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 295.430210][ C1] ? __virt_addr_valid+0x183/0x530 [ 295.435339][ C1] ? __check_object_size+0x49c/0x900 [ 295.440643][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 295.445786][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 295.450569][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.455866][ C1] ? __import_iovec+0x536/0x820