last executing test programs: 34.030567836s ago: executing program 3 (id=1154): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/crypto\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x0, 0x0) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}}, 0x100) syz_usb_connect(0x3, 0x2d, &(0x7f00000052c0)={{0x12, 0x1, 0x300, 0x3, 0x3d, 0xd6, 0x8, 0x6f8, 0xb000, 0x5da8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x8, 0xb0, 0x6, [{{0x9, 0x4, 0x5, 0x9, 0x1, 0x84, 0x43, 0x5f, 0x7, [], [{{0x9, 0x5, 0x1, 0x3, 0x0, 0xc0, 0x3}}]}}]}}]}}, &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0}) 30.909907565s ago: executing program 3 (id=1170): openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) socket$inet6(0xa, 0x802, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, 0x0) 30.668165181s ago: executing program 3 (id=1172): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket(0x1e, 0x5, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, &(0x7f0000000a40)="cd", 0x34000, 0x0, &(0x7f0000000ac0), 0x10) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0xfffffffffffffffd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r11, 0x8935, &(0x7f0000000040)={'gre0\x00'}) 23.472043173s ago: executing program 2 (id=1192): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x107181) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f00000001c0)=0xffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000004}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000004000000010000000900000000000000", @ANYRES32, @ANYBLOB="800000000000d00000000000f2ffffffffffff07c9d48f2b580151e517aabdc6a3fd9a729c96447a274fc52bdf14f51424bc5ff2a0dd583d5836fb1e580f0a05af3dd7d6c37e9743218672549fade0931aeeae411e65bb71786c3dc3622b9129838324cd7b48fbc0d1e8dafb90dbd98ee3522f6a687444ef2670db5a4802ff75351d8d34b3d7dd8e204ba18030e2534a335ec48c6f1aed4b42c65c84ef5e909c16c3b9664346c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) epoll_pwait(r4, &(0x7f0000000300), 0x1, 0xfffffffc, 0x0, 0xfffffffffffffff6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0x50002000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000180001801400020073797a5f74756e0000000000000000000500030002000000050002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008041) preadv(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xffff}) 6.488009741s ago: executing program 0 (id=1238): syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = syz_clone3(&(0x7f0000000280)={0x188000100, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x3f}, &(0x7f0000000100)=""/17, 0x11, &(0x7f0000000140)=""/245, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x80000001, 0x8, {r2}, {r3}, 0x140, 0x691600000}) (async) r7 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x3, 0xe, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x8, 0x4, 0x5, 0x0, 0x9}, 0x1a, &(0x7f0000000480)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x9c, 0x4a, 0x81, 0x0, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x9, 0xfff}, @ptm_cap={0x3}]}, 0x6, [{0x41, &(0x7f00000004c0)=@string={0x41, 0x3, "fb5e8038c375856982057baba01d0316a297c587197a81d1608ecf056153404f6c9cc681e21392e6d6a47e71f7f8de32007389ba9577c0feef35acc7fda4f5"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x458}}, {0xff, &(0x7f0000000580)=@string={0xff, 0x3, "c039e80f15a41fe45c11cae1c6bbef2192380d39fe821e70cfd32b6f0a4b7c50be1d6c76a5bb8dac72019d2ea4c7b61be1ee0a0fe2a5f1af478bc39f6aa8605e27b56e107122043d010fa1b4b3a98ffede26e49b34a99bbfe27f9d5ad574817d508164ad0f6ef8c11272baaa93a5027d72d801a4ffe7f5bb9bb661e35f9a423fea8177c8da43b84e8fcbcd5f8e51cfd25399c5370c70fe5fada3a3f301800c23630e770693b887d1ab3f5c223b773bcba7fd20ac72f6b8650e84b720f0921d95a4d3ee2946b1e69b575b457886a7de8e3cf18b953ab640354f8e2c5966ccb7ac48e79225f6a345753fab15e7366e9d38fce017deeae797f130e6853eaf"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io(r7, &(0x7f0000000a00)={0x2c, &(0x7f00000007c0)={0x20, 0x24, 0x39, {0x39, 0x22, "604a6d513c67d52c9068cec3d06d5e9f1526025c0f9c1118b90f6a75453cdc3465fe2c85e6fcb6b12b7dc017b6b7cd9a4140276622ad77"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000840)={0x0, 0xf, 0x116, {0x5, 0xf, 0x116, 0x2, [@generic={0x54, 0x10, 0x0, "50d4ef8d9dd7062e264dc4824a0dc8f44fc180040b2d961473a388c500ec9d53e49fb6891977f2deda2b6b3215d01f0d1b5e00febc2de9be055eccc0b768d20e2021599e7b6b30f0e89438922625b10e0b"}, @generic={0xbd, 0x10, 0x1, "3608f6c5963d49df0e11cc2d848fbd21b0914eae2b5ece8feca60d123687e7bdcb58a3713acc1769a0c75eac2a6ebd88c747add950818dcda321b8d4b94b6b60651513e7506e080f98a2f373eb0595f63251800b48a588eb9155ebd46150586e4f52e0b0e3de6329212856634baf66a8cb972dc0d93d569eba157cfd059545b381f086eccb81ce0695ef4ab983f32fdbb39d325434d84de4a0ac434d38521b88d9e1da027a0f7638519711856783c1927679b63e625ec7eed3f2"}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x3, 0x0, 0x6, "3b5aa4a7", "35899165"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x1, 0x4, 0x1, 0x68bd, 0x9114}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)={0x0, 0x15, 0x3c, "3985689d98e149c603cd68e3e6731cbcf3d0382fa227a9d2a4f59dde03e7750e9b2bf60bff0323da9e260b4fce62bf09d36a11e8c78721852af26413"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x60, 0x20}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xf}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000c40)={0x40, 0xb, 0x2, 'lb'}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0xfe}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "32df"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0xb}}) r8 = socket$inet(0x2, 0x80000, 0x6) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000fc0)="2dd5f263e7b40f26e85cf25fe2c3cdf0c0edeba7ac66b9f6e0978927075a181b2dcd9e43325759f0872930d88ae05fc2ab9cd9209e7ea03554ce424945133a7105f07c81ff501c445ac1c09f87ef08a0583cbd86aad16122869d094542cf5294c91a20247d781a923c40b7f6f79cf990c2f7d32568327107603dbda4afce6677f82f50288cd27d8c91b5c5d616d7fe1284adc5ba75ab8a28ca18649437b8a01beab9d813653e0d8813af01d014235c94f7353a056ffad44506137ce391360679f0d6f2f85be1a0cc8035ff653148dcf9", 0xd0}, {&(0x7f00000010c0)="2b4cb64e1064c6507b3ae0b8a21b1d2c34c3ce7795aacb9e9f6e1b979d61e63c80b2986061c466f4f2c55f74bd986d7dac40fc7de18b1c2dbb3e20f48da97aba930f2b02477804e4cb40bdc5470037263d3ebdec207aa22900a1bd997a79f4bc713692b5caf2fd63a2a39e21c63deb36e36ecbf5ad0019887da3e9ba2968b22605126421c280eb0a422b504ad3df87bbfbe9e8d12ef1240fb8340c6d2fe1385deae195f9159bc706140bac7fa11a21154dba70f02bd705f90bde3437030fda78162b5a3a617205d282c9e7102db4ab57985f6a48682cb28e732f62afab1a", 0xde}, {&(0x7f00000011c0)="b28c4a5d56756e0aa37f34455b7f56c030625fe85a74ba548472f1ecea0b50f84963e39970a5bb88b5176ebb2f7b887ba33df97fb72ca465a91bfe5a118fba0d962173690eb3981322b2913e0ac4337e803e53087c41e11711eee241a0f8276bd921781ee9befbf48bef26257f4371840dbe3e702aa4ece4d200fa7f4a13d29e5189b851164e7917d765e228193f92d8d491c1d60b63d13c2a94b5c03d553ce8a8cc62e1ff07ba751efcb9e7ff5a160dba21", 0xb2}, {&(0x7f0000001280)="724bec05f8410bc1cb2f6861a3dfb1c57b4b16134c279afd7f7b90423b86", 0x1e}, {&(0x7f00000012c0)="a090f46a6f2b3ef341b3cb5ba644fa1a4e3f1f18a63df48b5b7766489e952232a45a72d288686a7231016ac18dcf0535f8d04282f678c53a125a2bcd1e869d0e6b66a69d0ff63d2fa4bff2a269bf2518196a23eaeae91b3a33ddcac7ef744f367cd260b32af269f536fd262e66c4971bc1dc1e4936e814eaa2204ba3aa86190f83ad367f46887444c9a27955835a1cf925724d1867d31893f1834c7aeef953e8232d3d68e8d3de5d6ebd3a5bcfa3367a2027c48ba2159c7748966cc81f631cb5ede8336e03430f55bf4570", 0xcb}, {&(0x7f00000013c0)="3c0055969c9e514d2dbb017de526adeefe2cc2f895128a6362b9ed2638bc69040e023e8caacb3f4142e8096e264ec45953ef7cedd4acc6a18fb9f1b123f705797ea26d432f1631ac1675d7b07ec008a65e8297f228d9420ef01a916ddc880a1f812c74cfabbca567f0266e1bea3bef7ff415ee2cdcb0b2d8b12325f3f025e2ba4ea3227612", 0x85}, {&(0x7f0000001480)="17527c5e2fe2cd41c51f24f79e5beef9c394505f370528617a21b845b970e1de9ec08d95686f979276", 0x29}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="d778d12e1d5405ad8ede6474a55f30cd16d3cffffd0f4567ec9eab6dd9f91ee17f3bc10d4f0ad2bf17d4e36f4d9a54ec61516932", 0x34}], 0x9, &(0x7f00000025c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r3}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r4}}}, @cred={{0x1c, 0x1, 0x2, {r2, r6, r4}}}], 0x78, 0x40000}, 0x200000c4) syz_open_dev$video(&(0x7f0000002680), 0xfffffffffffffff8, 0x181b00) (async) getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f00000026c0), &(0x7f0000002700)=0x4) (async) r9 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r9, &(0x7f0000002740)={{0x107, 0xfb, 0x6, 0x3ab, 0x23e, 0x80, 0x127, 0x8}, "5e2fd99fc2203f61b3dc04b5d8abf0ed6c232346fc03956aca70d5d056b29797c78d26132c4370945cedf31a935341f018af0cf048cd59b1b7f78c78c6626f9d0b633fd56acea176272222c91f6c5dc173fed60628637d71c91c5504b3cc3f1416775ddddebf4002b96e8de08f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x88d) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r10, 0x10e, 0x8, &(0x7f0000003000)=0x80000000, 0x4) (async) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000003040)={{0x29, @loopback, 0x4e20, 0x4, 'ovf\x00', 0x1a, 0x4, 0x33}, {@remote, 0x4e21, 0x1, 0x431, 0x8, 0xf8000000}}, 0x44) (async) write$binfmt_misc(r9, &(0x7f00000030c0)="f8517a1e2a77158009fe847e6100d5d44079d0ce58d313ba94fdc8f28332433c52566841a75df4a787", 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000003180)={0xa, &(0x7f0000003100)=[{0x8, 0x7, 0x8, 0x5}, {0x6f, 0x2, 0x2, 0x7ff}, {0x2, 0x0, 0x3, 0x7}, {0x7, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x6e, 0x389}, {0x81, 0xf9, 0x80, 0x9}, {0x7, 0xb1, 0xe2, 0x8}, {0x0, 0xfc, 0x2, 0x4}, {0x1, 0x7, 0x77, 0x2}, {0x0, 0x4, 0xe, 0x4ecf317}]}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000031c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x60, 0x9, 0x9, 0x5, 0x49a, 0xa4, "91b6d296007e8e37ea21782c95f5e88a1f3aa44b4e449f795f2691d6ad5c85f2cb150af37bc4d9df25cdcb83526534dedd9390f5d6b23e11ac2806efbbcbb0d3edf230f624da0ec8e48ddcd87df4ff63c6393e9cc740b85387d70ca21c45fd63"}}, 0x178) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000003340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$isdn(r11, &(0x7f0000003380)={0x22, 0xe3, 0x81, 0x81, 0x37}, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000033c0)={0x3, 0x0, 0xdddd1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000003400)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000003440), r11) ioctl$USBDEVFS_CONNECTINFO(r11, 0x40085511, &(0x7f0000003480)) (async) r12 = openat$random(0xffffff9c, &(0x7f00000034c0), 0x4, 0x0) fcntl$F_SET_RW_HINT(r12, 0x40c, &(0x7f0000003500)=0x1) (async) r13 = pidfd_getfd(r1, r8, 0x0) bind$inet(r13, &(0x7f0000003540)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0x10, r11, 0x8e434000) (async) ioctl$KVM_GET_MP_STATE(r11, 0x8004ae98, &(0x7f0000003580)) 6.300040263s ago: executing program 0 (id=1240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x5, 0x10001, 0x44495658, 0x4, 0x2, [{0x7, 0x2f2}, {0x35c}, {0xfffffffd, 0x6}, {0x9c, 0x2}, {0x9}, {0x8}, {0x2, 0x2}, {0x380, 0x9}], 0x1, 0x9, 0x4, 0x0, 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)) 5.835989947s ago: executing program 0 (id=1241): r0 = memfd_create(&(0x7f00000004c0)='\xacshU\xd6\r\x87%\bn\xd7\xc3W\xc3\x96\vem\xda\x99R@\x9b)\x18m\xfc\xfe\x9b', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x1051, r0, 0xb4da4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x208, 0x1b8, 0x32, 0x148, 0x0, 0x148, 0x290, 0x240, 0x240, 0x290, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x88}}, {0x28}}}}, 0x268) 5.616196843s ago: executing program 0 (id=1243): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x101200000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES8=r1, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x84e) munlockall() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f00000003c0)=""/20, 0x14) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x19) pipe(&(0x7f0000000080)) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @broadcast}, 0x34) vmsplice(r2, &(0x7f0000000900)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b5", 0x1}, {&(0x7f00000005c0)="ef", 0x1}, {&(0x7f0000000300)="e7", 0x1}, {&(0x7f00000004c0)='\x00\x00', 0x2}, {&(0x7f0000000380)="c9", 0x1}, {&(0x7f0000000b00)="c8", 0x1}, {&(0x7f00000000c0)="f6", 0x1}, {&(0x7f0000000100)="56f0", 0x2}, {&(0x7f0000000440)="61a55507000020d2666598372698d08281d9c092942b701bc584a24a56318fb98dcef11489eb1f95d3f2ebcdb4568a0700dc44332dc4184fa1ed77a94be0e8e1be4e980575a11c0373b83fd0034c602c107e8308ae784dfe3a0f01bb135c4d0f062387a1b2a6d36e731fad88881a46c4ccf822", 0x73}, {&(0x7f0000001040)="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", 0x3ad}, {&(0x7f0000000b40)="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", 0x161}, {&(0x7f0000000400)="da30adaaa5", 0x5}, {&(0x7f0000000d00)="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", 0x30b}, {&(0x7f0000000180)="992deaf2b8be147003080700", 0xc}, {&(0x7f0000000800)="e089b96f32a15fa935f6d775ca79ccef8f54ce2dc9d6874582d63b4d33af69da84c3293df247bce104b4aed1832d788c40428746f1ab4ab5d529ef8653dc276204a2c0c236619c9b6b3f86ff699e3e3d5778af527f489353e66663e90ffed0905597fdd640c735f98518fa0c0fbc10246cbde0a36c6128f680972b33fb7a727a15b31785d5758450bd0cb1a7e11e363d5815319fe3387b6d89b8b1013a36c89491a49e3fdbaf177db052772a83f3001bfda3cc0536facd2d54b37666974dd801d759ec0b78bd9c04b7ab71903019b5858fcf7fdf707ca3422162e8f7f3845ef32a6e4cce3a3b8dc1c0840d8c19", 0xed}], 0x10, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.389620803s ago: executing program 3 (id=1173): socket$inet6(0xa, 0x3, 0x20) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.112317635s ago: executing program 1 (id=1245): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x6c) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x905) socket$inet6(0xa, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x14280000000000}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0) 4.922444563s ago: executing program 3 (id=1246): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket(0x1e, 0x5, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r7, &(0x7f0000000a40)="cd", 0x34000, 0x0, &(0x7f0000000ac0), 0x10) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r6, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0xfffffffffffffffd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000000040)={'gre0\x00'}) 3.564288742s ago: executing program 1 (id=1248): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.250584097s ago: executing program 1 (id=1250): io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xfffffffffffffdef}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0}]) 2.976319762s ago: executing program 1 (id=1251): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xa3, 0x0, &(0x7f0000000100)}) syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) r3 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) close(r0) 2.8979915s ago: executing program 2 (id=1194): unshare(0x68040200) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x2, 0x0, 0x20000007) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x3000000, @vifc_lcl_addr=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 2.685607588s ago: executing program 4 (id=1252): preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/144, 0x90}], 0x1, 0x1, 0x4) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0xff}) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000200)={'sit0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x1e, 0x5, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x5}}, 0x50) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/223, 0xdf}], 0x1, &(0x7f0000000b40)=""/211, 0xd3}, 0x10101) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0)=[{{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}], 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='ip6erspan0\x00') sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f0000000080)={0x5, 0x40, 0x8000, {0x77359400}, {0x0, 0x2710}, {0x4, 0x0, 0x1}, 0x1, @can={{0x3}, 0x2, 0x3, 0x0, 0x0, "5faf1f4eb0d5c0f5"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000060}, 0x4000001) 2.366154292s ago: executing program 4 (id=1253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 2.108007667s ago: executing program 4 (id=1254): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) 1.65077955s ago: executing program 3 (id=1255): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xd8, 0x34, 0x88, 0x8, 0x1a0a, 0x101, 0x1b21, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x50, 0x56}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[], 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104000000000000000000000003", @ANYRES32=0x0, @ANYBLOB="4ba2000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC], 0x44}}, 0x0) 1.287092357s ago: executing program 0 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000103000000000000000a0a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x0) 1.211560774s ago: executing program 4 (id=1257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000010003b0c0000000002e4ffffff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b00010065727370616e000030000280060003000080000006000200b60000000800060000000000040012"], 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) 1.17300974s ago: executing program 0 (id=1258): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket(0x1e, 0x5, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r7, &(0x7f0000000a40)="cd", 0x34000, 0x0, &(0x7f0000000ac0), 0x10) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r6, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x20000000000003}) fcntl$lock(r9, 0x26, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0xfffffffffffffffd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 1.099881355s ago: executing program 4 (id=1259): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 959.724035ms ago: executing program 2 (id=1260): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x3ff, 0x7, 0x4, 0x100000, 0x2, {0x77359400}, {0x5, 0x2, 0x80, 0x4, 0x0, 0xc7, "ef4fba9e"}, 0x915c, 0x4, {0xffffffffffffffff}, 0xfffffff2, 0x0, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="3d68802b261fd09520a578384fa15175ad3f015bb49f7b8991a29c9b4dd630b2eff2f1bb2e74a062e3be5fd78ebfa56828a2cfd42e97263e2ffbe1cf2d6ecdfe0aef9ac3e4aaf4f1c6939ceeb2a46474d929962b0955a18e5eca30aadc9a6d7d37fa8cdd3a0800"/112, 0x6a, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @local, 0xfffffff9}, 0x5d) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xf, @mcast1, 0xc}], 0x1c) sendto$inet6(r3, &(0x7f0000000000)='\b', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) fcntl$getown(r1, 0x9) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) sched_setaffinity(r6, 0x0, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r2, &(0x7f0000003bc0)=[{&(0x7f00000002c0)=""/94}, {&(0x7f0000002680)=""/153}, {&(0x7f0000002740)=""/211}, {&(0x7f0000002840)=""/204}, {&(0x7f0000000240)=""/14}, {&(0x7f0000002940)=""/4096}, {&(0x7f0000003940)=""/144}, {&(0x7f0000003a00)=""/156}, {&(0x7f0000003c80)=""/77}, {&(0x7f0000003ac0)=""/208}], 0x5, 0xfff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r7, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 959.185148ms ago: executing program 4 (id=1261): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000022000000000000000000000f010c"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0xfffffffffffffd3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000600)="66b9800000c00f326635004000000f3066b8004000000f23c00f21f86635020003000f23f867f30fa7c02e0fd3b305000fc71bba2100b059ee0f01c40f78a7f1252e3e0f5e8506000fc733", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd36b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49b65173e7da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa7cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="201600010000119c982359b143533d6acfa67959412057819e10b977760665c92c11474cf4a38bc67ebf085ff3ca0d85ed3abae380ccc331c9713a97df80008040259d6d56158bbd6fc03fd23a95cd907385aba04203a2da0002515125b7602a5ddb9854fb4afc8846c01a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000080), 0x0) close(r7) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 806.012298ms ago: executing program 1 (id=1262): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5c, 0x4c000000}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 651.162823ms ago: executing program 2 (id=1263): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {0x4000000}, {}, {0x4}]}}) 540.214362ms ago: executing program 1 (id=1264): socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket(0x1e, 0x803, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000100c0603000000000000000000000000000900020073797a3000000000050001000700000013e528bdaf646d9ea32931792d2fb1dbc59eb2912bf91ae68f65006979ece342584ace5464a0154c71f776ae7ed526305af8a7bb0c3a678d090b3bb02764f01a95c2cce34027fd2f8a7b2c6fb0647fa4ffffffff63dea51841128495f9272bcece4bd8f5cb6ba1cc488f"], 0x28}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2680, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket(0x11, 0xa, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44}, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="20fe6800430001000000000000020000000000000b000800767863616e310000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40010) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff0200020002000008000400", 0x20) 530.919091ms ago: executing program 2 (id=1265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}}, 0x0) (fail_nth: 2) 0s ago: executing program 2 (id=1267): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x40840) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005504000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) kernel console output (not intermixed with test programs): mainder of the config [ 349.026343][ T5308] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 349.047113][ T5308] usb 1-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 349.066725][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.122689][ T9557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.134685][ T9557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.166484][ T9556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.291070][ T5308] usb 1-1: string descriptor 0 read error: -71 [ 349.301784][ T5308] usb 1-1: USB disconnect, device number 42 [ 350.116991][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.128959][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.143222][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.165226][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.308813][ T5279] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 350.435418][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.479866][ T5279] usb 3-1: Using ep0 maxpacket: 32 [ 350.498728][ T5279] usb 3-1: config 0 has an invalid descriptor of length 76, skipping remainder of the config [ 350.524775][ T5279] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.544565][ T5279] usb 3-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 350.564356][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.576393][ T5279] usb 3-1: Product: syz [ 350.585418][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.589390][ T5279] usb 3-1: Manufacturer: syz [ 350.614014][ T5279] usb 3-1: SerialNumber: syz [ 350.647721][ T5279] usb 3-1: config 0 descriptor?? [ 350.713423][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.877817][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.937683][ T5279] usb 3-1: USB disconnect, device number 47 [ 351.211911][ T4622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.228159][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.251243][ T4622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.263799][ T4622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.278509][ T4622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 351.291593][ T4622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.452279][ T11] bridge_slave_1: left allmulticast mode [ 351.497566][ T9599] loop0: detected capacity change from 0 to 16384 [ 351.504876][ T11] bridge_slave_1: left promiscuous mode [ 351.505062][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.554710][ T11] bridge_slave_0: left allmulticast mode [ 351.583522][ T11] bridge_slave_0: left promiscuous mode [ 351.594521][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.828512][ T9605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.874443][ T9605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.041140][ T46] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 352.221812][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 352.271014][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.312774][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.357195][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 352.412380][ T46] usb 3-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 352.426730][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.436820][ T46] usb 3-1: Product: syz [ 352.441971][ T46] usb 3-1: Manufacturer: syz [ 352.447343][ T46] usb 3-1: SerialNumber: syz [ 352.487230][ T46] usb 3-1: config 0 descriptor?? [ 352.714911][ T46] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 352.723024][ T46] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 352.926871][ T46] radio-si470x 3-1:0.0: software version 42, hardware version 251 [ 352.959896][ T46] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 353.144336][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.187608][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.228665][ T11] bond0 (unregistering): Released all slaves [ 353.359779][ T4622] Bluetooth: hci2: command tx timeout [ 353.482578][ T46] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 353.492176][ T46] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 353.501879][ T46] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 353.532715][ T46] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 353.602989][ T11] tipc: Left network mode [ 353.781634][ T5308] usb 3-1: USB disconnect, device number 48 [ 354.134162][ T9590] chnl_net:caif_netlink_parms(): no params data found [ 354.677398][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 354.677432][ T29] audit: type=1326 audit(1728433217.162:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 354.884130][ T29] audit: type=1326 audit(1728433217.202:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 354.923141][ T29] audit: type=1326 audit(1728433217.222:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 354.946923][ T29] audit: type=1326 audit(1728433217.282:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 354.970539][ T29] audit: type=1326 audit(1728433217.282:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 354.998800][ T29] audit: type=1326 audit(1728433217.302:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 355.102460][ T29] audit: type=1326 audit(1728433217.302:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 355.144974][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.153058][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.163517][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.172200][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.180397][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.195218][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.203350][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.211535][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.219357][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.227632][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.235886][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.243996][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.258937][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.267064][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.275244][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.283686][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.291955][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.300019][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.307834][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.316177][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.324368][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.333327][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.349266][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.363619][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.372326][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.380322][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.388152][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.396100][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.404014][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.411956][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.450996][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.451378][ T29] audit: type=1326 audit(1728433217.302:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 355.458813][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.458880][ T4622] Bluetooth: hci1: ACL packet for unknown connection handle 1186 [ 355.458955][ T4622] Bluetooth: hci2: command tx timeout [ 355.512000][ T29] audit: type=1326 audit(1728433217.302:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 355.594779][ T29] audit: type=1326 audit(1728433217.302:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 355.788297][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.869807][ T11] hsr_slave_0: left promiscuous mode [ 355.891491][ T11] hsr_slave_1: left promiscuous mode [ 355.898251][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.917842][ T9666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.870'. [ 355.928135][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.930903][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.870'. [ 355.955419][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.982327][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.010271][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.078984][ T11] veth1_macvtap: left promiscuous mode [ 356.111449][ T11] veth0_macvtap: left promiscuous mode [ 356.122672][ T11] veth1_vlan: left promiscuous mode [ 356.135762][ T11] veth0_vlan: left promiscuous mode [ 356.869715][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 357.030004][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 357.044372][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 357.103432][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.114780][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.138453][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 357.186720][ T9] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 357.197316][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.213840][ T9] usb 1-1: config 0 descriptor?? [ 357.438879][ T9] hid (null): report_id 0 is invalid [ 357.447489][ T9] uclogic 0003:2179:0077.0014: interface is invalid, ignoring [ 357.524594][ T5229] Bluetooth: hci2: command tx timeout [ 357.648016][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.658111][ T11] team0 (unregistering): Port device team_slave_1 removed [ 357.687425][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.729332][ T5274] usb 1-1: USB disconnect, device number 43 [ 357.817766][ T11] team0 (unregistering): Port device team_slave_0 removed [ 358.867862][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.910574][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.937243][ T9590] bridge_slave_0: entered allmulticast mode [ 358.956760][ T9590] bridge_slave_0: entered promiscuous mode [ 358.978902][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.003652][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.022387][ T9590] bridge_slave_1: entered allmulticast mode [ 359.039942][ T9590] bridge_slave_1: entered promiscuous mode [ 359.167791][ T9590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.214055][ T9590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.321642][ T9590] team0: Port device team_slave_0 added [ 359.334522][ T9590] team0: Port device team_slave_1 added [ 359.469954][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.476971][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.600435][ T5229] Bluetooth: hci2: command tx timeout [ 359.616375][ T9590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.655694][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.666227][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.701020][ T9590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.763120][ T4622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.799936][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.808778][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.857468][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.875913][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.889581][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.930322][ T9717] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 360.034439][ T9590] hsr_slave_0: entered promiscuous mode [ 360.074014][ T9590] hsr_slave_1: entered promiscuous mode [ 360.233364][ T9717] syz.3.885 (9717): drop_caches: 2 [ 360.263734][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.290155][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.335897][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.484911][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 360.495191][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 360.495210][ T29] audit: type=1326 audit(1728433222.982:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x0 [ 360.505202][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 360.622351][ T9] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 360.692201][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.801999][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.912275][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.034210][ T9748] tipc: Started in network mode [ 361.034240][ T9748] tipc: Node identity f7, cluster identity 4711 [ 361.034257][ T9748] tipc: Node number set to 247 [ 361.350121][ T11] bridge_slave_1: left allmulticast mode [ 361.375711][ T11] bridge_slave_1: left promiscuous mode [ 361.395956][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.433681][ T11] bridge_slave_0: left allmulticast mode [ 361.449708][ T11] bridge_slave_0: left promiscuous mode [ 361.464559][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.001806][ T5229] Bluetooth: hci3: command tx timeout [ 362.383666][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.397627][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.420716][ T11] bond0 (unregistering): Released all slaves [ 362.558387][ T9720] chnl_net:caif_netlink_parms(): no params data found [ 363.503755][ T11] hsr_slave_0: left promiscuous mode [ 363.555086][ T11] hsr_slave_1: left promiscuous mode [ 363.596147][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.636485][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.703675][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.726812][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.885155][ T11] veth1_macvtap: left promiscuous mode [ 363.915595][ T11] veth0_macvtap: left promiscuous mode [ 363.942586][ T11] veth1_vlan: left promiscuous mode [ 363.965923][ T11] veth0_vlan: left promiscuous mode [ 364.071537][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.082186][ T5229] Bluetooth: hci3: command tx timeout [ 364.101963][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.043022][ T11] team0 (unregistering): Port device team_slave_1 removed [ 365.118369][ T11] team0 (unregistering): Port device team_slave_0 removed [ 365.865133][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.876135][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.897268][ T9720] bridge_slave_0: entered allmulticast mode [ 365.923503][ T9720] bridge_slave_0: entered promiscuous mode [ 365.996817][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.051565][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.090927][ T9720] bridge_slave_1: entered allmulticast mode [ 366.133402][ T9720] bridge_slave_1: entered promiscuous mode [ 366.159867][ T5229] Bluetooth: hci3: command tx timeout [ 366.227859][ T9720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.273095][ T9720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.357428][ T9720] team0: Port device team_slave_0 added [ 366.373159][ T9720] team0: Port device team_slave_1 added [ 366.392875][ T9590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.405900][ T9590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.428391][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.438991][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.465466][ T9720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.478746][ T9590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.496237][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.506599][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.535304][ T9720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.546683][ T9590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.623221][ T9720] hsr_slave_0: entered promiscuous mode [ 366.637120][ T9720] hsr_slave_1: entered promiscuous mode [ 366.647454][ T9720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.662162][ T9720] Cannot create hsr debugfs directory [ 367.218102][ T9590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.237674][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 367.382171][ T9830] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 367.429963][ T9828] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 367.478342][ T9828] bond2 (unregistering): Released all slaves [ 367.632687][ T9590] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.858872][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.866146][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.881901][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.889105][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.110713][ T9720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.127639][ T9720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.164678][ T9720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.240004][ T5229] Bluetooth: hci3: command tx timeout [ 368.270219][ T9720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.338244][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 368.432724][ T9590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.513107][ T29] audit: type=1326 audit(1728433230.992:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x7ffc0000 [ 368.856850][ T29] audit: type=1326 audit(1728433231.002:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x7ffc0000 [ 369.034863][ T9590] veth0_vlan: entered promiscuous mode [ 369.044130][ T29] audit: type=1326 audit(1728433231.022:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1efc37dff9 code=0x7ffc0000 [ 369.114216][ T29] audit: type=1326 audit(1728433231.022:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x7ffc0000 [ 369.137982][ T29] audit: type=1326 audit(1728433231.022:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x7ffc0000 [ 369.166176][ T29] audit: type=1326 audit(1728433231.022:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1efc37dff9 code=0x7ffc0000 [ 369.220185][ T29] audit: type=1326 audit(1728433231.022:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x7ffc0000 [ 369.269084][ T9590] veth1_vlan: entered promiscuous mode [ 369.403296][ T9590] veth0_macvtap: entered promiscuous mode [ 369.416384][ T9590] veth1_macvtap: entered promiscuous mode [ 369.438722][ T29] audit: type=1326 audit(1728433231.022:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x7ffc0000 [ 369.445601][ T9720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.677349][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.751291][ T9869] "syz.0.909" (9869) uses obsolete ecb(arc4) skcipher [ 369.796275][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.907404][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.976581][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.996993][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.014881][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.027189][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.043381][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.066481][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.139134][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.174387][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.206295][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.230073][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.249598][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.268266][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.278617][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.311986][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.327959][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.339242][ T9720] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.356229][ T9590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.369013][ T9590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.383803][ T9590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.393013][ T9590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.426993][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.434202][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.470191][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.477357][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.671425][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.691344][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.735719][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.752328][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.762333][ T9720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.859663][ T936] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 370.898388][ T9889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.852'. [ 370.908211][ T9889] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 370.927861][ T9720] veth0_vlan: entered promiscuous mode [ 370.964577][ T9720] veth1_vlan: entered promiscuous mode [ 371.023475][ T936] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 371.037324][ T9720] veth0_macvtap: entered promiscuous mode [ 371.054884][ T936] usb 1-1: config 4 has no interface number 0 [ 371.065096][ T9720] veth1_macvtap: entered promiscuous mode [ 371.078424][ T936] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 371.104727][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.112991][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.113018][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.113034][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.113051][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.113066][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.113083][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.113097][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.113113][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.113128][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.113145][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.115807][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.150350][ T936] usb 1-1: Product: syz [ 371.246827][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 371.286896][ T936] usb 1-1: Manufacturer: syz [ 371.295293][ T936] usb 1-1: SerialNumber: syz [ 371.308224][ T936] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 371.348089][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.389589][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.400565][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.412037][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.422775][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.438582][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.451460][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.462859][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.474287][ T9720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.493080][ T9720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.507199][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.520443][ T9720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.551088][ T9720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.576998][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.593270][ T9720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.602810][ T9720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.612368][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.657075][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.914'. [ 371.682224][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 371.708055][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 371.719860][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 371.737775][ T9883] team0: entered promiscuous mode [ 371.752735][ T9883] team_slave_0: entered promiscuous mode [ 371.759106][ T9883] team_slave_1: entered promiscuous mode [ 371.794779][ T9883] batadv_slave_1: entered promiscuous mode [ 371.913620][ T936] vp7045: USB control message 'out' went wrong. [ 371.924573][ T936] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 371.941143][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 371.949066][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 371.966182][ T936] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 371.993522][ T936] usb 1-1: USB disconnect, device number 44 [ 372.189901][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.197787][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.344194][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.390089][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.403909][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.922'. [ 372.441140][ T9923] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.448106][ T9923] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 372.493058][ T9923] xt_nfacct: accounting object `syz1' does not exists [ 372.939872][ T9951] binder: BINDER_SET_CONTEXT_MGR already set [ 372.951494][ T9951] binder: 9950:9951 ioctl 4018620d 20000040 returned -16 [ 372.970288][ T9951] binder: 9950:9951 ioctl c0306201 20000500 returned -14 [ 372.992102][ T9951] program syz.1.928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.079853][ T5273] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 373.092604][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.111870][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.300303][ T5273] usb 3-1: Using ep0 maxpacket: 32 [ 373.309240][ T5273] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.327511][ T5273] usb 3-1: config 0 has no interface number 0 [ 373.347977][ T5273] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.419630][ T5308] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 373.462247][ T5273] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.570153][ T5273] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 373.599703][ T5308] usb 5-1: Using ep0 maxpacket: 8 [ 373.655083][ T5308] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 373.700880][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.718140][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.762654][ T5273] usb 3-1: config 0 descriptor?? [ 373.813971][ T5308] usb 5-1: Product: syz [ 373.932138][ T5308] usb 5-1: Manufacturer: syz [ 373.959022][ T5308] usb 5-1: SerialNumber: syz [ 373.988053][ T5308] usb 5-1: config 0 descriptor?? [ 374.026962][ T5308] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 374.382089][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.443106][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.462827][ T5306] usb 5-1: USB disconnect, device number 48 [ 374.526154][ T5273] uclogic 0003:28BD:0094.0016: pen parameters not found [ 374.591824][ T5273] uclogic 0003:28BD:0094.0016: interface is invalid, ignoring [ 374.625270][ T5273] usb 3-1: USB disconnect, device number 49 [ 375.980425][ T46] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 376.180202][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.221150][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.281160][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.340304][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.349662][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.363553][ T46] usb 5-1: config 0 descriptor?? [ 376.509282][ T29] audit: type=1326 audit(1728433238.992:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 376.620482][ T29] audit: type=1326 audit(1728433238.992:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 376.660874][ T29] audit: type=1326 audit(1728433239.002:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 376.793472][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 376.800487][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 376.864092][ T46] usb 5-1: USB disconnect, device number 49 [ 376.921601][ T29] audit: type=1326 audit(1728433239.002:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 377.040019][ T29] audit: type=1326 audit(1728433239.002:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 377.140011][ T29] audit: type=1326 audit(1728433239.002:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 377.221336][ T5306] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 377.259737][ T29] audit: type=1326 audit(1728433239.002:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 377.342950][ T29] audit: type=1326 audit(1728433239.002:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 377.429613][ T5306] usb 3-1: Using ep0 maxpacket: 16 [ 377.439246][ T5306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.459501][ T5306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.507942][ T5306] usb 3-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 377.529058][ T5306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.543359][ T5306] usb 3-1: config 0 descriptor?? [ 377.796144][ T5306] usbhid 3-1:0.0: can't add hid device: -71 [ 377.807295][ T5306] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 377.826862][ T5306] usb 3-1: USB disconnect, device number 50 [ 377.853582][ T5279] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 377.935783][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 377.983183][T10079] netlink: 104 bytes leftover after parsing attributes in process `syz.1.953'. [ 378.021485][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.047746][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.065863][ T5279] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 378.075632][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.100450][ T5279] usb 5-1: config 0 descriptor?? [ 378.281237][T10081] xt_recent: Unsupported userspace flags (00000064) [ 378.318227][T10068] netlink: 'syz.4.950': attribute type 4 has an invalid length. [ 378.342213][ T5279] usbhid 5-1:0.0: can't add hid device: -71 [ 378.353042][ T5279] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 378.363857][ T5279] usb 5-1: USB disconnect, device number 50 [ 378.479019][T10089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.956'. [ 378.802984][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.810350][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.011378][T10105] "syz.3.963" (10105) uses obsolete ecb(arc4) skcipher [ 379.021077][T10108] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 379.031643][ T46] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 379.234091][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.248721][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.261094][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.274214][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.314859][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.356200][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.357211][ T46] usb 1-1: config 0 descriptor?? [ 379.398357][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.536530][T10119] netlink: 44 bytes leftover after parsing attributes in process `syz.4.968'. [ 379.554116][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 379.815089][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 379.827980][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 379.830229][T10128] netlink: 44 bytes leftover after parsing attributes in process `syz.2.972'. [ 379.868630][ T46] usb 1-1: USB disconnect, device number 45 [ 379.889924][T10132] netlink: 'syz.4.974': attribute type 10 has an invalid length. [ 379.918255][T10132] geneve0: entered promiscuous mode [ 379.980222][T10132] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 380.053317][T10140] "syz.4.977" (10140) uses obsolete ecb(arc4) skcipher [ 380.610427][T10155] netlink: 'syz.0.981': attribute type 9 has an invalid length. [ 380.660781][T10155] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.981'. [ 380.670576][T10156] netlink: 44 bytes leftover after parsing attributes in process `syz.4.982'. [ 380.878885][T10157] netlink: 'syz.0.981': attribute type 9 has an invalid length. [ 380.888084][T10157] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.981'. [ 381.184568][ T29] audit: type=1326 audit(1728433243.672:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10163 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 381.266406][ T29] audit: type=1326 audit(1728433243.672:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10163 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8efed7dff9 code=0x7ffc0000 [ 381.288889][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.419633][ T5279] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 381.599665][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 381.610797][ T5279] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 381.620270][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.629645][ T5279] usb 5-1: Product: syz [ 381.636994][ T5279] usb 5-1: Manufacturer: syz [ 381.642481][ T5279] usb 5-1: SerialNumber: syz [ 381.651795][ T5279] usb 5-1: config 0 descriptor?? [ 381.661634][ T5279] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 381.790356][ T46] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 381.885140][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.899361][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.926500][ T5279] usb 5-1: USB disconnect, device number 51 [ 381.933085][ T46] usb 3-1: device descriptor read/64, error -71 [ 382.026924][T10173] "syz.1.989" (10173) uses obsolete ecb(arc4) skcipher [ 382.172273][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.180643][ T46] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 382.193358][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.320035][ T46] usb 3-1: device descriptor read/64, error -71 [ 382.439878][ T46] usb usb3-port1: attempt power cycle [ 382.563026][T10180] netlink: 'syz.4.992': attribute type 29 has an invalid length. [ 382.573936][T10180] netlink: 'syz.4.992': attribute type 29 has an invalid length. [ 382.766318][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.776936][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.792329][ T46] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 382.819702][ T5279] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 382.836458][ T46] usb 3-1: device descriptor read/8, error -71 [ 382.921987][T10189] tipc: Enabling of bearer rejected, failed to enable media [ 382.979633][ T5279] usb 5-1: Using ep0 maxpacket: 32 [ 382.998971][ T5279] usb 5-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 383.021608][ T5279] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 383.046019][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.066944][ T5279] usb 5-1: Product: syz [ 383.077237][ T5279] usb 5-1: Manufacturer: syz [ 383.086854][ T5279] usb 5-1: SerialNumber: syz [ 383.099576][ T46] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 383.130213][ T46] usb 3-1: device descriptor read/8, error -71 [ 383.251307][ T46] usb usb3-port1: unable to enumerate USB device [ 383.297631][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.326345][ T5279] usb 5-1: USB disconnect, device number 52 [ 383.334773][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.623730][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.637342][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.658964][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.932068][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1011'. [ 384.984685][T10234] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 386.013700][T10249] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1016'. [ 386.339585][ T936] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 386.491282][ T936] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 386.499884][ T936] usb 3-1: config 4 has no interface number 0 [ 386.508513][ T936] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 386.518356][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.527736][ T936] usb 3-1: Product: syz [ 386.532585][ T936] usb 3-1: Manufacturer: syz [ 386.537287][ T936] usb 3-1: SerialNumber: syz [ 386.551370][ T936] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 386.763497][T10251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.795627][T10251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.833770][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1017'. [ 386.852931][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1017'. [ 386.877507][T10251] team0: entered promiscuous mode [ 386.884333][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 386.884380][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 386.917554][T10251] team_slave_0: entered promiscuous mode [ 386.924737][T10251] team_slave_1: entered promiscuous mode [ 386.941305][T10251] batadv_slave_1: entered promiscuous mode [ 386.958052][T10251] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 386.969765][T10251] Cannot create hsr debugfs directory [ 387.027747][ T936] vp7045: USB control message 'out' went wrong. [ 387.049654][ T936] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 387.060575][ T936] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 387.061716][T10264] IPVS: set_ctl: invalid protocol: 20551 47.107.118.109:0 [ 387.086107][ T936] usb 3-1: USB disconnect, device number 55 [ 387.627730][T10284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.664922][T10284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.708672][T10284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.755157][T10284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.780322][T10284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.798070][T10291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.815911][T10284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.828513][T10291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.941720][ T46] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 388.101225][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.136007][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.154414][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 388.181316][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.196078][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.217578][ T46] usb 3-1: config 0 descriptor?? [ 388.245246][T10303] hub 6-0:1.0: USB hub found [ 388.250695][T10303] hub 6-0:1.0: 1 port detected [ 388.414479][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 388.414499][ T29] audit: type=1326 audit(1728433250.892:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd557dff9 code=0x7ffc0000 [ 388.582599][ T29] audit: type=1326 audit(1728433250.892:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fcbd557dff9 code=0x7ffc0000 [ 388.660629][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 388.670904][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 388.683576][ T46] usb 3-1: USB disconnect, device number 56 [ 388.724851][ T29] audit: type=1326 audit(1728433250.892:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd557dff9 code=0x7ffc0000 [ 388.928869][ T29] audit: type=1326 audit(1728433250.892:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd557dff9 code=0x7ffc0000 [ 389.149660][ T29] audit: type=1326 audit(1728433250.902:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbd557dff9 code=0x7ffc0000 [ 389.253135][ T29] audit: type=1326 audit(1728433250.902:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd557dff9 code=0x7ffc0000 [ 389.441127][ T29] audit: type=1326 audit(1728433250.952:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd557dff9 code=0x7ffc0000 [ 390.446184][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.457487][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.630033][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 390.812131][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.827151][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.837036][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 390.849474][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.864909][ T9] usb 3-1: config 0 descriptor?? [ 391.974850][T10371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1056'. [ 393.450253][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 393.479737][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 393.518385][ T9] usb 3-1: USB disconnect, device number 57 [ 394.439630][ T46] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 394.611053][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.630214][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.647412][ T46] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 394.659628][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.690956][ T46] usb 3-1: config 0 descriptor?? [ 394.753742][T10396] bond1: entered promiscuous mode [ 394.786897][T10396] bond1: entered allmulticast mode [ 394.810568][T10396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.114338][ T46] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 395.139584][ T46] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 395.154002][ T46] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 395.154605][T10396] bond1 (unregistering): Released all slaves [ 395.178286][ T46] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 395.196104][ T46] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 395.221061][ T46] uclogic 0003:5543:0522.0017: No inputs registered, leaving [ 395.281407][ T46] uclogic 0003:5543:0522.0017: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 395.374035][ T46] usb 3-1: USB disconnect, device number 58 [ 395.478405][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.506234][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.654533][T10405] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 395.662885][T10405] PKCS7: Only support pkcs7_signedData type [ 395.809824][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 396.023646][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 396.131330][ T9] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 396.174973][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.192039][ T9] usb 1-1: Product: syz [ 396.237992][ T9] usb 1-1: Manufacturer: syz [ 396.264305][ T9] usb 1-1: SerialNumber: syz [ 396.294963][ T9] usb 1-1: config 0 descriptor?? [ 396.352967][ T9] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 396.546342][ T9] usb 1-1: USB disconnect, device number 46 [ 396.663575][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 396.829351][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 397.476777][T10429] hub 6-0:1.0: USB hub found [ 397.491053][T10429] hub 6-0:1.0: 1 port detected [ 397.919694][ T5229] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 397.928726][ T5229] Bluetooth: hci3: Injecting HCI hardware error event [ 397.938333][ T5229] Bluetooth: hci3: hardware error 0x00 [ 398.304359][T10431] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1074'. [ 398.726467][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.739074][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.805907][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.827330][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.479655][T10442] netlink: 'syz.0.1078': attribute type 10 has an invalid length. [ 399.505688][T10442] geneve0: entered promiscuous mode [ 399.551989][T10442] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 399.778026][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 399.833496][T10450] bond2 (unregistering): Released all slaves [ 400.000518][ T5229] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 400.319299][T10476] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 400.435155][T10476] syz.3.1090 (10476): drop_caches: 2 [ 400.443014][T10480] netlink: 'syz.1.1091': attribute type 9 has an invalid length. [ 400.443043][T10480] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1091'. [ 400.500576][T10482] netlink: 'syz.1.1091': attribute type 9 has an invalid length. [ 400.500615][T10482] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1091'. [ 400.748266][T10488] FAULT_INJECTION: forcing a failure. [ 400.748266][T10488] name failslab, interval 1, probability 0, space 0, times 0 [ 400.748296][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.1.1095 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 400.748325][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.748346][T10488] Call Trace: [ 400.748353][T10488] [ 400.748364][T10488] dump_stack_lvl+0x241/0x360 [ 400.748389][T10488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.748407][T10488] ? __pfx__printk+0x10/0x10 [ 400.748433][T10488] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 400.748458][T10488] ? __pfx___might_resched+0x10/0x10 [ 400.748484][T10488] should_fail_ex+0x3b0/0x4e0 [ 400.748513][T10488] should_failslab+0xac/0x100 [ 400.748534][T10488] ? __alloc_skb+0x1c3/0x440 [ 400.748550][T10488] kmem_cache_alloc_node_noprof+0x71/0x320 [ 400.748577][T10488] __alloc_skb+0x1c3/0x440 [ 400.748596][T10488] ? __pfx___alloc_skb+0x10/0x10 [ 400.748614][T10488] ? netlink_autobind+0xd6/0x2f0 [ 400.748631][T10488] ? netlink_autobind+0x2b0/0x2f0 [ 400.748650][T10488] netlink_sendmsg+0x638/0xcb0 [ 400.748675][T10488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.748694][T10488] ? aa_sock_msg_perm+0x91/0x160 [ 400.748716][T10488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.748732][T10488] __sock_sendmsg+0x221/0x270 [ 400.748757][T10488] ____sys_sendmsg+0x52a/0x7e0 [ 400.748781][T10488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.748810][T10488] __sys_sendmsg+0x292/0x380 [ 400.748829][T10488] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.748855][T10488] ? __pfx_vfs_write+0x10/0x10 [ 400.748889][T10488] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.748916][T10488] ? do_syscall_64+0x100/0x230 [ 400.748934][T10488] ? do_syscall_64+0xb6/0x230 [ 400.748952][T10488] do_syscall_64+0xf3/0x230 [ 400.748970][T10488] ? clear_bhb_loop+0x35/0x90 [ 400.748989][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.749013][T10488] RIP: 0033:0x7f8efed7dff9 [ 400.749029][T10488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.749044][T10488] RSP: 002b:00007f8effada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.749065][T10488] RAX: ffffffffffffffda RBX: 00007f8efef35f80 RCX: 00007f8efed7dff9 [ 400.749078][T10488] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 400.749089][T10488] RBP: 00007f8effada090 R08: 0000000000000000 R09: 0000000000000000 [ 400.749101][T10488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.749112][T10488] R13: 0000000000000000 R14: 00007f8efef35f80 R15: 00007f8eff05fa28 [ 400.749134][T10488] [ 400.979891][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 401.457866][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.457911][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.457932][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.457965][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.457985][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.509893][ T9] usb 1-1: config 0 descriptor?? [ 402.096107][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.103820][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.112023][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.125509][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.133406][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.141281][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.169592][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.177076][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.201673][T10506] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1101'. [ 402.216762][T10506] netlink: 'syz.1.1101': attribute type 10 has an invalid length. [ 402.236312][T10506] team0: Device hsr_slave_0 failed to register rx_handler [ 402.294079][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.352573][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.408090][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 402.456236][ T9] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 402.518732][T10511] block device autoloading is deprecated and will be removed. [ 402.537174][ T9] plantronics 0003:047F:FFFF.0018: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 402.583421][ T9] usb 1-1: USB disconnect, device number 47 [ 402.722593][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 403.179630][ T5279] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 403.214401][T10524] netlink: 'syz.0.1109': attribute type 21 has an invalid length. [ 403.224968][T10524] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1109'. [ 403.238953][T10524] netlink: 'syz.0.1109': attribute type 5 has an invalid length. [ 403.249374][T10524] netlink: 'syz.0.1109': attribute type 6 has an invalid length. [ 403.263093][T10524] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1109'. [ 403.323048][ T5279] usb 3-1: device descriptor read/64, error -71 [ 403.331249][ T4622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.341345][ T4622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.352642][ T4622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.359609][ T5274] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 403.374066][ T4622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.383634][ T4622] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 403.391383][ T4622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.489599][ T5274] usb 5-1: device descriptor read/64, error -71 [ 403.520241][ T46] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 403.544567][T10528] chnl_net:caif_netlink_parms(): no params data found [ 403.559605][ T5279] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 403.609146][T10528] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.616497][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.624489][T10528] bridge_slave_0: entered allmulticast mode [ 403.632249][T10528] bridge_slave_0: entered promiscuous mode [ 403.640646][T10528] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.647859][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.657340][T10528] bridge_slave_1: entered allmulticast mode [ 403.664943][T10528] bridge_slave_1: entered promiscuous mode [ 403.682985][ T46] usb 1-1: config index 0 descriptor too short (expected 45961, got 36) [ 403.691559][ T5279] usb 3-1: device descriptor read/64, error -71 [ 403.697899][ T46] usb 1-1: config 39 has an invalid descriptor of length 186, skipping remainder of the config [ 403.708492][ T46] usb 1-1: config 39 has 0 interfaces, different from the descriptor's value: 22 [ 403.717822][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.722866][T10528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.726988][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.744408][ T5274] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 403.753161][T10528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.801107][ T5279] usb usb3-port1: attempt power cycle [ 403.814368][T10528] team0: Port device team_slave_0 added [ 403.823560][T10528] team0: Port device team_slave_1 added [ 403.857104][T10528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.864625][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.879806][ T5274] usb 5-1: device descriptor read/64, error -71 [ 403.890525][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.899692][T10528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.924162][T10528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.931490][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.957394][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.964953][T10528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.998304][T10522] dvmrp0: entered allmulticast mode [ 404.004911][T10522] dvmrp0: left allmulticast mode [ 404.025705][ T5274] usb usb5-port1: attempt power cycle [ 404.071646][T10528] hsr_slave_0: entered promiscuous mode [ 404.076894][ T46] usb 1-1: string descriptor 0 read error: -71 [ 404.087294][T10528] hsr_slave_1: entered promiscuous mode [ 404.100120][ T46] usb 1-1: USB disconnect, device number 48 [ 404.106850][T10528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.123629][T10528] Cannot create hsr debugfs directory [ 404.169551][ T5279] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 404.190231][ T5279] usb 3-1: device descriptor read/8, error -71 [ 404.240060][T10528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.316643][T10528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.369638][ T5274] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 404.390538][ T5274] usb 5-1: device descriptor read/8, error -71 [ 404.421380][T10528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.429793][ T5279] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 404.460457][ T5279] usb 3-1: device descriptor read/8, error -71 [ 404.506957][T10528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.570159][ T5279] usb usb3-port1: unable to enumerate USB device [ 404.630031][ T5274] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 404.670572][ T5274] usb 5-1: device descriptor read/8, error -71 [ 404.721481][T10528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.737944][T10528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.748149][T10528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.778294][T10528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 404.789824][ T5274] usb usb5-port1: unable to enumerate USB device [ 404.876744][T10528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.897917][T10528] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.922783][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.929634][ T5279] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 404.930018][ T9842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.963718][ T2468] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.970949][ T2468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.044216][T10528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.080235][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 405.084856][T10528] veth0_vlan: entered promiscuous mode [ 405.096507][ T5279] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 405.107362][T10528] veth1_vlan: entered promiscuous mode [ 405.112217][ T5279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.125100][ T5279] usb 1-1: config 0 has no interface number 0 [ 405.131626][ T5279] usb 1-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 405.154129][ T5279] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.176632][T10528] veth0_macvtap: entered promiscuous mode [ 405.183753][ T5279] usb 1-1: config 0 interface 52 has no altsetting 0 [ 405.192623][T10528] veth1_macvtap: entered promiscuous mode [ 405.203037][ T5279] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 405.213830][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 405.226666][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.239014][ T5279] usb 1-1: Product: syz [ 405.245403][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.252633][ T5279] usb 1-1: SerialNumber: syz [ 405.262411][ T5279] usb 1-1: config 0 descriptor?? [ 405.270047][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.291109][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.309794][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.329898][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.350007][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.362053][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.373404][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.385383][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.396987][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.408310][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.421874][T10528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.440321][ T5229] Bluetooth: hci4: command tx timeout [ 405.451474][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.487978][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.502254][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.513008][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.530241][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.542770][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.553380][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.564311][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.574692][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.585650][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.595718][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.607050][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.619317][T10528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.633280][T10528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.642920][T10528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.660348][T10528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.671564][T10528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.850728][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.867687][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.961362][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.981543][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 406.022413][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.093740][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.332547][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.388961][T10551] netlink: 'syz.2.1117': attribute type 9 has an invalid length. [ 406.494389][T10554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.510794][T10551] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1117'. [ 406.525763][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 406.597705][T10555] netlink: 'syz.2.1117': attribute type 9 has an invalid length. [ 406.616554][T10554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.671045][T10555] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1117'. [ 406.729766][ T5279] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 406.940938][T10563] "syz.1.1120" (10563) uses obsolete ecb(arc4) skcipher [ 406.969642][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 406.977136][ T5279] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 406.995350][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.013628][ T5279] usb 5-1: config 0 descriptor?? [ 407.028155][ T5279] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 407.098866][T10566] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 407.227682][ T5279] gspca_sonixj: reg_w1 err -71 [ 407.242698][ T5279] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 407.260977][ T5279] usb 5-1: USB disconnect, device number 57 [ 407.519666][ T4622] Bluetooth: hci4: command tx timeout [ 407.763580][ T936] usb 1-1: USB disconnect, device number 49 [ 408.109598][ T5273] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 408.269729][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 408.284167][ T5273] usb 5-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=d7.cc [ 408.308875][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.335315][ T5273] usb 5-1: config 0 descriptor?? [ 408.351914][ T5273] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 408.361121][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 408.370013][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 408.377948][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 408.385802][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 408.394872][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 408.403130][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 408.410971][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 408.420451][ T5273] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 409.227755][T10593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.237880][T10593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.255365][T10593] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 409.611705][ T4622] Bluetooth: hci4: command tx timeout [ 410.216291][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.228549][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.451952][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.463371][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.513027][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.530002][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.893196][ T5279] usb 5-1: USB disconnect, device number 58 [ 410.919181][ T5279] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 410.942972][ T5279] keyspan 5-1:0.0: device disconnected [ 411.283947][T10624] netlink: 5296 bytes leftover after parsing attributes in process `syz.1.1138'. [ 411.294263][T10624] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 411.383409][T10627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.392626][T10627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.631701][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.650738][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.680577][ T4622] Bluetooth: hci4: command tx timeout [ 412.189578][ T936] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 412.219106][T10650] netlink: 'syz.4.1146': attribute type 21 has an invalid length. [ 412.229708][T10650] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1146'. [ 412.239292][T10650] netlink: 'syz.4.1146': attribute type 5 has an invalid length. [ 412.261243][T10650] netlink: 'syz.4.1146': attribute type 6 has an invalid length. [ 412.269064][T10650] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1146'. [ 412.352989][ T936] usb 3-1: config 0 has no interfaces? [ 412.364677][ T936] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 412.380714][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.390777][ T936] usb 3-1: Product: syz [ 412.395222][ T936] usb 3-1: Manufacturer: syz [ 412.402788][ T936] usb 3-1: SerialNumber: syz [ 412.419574][ T936] usb 3-1: config 0 descriptor?? [ 412.539760][ T46] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 412.699600][ T5279] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 412.714193][ T46] usb 5-1: config index 0 descriptor too short (expected 45961, got 36) [ 412.723789][ T46] usb 5-1: config 39 has an invalid descriptor of length 186, skipping remainder of the config [ 412.739150][ T46] usb 5-1: config 39 has 0 interfaces, different from the descriptor's value: 22 [ 412.760754][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.777334][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.879627][ T5279] usb 1-1: Using ep0 maxpacket: 32 [ 412.902611][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 412.927498][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 412.955877][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 412.967827][ T5279] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 412.979895][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 412.999741][ T5279] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 413.028500][T10647] dvmrp0: entered allmulticast mode [ 413.034185][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.050228][T10647] dvmrp0: left allmulticast mode [ 413.075991][ T5279] usb 1-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=30.76 [ 413.089855][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.112870][ T5279] usb 1-1: Product: syz [ 413.118032][ T5279] usb 1-1: Manufacturer: syz [ 413.134958][ T5279] usb 1-1: SerialNumber: syz [ 413.150195][ T5279] usb 1-1: config 0 descriptor?? [ 413.158477][ T46] usb 5-1: string descriptor 0 read error: -71 [ 413.174444][ T46] usb 5-1: USB disconnect, device number 59 [ 413.175039][T10656] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 413.207074][ T5279] ums-sddr09 1-1:0.0: USB Mass Storage device detected [ 413.296252][ T5279] ums-sddr09 1-1:0.0: probe with driver ums-sddr09 failed with error -22 [ 413.429321][ T936] usb 1-1: USB disconnect, device number 50 [ 414.052256][T10679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.269886][ T936] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 414.434023][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.445751][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.455706][ T936] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.468873][ T936] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.478108][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.489247][ T936] usb 1-1: config 0 descriptor?? [ 414.916548][ T936] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 414.939786][ T936] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 414.956235][ T936] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 414.965325][ T936] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 414.974973][ T936] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 414.986236][ T5308] usb 3-1: USB disconnect, device number 63 [ 414.993428][ T936] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 415.014412][ T936] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 415.043517][ T936] plantronics 0003:047F:FFFF.0019: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 415.122488][ T46] usb 1-1: USB disconnect, device number 51 [ 415.198649][T10694] tipc: Started in network mode [ 415.205579][T10694] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 415.215640][T10694] tipc: Enabling of bearer rejected, failed to enable media [ 415.531777][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.557114][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.820073][ T46] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 416.119737][ T46] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 416.129318][ T46] usb 5-1: config 4 has no interface number 0 [ 416.221936][ T46] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 416.239996][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.248082][ T46] usb 5-1: Product: syz [ 416.252350][ T46] usb 5-1: Manufacturer: syz [ 416.256988][ T46] usb 5-1: SerialNumber: syz [ 416.322291][ T46] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 416.349762][ T936] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 416.470101][ T5308] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 416.510875][ T936] usb 1-1: Using ep0 maxpacket: 32 [ 416.537905][ T936] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 416.541591][T10706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.561392][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.580744][T10706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.580815][ T936] usb 1-1: Product: syz [ 416.607077][T10706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1164'. [ 416.616371][ T936] usb 1-1: Manufacturer: syz [ 416.616400][ T936] usb 1-1: SerialNumber: syz [ 416.618678][ T936] usb 1-1: config 0 descriptor?? [ 416.636610][T10706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1164'. [ 416.661670][ T5308] usb 3-1: Using ep0 maxpacket: 32 [ 416.668470][T10706] team0: entered promiscuous mode [ 416.669357][ T5308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 416.678240][T10706] team_slave_0: entered promiscuous mode [ 416.694616][ T5308] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.707085][T10706] team_slave_1: entered promiscuous mode [ 416.711342][ T5308] usb 3-1: config 0 has no interface number 0 [ 416.723723][T10706] batadv_slave_1: entered promiscuous mode [ 416.731305][ T5308] usb 3-1: New USB device found, idVendor=05c6, idProduct=7001, bcdDevice=5f.cd [ 416.743624][T10706] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 416.751587][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.762423][T10706] Cannot create hsr debugfs directory [ 416.770643][ T5308] usb 3-1: Product: syz [ 416.774896][ T5308] usb 3-1: Manufacturer: syz [ 416.791422][ T5308] usb 3-1: SerialNumber: syz [ 416.811918][ T5308] usb 3-1: config 0 descriptor?? [ 416.832505][ T46] vp7045: USB control message 'out' went wrong. [ 416.839316][ T46] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 416.862269][ T46] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 416.884128][ T46] usb 5-1: USB disconnect, device number 60 [ 417.162111][ T936] f81534a_ctrl 1-1:0.0: failed to set register 0x116: -5 [ 417.176337][ T936] f81534a_ctrl 1-1:0.0: failed to enable ports: -5 [ 417.186639][ T936] f81534a_ctrl 1-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 417.221606][ T936] usb 1-1: USB disconnect, device number 52 [ 417.469704][T10727] capability: warning: `syz.4.1171' uses deprecated v2 capabilities in a way that may be insecure [ 417.535271][ T5308] qmi_wwan 3-1:0.1: probe with driver qmi_wwan failed with error -22 [ 417.633144][ T5308] usb 3-1: USB disconnect, device number 64 [ 417.908666][ T9842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.252729][ T9842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.351199][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 418.396557][T10733] dummy0: entered promiscuous mode [ 418.470674][T10733] dummy0: left promiscuous mode [ 418.662247][ T9842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.707158][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.730785][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.751915][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.764427][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.772379][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 418.780151][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.912008][T10746] syzkaller0: entered promiscuous mode [ 418.918296][T10746] syzkaller0: entered allmulticast mode [ 418.972435][T10763] hub 6-0:1.0: USB hub found [ 418.982354][T10763] hub 6-0:1.0: 1 port detected [ 418.984475][ T9842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.179816][ T46] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 419.189664][ T936] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 419.348245][ T46] usb 5-1: device descriptor read/64, error -71 [ 419.600371][ T46] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 419.772157][ T46] usb 5-1: device descriptor read/64, error -71 [ 419.880594][ T46] usb usb5-port1: attempt power cycle [ 420.284137][ T46] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 420.330919][ T46] usb 5-1: device descriptor read/8, error -71 [ 420.785003][ T46] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 420.810881][ T4622] Bluetooth: hci1: command tx timeout [ 420.819903][ T46] usb 5-1: device descriptor read/8, error -71 [ 420.930712][ T46] usb usb5-port1: unable to enumerate USB device [ 422.882715][ T4622] Bluetooth: hci1: command tx timeout [ 423.699304][ T936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 423.717226][ T936] usb 3-1: no configurations [ 423.722410][ T936] usb 3-1: can't read configurations, error -22 [ 423.758834][ T9842] bridge_slave_1: left allmulticast mode [ 423.764744][ T9842] bridge_slave_1: left promiscuous mode [ 423.770607][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.857936][ T9842] bridge_slave_0: left allmulticast mode [ 423.863856][ T9842] bridge_slave_0: left promiscuous mode [ 423.880282][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.496742][ T9842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.517819][ T9842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.539565][ T9842] bond0 (unregistering): Released all slaves [ 424.559068][T10778] tipc: Started in network mode [ 424.566027][T10778] tipc: Node identity f7, cluster identity 4711 [ 424.573893][T10778] tipc: Node number set to 247 [ 424.696665][ T9842] tipc: Left network mode [ 424.779979][ T46] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 424.939905][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 424.960425][ T4622] Bluetooth: hci1: command tx timeout [ 424.981666][ T46] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 425.036296][ T29] audit: type=1326 audit(1728433287.512:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7c97dff9 code=0x7ffc0000 [ 425.060318][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.068382][ T46] usb 1-1: Product: syz [ 425.111243][ T46] usb 1-1: Manufacturer: syz [ 425.115915][ T46] usb 1-1: SerialNumber: syz [ 425.142355][ T46] usb 1-1: config 0 descriptor?? [ 425.165493][ T29] audit: type=1326 audit(1728433287.512:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7b7c97dff9 code=0x7ffc0000 [ 425.200868][ T46] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 425.210242][ T29] audit: type=1326 audit(1728433287.512:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7c97dff9 code=0x7ffc0000 [ 425.210295][ T29] audit: type=1326 audit(1728433287.512:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7c97dff9 code=0x7ffc0000 [ 425.210334][ T29] audit: type=1326 audit(1728433287.562:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b7c97dff9 code=0x7ffc0000 [ 425.210373][ T29] audit: type=1326 audit(1728433287.562:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7c97dff9 code=0x7ffc0000 [ 425.306916][T10756] chnl_net:caif_netlink_parms(): no params data found [ 425.447608][ T29] audit: type=1326 audit(1728433287.562:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7c97dff9 code=0x7ffc0000 [ 425.511010][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.607381][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.666438][ T9842] hsr_slave_0: left promiscuous mode [ 425.677268][ T46] usb 1-1: USB disconnect, device number 53 [ 425.809999][ T9842] hsr_slave_1: left promiscuous mode [ 425.855009][ T9842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.875114][ T9842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.911440][ T9842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.929817][ T9842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.005116][ T9842] veth1_macvtap: left promiscuous mode [ 426.014426][ T9842] veth0_macvtap: left promiscuous mode [ 426.049199][ T9842] veth1_vlan: left promiscuous mode [ 426.060321][ T9842] veth0_vlan: left promiscuous mode [ 426.078121][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.101495][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.128808][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.140586][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.149522][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.160477][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.171647][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 426.179575][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 427.040136][ T5229] Bluetooth: hci1: command tx timeout [ 427.329229][ T9842] team0 (unregistering): Port device team_slave_1 removed [ 427.446713][ T9842] team0 (unregistering): Port device team_slave_0 removed [ 427.709667][ T5274] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 427.878477][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 427.891735][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.913268][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.953695][ T5274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.988935][ T5274] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 428.017942][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.057262][ T5274] usb 1-1: config 0 descriptor?? [ 428.247438][ T5229] Bluetooth: hci3: command tx timeout [ 428.308530][T10836] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1201'. [ 428.828299][ T5274] usbhid 1-1:0.0: can't add hid device: -71 [ 428.858099][ T5274] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 428.896814][ T5274] usb 1-1: USB disconnect, device number 54 [ 428.945863][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.003947][T10756] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.028572][T10756] bridge_slave_0: entered allmulticast mode [ 429.041748][T10756] bridge_slave_0: entered promiscuous mode [ 429.080799][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.107470][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 429.125716][T10756] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.137030][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 429.162806][T10756] bridge_slave_1: entered allmulticast mode [ 429.188696][T10756] bridge_slave_1: entered promiscuous mode [ 429.382420][T10756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.444391][T10756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.564812][T10852] hub 6-0:1.0: USB hub found [ 429.578086][T10852] hub 6-0:1.0: 1 port detected [ 429.586165][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1204'. [ 429.641772][T10854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'. [ 429.673635][T10756] team0: Port device team_slave_0 added [ 429.675387][T10756] team0: Port device team_slave_1 added [ 429.842269][T10756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.871824][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.996158][T10756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.053947][T10756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.106016][T10756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.177222][T10756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.319556][ T5229] Bluetooth: hci3: command tx timeout [ 430.473443][ T9842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.592334][T10824] chnl_net:caif_netlink_parms(): no params data found [ 430.802632][ T9842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.162578][ T9842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.215615][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.228753][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.252355][T10886] bond1: entered promiscuous mode [ 431.257624][T10886] bond1: entered allmulticast mode [ 431.265635][T10886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.355096][ T46] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 431.453409][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.453550][T10886] bond1 (unregistering): Released all slaves [ 431.481073][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.529709][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 431.537242][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.537780][ T9842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.547693][ T46] usb 5-1: config 0 has no interfaces? [ 431.572690][ T46] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 431.582025][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.602132][ T46] usb 5-1: Product: syz [ 431.606366][ T46] usb 5-1: Manufacturer: syz [ 431.619910][ T46] usb 5-1: SerialNumber: syz [ 431.628067][ T46] usb 5-1: config 0 descriptor?? [ 431.668435][T10756] hsr_slave_0: entered promiscuous mode [ 431.677233][T10756] hsr_slave_1: entered promiscuous mode [ 431.694509][T10756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.704236][T10756] Cannot create hsr debugfs directory [ 431.740360][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.753015][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.767967][T10824] bridge_slave_0: entered allmulticast mode [ 431.775339][T10824] bridge_slave_0: entered promiscuous mode [ 431.793552][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.800918][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.808246][T10824] bridge_slave_1: entered allmulticast mode [ 431.815701][T10824] bridge_slave_1: entered promiscuous mode [ 431.858757][ T29] audit: type=1326 audit(1728433294.342:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.4.1212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c3fd7dff9 code=0x7ffe0000 [ 431.937215][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.967642][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.263120][T10824] team0: Port device team_slave_0 added [ 432.337706][T10824] team0: Port device team_slave_1 added [ 432.399874][ T5229] Bluetooth: hci3: command tx timeout [ 432.400280][ T5279] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 432.513716][ T9842] bridge_slave_1: left allmulticast mode [ 432.524337][ T9842] bridge_slave_1: left promiscuous mode [ 432.549745][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.583711][ T9842] bridge_slave_0: left allmulticast mode [ 432.596825][ T9842] bridge_slave_0: left promiscuous mode [ 432.614675][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.101423][T10925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.123756][T10925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.774714][ T9842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.813400][ T9842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.844271][ T9842] bond0 (unregistering): Released all slaves [ 433.866361][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.890301][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.947070][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.042059][ T5279] usb 1-1: unable to get BOS descriptor or descriptor too short [ 434.069750][ T5279] usb 1-1: no configurations [ 434.074430][ T5279] usb 1-1: can't read configurations, error -22 [ 434.141638][T10930] hub 6-0:1.0: USB hub found [ 434.157660][T10930] hub 6-0:1.0: 1 port detected [ 434.188793][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.211556][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.212739][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.267145][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.345321][ T9] usb 5-1: USB disconnect, device number 65 [ 434.480982][ T5229] Bluetooth: hci3: command tx timeout [ 434.763170][T10824] hsr_slave_0: entered promiscuous mode [ 434.780093][T10824] hsr_slave_1: entered promiscuous mode [ 434.786433][T10824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.819629][T10824] Cannot create hsr debugfs directory [ 434.858253][T10942] tipc: Started in network mode [ 434.899890][T10942] tipc: Node identity f7, cluster identity 4711 [ 434.906222][T10942] tipc: Node number set to 247 [ 435.424848][ T9842] team0: left promiscuous mode [ 435.429954][ T9842] team_slave_0: left promiscuous mode [ 435.450306][ T9842] team_slave_1: left promiscuous mode [ 435.468942][ T9842] batadv_slave_1: left promiscuous mode [ 435.493707][ T9842] hsr_slave_0: left promiscuous mode [ 435.520746][ T9842] hsr_slave_1: left promiscuous mode [ 435.538555][ T9842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.552672][ T9842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.569075][ T9842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.592331][ T9842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.657508][ T9842] veth1_macvtap: left promiscuous mode [ 435.663502][ T9842] veth0_macvtap: left promiscuous mode [ 435.669822][ T9842] veth1_vlan: left promiscuous mode [ 435.675196][ T9842] veth0_vlan: left promiscuous mode [ 435.909802][ T46] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 436.066341][T10960] netlink: 'syz.1.1225': attribute type 9 has an invalid length. [ 436.076134][T10960] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1225'. [ 436.086330][ T46] usb 5-1: config index 0 descriptor too short (expected 45961, got 36) [ 436.095228][ T46] usb 5-1: config 39 has an invalid descriptor of length 186, skipping remainder of the config [ 436.106994][ T46] usb 5-1: config 39 has 0 interfaces, different from the descriptor's value: 22 [ 436.116679][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.127324][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.650140][ T9842] team0 (unregistering): Port device team_slave_1 removed [ 436.722713][ T9842] team0 (unregistering): Port device team_slave_0 removed [ 437.694843][T10954] netlink: 'syz.4.1220': attribute type 21 has an invalid length. [ 437.710685][T10954] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1220'. [ 437.741510][T10954] netlink: 'syz.4.1220': attribute type 5 has an invalid length. [ 437.750653][T10954] netlink: 'syz.4.1220': attribute type 6 has an invalid length. [ 437.772126][T10954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1220'. [ 437.812409][T10955] dvmrp0: entered allmulticast mode [ 437.828167][T10961] dvmrp0: left allmulticast mode [ 437.889191][T10963] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1226'. [ 437.900749][T10971] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1228'. [ 437.912705][T10963] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 437.921611][T10963] 0ªX¹¦Dö»: entered allmulticast mode [ 438.175572][T10976] netlink: 'syz.0.1229': attribute type 21 has an invalid length. [ 438.184553][T10976] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1229'. [ 438.226064][T10976] netlink: 'syz.0.1229': attribute type 5 has an invalid length. [ 438.255829][T10976] netlink: 'syz.0.1229': attribute type 6 has an invalid length. [ 438.268989][T10976] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1229'. [ 438.542199][ T5279] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 438.659126][ T46] usb 5-1: string descriptor 0 read error: -71 [ 438.691021][ T46] usb 5-1: USB disconnect, device number 66 [ 438.780397][ T5279] usb 1-1: config index 0 descriptor too short (expected 45961, got 36) [ 438.788889][ T5279] usb 1-1: config 39 has an invalid descriptor of length 186, skipping remainder of the config [ 438.817011][ T5279] usb 1-1: config 39 has 0 interfaces, different from the descriptor's value: 22 [ 438.832219][ T5279] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.900936][T10756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.918423][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.016195][T10756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 439.041185][T10756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 439.113649][T10756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 439.231877][T10973] dvmrp0: entered allmulticast mode [ 439.244340][T10973] dvmrp0: left allmulticast mode [ 439.386745][ T5279] usb 1-1: string descriptor 0 read error: -71 [ 439.446807][ T5279] usb 1-1: USB disconnect, device number 57 [ 439.984956][T10756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.069689][T10824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.134173][T10824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.224151][T10824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.242715][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.249535][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.276790][T11012] netlink: 'syz.0.1234': attribute type 9 has an invalid length. [ 440.323328][T11012] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1234'. [ 440.397740][T10824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.515490][T10756] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.664193][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.671388][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.765255][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.772490][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.962350][T10756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.069578][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.086809][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 441.090647][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.097818][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 441.235025][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.242308][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.352729][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.359947][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.538312][T10756] veth0_vlan: entered promiscuous mode [ 441.552634][T10756] veth1_vlan: entered promiscuous mode [ 441.583408][T10756] veth0_macvtap: entered promiscuous mode [ 441.633527][T10756] veth1_macvtap: entered promiscuous mode [ 441.737399][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.789761][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.819811][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.849749][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.867150][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.879190][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.896266][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.908417][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.927546][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.939154][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.951085][T10756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.967905][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.979228][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.993135][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.010653][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.021018][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.033436][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.043867][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.064259][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.074206][T10756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.088654][T10756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.106248][T10756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.134996][T10756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.157627][T10756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.168421][T10756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.177996][T10756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.193788][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.372628][T10824] veth0_vlan: entered promiscuous mode [ 442.501391][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.509128][T10824] veth1_vlan: entered promiscuous mode [ 442.533020][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.627453][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.636861][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.724453][T10824] veth0_macvtap: entered promiscuous mode [ 442.763773][T10824] veth1_macvtap: entered promiscuous mode [ 442.812575][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.851778][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.877904][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.918699][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.950818][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.989869][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.010900][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.032910][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.066037][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.092019][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.135041][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.156270][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.181686][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.258716][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.322663][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.399670][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.472742][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.548514][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.620234][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.687942][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.736795][T11089] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 443.772163][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.830704][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.847880][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.892558][ T29] audit: type=1326 audit(1728433306.362:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 443.920385][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.949587][ T25] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 443.994407][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.023820][ T29] audit: type=1326 audit(1728433306.362:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 444.058311][ T29] audit: type=1326 audit(1728433306.362:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 444.121450][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.389042][T11098] syz.4.1247 (11098): drop_caches: 2 [ 444.577656][ T29] audit: type=1326 audit(1728433306.362:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 444.617488][T10824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.629783][ T29] audit: type=1326 audit(1728433306.362:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 444.675821][T10824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.684852][T10824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.694187][T10824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.706088][ T29] audit: type=1326 audit(1728433306.362:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 444.795964][ T29] audit: type=1326 audit(1728433306.362:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 444.980615][ T29] audit: type=1326 audit(1728433306.362:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 444.990713][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.063132][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.104340][ T29] audit: type=1326 audit(1728433306.362:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 445.119582][T11113] "syz.4.1249" (11113) uses obsolete ecb(arc4) skcipher [ 445.149843][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.181175][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.214570][ T29] audit: type=1326 audit(1728433306.362:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.0.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efc37dff9 code=0x50000 [ 445.340992][T11118] fuse: Unknown parameter 'grou00000000000000000000' [ 445.527936][T11121] netlink: 'syz.2.1194': attribute type 21 has an invalid length. [ 445.594885][T11121] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1194'. [ 445.640707][T11121] netlink: 'syz.2.1194': attribute type 5 has an invalid length. [ 445.699301][T11121] netlink: 'syz.2.1194': attribute type 6 has an invalid length. [ 445.724679][T11121] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1194'. [ 445.829811][ T5306] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 446.024869][ T5306] usb 3-1: config index 0 descriptor too short (expected 45961, got 36) [ 446.034184][ T5306] usb 3-1: config 39 has an invalid descriptor of length 186, skipping remainder of the config [ 446.065175][ T5306] usb 3-1: config 39 has 0 interfaces, different from the descriptor's value: 22 [ 446.089559][ T5306] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.133753][ T5306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.406587][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.484658][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.498866][T11120] dvmrp0: entered allmulticast mode [ 446.507045][T11120] dvmrp0: left allmulticast mode [ 446.780570][ T5306] usb 3-1: string descriptor 0 read error: -71 [ 446.795459][ T5306] usb 3-1: USB disconnect, device number 67 [ 447.038318][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1257'. [ 447.451794][T11174] netlink: 'syz.2.1260': attribute type 9 has an invalid length. [ 447.465183][T11174] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1260'. [ 447.619579][ T5308] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 447.753381][T11181] FAULT_INJECTION: forcing a failure. [ 447.753381][T11181] name failslab, interval 1, probability 0, space 0, times 0 [ 447.789981][ T5308] usb 5-1: Using ep0 maxpacket: 16 [ 447.796912][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.2.1265 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 447.807751][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 447.817855][T11181] Call Trace: [ 447.821171][T11181] [ 447.824136][T11181] dump_stack_lvl+0x241/0x360 [ 447.828845][T11181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.834087][T11181] ? __pfx__printk+0x10/0x10 [ 447.838704][T11181] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 447.844715][T11181] ? __pfx___might_resched+0x10/0x10 [ 447.850050][T11181] should_fail_ex+0x3b0/0x4e0 [ 447.854876][T11181] should_failslab+0xac/0x100 [ 447.859577][T11181] ? __alloc_skb+0x1c3/0x440 [ 447.864184][T11181] kmem_cache_alloc_node_noprof+0x71/0x320 [ 447.870013][T11181] __alloc_skb+0x1c3/0x440 [ 447.874452][T11181] ? __pfx___alloc_skb+0x10/0x10 [ 447.879404][T11181] ? netlink_autobind+0xd6/0x2f0 [ 447.884380][T11181] ? netlink_autobind+0x2b0/0x2f0 [ 447.889428][T11181] netlink_sendmsg+0x638/0xcb0 [ 447.894249][T11181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.899551][T11181] ? aa_sock_msg_perm+0x91/0x160 [ 447.904513][T11181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.909808][T11181] __sock_sendmsg+0x221/0x270 [ 447.914505][T11181] ____sys_sendmsg+0x52a/0x7e0 [ 447.919288][T11181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.924606][T11181] __sys_sendmsg+0x292/0x380 [ 447.929219][T11181] ? __pfx___sys_sendmsg+0x10/0x10 [ 447.934356][T11181] ? __pfx_vfs_write+0x10/0x10 [ 447.939152][T11181] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.945505][T11181] ? do_syscall_64+0x100/0x230 [ 447.950287][T11181] ? do_syscall_64+0xb6/0x230 [ 447.954975][T11181] do_syscall_64+0xf3/0x230 [ 447.959507][T11181] ? clear_bhb_loop+0x35/0x90 [ 447.964202][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.970117][T11181] RIP: 0033:0x7fa8fdd7dff9 [ 447.974543][T11181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.994163][T11181] RSP: 002b:00007fa8feb14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.002594][T11181] RAX: ffffffffffffffda RBX: 00007fa8fdf35f80 RCX: 00007fa8fdd7dff9 [ 448.010602][T11181] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 448.018583][T11181] RBP: 00007fa8feb14090 R08: 0000000000000000 R09: 0000000000000000 [ 448.026575][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.034597][T11181] R13: 0000000000000000 R14: 00007fa8fdf35f80 R15: 00007fa8fe05fa28 [ 448.042686][T11181] [ 448.068982][ T5308] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 448.078615][ T5308] usb 5-1: config 0 has no interface number 0 [ 448.096231][ T5308] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 448.109610][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.145431][ T5308] usb 5-1: Product: syz [ 448.157939][ T5308] usb 5-1: Manufacturer: syz [ 448.194477][ T5308] usb 5-1: SerialNumber: syz [ 448.265967][ T5308] usb 5-1: config 0 descriptor?? [ 448.305910][ T5308] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 448.372844][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.436951][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 448.561692][ T30] INFO: task kworker/1:4:5276 blocked for more than 143 seconds. [ 448.578889][ T30] Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 448.613651][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.641315][ T30] task:kworker/1:4 state:D stack:21360 pid:5276 tgid:5276 ppid:2 flags:0x00004000 [ 448.664788][ T30] Workqueue: usb_hub_wq hub_event [ 448.697520][ T30] Call Trace: [ 448.725732][ T30] [ 448.738369][ T30] __schedule+0x1895/0x4b30 [ 448.766229][ T30] ? __pfx___schedule+0x10/0x10 [ 448.790889][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.807032][ T30] ? __pfx_lock_release+0x10/0x10 [ 448.835294][ T30] ? kick_pool+0x1bd/0x620 [ 448.890441][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.895881][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 449.029541][ T30] ? schedule+0x90/0x320 [ 449.033890][ T30] schedule+0x14b/0x320 [ 449.049521][ T30] schedule_preempt_disabled+0x13/0x30 [ 449.069728][ T30] __mutex_lock+0x6a7/0xd70 [ 449.080511][ T30] ? __mutex_lock+0x52a/0xd70 [ 449.085411][ T30] ? adu_disconnect+0xca/0x2b0 [ 449.099575][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 449.112034][ T30] ? usb_hcd_flush_endpoint+0x3d1/0x3f0 [ 449.117744][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 449.128444][ T30] adu_disconnect+0xca/0x2b0 [ 449.133298][ T30] usb_unbind_interface+0x25e/0x940 [ 449.138613][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 449.144577][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 449.151058][ T30] device_release_driver_internal+0x503/0x7c0 [ 449.157205][ T30] bus_remove_device+0x34f/0x420 [ 449.162658][ T30] device_del+0x57a/0x9b0 [ 449.167095][ T30] ? kobject_put+0x272/0x480 [ 449.171884][ T30] ? __pfx_device_del+0x10/0x10 [ 449.176844][ T30] ? kobject_put+0x44d/0x480 [ 449.181796][ T30] usb_disable_device+0x3bf/0x850 [ 449.186976][ T30] usb_disconnect+0x340/0x950 [ 449.191907][ T30] hub_event+0x1ebc/0x5150 [ 449.196515][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 449.202790][ T30] ? __pfx_hub_event+0x10/0x10 [ 449.207755][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 449.213022][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 449.219141][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 449.225718][ T30] ? process_scheduled_works+0x976/0x1850 [ 449.231623][ T30] process_scheduled_works+0xa63/0x1850 [ 449.237318][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 449.243559][ T30] ? assign_work+0x364/0x3d0 [ 449.248715][ T30] worker_thread+0x870/0xd30 [ 449.254054][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 449.260251][ T30] ? __kthread_parkme+0x169/0x1d0 [ 449.265440][ T30] ? __pfx_worker_thread+0x10/0x10 [ 449.270818][ T30] kthread+0x2f0/0x390 [ 449.275088][ T30] ? __pfx_worker_thread+0x10/0x10 [ 449.280427][ T30] ? __pfx_kthread+0x10/0x10 [ 449.285145][ T30] ret_from_fork+0x4b/0x80 [ 449.289728][ T30] ? __pfx_kthread+0x10/0x10 [ 449.294446][ T30] ret_from_fork_asm+0x1a/0x30 [ 449.299321][ T30] [ 449.302621][ T30] [ 449.302621][ T30] Showing all locks held in the system: [ 449.310767][ T30] 2 locks held by kworker/u8:0/11: [ 449.315946][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 449.328069][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 449.343350][ T30] 1 lock held by khungtaskd/30: [ 449.348291][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 449.358846][ T30] 3 locks held by kworker/u8:2/35: [ 449.364603][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 449.376576][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 449.387842][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 449.397112][ T30] 7 locks held by kworker/u8:3/52: [ 449.402460][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 449.413603][ T30] #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 449.424495][ T30] #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 449.434158][ T30] #3: ffff88802ff3a0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 449.444761][ T30] #4: ffff88802ff3b250 (&devlink->lock_key#31){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 449.456531][ T30] #5: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 449.466170][ T30] #6: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 449.477474][ T30] 2 locks held by getty/4988: [ 449.482330][ T30] #0: ffff88814ba160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 449.492332][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 449.502768][ T30] 6 locks held by kworker/1:4/5276: [ 449.508063][ T30] #0: ffff888020eec148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 449.519776][ T30] #1: ffffc9000401fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 449.531862][ T30] #2: ffff888028696190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 449.541047][ T30] #3: ffff88806b3b1190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 449.550521][ T30] #4: ffff888060a9e160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 449.561859][ T30] #5: ffffffff8f685388 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 449.571633][ T30] 3 locks held by kworker/1:8/5306: [ 449.576993][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 449.588502][ T5308] gspca_spca1528: reg_w err -110 [ 449.589542][ T30] #1: ffffc900042d7d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 449.593612][ T30] #2: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3} [ 449.609578][ T5308] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 449.630297][ T30] , at: rcu_barrier+0x4c/0x530 [ 449.637525][ T30] 1 lock held by syz.1.631/8566: [ 449.661560][ T30] #0: ffffffff8f685388 (adutux_mutex){+.+.}-{3:3}, at: adu_release+0xbf/0x870 [ 449.686565][ T30] 3 locks held by syz-executor/8577: [ 449.699562][ T30] #0: ffff88807c9b4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 449.717939][ T30] #1: ffff88807c9b4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 449.728797][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 449.739261][ T30] 3 locks held by syz-executor/10798: [ 449.753846][ T30] #0: ffff888072170d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 449.770821][ T30] #1: ffff888072170078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 449.784923][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 449.796908][ T30] 4 locks held by kvm-nx-lpage-re/11196: [ 449.806907][ T30] #0: ffffffff8e96c4e8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x27/0xe0 [ 449.818788][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0x11/0x40 [ 449.833011][ T30] #2: ffffffff8e96c6d0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x31/0xe0 [ 449.848126][ T30] #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 449.865882][ T30] 1 lock held by rm/11212: [ 449.930381][ T30] [ 449.943299][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.959581][ T30] ============================================= [ 449.959581][ T30] [ 449.997249][ T30] NMI backtrace for cpu 0 [ 450.001661][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 450.012209][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.022338][ T30] Call Trace: [ 450.025657][ T30] [ 450.028623][ T30] dump_stack_lvl+0x241/0x360 [ 450.033354][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.038591][ T30] ? __pfx__printk+0x10/0x10 [ 450.043253][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 450.048241][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 450.053749][ T30] ? _printk+0xd5/0x120 [ 450.057961][ T30] ? __pfx__printk+0x10/0x10 [ 450.062605][ T30] ? __wake_up_klogd+0xcc/0x110 [ 450.067507][ T30] ? __pfx__printk+0x10/0x10 [ 450.072150][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 450.077231][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 450.083268][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 450.089302][ T30] watchdog+0xff4/0x1040 [ 450.093605][ T30] ? watchdog+0x1ea/0x1040 [ 450.098084][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.102792][ T30] kthread+0x2f0/0x390 [ 450.106879][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.111579][ T30] ? __pfx_kthread+0x10/0x10 [ 450.116180][ T30] ret_from_fork+0x4b/0x80 [ 450.120619][ T30] ? __pfx_kthread+0x10/0x10 [ 450.125230][ T30] ret_from_fork_asm+0x1a/0x30 [ 450.130026][ T30] [ 450.134372][ T30] Sending NMI from CPU 0 to CPUs 1: [ 450.140248][ C1] NMI backtrace for cpu 1 [ 450.140264][ C1] CPU: 1 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 450.140287][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.140300][ C1] Workqueue: bat_events batadv_nc_worker [ 450.140330][ C1] RIP: 0010:lockdep_softirqs_on+0x1ed/0x5a0 [ 450.140362][ C1] Code: 00 fc ff df 4c 89 33 4c 89 e0 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 12 03 00 00 41 8b 9d 78 0a 00 00 ff c3 41 89 9d 78 0a 00 00 <4c> 89 6c 24 10 4d 8d b5 ac 0a 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 [ 450.140380][ C1] RSP: 0018:ffffc900015e7940 EFLAGS: 00000016 [ 450.140396][ C1] RAX: 0000000000000000 RBX: 0000000000c74fa0 RCX: ffffffff9a3cc903 [ 450.140410][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad7a0 RDI: ffffffff8c60fc20 [ 450.140425][ C1] RBP: ffffc900015e79f0 R08: ffffffff901cee2f R09: 1ffffffff2039dc5 [ 450.140440][ C1] R10: dffffc0000000000 R11: fffffbfff2039dc6 R12: ffff88801cb22878 [ 450.140455][ C1] R13: ffff88801cb21e00 R14: ffffffff8b8fcb32 R15: ffff88801cb228c0 [ 450.140471][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 450.140488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.140502][ C1] CR2: 000056250c788950 CR3: 000000000e734000 CR4: 00000000003526f0 [ 450.140519][ C1] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 450.140531][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.140545][ C1] Call Trace: [ 450.140552][ C1] [ 450.140560][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 450.140584][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 450.140612][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 450.140643][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 450.140670][ C1] ? nmi_handle+0x14f/0x5a0 [ 450.140690][ C1] ? nmi_handle+0x2a/0x5a0 [ 450.140710][ C1] ? lockdep_softirqs_on+0x1ed/0x5a0 [ 450.140737][ C1] ? default_do_nmi+0x63/0x160 [ 450.140761][ C1] ? exc_nmi+0x123/0x1f0 [ 450.140783][ C1] ? end_repeat_nmi+0xf/0x53 [ 450.140801][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 450.140830][ C1] ? lockdep_softirqs_on+0x1ed/0x5a0 [ 450.140858][ C1] ? lockdep_softirqs_on+0x1ed/0x5a0 [ 450.140893][ C1] ? lockdep_softirqs_on+0x1ed/0x5a0 [ 450.140920][ C1] [ 450.140927][ C1] [ 450.140935][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 450.140964][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 450.140992][ C1] ? rcu_is_watching+0x15/0xb0 [ 450.141015][ C1] __local_bh_enable_ip+0x123/0x200 [ 450.141041][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 450.141067][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 450.141094][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 450.141120][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 450.141149][ C1] batadv_nc_purge_paths+0x312/0x3b0 [ 450.141180][ C1] batadv_nc_worker+0x365/0x610 [ 450.141206][ C1] ? process_scheduled_works+0x976/0x1850 [ 450.141233][ C1] process_scheduled_works+0xa63/0x1850 [ 450.141269][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 450.141298][ C1] ? assign_work+0x364/0x3d0 [ 450.141325][ C1] worker_thread+0x870/0xd30 [ 450.141355][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 450.141384][ C1] ? __kthread_parkme+0x169/0x1d0 [ 450.141412][ C1] ? __pfx_worker_thread+0x10/0x10 [ 450.141439][ C1] kthread+0x2f0/0x390 [ 450.141475][ C1] ? __pfx_worker_thread+0x10/0x10 [ 450.141501][ C1] ? __pfx_kthread+0x10/0x10 [ 450.141520][ C1] ret_from_fork+0x4b/0x80 [ 450.141547][ C1] ? __pfx_kthread+0x10/0x10 [ 450.141565][ C1] ret_from_fork_asm+0x1a/0x30 [ 450.141598][ C1] [ 450.175043][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 450.175068][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 450.175099][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.175115][ T30] Call Trace: [ 450.175126][ T30] [ 450.175137][ T30] dump_stack_lvl+0x241/0x360 [ 450.175173][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.175198][ T30] ? __pfx__printk+0x10/0x10 [ 450.175233][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 450.175280][ T30] ? vscnprintf+0x5d/0x90 [ 450.175312][ T30] panic+0x349/0x880 [ 450.175350][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 450.175384][ T30] ? __pfx_panic+0x10/0x10 [ 450.175418][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 450.175447][ T30] ? __irq_work_queue_local+0x137/0x410 [ 450.175484][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 450.175510][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 450.175540][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 450.175573][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 450.175607][ T30] watchdog+0x1033/0x1040 [ 450.175651][ T30] ? watchdog+0x1ea/0x1040 [ 450.175691][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.175724][ T30] kthread+0x2f0/0x390 [ 450.175750][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.175782][ T30] ? __pfx_kthread+0x10/0x10 [ 450.175809][ T30] ret_from_fork+0x4b/0x80 [ 450.175845][ T30] ? __pfx_kthread+0x10/0x10 [ 450.175871][ T30] ret_from_fork_asm+0x1a/0x30 [ 450.175927][ T30] [ 450.651713][ T30] Kernel Offset: disabled [ 450.656067][ T30] Rebooting in 86400 seconds..