last executing test programs: 25.745134762s ago: executing program 4 (id=8063): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='net/protocols\x00') syz_fuse_handle_req(r0, &(0x7f0000001a40)="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", 0x2000, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000005240)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) 24.006959178s ago: executing program 0 (id=8070): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x280, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {0x0, 0x0, 0x40000}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 23.853496565s ago: executing program 0 (id=8073): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x400) epoll_create(0x8) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000010000104000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) 23.743921947s ago: executing program 4 (id=8075): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x60, 0x0, 0x0, 0x14}, {0x6}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x23, 0x5, 0x1bd) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r6, &(0x7f0000000000)="c8", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8001}, 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r1) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x24008800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="000000000008000014001280090001007663616e000000028cd47b8008000a00", @ANYRESHEX=r2], 0x3c}}, 0x0) 23.618558323s ago: executing program 4 (id=8077): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="020f580001"], 0x48}}, 0x0) 23.464012231s ago: executing program 4 (id=8078): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000004000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900e0000}}], 0x3, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) 23.448149594s ago: executing program 0 (id=8080): r0 = io_uring_setup(0x6cfb, &(0x7f00000001c0)={0x0, 0x0, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') read$FUSE(r1, &(0x7f0000008bc0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x207c) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x20000400) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x2) 23.148496648s ago: executing program 0 (id=8081): getpriority(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = gettid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f00000023c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004e80)="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", 0x2000, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) read$FUSE(r2, &(0x7f0000002dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0xffffffffffffffda, r4}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xc01, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x2}]}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000005aea7204e08011099bf0002030109021b00010000000009040000014466790009050db7"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 22.329545823s ago: executing program 4 (id=8083): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x491, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x1f}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f00000005c0), 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20059f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00+'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}, 0x14}]}, &(0x7f0000000140)=0x10) listen(r6, 0xfff) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000040)={0x7, 0x2, 0x0, 0xf773, "00207d200000001200000000000900"}) 19.56092353s ago: executing program 0 (id=8089): open(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfe39) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2b003300d0003b27847a28da26e3a64e5dcd977515000008021180000108021100000050505050105000000004250300b100a100000000000000005141b22dad9711b27db6b123c6c9a29d7b27bb39b2678da7de264c7cf839ae77d21b63ac24742fe6c7f3e86809c5a31a2e63be545face0e7e39c8c179ee30cd495f618d0cf57c3c42a152d028c7334d972989a033f2721da1671815c1fca64fc9fa4a6806b35eacd475fd747fb61b7a9d24159248c58d69f2c8af4dd63ed115efc1c65f0e9769f293258ae72620481fc232e343b464de6aa72805cbb110547cc1b10f32e471213900464f3e477a57acbd9d0dd30e05425f4abb2f6337d150c25660b6bda214bf759c1e4e0f7d68bf94c3264aed7cd3943f21a55da61193bf1877db6c10d"], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x0, 0x0) bind$packet(r0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="05b8000001000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000b4a24654bfa400400000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002205006c000000e57ed387b467da2f468af0078a0639342e8c85707399d90bd4c70d7fb89c3bf43b1e0e5b5782778aea5d1787bf4e9faa6135df3b73e5a202b4754efe07b04a8f530c6270df1d596f41810d0e81fa1daa83849ad497df9e0b776a26388ce95407afcfb26a6e6b"], 0x0}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet(r7, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 19.050741551s ago: executing program 0 (id=8092): socket$netlink(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x30c000, 0x800, 0x0, 0x4}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000300)='3B', 0x2}]) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) io_setup(0x8, &(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, 0x0, 0xfffffffffffffefc, 0x80000000, 0x1) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r5, &(0x7f0000001dc0), 0x213, 0x0) 17.106264771s ago: executing program 4 (id=8099): writev(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000001) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x17bb, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = getpid() r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000380)={0x0, 0x0}) kcmp(r4, r6, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r8, 0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0, 0xc36b, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) 8.999620693s ago: executing program 3 (id=8111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0x36c, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e20, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}, @tfcpad={0x8, 0x16, 0xb}, @policy_type={0xa, 0x10, {0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xa}}, @policy_type={0xa}, @algo_crypt={0xfe, 0x2, {{'chacha20-arm\x00'}, 0x5b0, "28fee04aec197e964d1f996f17c4f3ea2c384e37c7868c116c9b65254721bc083c04bfcf9b4a4c7e659619b68554897b4ce4f7362cbf6eb281923b3504d211c8822cf1f7186c2917160e885f4aa30744f5ae02cbafe0fa65a9b036034db5b429aee2000626aa13e55db02777167f8f50f36feee6743c6ebf33b772b956aae1ecbac814cab6da8c6190c5c49fdc7cf16b7161c0140a9b3cd4a3eba65500f3bd320baa5ce27cf6a1f1092ac6f44c710852a0b72e3bd44e"}}, @algo_auth={0x122, 0x1, {{'rmd160-generic\x00'}, 0x6d0, "c5e2659c5220a19e67e597274ecc741293b91df30a061dbd35ac2bef6dd2537d62d9b9aa5719171f98ccbc6d5875ebe71e0209ddf28c79f05ec268897fde36128e3d5544a66e42f59bdde56374ad06d659762b2e2e1c772f6bf5504fe38316a024a5ddcbbfed6871c3652e42ed1a59216bd9bbb7dba0fbd82f48850039631b3f5e4ec00d8976227f5d494499aedaede283f1873b50fc13044f248ef9f43f013949142600b21d0cbdaf51addb717decf24221da58579366a088308e057c5f5a04453977f3760937b2cd9fbf8c73bc702b3ffbe1b49128c8fc8393"}}, @coaddr={0x14, 0xe, @in=@multicast1}, @tfcpad={0x8, 0x16, 0x5}, @lastused={0xc, 0xf, 0x3}]}, 0x36c}}, 0x40800) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000200000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 8.842481144s ago: executing program 3 (id=8112): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b1505d600000000000000034888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) 8.713438389s ago: executing program 1 (id=8114): socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x21, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r5, @ANYRES16], 0x1c}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$bt_hci(r11, 0x0, 0x3, &(0x7f0000000100)=""/1, &(0x7f0000000280)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) 7.589630883s ago: executing program 1 (id=8118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) 6.869698273s ago: executing program 3 (id=8123): syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x20, &(0x7f0000000240)=@string={0x20, 0x3, "db53c5a7db4466a70a2c70a2cb575b120a07f925e147aca8795cc9f3d413"}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) syz_80211_join_ibss(&(0x7f00000000c0)='wlan0\x00', &(0x7f0000000100)=@default_ap_ssid, 0x6, 0x1) mmap(&(0x7f0000022000/0x4000)=nil, 0x4000, 0x280000b, 0x110, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) utimes(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.995993423s ago: executing program 1 (id=8124): r0 = io_uring_setup(0x6cfb, &(0x7f00000001c0)={0x0, 0x0, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') read$FUSE(r1, &(0x7f0000008bc0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x207c) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x20000400) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x2) 5.836926047s ago: executing program 1 (id=8125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x58, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x0, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/13, 0xd, 0x1, 0x2c}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8, 0x2, 0x9}}, 0x0}}, @increfs_done], 0x10, 0x0, &(0x7f00000001c0)="ce12597b056b667042b2bc2502e48722"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r1 = syz_usb_connect(0x4, 0x616, &(0x7f0000000d40)={{0x12, 0x1, 0x300, 0xeb, 0x36, 0x2e, 0x20, 0x846, 0x9010, 0x5f1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x604, 0x2, 0x1, 0x0, 0xa0, 0xfc, [{{0x9, 0x4, 0x17, 0x1, 0xf, 0x4f, 0x43, 0x20, 0x7, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x0, 0x4, "b8821aeed9cf"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x401, 0x100, 0x0, "fb838ad62b"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x2, 0x59, 0x40, "bd08594ec57dbaba7f"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0xb, "297f618031"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x1, 0x0, "c6", "6853f1"}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "5078f8"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x79e, 0x8, 0x3}, {0x6, 0x24, 0x1a, 0x59ae, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xf}, @mdlm={0x15, 0x24, 0x12, 0x3}]}], [{{0x9, 0x5, 0xd, 0x2, 0x8, 0xde, 0x52, 0x0, [@generic={0xf2, 0x8, "76cca67746a818dfd071b8c8ab84281a0407e945493053b978aef0b8443c57174a9c37d3a023749e2f47f1467b19fc788b3351033dfea486cb6d9e17bc8c0498ec51a337b3b2df626f449b190358c72df9a99967608785b6c0926f61306854ca158c3ababc00689b0fe836688a63e977dc197c51cc90ad13debcae0fc699c576248cdf7e7508c22f1f1f40fc05bc9414da8796c533a2e2e7cb91acd518b846c91a35a75046474a8ba96301a600abf29cd8dfc940b299622389f33cac7564d24e3e9804d9868bb1963eb4d92625175197703bd1d3573a6ab456d9a38fbbc81e5c723d4b973340e782c99db4c94f213d0e"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xa, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x10}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x3, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xff04}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0xa, 0xae, [@generic={0x59, 0x23, "47a988e5fa67f0a7ff33238b3e1e077a03282b51dcf3d1b137009dedcd9305ce6fffa4521d34d55b42ed5c629ea5285e5b605d21e7935a9eb351eb317550ff654c39658ba9260a1a57b0285137f51dbb0ef6954447f029"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x6cf6}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0xd, 0x4, 0x10, [@generic={0x46, 0x11, "30c4f2ad971ae8876b1d8f630a3f00ad85b0d6abd744558f702afcd4d579dd17cba65e40de1cd5d3121064acde67345760094387f352a94788d72e49a46a93912a0ade84"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x10, 0x0, 0xd, [@generic={0x6, 0x21, "c089d182"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xa, 0x10, 0xaf}}, {{0x9, 0x5, 0x9, 0x10, 0x0, 0xc, 0xee, 0x7}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0xe, 0x9, 0x7f, [@generic={0xa2, 0x1, "d193f3d2b8a62a1f4510322c1d5aaaed117bec5489d8d223220347bbbc57b3f0a68b5e3bc27c0241e86b5e39873ea0eb6658613f639c6338949741eb301fc20ef6ce25a1bf1826d39c016e1b131528e7aa94b12baf1d6cd293c5bbb21c676c0653f7e7767b1cfea78147528e798d76b04f3e06d5848b8b59a9d706ed87610293e5aefbd85c094c1a5fbafab853c21c7ce918584b91149f3e8072ba65ebcc47aa"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x3, 0x81, 0xfe}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x9, 0x11, 0x3, [@generic={0x9b, 0x11, "8d80a2cb26a9a29bab646896673f70b98d0033511cabaa95cc780ace9002251560070c802549aca1d8a69f6f80c065bd749a1fea624f60f3b6eddb6edd8af9b1362d837f242e4f17f6674192bcd38bc1e14e7a4ef6075f9258f89b8ea999358058722e2adb88dc59e992d1a9678bcfd9a1a2f1ef983201cc84c1eb348cdc27ba872950344d6b15c5c6addae55662d2bb5a7769e2efc7eeb15a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x8, 0x86, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe0, 0xe}, @generic={0xb5, 0x8, "0222bc2968905a21b4f1b345285d8389345c64075b206fb7df0afe4951051b3a60a52a59ee56bdf9842bd58943556535f715c2721cc5bc89de5bda680fcc99c9c8d6263bbe027db12a12c59ad14c885e05fc2899b6808bd2990009fddcaef2d2509d2e95832d8dd67f444baa852a919b2dd76803fc5f95b77f3964ad469be3acaf4bf9bb25c47c1f31f9f9e6b3231bb58cabb9953cd78916b5fadda92d97f009c3c9b56d38382019dfd4fc42e2c71b76058e9d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x6, 0x1, 0x1}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xf9, 0x2, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5b, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0x3d, 0xd3, 0x2, 0x6b, 0x79, 0x5c, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "3c1e"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x6bf, 0x9, 0x6, 0xfe}, [@dmm={0x7, 0x24, 0x14, 0xac3, 0xff}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x4}, @country_functional={0x6, 0x24, 0x7, 0xf, 0x400}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0x2}]}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x9, 0x5, 0x8, [@generic={0xd1, 0x11, "96922771d8f7b6126706115876bfcba859c4883306559f18a659d0b6780ea92474319fb2825ac7d4480a338a1991cffa5b013fd1a2ed0ba5d7c06cc104068e3e2c6a704d7f64186331920495159bcef40abbfe2d35d415c928f81e49d851f8bc65324923b140b08331262e7ec2a3034af3adc2dcd6c346f77959366f30eea97b527c5d9e12727cd18d44e60b81859149f1b73cbe4e542a98f6d6a94e2970d3b2e53db83a9856f0edeae4f229659688d561d7cd51f36c6c398e164016a848503dc735ac6774c4b09aa858aff4a24065"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x4, 0xc, 0xff}}]}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0x0, 0x11, "0790fcc6c83ed711efba22764d06f291ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.028091419s ago: executing program 3 (id=8127): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x2000008c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xb38237, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0xde) 4.30617776s ago: executing program 2 (id=8128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fanotify_init(0x1, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1a1000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x4, 0x8, 0x4, 0x9, 0x0, r1}) sendmmsg$inet(r3, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='$'], 0x28}}], 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim, @ra]}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0xd, 0x4, 0x3c8, 0x110, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x808045, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@allow_other}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/dsp1\x00'}}]}}) read$FUSE(r6, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2041401, &(0x7f0000002480)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}, {@blksize}, {@default_permissions}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, 'fuse\x00'}}, {@audit}, {@smackfshat={'smackfshat', 0x3d, 'blksize'}}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(r9, r10) fdatasync(r5) 4.190348904s ago: executing program 3 (id=8129): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cpuset\x00') pread64(r0, &(0x7f0000004180)=""/4096, 0x1000, 0x0) (fail_nth: 1) 3.460096591s ago: executing program 3 (id=8130): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="a89374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5}) 2.515892258s ago: executing program 2 (id=8131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0xfffe, 0x0, "3cf020eea7cd249964e2659967f91af858130b3d20bec3c3355dab2191bceab66fd6d4729c4141f1f5a519ae26b1f54582daaa1344e7bda0aeb5023a6ed073ee1759875ebc8f5a5e440b73eabba12d2c"}, 0xd8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000080)={0x7fff, 0x1}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0xfec1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) dup(r10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000140)=ANY=[@ANYRES64=r7]) listen(r0, 0xfff) syz_emit_ethernet(0xf4, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd600a843500be0600fe8000000000000000000000000000bbffcf84f980e8010f1b3acafcda60320d3a0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780004539827f537300b40ef5fc6a29c4dae090135fef5f1a280067f54dfd2eeb05b026390a7778306775b286657918de04aba187d8d2d213801ad848444b4deefcccb34050791759cd23e013478ee08c0f50a942f0b99e53ceacab90e5721ffefb7bfe28deb57f9772032f29c4c3820d4c9378d87c0a14b96988c4d6a4889b74050a5577672075220d78f9181568221724c1578ced6a852d3df55be798dcc08857ac82157593aff56b8f25ee7"], 0x0) getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) getresgid(&(0x7f0000000900)=0x0, &(0x7f0000000940), &(0x7f0000000980)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="30030000daffffff", @ANYRES16=r0, @ANYBLOB="030000000000000001000000000000000e00000000000000d047000000000000fd0700000104000004000000000000000000e00000000100000000000008000000000000000300000000000000000000000000000030eb000004000000050000000060000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a04f0000ab570000000000000000000000000000010400000000000002000000040000005b2d000000000000060000000000000001000000000000000100000001000000040000000000000009000000030000000000000000000000ffffff7f0000000005000000000000009305000000000000060000000000000001000000000000000100000008000000020000000020000001000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="06000000b10000000000000005000000000000000100000000000000050000002408000025282421260000000200000000000000020000000000000000000000000000000200000000000000080000001000000000000000000000006b95000000400000040000000000000001000000000000000a00000000000000ffffffffffffff7f05000000008000000d00000000a00000ff7fffff", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32=r12, @ANYBLOB="0500000080000000000000000302000000000000060000000000000000000000030000000600000000000000020000000000000000080000000000000400000000000000750f00000002000003000000000000000800000000000000feaa0000000000000500000000000000070000000000000008000000000000000700000006000000060000000080000000000080", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="030000007f000000000000000300000000000000b102f63c000000000c0000000000000027242c2f5c242b2e2d40237d00000000"], 0x330) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500140600fe8000000000000008000000000000bbfe800000000000dfff000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 2.411948994s ago: executing program 1 (id=8132): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x3cbf, &(0x7f0000000540)={0x0, 0xeafe, 0x20, 0x3, 0xdc}, &(0x7f0000000100), &(0x7f0000000340)) syz_io_uring_setup(0x7c7d, &(0x7f0000000140)={0x0, 0x55d0, 0x0, 0xffffffff, 0x20028f, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x6020400) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffff9]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000000)='j/\x00\x84\xbes\xc0\xb0\t\xf8\xbcQ\xbav)\x82>\xb6\xee~\x81\xfbR=\xbf\x99@_\x01\xc3\xadl\x8b\xfbT\xf6\xf5D\r\x81\x89\xb0\x8aFtRg', 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000500)={0x1d, r6, 0x6, {0x2}}, 0x18) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000a40)={0x0, 'ipvlan0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000004c0)=0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) io_uring_enter(r0, 0x4047f6, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="02002dbd7000fcdbdf25050000000500050005000000080002000400000014000680060001000a00000008000700", @ANYRES32=r6, @ANYBLOB="0800a976ed7a0000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000033f5c6caa1020bce8000000ff00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028006000200f7"], 0x3c}}, 0x0) write$sndseq(r8, &(0x7f0000000000)=[{0x7, 0x17, 0xb1, 0x29, @tick=0xc, {0xb, 0x84}, {0x4, 0x7}, @queue={0xff, {0x0, 0x3}}}], 0x1c) 1.77209787s ago: executing program 2 (id=8133): r0 = io_uring_setup(0x6cfb, &(0x7f00000001c0)={0x0, 0x0, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') read$FUSE(r1, &(0x7f0000008bc0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x207c) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x20000400) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x2) 1.667161391s ago: executing program 2 (id=8134): syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000600)={0x0, 0x3244, 0x80, 0xffffffff}, &(0x7f00000005c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x3, &(0x7f0000000180), 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x100, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7, r6], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r8, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r0, &(0x7f0000000400)=@rc={0x1f, @fixed}, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x100000}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r11, 0x29, 0x4c, &(0x7f0000000300)=0x6, 0x4) sendto$inet6(r11, &(0x7f0000000540)="82", 0x1, 0x0, 0x0, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 1.389162039s ago: executing program 1 (id=8135): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @loopback}, @llc={0x1a, 0x2, 0x8, 0x4, 0xfe, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @l2={0x1f, 0x6, @any, 0xa8}, 0x5, 0x0, 0x0, 0x0, 0xffa6, &(0x7f00000000c0)='tunl0\x00', 0x7ff, 0x4e, 0x401}) socket$xdp(0x2c, 0x3, 0x0) userfaultfd(0x801) landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100a}) socket(0x1d, 0x2, 0x6) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x33}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) fadvise64(r0, 0x8000, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r8, 0x541b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000ca3c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x3d, 0x0, 0x5, 0x34f0}}) 117.79158ms ago: executing program 2 (id=8136): symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffad95ff86dd606410a60018000020010000000000000000000000000001fe8000000000000000000000000000aa00020000000000000502000007080000000077"], 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x18}}, './file0\x00'}) 0s ago: executing program 2 (id=8137): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0xfffffffffffffd7f) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0x40047452, 0x1000000000000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000004c0)={0x48}) syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfe0e, 0x0, 0xffffffff, 0x4}, 0x20) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket(0x0, 0x800000003, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x2], 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x44]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x2}, 0x38) kernel console output (not intermixed with test programs): d [ 2846.566563][ T5304] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2846.622111][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2846.630594][ T5304] usb 2-1: device descriptor read/8, error -71 [ 2846.683679][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2846.787023][ T942] usb 1-1: USB disconnect, device number 90 [ 2846.910767][ T9243] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7863'. [ 2846.920268][ T5304] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2846.926210][ T527] Bluetooth: hci2: command tx timeout [ 2846.966948][ T5304] usb 2-1: device descriptor read/8, error -71 [ 2846.974879][ T7638] team0 (unregistering): Port device team_slave_0 removed [ 2847.127195][ T5304] usb usb2-port1: unable to enumerate USB device [ 2849.303618][ T9148] chnl_net:caif_netlink_parms(): no params data found [ 2849.747611][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7870'. [ 2849.756867][ T9263] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 2849.817812][ T9263] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 2849.907753][ T47] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2850.033937][ T9266] fuse: Bad value for 'fd' [ 2850.147444][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state [ 2850.154626][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 2850.162719][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 2850.178519][ T47] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 2850.195463][ T47] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 2850.221332][ T47] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 2850.230789][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2850.251590][ T5304] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 2850.251596][ T47] usb 2-1: Product: syz [ 2850.265547][ T47] usb 2-1: Manufacturer: syz [ 2850.265656][ T9148] bridge_slave_0: entered allmulticast mode [ 2850.270265][ T47] usb 2-1: SerialNumber: syz [ 2850.289956][ T47] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 2850.307580][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 2850.349688][ T9148] bridge_slave_0: entered promiscuous mode [ 2850.400971][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2850.419219][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 2850.454158][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 2850.473916][ T5304] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 2850.490601][ T9148] bridge_slave_1: entered allmulticast mode [ 2850.492966][ T47] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 2850.511458][ T5304] usb 1-1: config 0 has no interface number 0 [ 2850.534493][ T9148] bridge_slave_1: entered promiscuous mode [ 2850.548445][ T5304] usb 1-1: too many endpoints for config 0 interface 68 altsetting 225: 217, using maximum allowed: 30 [ 2850.559533][ T47] usb 2-1: media controller created [ 2850.620856][ T5304] usb 1-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 2850.633732][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2850.662177][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 2850.670140][ T47] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 2850.689092][ T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input223 [ 2850.701630][ T47] dvb-usb: schedule remote query interval to 150 msecs. [ 2850.709297][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 2850.736415][ T5288] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2850.746689][ T47] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 2850.776155][ T5304] usb 1-1: config 0 interface 68 has no altsetting 0 [ 2850.816864][ T5304] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2850.825992][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2850.861575][ T5304] usb 1-1: config 0 descriptor?? [ 2850.866552][T23414] dvb-usb: bulk message failed: -22 (1/0) [ 2850.866589][T23414] dvb-usb: error while querying for an remote control event. [ 2850.986027][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2851.009342][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 2851.028955][T23414] dvb-usb: bulk message failed: -22 (1/0) [ 2851.029669][ T5288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2851.052719][T23414] dvb-usb: error while querying for an remote control event. [ 2851.069738][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2851.126250][ T5288] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2851.151815][ T5288] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2851.174333][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2851.221487][ T5288] usb 3-1: Product: syz [ 2851.237128][T23414] dvb-usb: bulk message failed: -22 (1/0) [ 2851.240658][ T5288] usb 3-1: Manufacturer: syz [ 2851.257902][ T5288] usb 3-1: SerialNumber: syz [ 2851.284224][ T5288] usb 3-1: config 0 descriptor?? [ 2851.296213][T23414] dvb-usb: error while querying for an remote control event. [ 2851.401796][ T9148] team0: Port device team_slave_0 added [ 2851.418894][ T9148] team0: Port device team_slave_1 added [ 2851.467330][ T6156] dvb-usb: bulk message failed: -22 (1/0) [ 2851.484545][ T6156] dvb-usb: error while querying for an remote control event. [ 2851.559835][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2851.633689][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2851.715054][ T47] dvb-usb: bulk message failed: -22 (1/0) [ 2851.733289][ T47] dvb-usb: error while querying for an remote control event. [ 2851.742024][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2851.833043][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2851.896801][ T6156] dvb-usb: bulk message failed: -22 (1/0) [ 2851.925144][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2851.940028][ T6156] dvb-usb: error while querying for an remote control event. [ 2852.112807][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2852.124121][ T5288] usb 3-1: USB disconnect, device number 90 [ 2852.136328][ T6156] dvb-usb: bulk message failed: -22 (1/0) [ 2852.162774][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2852.206831][ T6156] dvb-usb: error while querying for an remote control event. [ 2852.302708][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2852.352872][ T5304] usb 1-1: string descriptor 0 read error: -71 [ 2852.375339][ T5304] pegasus 1-1:0.68: probe with driver pegasus failed with error -71 [ 2852.396804][ T47] dvb-usb: bulk message failed: -22 (1/0) [ 2852.409253][ T5304] usb 1-1: USB disconnect, device number 91 [ 2852.433298][ T47] dvb-usb: error while querying for an remote control event. [ 2852.561553][ T9148] hsr_slave_0: entered promiscuous mode [ 2852.606709][T23414] dvb-usb: bulk message failed: -22 (1/0) [ 2852.617145][ T9148] hsr_slave_1: entered promiscuous mode [ 2852.632074][T23414] dvb-usb: error while querying for an remote control event. [ 2852.640764][ T9148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2852.651692][ T5288] usb 2-1: USB disconnect, device number 118 [ 2852.689707][ T9148] Cannot create hsr debugfs directory [ 2852.877348][ T5288] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 2852.946721][ T9282] netlink: 'syz.2.7877': attribute type 29 has an invalid length. [ 2852.964804][ T29] audit: type=1326 audit(1725324015.895:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.0.7878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0187b79eb9 code=0x0 [ 2853.061476][ T9282] netlink: 'syz.2.7877': attribute type 29 has an invalid length. [ 2853.181574][ T9289] netlink: 'syz.2.7877': attribute type 29 has an invalid length. [ 2853.306720][ T5288] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2853.476473][ T5288] usb 2-1: device descriptor read/64, error -71 [ 2853.717297][ T9299] fuse: Bad value for 'fd' [ 2853.801908][ T5288] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2853.956227][ T5288] usb 2-1: device descriptor read/64, error -71 [ 2854.017725][ T9148] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2854.043204][ T9148] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2854.082912][ T9148] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2854.097302][ T5288] usb usb2-port1: attempt power cycle [ 2854.134485][ T9148] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2854.182654][ T9305] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 2854.216604][T23414] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2854.231986][ T9305] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 2854.426177][T23414] usb 5-1: Using ep0 maxpacket: 16 [ 2854.462586][T23414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2854.500384][T23414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2854.519167][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2854.525930][T23414] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 2854.550807][T23414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2854.571175][ T9148] 8021q: adding VLAN 0 to HW filter on device team0 [ 2854.587686][T23414] usb 5-1: config 0 descriptor?? [ 2854.603507][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 2854.610744][ T7638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2854.621807][ T5288] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2854.685431][ T5288] usb 2-1: device descriptor read/8, error -71 [ 2854.798101][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 2854.805316][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2854.997222][ T5288] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2855.062190][T23414] mcp2200 0003:04D8:00DF.0073: unbalanced delimiter at end of report description [ 2855.083042][T23414] mcp2200 0003:04D8:00DF.0073: can't parse reports [ 2855.096265][T23414] mcp2200 0003:04D8:00DF.0073: probe with driver mcp2200 failed with error -22 [ 2855.147263][ T5288] usb 2-1: device descriptor read/8, error -71 [ 2855.255568][ T9148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2855.306562][ T5288] usb usb2-port1: unable to enumerate USB device [ 2855.353829][ T9148] veth0_vlan: entered promiscuous mode [ 2855.454655][ T9148] veth1_vlan: entered promiscuous mode [ 2855.479948][ T9302] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.7883'. [ 2855.526350][T23414] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2855.578877][ T9148] veth0_macvtap: entered promiscuous mode [ 2855.589159][ T9148] veth1_macvtap: entered promiscuous mode [ 2855.615165][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.626470][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.638041][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.650275][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.661964][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.674111][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.685870][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.697484][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.707864][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.722418][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.733156][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.743797][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.756549][T23414] usb 1-1: Using ep0 maxpacket: 8 [ 2855.763628][T23414] usb 1-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 2855.772710][T23414] usb 1-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 2855.784011][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2855.795485][T23414] usb 1-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 2855.809571][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2855.820190][T23414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2855.828383][T23414] usb 1-1: Product: syz [ 2855.832669][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.842665][T23414] usb 1-1: Manufacturer: syz [ 2855.847553][T23414] usb 1-1: SerialNumber: syz [ 2855.853928][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2855.889239][T23414] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 2855.902667][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.933143][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2855.946447][T23414] dvb-usb: bulk message failed: -22 (3/0) [ 2855.973155][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.979376][T23414] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2855.993115][T23414] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 2856.017359][T23414] usb 1-1: media controller created [ 2856.042384][T23414] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2856.069788][T23414] dvb-usb: bulk message failed: -22 (6/0) [ 2856.080558][T23414] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 2856.096275][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.107157][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.118527][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.120482][T23414] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input224 [ 2856.143819][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.159724][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.189722][T23414] dvb-usb: schedule remote query interval to 150 msecs. [ 2856.210408][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.227689][T23414] dvb-usb: bulk message failed: -22 (3/0) [ 2856.248313][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2856.270747][T23414] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 2856.356178][ T5290] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2856.386161][T23414] dvb-usb: bulk message failed: -22 (1/0) [ 2856.393214][T23414] dvb-usb: error while querying for an remote control event. [ 2856.461234][ T9323] netlink: 'syz.1.7889': attribute type 21 has an invalid length. [ 2856.488803][ T9323] netlink: 'syz.1.7889': attribute type 6 has an invalid length. [ 2856.511264][ T9323] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7889'. [ 2856.550413][ T5290] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2856.577779][ T6156] dvb-usb: bulk message failed: -22 (1/0) [ 2856.578555][ T9148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2856.590311][ T6156] dvb-usb: error while querying for an remote control event. [ 2856.620512][ T5290] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2856.666200][ T9148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2856.667875][ T5290] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2856.695765][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2856.708614][ T9320] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2856.716512][ T9148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2856.729316][ T5290] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2856.736585][ T9148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2856.826171][ T5290] dvb-usb: bulk message failed: -22 (1/0) [ 2856.840097][ T5290] dvb-usb: error while querying for an remote control event. [ 2856.960777][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2857.014685][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2857.024949][ T5290] dvb-usb: bulk message failed: -22 (1/0) [ 2857.045476][ T5290] dvb-usb: error while querying for an remote control event. [ 2857.112682][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2857.129839][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2857.213235][ T9329] binder: 9326:9329 ioctl c0306201 20000480 returned -14 [ 2857.246722][ T5290] dvb-usb: bulk message failed: -22 (1/0) [ 2857.264223][ T5290] dvb-usb: error while querying for an remote control event. [ 2857.283542][ T7638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2857.316363][ T7638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2857.466860][ T5290] dvb-usb: bulk message failed: -22 (1/0) [ 2857.476013][ T5290] dvb-usb: error while querying for an remote control event. [ 2857.636270][ T5287] dvb-usb: bulk message failed: -22 (1/0) [ 2857.650515][ T942] usb 5-1: USB disconnect, device number 82 [ 2857.651949][ T5287] dvb-usb: error while querying for an remote control event. [ 2857.856689][ T5290] dvb-usb: bulk message failed: -22 (1/0) [ 2857.880821][ T5290] dvb-usb: error while querying for an remote control event. [ 2857.974109][ T9333] fuse: Bad value for 'fd' [ 2858.066176][ T5290] dvb-usb: bulk message failed: -22 (1/0) [ 2858.080559][ T5290] dvb-usb: error while querying for an remote control event. [ 2858.187649][ T5304] usb 1-1: USB disconnect, device number 92 [ 2858.234115][ T29] audit: type=1326 audit(1725324021.145:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.4.7896" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b0a579eb9 code=0x0 [ 2858.388355][ T5304] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 2858.592418][ T9351] netlink: 'syz.0.7898': attribute type 1 has an invalid length. [ 2858.612609][ T9351] netlink: 'syz.0.7898': attribute type 2 has an invalid length. [ 2859.130758][ T5287] usb 3-1: USB disconnect, device number 91 [ 2859.587116][ T5290] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 2859.736546][T23414] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2859.793543][ T5290] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 2859.857513][ T5290] usb 4-1: config 0 has no interface number 0 [ 2859.890600][ T5290] usb 4-1: too many endpoints for config 0 interface 68 altsetting 225: 217, using maximum allowed: 30 [ 2859.926131][ T5290] usb 4-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 2859.948395][ T5290] usb 4-1: config 0 interface 68 has no altsetting 0 [ 2859.956412][ T5290] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2859.965640][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2859.973758][T23414] usb 5-1: Using ep0 maxpacket: 32 [ 2859.981000][T23414] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 2859.989333][T23414] usb 5-1: config 0 has no interface number 0 [ 2859.998288][ T5290] usb 4-1: config 0 descriptor?? [ 2860.004431][T23414] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2860.018321][T23414] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2860.034989][T23414] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 2860.052741][T23414] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2860.064421][T23414] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 2860.075199][T23414] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2860.113216][T23414] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 2860.136160][T23414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2860.156324][T23414] usb 5-1: Product: syz [ 2860.166007][T23414] usb 5-1: Manufacturer: syz [ 2860.178497][T23414] usb 5-1: SerialNumber: syz [ 2860.201717][T23414] usb 5-1: config 0 descriptor?? [ 2860.214822][ T9360] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2860.296499][ T9360] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2860.432723][ T9368] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2860.479309][ T9368] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 2861.165191][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2861.641069][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2861.818551][ T5290] usb 4-1: string descriptor 0 read error: -71 [ 2861.846352][ T5290] pegasus 4-1:0.68: probe with driver pegasus failed with error -71 [ 2861.878471][ T5290] usb 4-1: USB disconnect, device number 71 [ 2861.941305][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2861.960148][ T9368] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2862.017791][ T9368] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2862.033563][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2862.071186][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2862.307570][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2862.394936][ T9368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2862.423882][ T9368] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2862.639739][T23414] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 2862.768488][ T62] bridge_slave_1: left allmulticast mode [ 2862.774172][ T62] bridge_slave_1: left promiscuous mode [ 2862.783243][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 2862.831994][ T62] bridge_slave_0: left allmulticast mode [ 2862.837668][T23414] etas_es58x 5-1:0.219: could not parse product info: '놹' [ 2862.888952][ T62] bridge_slave_0: left promiscuous mode [ 2862.894773][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 2863.655280][ T6191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2863.678232][ T6191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2863.702851][ T6191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2863.713161][ T6191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2863.721338][ T6191] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2863.730057][ T6191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2863.772983][ T527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2863.907116][ T527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2863.917980][ T527] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2863.927203][ T527] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2863.934886][ T527] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2863.942234][ T527] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2864.276263][ T5288] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2864.506175][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 2864.514864][ T5288] usb 2-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 2864.527554][ T5288] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 2864.540335][ T5288] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2864.551662][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2864.570290][ T5288] usb 2-1: Product: syz [ 2864.575011][ T5288] usb 2-1: Manufacturer: syz [ 2864.586181][ T5288] usb 2-1: SerialNumber: syz [ 2864.626972][ T5288] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2864.895786][ T5288] r8152-cfgselector 2-1: Unknown version 0x0070 [ 2864.914384][ T5288] r8152-cfgselector 2-1: bad CDC descriptors [ 2865.301459][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2865.342901][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2865.366455][ T5287] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 2865.376928][ T62] bond0 (unregistering): Released all slaves [ 2865.446220][T23414] usb 5-1: USB disconnect, device number 83 [ 2865.454024][T23414] etas_es58x 5-1:0.219: Disconnecting syz syz [ 2865.598302][ T5287] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2865.625405][ T5287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2865.645385][ T5287] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2865.678786][ T5287] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2865.700679][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2865.757497][ T5287] hub 3-1:1.0: bad descriptor, ignoring hub [ 2865.768714][ T5287] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2865.784603][ T5287] cdc_wdm 3-1:1.0: skipping garbage [ 2865.800396][ T5287] cdc_wdm 3-1:1.0: skipping garbage [ 2865.814048][ T5287] cdc_wdm 3-1:1.0: skipping garbage [ 2865.819896][ T5287] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2865.924221][ T5304] r8152-cfgselector 2-1: USB disconnect, device number 123 [ 2866.006248][T23414] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2866.046310][ T527] Bluetooth: hci4: command tx timeout [ 2866.137347][ T62] hsr_slave_0: left promiscuous mode [ 2866.165178][ T62] hsr_slave_1: left promiscuous mode [ 2866.199350][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.234646][ T62] batman_adv: batadv0: Removing interface: team0 [ 2866.241152][T23414] usb 5-1: Using ep0 maxpacket: 32 [ 2866.246656][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2866.276536][T23414] usb 5-1: config 0 has no interfaces? [ 2866.285788][T23414] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2866.297871][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2866.315939][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2866.328076][T23414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2866.357067][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2866.361542][T23414] usb 5-1: Product: syz [ 2866.388440][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2866.389422][T23414] usb 5-1: Manufacturer: syz [ 2866.476132][T23414] usb 5-1: SerialNumber: syz [ 2866.507454][T23414] usb 5-1: config 0 descriptor?? [ 2866.527017][ T62] veth1_macvtap: left promiscuous mode [ 2866.527096][ T62] veth0_macvtap: left promiscuous mode [ 2866.527210][ T62] veth1_vlan: left promiscuous mode [ 2866.527342][ T62] veth0_vlan: left promiscuous mode [ 2868.126366][ T527] Bluetooth: hci4: command tx timeout [ 2868.318497][ T47] usb 3-1: USB disconnect, device number 92 [ 2868.684658][ T62] team0 (unregistering): Port device team_slave_1 removed [ 2868.746358][ T5304] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2868.801479][ T62] team0 (unregistering): Port device team_slave_0 removed [ 2868.968924][ T5304] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2868.978269][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2868.987314][ T5304] usb 3-1: Product: syz [ 2868.991591][ T5304] usb 3-1: Manufacturer: syz [ 2868.996298][ T5304] usb 3-1: SerialNumber: syz [ 2869.015835][ T5304] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2869.056980][ T4547] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2870.139577][ T4547] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2870.153340][ T4547] ath9k_htc: Failed to initialize the device [ 2870.195897][ T4547] usb 3-1: ath9k_htc: USB layer deinitialized [ 2870.206246][ T527] Bluetooth: hci4: command tx timeout [ 2870.796045][ T9438] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2870.836185][ T9438] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2870.872460][ T9438] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2870.886469][ T9438] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2870.917792][ T9438] geneve2: entered promiscuous mode [ 2870.936020][ T9438] geneve2: entered allmulticast mode [ 2870.952219][ T5288] usb 3-1: USB disconnect, device number 93 [ 2870.976420][ T9438] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2871.003890][ T9438] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2871.023860][ T9438] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2871.094474][ T9438] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2871.433052][ T4547] usb 5-1: USB disconnect, device number 84 [ 2871.639321][ T9401] chnl_net:caif_netlink_parms(): no params data found [ 2871.982096][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7934'. [ 2871.996242][ T9474] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 2872.012118][ T9474] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 2872.288059][ T527] Bluetooth: hci4: command tx timeout [ 2872.381643][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 2872.414349][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 2872.448157][ T9401] bridge_slave_0: entered allmulticast mode [ 2872.484380][ T9401] bridge_slave_0: entered promiscuous mode [ 2872.510756][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 2872.535108][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 2872.585651][ T29] audit: type=1326 audit(1725324035.475:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.3.7941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd16d779eb9 code=0x0 [ 2872.623924][ T9401] bridge_slave_1: entered allmulticast mode [ 2872.678899][ T9401] bridge_slave_1: entered promiscuous mode [ 2872.838546][ T9401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2872.889759][ T9401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2873.065587][ T9401] team0: Port device team_slave_0 added [ 2873.075974][ T9401] team0: Port device team_slave_1 added [ 2873.120344][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2873.128925][ T5287] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2873.135928][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2873.180468][ T9401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2873.280260][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2873.300936][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2873.336700][ T942] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2873.338794][ T5287] usb 2-1: device descriptor read/64, error -71 [ 2873.402729][ T9401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2873.416246][ T5304] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2873.536419][ T942] usb 5-1: Using ep0 maxpacket: 8 [ 2873.544095][ T942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2873.557415][ T942] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2873.569237][ T942] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2873.611942][ T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.629098][ T9401] hsr_slave_0: entered promiscuous mode [ 2873.646225][ T5287] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2873.646470][ T5304] usb 3-1: Using ep0 maxpacket: 32 [ 2873.674239][ T942] usb 5-1: Product: syz [ 2873.696768][ T9401] hsr_slave_1: entered promiscuous mode [ 2873.707187][ T942] usb 5-1: Manufacturer: syz [ 2873.711812][ T942] usb 5-1: SerialNumber: syz [ 2873.744357][ T9401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2873.745751][ T5304] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2873.766981][ T942] usb 5-1: config 0 descriptor?? [ 2873.772161][ T5304] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2873.781295][ T9401] Cannot create hsr debugfs directory [ 2873.791226][ T5304] usb 3-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19 [ 2873.797833][ T5287] usb 2-1: device descriptor read/64, error -71 [ 2873.804331][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.816258][ T5304] usb 3-1: Product: syz [ 2873.820855][ T5304] usb 3-1: Manufacturer: syz [ 2873.830754][ T5304] usb 3-1: SerialNumber: syz [ 2873.840749][ T5304] usb 3-1: config 0 descriptor?? [ 2873.891874][ T5304] rndis_host 3-1:0.0: skipping garbage [ 2873.904504][ T5304] usb 3-1: bad CDC descriptors [ 2873.911900][ T5304] cdc_acm 3-1:0.0: skipping garbage [ 2873.987264][ T5287] usb usb2-port1: attempt power cycle [ 2874.088886][ T942] usb 5-1: USB disconnect, device number 85 [ 2874.406315][ T5287] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2874.457568][ T5287] usb 2-1: device descriptor read/8, error -71 [ 2874.797204][ T5287] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2874.871284][ T5287] usb 2-1: device descriptor read/8, error -71 [ 2874.998368][ T5287] usb usb2-port1: unable to enumerate USB device [ 2875.143101][ T9513] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7947'. [ 2875.284678][ T5287] usb 3-1: USB disconnect, device number 94 [ 2875.603501][ T9401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2875.823810][ T9401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2875.914990][ T9524] netlink: 'syz.1.7952': attribute type 21 has an invalid length. [ 2875.939905][ T9524] netlink: 'syz.1.7952': attribute type 6 has an invalid length. [ 2875.990949][ T9524] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7952'. [ 2876.085133][ T9522] vlan2: entered promiscuous mode [ 2876.111125][ T9522] vlan2: entered allmulticast mode [ 2876.206979][ T9522] team0: Port device vlan2 added [ 2876.247115][ T9401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2876.301826][ T9401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2876.554451][ T9401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2876.566331][ T29] audit: type=1326 audit(1725324039.485:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.4.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0a579eb9 code=0x7ffc0000 [ 2876.639478][ T9401] 8021q: adding VLAN 0 to HW filter on device team0 [ 2876.827699][ T29] audit: type=1326 audit(1725324039.485:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.4.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0a579eb9 code=0x7ffc0000 [ 2876.852004][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 2876.859212][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2876.950732][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2876.957921][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2876.996685][ T29] audit: type=1326 audit(1725324039.695:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.4.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b0a579eb9 code=0x7ffc0000 [ 2877.073118][ T29] audit: type=1326 audit(1725324039.695:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.4.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0a579eb9 code=0x7ffc0000 [ 2877.198339][ T29] audit: type=1326 audit(1725324039.695:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.4.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0a579eb9 code=0x7ffc0000 [ 2877.316523][T23414] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2877.359860][ T29] audit: type=1326 audit(1725324039.725:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.4.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7b0a579eb9 code=0x7ffc0000 [ 2877.516679][T23414] usb 4-1: Using ep0 maxpacket: 8 [ 2877.543291][ T9401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2877.561715][ T29] audit: type=1326 audit(1725324039.725:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.4.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0a579eb9 code=0x7ffc0000 [ 2877.616207][ T29] audit: type=1326 audit(1725324039.725:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.4.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0a579eb9 code=0x7ffc0000 [ 2877.666292][T23414] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2877.703131][T23414] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2877.717910][T23414] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2877.736117][T23414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2877.746822][T23414] usb 4-1: Product: syz [ 2877.751003][T23414] usb 4-1: Manufacturer: syz [ 2877.755764][T23414] usb 4-1: SerialNumber: syz [ 2877.762870][T23414] usb 4-1: config 0 descriptor?? [ 2878.115128][ T9566] FAULT_INJECTION: forcing a failure. [ 2878.115128][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 2878.128209][ T9566] CPU: 1 UID: 0 PID: 9566 Comm: syz.1.7963 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 2878.138912][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2878.148990][ T9566] Call Trace: [ 2878.152309][ T9566] [ 2878.155234][ T9566] dump_stack_lvl+0x241/0x360 [ 2878.159942][ T9566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2878.165130][ T9566] ? __pfx__printk+0x10/0x10 [ 2878.169711][ T9566] ? fs_reclaim_acquire+0x93/0x140 [ 2878.174828][ T9566] ? __pfx___might_resched+0x10/0x10 [ 2878.180112][ T9566] should_fail_ex+0x3b0/0x4e0 [ 2878.184789][ T9566] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 2878.190502][ T9566] should_failslab+0xac/0x100 [ 2878.195194][ T9566] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 2878.200903][ T9566] __kmalloc_noprof+0xd8/0x400 [ 2878.205681][ T9566] ? kfree+0x4e/0x360 [ 2878.209677][ T9566] tomoyo_realpath_from_path+0xcf/0x5e0 [ 2878.215238][ T9566] tomoyo_path_number_perm+0x23a/0x880 [ 2878.220714][ T9566] ? tomoyo_path_number_perm+0x208/0x880 [ 2878.226345][ T9566] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2878.232349][ T9566] ? __fget_files+0x29/0x470 [ 2878.236940][ T9566] ? __fget_files+0x3f6/0x470 [ 2878.241607][ T9566] ? __fget_files+0x29/0x470 [ 2878.246204][ T9566] security_file_ioctl+0x75/0xb0 [ 2878.251178][ T9566] __se_sys_ioctl+0x47/0x170 [ 2878.255762][ T9566] do_syscall_64+0xf3/0x230 [ 2878.260261][ T9566] ? clear_bhb_loop+0x35/0x90 [ 2878.264949][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2878.270838][ T9566] RIP: 0033:0x7fc31ad79eb9 [ 2878.275241][ T9566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2878.294870][ T9566] RSP: 002b:00007fc31bb24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2878.303278][ T9566] RAX: ffffffffffffffda RBX: 00007fc31af15f80 RCX: 00007fc31ad79eb9 [ 2878.311258][ T9566] RDX: 00000000200004c0 RSI: 000000008038550a RDI: 0000000000000003 [ 2878.319216][ T9566] RBP: 00007fc31bb24090 R08: 0000000000000000 R09: 0000000000000000 [ 2878.327212][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2878.335168][ T9566] R13: 0000000000000000 R14: 00007fc31af15f80 R15: 00007fc31b03fa28 [ 2878.343168][ T9566] [ 2878.360740][ T9566] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2878.402235][ T9566] usb usb8: usbfs: process 9566 (syz.1.7963) did not claim interface 0 before use [ 2878.489373][ T9401] veth0_vlan: entered promiscuous mode [ 2878.607828][T23414] usb 4-1: USB disconnect, device number 72 [ 2878.612353][ T9401] veth1_vlan: entered promiscuous mode [ 2878.818071][ T9568] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 2878.863939][ T9574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7966'. [ 2878.951575][ T9401] veth0_macvtap: entered promiscuous mode [ 2879.080516][ T9401] veth1_macvtap: entered promiscuous mode [ 2879.126226][T23414] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2879.261855][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2879.295344][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.315430][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2879.354930][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.368119][ T5287] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 2879.395952][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2879.407580][T23414] usb 2-1: Using ep0 maxpacket: 8 [ 2879.435512][T23414] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 2879.458793][T23414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2879.471093][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.486479][ T4547] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2879.486744][T23414] usb 2-1: Product: syz [ 2879.498669][T23414] usb 2-1: Manufacturer: syz [ 2879.504287][T23414] usb 2-1: SerialNumber: syz [ 2879.511924][T23414] usb 2-1: config 0 descriptor?? [ 2879.520507][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2879.522019][T23414] ums-datafab 2-1:0.0: USB Mass Storage device detected [ 2879.567327][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.576242][ T5287] usb 5-1: device descriptor read/64, error -71 [ 2879.618203][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2879.628704][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.638681][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2879.649899][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.661754][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2879.679194][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2879.727847][ T9574] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7966'. [ 2879.737202][ T4547] usb 3-1: Using ep0 maxpacket: 8 [ 2879.750154][ T4547] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 2879.756246][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.774824][ T4547] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 2879.784471][ T4547] usb 3-1: config 0 has no interface number 0 [ 2879.790854][ T4547] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2879.824093][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2879.826636][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.838908][ T4547] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2879.866158][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.867665][ T4547] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2879.883866][ T5287] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 2879.889016][ T4547] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2879.914048][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2879.934517][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.945022][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2879.946734][ T4547] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 2879.963024][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2879.973431][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2880.007052][ T4547] usb 3-1: Product: syz [ 2880.013383][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2880.035654][ T4547] usb 3-1: config 0 descriptor?? [ 2880.046263][ T5287] usb 5-1: device descriptor read/64, error -71 [ 2880.048029][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2880.134160][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2880.168589][ T5287] usb usb5-port1: attempt power cycle [ 2880.209923][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2880.231865][T23414] ums-sddr55 2-1:0.0: USB Mass Storage device detected [ 2880.239551][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2880.303765][ T9401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2880.381909][ T9401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2880.408990][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2880.426104][ T9401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2880.449919][ T9401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2880.473804][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2880.533752][T23414] usb 2-1: USB disconnect, device number 2 [ 2880.646499][ T5287] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 2880.673979][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2880.700662][ T5287] usb 5-1: device descriptor read/8, error -71 [ 2880.700700][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2880.736341][ T47] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2880.760483][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2880.776319][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2880.811574][ T4547] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input226 [ 2880.847901][ T4547] input: failed to attach handler kbd to device input226, error: -5 [ 2880.896174][ T47] usb 4-1: device descriptor read/64, error -71 [ 2880.986326][ T5287] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 2881.028591][ T5287] usb 5-1: device descriptor read/8, error -71 [ 2881.166651][ T5287] usb usb5-port1: unable to enumerate USB device [ 2881.176424][ T47] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2881.377097][ T47] usb 4-1: device descriptor read/64, error -71 [ 2881.512927][ T47] usb usb4-port1: attempt power cycle [ 2881.946896][ T47] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2882.016516][ T47] usb 4-1: device descriptor read/8, error -71 [ 2882.026241][ T5287] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2882.248924][ T5287] usb 2-1: Using ep0 maxpacket: 16 [ 2882.255845][ T5287] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2882.274512][ T5287] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2882.294993][ T5287] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2882.309199][ T47] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2882.334432][ T5287] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2882.368000][ T47] usb 4-1: device descriptor read/8, error -71 [ 2882.438132][ T5287] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2882.448371][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2882.466207][ T5287] usb 2-1: Product: syz [ 2882.473893][ T5287] usb 2-1: Manufacturer: syz [ 2882.486254][ T5287] usb 2-1: SerialNumber: syz [ 2882.538904][ T47] usb usb4-port1: unable to enumerate USB device [ 2882.813695][ T5287] usb 2-1: USB disconnect, device number 3 [ 2882.895033][ T9613] netlink: 'syz.4.7975': attribute type 10 has an invalid length. [ 2883.218245][ T942] usb 3-1: USB disconnect, device number 95 [ 2883.229981][ T5290] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 2883.382902][ T9623] vlan3: entered promiscuous mode [ 2883.400098][ T9623] bond0: entered promiscuous mode [ 2883.417276][ T9623] bond_slave_0: entered promiscuous mode [ 2883.423128][ T9623] bond_slave_1: entered promiscuous mode [ 2883.449257][ T5290] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2883.465835][ T5290] usb 5-1: config 0 has no interface number 0 [ 2883.488487][ T5290] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 2883.512009][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2883.521780][ T9623] bond0: left promiscuous mode [ 2883.532736][ T5290] usb 5-1: Product: syz [ 2883.539820][ T5290] usb 5-1: Manufacturer: syz [ 2883.545630][ T5290] usb 5-1: SerialNumber: syz [ 2883.545671][ T9623] bond_slave_0: left promiscuous mode [ 2883.552824][ T5290] usb 5-1: config 0 descriptor?? [ 2883.566635][ T9623] bond_slave_1: left promiscuous mode [ 2883.602173][ T5290] usb_set_interface error [ 2883.656415][ T5290] snd-usb-us122l 5-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 2883.669983][ T9631] loop6: detected capacity change from 0 to 524287999 [ 2883.687871][ C1] blk_print_req_error: 24 callbacks suppressed [ 2883.687888][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2883.703220][ C1] buffer_io_error: 24 callbacks suppressed [ 2883.703231][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2883.717512][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2883.726671][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2883.735137][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2883.744344][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2883.768484][ T5290] usb 5-1: USB disconnect, device number 90 [ 2883.816396][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2883.825624][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2883.833728][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2883.842937][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2883.851139][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2883.860652][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2883.868801][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2883.869044][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7984'. [ 2883.878004][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2883.888278][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2883.902984][ T9633] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 2883.904513][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2883.919142][ T9633] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 2883.921441][ T9631] ldm_validate_partition_table(): Disk read failed. [ 2883.986271][ T5307] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2883.997173][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2884.006403][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2884.015233][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2884.024483][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2884.034457][ T9631] Dev loop6: unable to read RDB block 0 [ 2884.058676][ T9631] loop6: unable to read partition table [ 2884.075157][ T9631] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 2884.196152][ T5307] usb 3-1: Using ep0 maxpacket: 32 [ 2884.245414][ T5307] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 2884.284625][ T5307] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2884.316405][ T5307] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2884.331423][ T5307] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2884.355783][ T5307] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2884.379156][ T5307] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2884.388550][ T5307] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2884.403154][ T5307] usb 3-1: Product: syz [ 2884.408895][ T5307] usb 3-1: Manufacturer: syz [ 2884.416737][ T5307] usb 3-1: SerialNumber: syz [ 2884.432565][ T5307] usb 3-1: config 0 descriptor?? [ 2884.471879][ T5307] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2884.530087][ T5307] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2884.780374][ T9651] netlink: 'syz.1.7992': attribute type 25 has an invalid length. [ 2884.875882][ T5307] usb 3-1: USB disconnect, device number 96 [ 2884.915533][ T9657] loop6: detected capacity change from 0 to 524287999 [ 2884.950415][ T9657] ldm_validate_partition_table(): Disk read failed. [ 2884.975424][ T5307] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2884.980756][ T9657] Dev loop6: unable to read RDB block 0 [ 2885.029195][ T9657] loop6: unable to read partition table [ 2885.076786][ T9657] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 2885.199747][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7995'. [ 2885.210232][ T9629] netlink: 'syz.2.7980': attribute type 10 has an invalid length. [ 2885.369094][ T9629] batman_adv: batadv0: Adding interface: team0 [ 2885.392461][ T9629] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2885.417652][ C1] vkms_vblank_simulate: vblank timer overrun [ 2885.437671][ T9629] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2885.631510][ T9676] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7999'. [ 2885.682778][ T9678] FAULT_INJECTION: forcing a failure. [ 2885.682778][ T9678] name failslab, interval 1, probability 0, space 0, times 0 [ 2885.743838][ T9678] CPU: 0 UID: 0 PID: 9678 Comm: syz.0.7998 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 2885.754555][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2885.764627][ T9678] Call Trace: [ 2885.767924][ T9678] [ 2885.770877][ T9678] dump_stack_lvl+0x241/0x360 [ 2885.775584][ T9678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2885.780803][ T9678] ? __pfx__printk+0x10/0x10 [ 2885.785421][ T9678] ? __kmalloc_noprof+0xb0/0x400 [ 2885.790382][ T9678] ? __pfx___might_resched+0x10/0x10 [ 2885.795696][ T9678] should_fail_ex+0x3b0/0x4e0 [ 2885.800409][ T9678] ? sock_kmalloc+0xd7/0x160 [ 2885.805021][ T9678] should_failslab+0xac/0x100 [ 2885.809732][ T9678] ? sock_kmalloc+0xd7/0x160 [ 2885.814350][ T9678] __kmalloc_noprof+0xd8/0x400 [ 2885.819158][ T9678] ? __might_fault+0xaa/0x120 [ 2885.823869][ T9678] sock_kmalloc+0xd7/0x160 [ 2885.828320][ T9678] ____sys_sendmsg+0x216/0x7d0 [ 2885.833120][ T9678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2885.838446][ T9678] __sys_sendmsg+0x2b0/0x3a0 [ 2885.843070][ T9678] ? __pfx___sys_sendmsg+0x10/0x10 [ 2885.848229][ T9678] ? vfs_write+0x7c4/0xc90 [ 2885.852716][ T9678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2885.859112][ T9678] ? do_syscall_64+0x100/0x230 [ 2885.863902][ T9678] ? do_syscall_64+0xb6/0x230 [ 2885.868602][ T9678] do_syscall_64+0xf3/0x230 [ 2885.873141][ T9678] ? clear_bhb_loop+0x35/0x90 [ 2885.877855][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2885.883777][ T9678] RIP: 0033:0x7fb1dc779eb9 [ 2885.888212][ T9678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2885.907870][ T9678] RSP: 002b:00007fb1dc1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2885.916314][ T9678] RAX: ffffffffffffffda RBX: 00007fb1dc915f80 RCX: 00007fb1dc779eb9 [ 2885.924301][ T9678] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 2885.932307][ T9678] RBP: 00007fb1dc1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2885.940298][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2885.948289][ T9678] R13: 0000000000000000 R14: 00007fb1dc915f80 R15: 00007fb1dca3fa28 [ 2885.956307][ T9678] [ 2886.006940][ T5290] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2886.306308][ T5290] usb 5-1: Using ep0 maxpacket: 8 [ 2886.334424][ T5290] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=6f.22 [ 2886.392179][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2886.406617][ T5290] usb 5-1: Product: syz [ 2886.415988][ T5290] usb 5-1: Manufacturer: syz [ 2886.421637][ T5290] usb 5-1: SerialNumber: syz [ 2886.428910][ T5290] usb 5-1: config 0 descriptor?? [ 2886.435778][ T5290] dm9601 5-1:0.0: probe with driver dm9601 failed with error -22 [ 2886.452379][ T5290] sr9700 5-1:0.0: probe with driver sr9700 failed with error -22 [ 2886.659427][ T5290] usb 5-1: USB disconnect, device number 91 [ 2886.720656][ T9696] tipc: Started in network mode [ 2886.747691][ T9696] tipc: Node identity , cluster identity 4711 [ 2886.758289][ T9696] tipc: Failed to set node id, please configure manually [ 2886.786419][ T9696] tipc: Enabling of bearer rejected, failed to enable media [ 2887.466260][ T4547] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2887.716420][ T4547] usb 1-1: Using ep0 maxpacket: 16 [ 2887.728591][ T5290] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2887.750774][ T4547] usb 1-1: config 0 has no interfaces? [ 2887.778250][ T4547] usb 1-1: New USB device found, idVendor=0582, idProduct=05e6, bcdDevice=4e.00 [ 2887.858305][ T4547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2887.926172][ T5290] usb 5-1: Using ep0 maxpacket: 8 [ 2887.938846][ T4547] usb 1-1: Product: syz [ 2887.941862][ T5290] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2887.963574][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2887.984271][ T4547] usb 1-1: Manufacturer: syz [ 2887.989919][ T5290] usb 5-1: Product: syz [ 2887.994101][ T5290] usb 5-1: Manufacturer: syz [ 2887.994113][ T4547] usb 1-1: SerialNumber: syz [ 2888.038143][ T4547] usb 1-1: config 0 descriptor?? [ 2888.067767][ T5290] usb 5-1: SerialNumber: syz [ 2888.077491][ T5290] usb 5-1: config 0 descriptor?? [ 2888.085567][ T5290] gspca_main: se401-2.14.0 probing 047d:5003 [ 2888.279264][ T9706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8009'. [ 2888.313484][ T5287] usb 1-1: USB disconnect, device number 93 [ 2888.337663][ T9713] ip6gretap1: entered promiscuous mode [ 2888.399713][ T9713] ip6gretap1: entered allmulticast mode [ 2889.123083][ T9722] program syz.0.8013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2889.556246][ T4547] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2889.768340][ T4547] usb 1-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f [ 2889.804086][ T4547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2889.806774][ T5290] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 2889.822763][ T5290] se401 5-1:0.0: probe with driver se401 failed with error -110 [ 2889.871373][ T4547] usb 1-1: config 0 descriptor?? [ 2889.908717][ T4547] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2889.951132][ T4547] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2889.996607][ T5307] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 2890.217821][ T5307] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 2890.288849][ T5290] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2890.293019][ T5307] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 2890.317065][ T4547] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 2890.350153][ T5307] usb 4-1: config 0 has no interface number 0 [ 2890.386191][ T5307] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2890.418164][ T5307] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2890.442170][ T5307] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2890.456169][ T5307] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2890.479762][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2890.535997][ T5307] usb 4-1: config 0 descriptor?? [ 2890.550413][ T5290] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 2890.560836][ T4547] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 2890.596497][ T5290] usb 2-1: config 0 has no interface number 0 [ 2890.603462][ T5290] usb 2-1: too many endpoints for config 0 interface 68 altsetting 225: 217, using maximum allowed: 30 [ 2890.656602][ T9725] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2890.661743][ T5290] usb 2-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 2890.666135][ T4547] usb 3-1: config 0 has no interface number 0 [ 2890.684883][T23414] usb 1-1: USB disconnect, device number 94 [ 2890.715562][ T5290] usb 2-1: config 0 interface 68 has no altsetting 0 [ 2890.756268][ T5290] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2890.758789][ T4547] usb 3-1: too many endpoints for config 0 interface 68 altsetting 225: 217, using maximum allowed: 30 [ 2890.825399][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2890.873345][ T4547] usb 3-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 2890.898121][ T5304] usb 5-1: USB disconnect, device number 92 [ 2890.903819][ T9729] netlink: 'syz.0.8015': attribute type 21 has an invalid length. [ 2890.916869][ T5290] usb 2-1: config 0 descriptor?? [ 2890.969283][ T5307] usb 4-1: USB disconnect, device number 77 [ 2890.982437][ T9729] netlink: 'syz.0.8015': attribute type 1 has an invalid length. [ 2890.999566][ T4547] usb 3-1: config 0 interface 68 has no altsetting 0 [ 2891.092846][ T4547] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2891.119753][ T4547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2891.134072][ T4547] usb 3-1: config 0 descriptor?? [ 2891.155291][ T4547] usb 3-1: can't set config #0, error -71 [ 2891.163499][ T4547] usb 3-1: USB disconnect, device number 97 [ 2891.359897][ T5290] usb 2-1: string descriptor 0 read error: -71 [ 2891.403509][ T5290] pegasus 2-1:0.68: probe with driver pegasus failed with error -71 [ 2891.478226][ T5290] usb 2-1: USB disconnect, device number 4 [ 2891.546200][ T5304] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 2891.737099][ T4547] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 2891.785421][ T5304] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2891.808827][ T5304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2891.826149][ T5304] usb 5-1: Product: syz [ 2891.832819][ T5304] usb 5-1: Manufacturer: syz [ 2891.842574][ T5304] usb 5-1: SerialNumber: syz [ 2891.858412][ T5304] usb 5-1: config 0 descriptor?? [ 2891.866805][ T942] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2891.932819][ T4547] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 2891.954081][ T4547] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 2892.004089][ T4547] usb 4-1: config 0 has no interface number 0 [ 2892.016422][ T4547] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2892.029964][ T4547] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2892.045219][ T4547] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2892.097105][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 2892.128242][ T942] usb 1-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 2892.189115][ T4547] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2892.216924][ T942] usb 1-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 2892.241002][ T4547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2892.289924][ T942] usb 1-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 2892.301461][ T4547] usb 4-1: config 0 descriptor?? [ 2892.306558][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2892.315269][ T9725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2892.323292][ T942] usb 1-1: Product: syz [ 2892.329817][ T942] usb 1-1: Manufacturer: syz [ 2892.338926][ T942] usb 1-1: SerialNumber: syz [ 2892.352730][ T942] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 2892.356159][T23414] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 2892.367249][ T942] dvb-usb: bulk message failed: -22 (3/0) [ 2892.380249][ T5304] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2892.396954][ T5290] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 2892.418815][ T942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2892.476906][ T5304] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2892.512647][ T942] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 2892.540669][ T5304] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 2892.569856][ T942] usb 1-1: media controller created [ 2892.604487][ T942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2892.628315][T23414] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2892.636672][ T942] dvb-usb: bulk message failed: -22 (6/0) [ 2892.646444][ T942] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 2892.681356][ T942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input229 [ 2892.695601][ T942] dvb-usb: schedule remote query interval to 150 msecs. [ 2892.702700][ T942] dvb-usb: bulk message failed: -22 (3/0) [ 2892.719863][T23414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2892.735107][ T4547] usb 4-1: USB disconnect, device number 78 [ 2892.746107][ T942] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 2892.774838][ T9734] fuse: Unknown parameter '0x0000000000000004' [ 2892.836909][T23414] usb 3-1: config 0 descriptor?? [ 2892.856352][T16638] dvb-usb: bulk message failed: -22 (1/0) [ 2892.875875][T16638] dvb-usb: error while querying for an remote control event. [ 2893.078980][ T4547] dvb-usb: bulk message failed: -22 (1/0) [ 2893.088631][T23414] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 2893.119484][ T5290] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2893.136364][T23414] usb 3-1: USB disconnect, device number 98 [ 2893.141117][ T4547] dvb-usb: error while querying for an remote control event. [ 2893.150889][ T5290] usb 2-1: can't read configurations, error -71 [ 2893.336289][ T4547] dvb-usb: bulk message failed: -22 (1/0) [ 2893.346120][ T4547] dvb-usb: error while querying for an remote control event. [ 2893.519024][T16638] dvb-usb: bulk message failed: -22 (1/0) [ 2893.588539][T16638] dvb-usb: error while querying for an remote control event. [ 2893.776160][T16638] dvb-usb: bulk message failed: -22 (1/0) [ 2893.783196][T16638] dvb-usb: error while querying for an remote control event. [ 2893.970133][T16638] dvb-usb: bulk message failed: -22 (1/0) [ 2893.975926][T16638] dvb-usb: error while querying for an remote control event. [ 2894.176504][ T942] dvb-usb: bulk message failed: -22 (1/0) [ 2894.206488][ T942] dvb-usb: error while querying for an remote control event. [ 2894.333968][ T9753] vlan2: entered promiscuous mode [ 2894.374390][ T9753] bond0: entered promiscuous mode [ 2894.388648][ T9753] bond_slave_0: entered promiscuous mode [ 2894.396411][ T4547] dvb-usb: bulk message failed: -22 (1/0) [ 2894.425289][ T4547] dvb-usb: error while querying for an remote control event. [ 2894.446392][ T9753] bond_slave_1: entered promiscuous mode [ 2894.475669][ T9753] bond0: left promiscuous mode [ 2894.503765][ T9753] bond_slave_0: left promiscuous mode [ 2894.520305][ T9753] bond_slave_1: left promiscuous mode [ 2894.606212][ T4547] dvb-usb: bulk message failed: -22 (1/0) [ 2894.619772][ T4547] dvb-usb: error while querying for an remote control event. [ 2894.654023][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2894.797874][ T4547] dvb-usb: bulk message failed: -22 (1/0) [ 2894.819942][ T4547] dvb-usb: error while querying for an remote control event. [ 2894.872909][ T4547] usb 1-1: USB disconnect, device number 95 [ 2895.014131][ T4547] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 2895.627295][T23414] usb 5-1: USB disconnect, device number 93 [ 2896.235013][ T9784] binder: 9776:9784 ioctl c0306201 20000480 returned -14 [ 2896.666216][ T47] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 2896.848954][ T47] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2896.899325][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2896.952591][ T47] usb 1-1: config 0 descriptor?? [ 2897.014917][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8036'. [ 2897.034789][ T9796] vlan3: entered allmulticast mode [ 2897.066162][T23414] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 2897.179155][ T9798] netlink: 'syz.4.8037': attribute type 21 has an invalid length. [ 2897.224324][ T9798] netlink: 'syz.4.8037': attribute type 6 has an invalid length. [ 2897.269792][ T9798] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8037'. [ 2897.279270][T23414] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 2897.310000][T23414] usb 4-1: config 0 has no interface number 0 [ 2897.356462][T23414] usb 4-1: too many endpoints for config 0 interface 68 altsetting 225: 217, using maximum allowed: 30 [ 2897.368147][T23414] usb 4-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 2897.382234][T23414] usb 4-1: config 0 interface 68 has no altsetting 0 [ 2897.391304][T23414] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2897.400954][T23414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2897.412980][T23414] usb 4-1: config 0 descriptor?? [ 2897.891337][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.898324][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.547086][ T9822] netlink: 'syz.4.8046': attribute type 10 has an invalid length. [ 2898.748450][ T9822] batman_adv: batadv0: Adding interface: team0 [ 2898.769507][ T9822] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2898.847053][ T47] pegasus 1-1:0.0: probe with driver pegasus failed with error -110 [ 2898.855867][ T9822] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2898.896791][ T3575] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2898.912445][ T9827] netlink: 'syz.4.8046': attribute type 10 has an invalid length. [ 2898.949761][ T9827] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8046'. [ 2898.963090][ T9827] team0: entered promiscuous mode [ 2898.977803][ T9827] team_slave_0: entered promiscuous mode [ 2898.992576][ T9827] team_slave_1: entered promiscuous mode [ 2899.037303][T23414] usb 4-1: string descriptor 0 read error: -71 [ 2899.049736][ T9827] 8021q: adding VLAN 0 to HW filter on device team0 [ 2899.078875][ T9827] batman_adv: batadv0: Interface activated: team0 [ 2899.087717][ T9827] batman_adv: batadv0: Interface deactivated: team0 [ 2899.095490][ T9827] batman_adv: batadv0: Removing interface: team0 [ 2899.110780][ T9827] bridge0: port 3(team0) entered blocking state [ 2899.117331][ T9827] bridge0: port 3(team0) entered disabled state [ 2899.138271][ T3575] usb 2-1: Using ep0 maxpacket: 16 [ 2899.146876][ T9827] team0: entered allmulticast mode [ 2899.152040][ T9827] team_slave_0: entered allmulticast mode [ 2899.158293][ T9827] team_slave_1: entered allmulticast mode [ 2899.185215][T23414] pegasus 4-1:0.68: probe with driver pegasus failed with error -71 [ 2899.222030][ T9827] bridge0: port 3(team0) entered blocking state [ 2899.228446][ T9827] bridge0: port 3(team0) entered forwarding state [ 2899.247058][ T3575] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2899.276546][T23414] usb 4-1: USB disconnect, device number 79 [ 2899.286826][ T3575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2899.312336][ T3575] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2899.327088][ T3575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2899.335302][ T3575] usb 2-1: Product: syz [ 2899.339596][ T3575] usb 2-1: Manufacturer: syz [ 2899.344208][ T3575] usb 2-1: SerialNumber: syz [ 2899.359904][ T3575] usb 2-1: config 0 descriptor?? [ 2899.372621][ T3575] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2899.386171][ T3575] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2899.464781][ T47] usb 1-1: USB disconnect, device number 96 [ 2900.015488][ T9828] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8049'. [ 2900.057546][ T9828] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 2900.096284][ T3575] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2900.117133][ T3575] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 2900.329712][ T3575] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 2900.343186][ T3575] em28xx 2-1:0.0: No AC97 audio processor [ 2900.415751][ T3575] usb 2-1: USB disconnect, device number 7 [ 2900.469247][ T3575] em28xx 2-1:0.0: Disconnecting em28xx [ 2900.477414][ T3575] em28xx 2-1:0.0: Freeing device [ 2900.616198][ T47] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 2900.811435][ T47] usb 1-1: config 7 has an invalid interface number: 96 but max is 2 [ 2900.838397][ T47] usb 1-1: config 7 has an invalid interface number: 179 but max is 2 [ 2900.870524][ T47] usb 1-1: config 7 has an invalid interface number: 144 but max is 2 [ 2900.900741][ T47] usb 1-1: config 7 has an invalid interface number: 172 but max is 2 [ 2900.974628][ T47] usb 1-1: config 7 has an invalid interface number: 171 but max is 2 [ 2901.016135][ T47] usb 1-1: config 7 has 5 interfaces, different from the descriptor's value: 3 [ 2901.020844][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8057'. [ 2901.034954][ T47] usb 1-1: config 7 has no interface number 0 [ 2901.044228][ T47] usb 1-1: config 7 has no interface number 1 [ 2901.053747][ T47] usb 1-1: config 7 has no interface number 2 [ 2901.060060][ T47] usb 1-1: config 7 has no interface number 3 [ 2901.077749][ T47] usb 1-1: config 7 has no interface number 4 [ 2901.095633][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 8 [ 2901.118378][ T47] usb 1-1: config 7 interface 96 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2901.143607][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0xE is Bulk; changing to Interrupt [ 2901.175057][ T47] usb 1-1: config 7 interface 96 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2901.188462][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0x5 has invalid maxpacket 64, setting to 8 [ 2901.199392][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0x4 has an invalid bInterval 226, changing to 4 [ 2901.213345][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0x4 has invalid maxpacket 32, setting to 0 [ 2901.224318][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0x88 has invalid maxpacket 16, setting to 8 [ 2901.236229][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0xC is Bulk; changing to Interrupt [ 2901.246393][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0xA has invalid maxpacket 16, setting to 8 [ 2901.257071][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0x6 has invalid maxpacket 16, setting to 0 [ 2901.268146][ T47] usb 1-1: config 7 interface 96 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 2901.278792][ T47] usb 1-1: config 7 interface 96 altsetting 2 endpoint 0x2 is Bulk; changing to Interrupt [ 2901.288771][ T47] usb 1-1: config 7 interface 96 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 2901.301163][ T47] usb 1-1: config 7 interface 96 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 2901.316508][ T47] usb 1-1: config 7 interface 96 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 2901.333119][ T47] usb 1-1: config 7 interface 96 altsetting 2 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 2901.356438][ T47] usb 1-1: config 7 interface 179 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 2901.393798][ T47] usb 1-1: config 7 interface 179 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 2901.426474][ T47] usb 1-1: config 7 interface 179 altsetting 3 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 2901.460967][ T942] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 2901.475761][ T47] usb 1-1: config 7 interface 179 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 2901.508597][ T47] usb 1-1: too many endpoints for config 7 interface 144 altsetting 237: 166, using maximum allowed: 30 [ 2901.536456][ T47] usb 1-1: config 7 interface 144 altsetting 237 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 2901.566681][ T47] usb 1-1: config 7 interface 144 altsetting 237 has a duplicate endpoint with address 0xE, skipping [ 2901.569443][T16638] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 2901.585317][ T47] usb 1-1: config 7 interface 144 altsetting 237 has a duplicate endpoint with address 0xA, skipping [ 2901.619434][ T47] usb 1-1: config 7 interface 144 altsetting 237 has a duplicate endpoint with address 0x4, skipping [ 2901.728400][ T942] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 2901.739962][ T942] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 2901.751707][ T47] usb 1-1: config 7 interface 144 altsetting 237 has a duplicate endpoint with address 0xA, skipping [ 2901.790786][ T942] usb 2-1: config 0 has no interface number 0 [ 2901.807555][ T47] usb 1-1: config 7 interface 144 altsetting 237 has a duplicate endpoint with address 0xC, skipping [ 2901.838217][T16638] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2901.839409][ T47] usb 1-1: config 7 interface 144 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 2901.868282][ T942] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2901.891847][ T47] usb 1-1: config 7 interface 144 altsetting 237 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 2901.914165][T16638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2901.926152][ T942] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2901.955338][T16638] usb 4-1: config 0 descriptor?? [ 2901.983857][ T942] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2901.999817][ T47] usb 1-1: config 7 interface 144 altsetting 237 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2902.031073][ T47] usb 1-1: config 7 interface 144 altsetting 237 has a duplicate endpoint with address 0x5, skipping [ 2902.062694][ T942] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2902.090776][ T47] usb 1-1: config 7 interface 144 altsetting 237 has a duplicate endpoint with address 0xA, skipping [ 2902.102888][ T47] usb 1-1: config 7 interface 144 altsetting 237 has a duplicate endpoint with address 0x9, skipping [ 2902.114761][ T47] usb 1-1: config 7 interface 144 altsetting 237 has a duplicate endpoint with address 0xE, skipping [ 2902.127135][ T47] usb 1-1: config 7 interface 144 altsetting 237 has 13 endpoint descriptors, different from the interface descriptor's value: 166 [ 2902.142442][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0x9, skipping [ 2902.179905][ T47] usb 1-1: config 7 interface 172 altsetting 178 endpoint 0xB has invalid maxpacket 64, setting to 0 [ 2902.193859][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0x9, skipping [ 2902.207967][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0xE, skipping [ 2902.219911][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0xA, skipping [ 2902.231868][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0x1, skipping [ 2902.274137][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0xA, skipping [ 2902.317922][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.329513][ T29] audit: type=1326 audit(1725324065.265:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2902.351856][ C0] vkms_vblank_simulate: vblank timer overrun [ 2902.351875][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0x1, skipping [ 2902.351904][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0xE, skipping [ 2902.351932][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0xC, skipping [ 2902.351956][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0x6, skipping [ 2902.351986][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0xF, skipping [ 2902.352010][ T47] usb 1-1: config 7 interface 172 altsetting 178 has a duplicate endpoint with address 0x3, skipping [ 2902.352033][ T47] usb 1-1: config 7 interface 172 altsetting 178 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 2902.476855][ T29] audit: type=1326 audit(1725324065.265:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2902.496736][ T942] usb 2-1: config 0 descriptor?? [ 2902.507606][ T9869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2902.521474][ T29] audit: type=1326 audit(1725324065.265:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2902.559847][ T47] usb 1-1: too many endpoints for config 7 interface 171 altsetting 248: 226, using maximum allowed: 30 [ 2902.576158][ T47] usb 1-1: config 7 interface 171 altsetting 248 has a duplicate endpoint with address 0xF, skipping [ 2902.587220][ T47] usb 1-1: config 7 interface 171 altsetting 248 has a duplicate endpoint with address 0xA, skipping [ 2902.675138][ T29] audit: type=1326 audit(1725324065.265:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2902.678073][ T47] usb 1-1: config 7 interface 171 altsetting 248 has a duplicate endpoint with address 0x9, skipping [ 2902.775884][ T47] usb 1-1: config 7 interface 171 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 226 [ 2902.803306][ T47] usb 1-1: config 7 interface 96 has no altsetting 0 [ 2902.821888][ T47] usb 1-1: config 7 interface 179 has no altsetting 0 [ 2902.842111][ T47] usb 1-1: config 7 interface 144 has no altsetting 0 [ 2902.857810][ T47] usb 1-1: config 7 interface 172 has no altsetting 0 [ 2902.866291][ T47] usb 1-1: config 7 interface 171 has no altsetting 0 [ 2902.873593][ T29] audit: type=1326 audit(1725324065.265:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2902.900889][ T29] audit: type=1326 audit(1725324065.265:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2902.933568][T16638] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 2903.019708][ T29] audit: type=1326 audit(1725324065.265:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2903.104551][ T29] audit: type=1326 audit(1725324065.265:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2903.176414][ T29] audit: type=1326 audit(1725324065.265:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2903.199253][ T29] audit: type=1326 audit(1725324065.265:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.2.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1a779eb9 code=0x7fc00000 [ 2903.230376][ T47] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=a8.a3 [ 2903.231768][ T942] usb 2-1: USB disconnect, device number 8 [ 2903.245318][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2903.286903][ T47] usb 1-1: can't set config #7, error -71 [ 2903.295620][ T47] usb 1-1: USB disconnect, device number 97 [ 2903.316383][ T3575] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2903.506154][ T3575] usb 5-1: Using ep0 maxpacket: 16 [ 2903.517307][ T3575] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 2903.526758][ T3575] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2903.548190][ T9885] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 2903.566321][ T3575] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2903.585117][ T3575] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2903.596602][ T3575] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2903.606463][ T3575] usb 5-1: config 0 has no interface number 0 [ 2903.616705][ T3575] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2903.629371][ T3575] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2903.639944][ T3575] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2903.650989][ T3575] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2903.664629][ T3575] usb 5-1: config 0 interface 125 has no altsetting 0 [ 2903.672102][ T3575] usb 5-1: config 0 interface 125 has no altsetting 2 [ 2903.686153][ T3575] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2903.695448][ T3575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2903.705668][ T3575] usb 5-1: Product: syz [ 2903.719549][ T3575] usb 5-1: Manufacturer: syz [ 2903.725502][ T3575] usb 5-1: SerialNumber: syz [ 2903.742043][ T3575] usb 5-1: config 0 descriptor?? [ 2903.754754][ T3575] usb 5-1: selecting invalid altsetting 2 [ 2903.954806][ C1] usb 5-1: async_complete: urb error -71 [ 2903.960510][ C1] usb 5-1: async_complete: urb error -71 [ 2903.966190][ C1] usb 5-1: async_complete: urb error -71 [ 2903.971852][ C1] usb 5-1: async_complete: urb error -71 [ 2904.006823][ T3575] get_1284_register: usb error -71 [ 2904.016491][ T3575] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 2904.040213][ T3575] usb 5-1: USB disconnect, device number 94 [ 2904.062742][ T9902] binder: BINDER_SET_CONTEXT_MGR already set [ 2904.112442][ T9902] binder: 9901:9902 ioctl 4018620d 20000140 returned -16 [ 2904.252971][ T47] usb 4-1: USB disconnect, device number 80 [ 2904.505398][ T9913] fuse: Unknown parameter 'Âo0x0000000000000003' [ 2904.680921][ T9917] vlan2: entered promiscuous mode [ 2904.828340][ T3575] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 2905.066582][ T3575] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2905.090614][ T9929] fuse: Bad value for 'group_id' [ 2905.097866][ T9929] fuse: Bad value for 'group_id' [ 2905.138395][ T3575] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2905.205277][ T3575] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2905.257515][ T3575] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2905.316203][ T3575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2905.387994][ T3575] hub 3-1:1.0: bad descriptor, ignoring hub [ 2905.394596][ T3575] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2905.415355][ T3575] cdc_wdm 3-1:1.0: skipping garbage [ 2905.422597][ T3575] cdc_wdm 3-1:1.0: skipping garbage [ 2905.448129][ T3575] cdc_wdm 3-1:1.0: skipping garbage [ 2905.449038][ T942] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2905.462202][ T3575] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2905.676479][ T942] usb 2-1: Using ep0 maxpacket: 8 [ 2905.694084][ T942] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 2905.750500][ T942] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 2905.785114][ T942] usb 2-1: config 0 has no interface number 0 [ 2905.804356][ T942] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2905.822747][ T942] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2905.837032][ T942] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2905.854441][ T9915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2905.876205][ T942] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2905.886317][ T4547] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2905.908088][ T9915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2905.917086][ T942] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 2905.925185][ T942] usb 2-1: Product: syz [ 2905.950254][ T942] usb 2-1: config 0 descriptor?? [ 2906.116280][ T4547] usb 1-1: Using ep0 maxpacket: 32 [ 2906.129324][ T4547] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 2906.182057][ T4547] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2906.220410][ T4547] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 2906.237778][ T4547] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2906.237806][ T4547] usb 1-1: Product: syz [ 2906.237823][ T4547] usb 1-1: SerialNumber: syz [ 2906.241066][ T4547] usb 1-1: config 0 descriptor?? [ 2906.581224][ T942] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input231 [ 2906.601258][ T942] input: failed to attach handler kbd to device input231, error: -5 [ 2906.679592][ T9954] usb usb8: usbfs: process 9954 (syz.3.8084) did not claim interface 0 before use [ 2907.346255][ T942] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2907.536163][ T942] usb 4-1: Using ep0 maxpacket: 8 [ 2907.553045][ T942] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 2907.581991][ T942] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 2907.631618][ T942] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2907.683558][ T942] usb 4-1: config 250 has no interface number 0 [ 2907.716147][ T942] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2907.772950][ T942] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2907.818997][ T47] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 2907.841194][ T942] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2907.880692][ T942] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 2907.919637][ T942] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2908.011569][ T942] usb 4-1: config 250 interface 228 has no altsetting 0 [ 2908.069662][ T942] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2908.082675][ T942] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2908.094403][ T47] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2908.113717][ T942] usb 4-1: Product: syz [ 2908.121059][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2908.131196][ T942] usb 4-1: SerialNumber: syz [ 2908.156532][ T5290] usb 3-1: USB disconnect, device number 99 [ 2908.158179][ T942] hub 4-1:250.228: bad descriptor, ignoring hub [ 2908.198484][ T47] usb 5-1: config 0 descriptor?? [ 2908.207181][ T942] hub 4-1:250.228: probe with driver hub failed with error -5 [ 2908.428668][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2908.440513][ T942] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 81 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 2908.516451][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2908.601553][ T5290] usb 2-1: USB disconnect, device number 9 [ 2908.695734][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2908.771369][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2908.785663][ T4547] usb 1-1: USB disconnect, device number 98 [ 2909.006572][ T3575] usb 4-1: USB disconnect, device number 81 [ 2909.034005][ T3575] usblp0: removed [ 2909.257108][ T9973] fuse: Bad value for 'group_id' [ 2909.305987][ T9973] fuse: Bad value for 'group_id' [ 2909.316191][ T47] pegasus 5-1:0.0: probe with driver pegasus failed with error -121 [ 2909.810005][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2910.123325][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2910.426483][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2910.868552][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2911.030039][ T5290] usb 5-1: USB disconnect, device number 95 [ 2911.069902][ T942] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2911.178152][ T6191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2911.189524][ T6191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2911.198923][ T6191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2911.207909][ T6191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2911.215978][ T6191] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2911.229177][ T6191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2911.327265][ T942] usb 3-1: Using ep0 maxpacket: 16 [ 2911.370341][ T942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2911.454025][ T942] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2911.550522][ T942] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2911.588527][ T62] bridge_slave_1: left allmulticast mode [ 2911.625630][ T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2911.645319][ T62] bridge_slave_1: left promiscuous mode [ 2911.674646][ T942] usb 3-1: SerialNumber: syz [ 2911.682189][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 2911.706385][T16638] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2911.725464][ T9987] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2911.739165][ T942] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 2911.777073][ T62] bridge_slave_0: left allmulticast mode [ 2911.782741][ T62] bridge_slave_0: left promiscuous mode [ 2911.816436][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 2911.916475][T16638] usb 5-1: Using ep0 maxpacket: 32 [ 2911.933205][T16638] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2911.946670][ T942] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 2911.953001][T16638] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2911.968843][ T942] usb 3-1: USB disconnect, device number 100 [ 2911.974962][T16638] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2911.989810][T16638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2912.011068][T16638] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2912.023795][T16638] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2912.040010][T16638] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2912.057807][T16638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2912.094008][T16638] usb 5-1: config 0 descriptor?? [ 2912.236312][T23414] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 2912.320298][T16638] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2912.360315][T16638] usb 5-1: USB disconnect, device number 96 [ 2912.372534][T16638] usblp0: removed [ 2912.517952][T23414] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2912.553875][T23414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2912.573162][T23414] usb 2-1: config 0 descriptor?? [ 2912.958464][ T942] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2913.182878][ T942] usb 5-1: Using ep0 maxpacket: 32 [ 2913.219129][ T942] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2913.280279][ T942] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2913.324922][ T942] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2913.336496][ T527] Bluetooth: hci4: command tx timeout [ 2913.344305][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2913.354991][ T942] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2913.365508][ T942] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2913.382313][ T942] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2913.392579][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2913.452213][ T942] usb 5-1: config 0 descriptor?? [ 2913.703713][ T942] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2914.527302][T23414] pegasus 2-1:0.0: probe with driver pegasus failed with error -110 [ 2914.612969][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2914.665125][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2914.689995][T10011] fuse: Bad value for 'group_id' [ 2914.695092][T10011] fuse: Bad value for 'group_id' [ 2914.701982][ T62] bond0 (unregistering): Released all slaves [ 2915.000042][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 2915.043682][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8101'. [ 2915.057047][T10000] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2915.098695][ T942] usb 2-1: USB disconnect, device number 10 [ 2915.209102][ T4547] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2915.418628][ T527] Bluetooth: hci4: command tx timeout [ 2915.437611][ T4547] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2915.471613][ T4547] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2915.481798][ T4547] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2915.501136][ T4547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2915.512373][ T4547] usb 4-1: config 0 descriptor?? [ 2915.585715][ T62] hsr_slave_0: left promiscuous mode [ 2915.628027][ T62] hsr_slave_1: left promiscuous mode [ 2915.639276][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2915.660281][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2915.703252][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2915.736401][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2915.817388][ T942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2915.852164][ T62] veth1_macvtap: left promiscuous mode [ 2915.863033][ T62] veth0_macvtap: left promiscuous mode [ 2915.880381][ T62] veth1_vlan: left promiscuous mode [ 2915.885752][ T62] veth0_vlan: left promiscuous mode [ 2915.941734][ T4547] cougar 0003:060B:700A.0074: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 2916.033694][ T942] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2916.046655][ T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2916.055340][ T942] usb 2-1: Product: syz [ 2916.060558][ T942] usb 2-1: Manufacturer: syz [ 2916.067635][ T942] usb 2-1: SerialNumber: syz [ 2916.080239][ T942] usb 2-1: config 0 descriptor?? [ 2916.088296][ T942] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 2916.927480][ T47] usb 4-1: USB disconnect, device number 82 [ 2917.486438][ T527] Bluetooth: hci4: command tx timeout [ 2917.561126][ T62] team0 (unregistering): Port device team_slave_1 removed [ 2917.723797][ T62] team0 (unregistering): Port device team_slave_0 removed [ 2918.539564][ T47] usb 2-1: USB disconnect, device number 11 [ 2918.714159][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8110'. [ 2919.275086][ T9993] chnl_net:caif_netlink_parms(): no params data found [ 2919.586113][ T527] Bluetooth: hci4: command tx timeout [ 2919.652859][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state [ 2919.668493][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2919.686301][ T9993] bridge_slave_0: entered allmulticast mode [ 2919.693717][ T9993] bridge_slave_0: entered promiscuous mode [ 2919.732949][ T9993] bridge0: port 2(bridge_slave_1) entered blocking state [ 2919.744574][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2919.755845][ T9993] bridge_slave_1: entered allmulticast mode [ 2919.768669][ T9993] bridge_slave_1: entered promiscuous mode [ 2919.875518][ T9993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2919.948111][ T9993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2919.981328][ T5290] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2920.113775][ T9993] team0: Port device team_slave_0 added [ 2920.149109][ T9993] team0: Port device team_slave_1 added [ 2920.211333][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 2920.240108][ T5290] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 2920.256581][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2920.266845][ T5290] usb 4-1: Product: syz [ 2920.271466][ T5290] usb 4-1: Manufacturer: syz [ 2920.292261][ T5290] usb 4-1: SerialNumber: syz [ 2920.307623][ T5290] usb 4-1: config 0 descriptor?? [ 2920.407172][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2920.423818][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2920.479074][ T9993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2920.501136][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2920.509401][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2920.571520][ T9993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2920.666796][T10045] bridge0: entered promiscuous mode [ 2920.675206][T10045] bond0: entered promiscuous mode [ 2920.700428][T10045] bond_slave_0: entered promiscuous mode [ 2920.716386][T10045] bond_slave_1: entered promiscuous mode [ 2920.754876][T10045] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 2920.786627][T10045] Cannot create hsr debugfs directory [ 2920.889599][ T5290] usb 4-1: USB disconnect, device number 83 [ 2920.984546][ T9993] hsr_slave_0: entered promiscuous mode [ 2921.004396][ T9993] hsr_slave_1: entered promiscuous mode [ 2921.020180][ T9993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2921.032929][ T9993] Cannot create hsr debugfs directory [ 2921.236509][ T942] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 2921.408416][T10065] usb usb7: usbfs: process 10065 (syz.2.8120) did not claim interface 0 before use [ 2921.440253][ T942] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2921.457004][ T942] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2921.473108][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2921.484534][ T942] usb 2-1: config 0 descriptor?? [ 2921.709796][ T942] usb 2-1: string descriptor 0 read error: -71 [ 2921.733204][ T942] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 2921.797641][ T942] usb 2-1: USB disconnect, device number 12 [ 2922.095494][ T6191] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2922.108135][ T6191] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2922.117291][ T6191] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2922.134370][ T6191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2922.143495][ T6191] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2922.151126][ T6191] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2922.213347][ T9993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2922.255194][ T9993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2922.319659][ T9993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2922.476652][ T9993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2922.966371][ T9993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2923.305912][ T9993] 8021q: adding VLAN 0 to HW filter on device team0 [ 2923.395260][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 2923.402422][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2923.484970][T10078] chnl_net:caif_netlink_parms(): no params data found [ 2923.557009][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 2923.564154][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2924.117291][T10078] bridge0: port 1(bridge_slave_0) entered blocking state [ 2924.126650][ T4486] wlan0: Trigger new scan to find an IBSS to join [ 2924.158855][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 2924.182683][T10078] bridge_slave_0: entered allmulticast mode [ 2924.195962][T10078] bridge_slave_0: entered promiscuous mode [ 2924.207799][ T527] Bluetooth: hci7: command tx timeout [ 2924.296270][T10078] bridge0: port 2(bridge_slave_1) entered blocking state [ 2924.415792][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 2924.431884][T10078] bridge_slave_1: entered allmulticast mode [ 2924.469949][T10078] bridge_slave_1: entered promiscuous mode [ 2924.973049][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2925.117188][T31130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2925.164132][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2925.343094][T31130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2925.560533][T10078] team0: Port device team_slave_0 added [ 2925.791747][T31130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2925.953522][T10078] team0: Port device team_slave_1 added [ 2926.085190][T10108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8131'. [ 2926.117588][T31130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2926.128320][T10108] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8131'. [ 2926.128342][T10108] netlink: 'syz.2.8131': attribute type 6 has an invalid length. [ 2926.128390][T10108] netlink: 'syz.2.8131': attribute type 5 has an invalid length. [ 2926.128405][T10108] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8131'. [ 2926.162411][ T6191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2926.175168][ T6191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2926.184850][ T6191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2926.198249][ T6191] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2926.207090][ T6191] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2926.214459][ T6191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2926.286406][ T6191] Bluetooth: hci7: command tx timeout [ 2926.303990][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2926.330876][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2926.431583][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2926.476730][T10112] 8021q: VLANs not supported on ipvlan0 [ 2926.523970][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2926.543601][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2926.601776][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2926.640348][ T9993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2926.874850][T10078] hsr_slave_0: entered promiscuous mode [ 2926.947002][T10078] hsr_slave_1: entered promiscuous mode [ 2926.976443][T10078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2926.984044][T10078] Cannot create hsr debugfs directory [ 2928.290180][ T6191] Bluetooth: hci2: command tx timeout [ 2928.376447][ T6191] Bluetooth: hci7: command tx timeout [ 2929.177128][ T2954] wlan0: Trigger new scan to find an IBSS to join [ 2930.176620][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2930.367072][ T6191] Bluetooth: hci2: command tx timeout [ 2930.447776][ T6191] Bluetooth: hci7: command tx timeout [ 2932.446603][ T6191] Bluetooth: hci2: command tx timeout [ 2934.526203][ T6191] Bluetooth: hci2: command tx timeout [ 2937.925433][ T527] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2937.938417][ T527] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2937.955575][ T527] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2937.965198][ T527] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2937.975490][ T527] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2937.983088][ T527] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2939.205774][ T6191] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2939.218435][ T6191] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2939.233439][ T6191] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2939.246948][ T6191] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2939.255163][ T6191] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2939.264235][ T6191] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2940.046500][ T527] Bluetooth: hci8: command tx timeout [ 2941.326375][ T527] Bluetooth: hci9: command tx timeout [ 2942.126273][ T527] Bluetooth: hci8: command tx timeout [ 2943.406288][ T527] Bluetooth: hci9: command tx timeout [ 2944.206260][ T527] Bluetooth: hci8: command tx timeout [ 2945.486348][ T527] Bluetooth: hci9: command tx timeout [ 2946.295114][ T527] Bluetooth: hci8: command tx timeout [ 2947.566429][ T527] Bluetooth: hci9: command tx timeout [ 2959.331047][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.337476][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2962.528694][ T2954] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2970.414700][ T6191] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2970.424986][ T6191] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2970.434380][ T6191] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2970.443188][ T6191] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2970.453315][ T6191] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2970.463650][ T6191] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2972.536520][ T6191] Bluetooth: hci10: command tx timeout [ 2974.616996][ T6191] Bluetooth: hci10: command tx timeout [ 2976.696333][ T6191] Bluetooth: hci10: command tx timeout [ 2978.767894][ T6191] Bluetooth: hci10: command tx timeout [ 2981.947952][ T527] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2981.961795][ T527] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2981.976941][ T527] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2981.985867][ T527] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2981.994463][ T527] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2982.004500][ T527] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2984.046559][ T527] Bluetooth: hci11: command tx timeout [ 2986.037004][ T6191] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2986.047943][ T6191] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2986.056242][ T6191] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2986.064967][ T6191] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2986.073250][ T6191] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2986.086467][ T6191] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2986.126327][ T527] Bluetooth: hci11: command tx timeout [ 2988.128111][ T527] Bluetooth: hci12: command tx timeout [ 2988.208874][ T527] Bluetooth: hci11: command tx timeout [ 2990.206330][ T527] Bluetooth: hci12: command tx timeout [ 2990.288148][ T527] Bluetooth: hci11: command tx timeout [ 2992.286189][ T527] Bluetooth: hci12: command tx timeout [ 2994.366447][ T527] Bluetooth: hci12: command tx timeout [ 2994.528004][ T2954] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2998.528408][ T6191] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2998.541026][ T6191] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2998.550283][ T6191] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2998.565773][ T6191] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2998.574964][ T6191] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2998.583694][ T6191] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2999.472958][ T6191] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2999.485121][ T6191] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2999.495797][ T6191] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2999.505038][ T6191] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2999.514368][ T6191] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2999.526420][ T6191] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 3000.697179][ T527] Bluetooth: hci13: command tx timeout [ 3001.567093][ T6191] Bluetooth: hci14: command tx timeout [ 3002.766219][ T527] Bluetooth: hci13: command tx timeout [ 3003.647889][ T527] Bluetooth: hci14: command tx timeout [ 3004.846364][ T527] Bluetooth: hci13: command tx timeout [ 3005.726918][ T527] Bluetooth: hci14: command tx timeout [ 3006.927988][ T527] Bluetooth: hci13: command tx timeout [ 3007.806535][ T527] Bluetooth: hci14: command tx timeout [ 3020.776606][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.782990][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 3026.536387][ T2954] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3030.556385][ T6191] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 3030.586155][ T6191] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 3030.595862][ T6191] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 3030.608721][ T6191] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 3030.621470][ T6191] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 3030.630345][ T6191] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 3032.686761][ T6191] Bluetooth: hci15: command tx timeout [ 3034.772513][ T6191] Bluetooth: hci15: command tx timeout [ 3036.846603][ T527] Bluetooth: hci15: command tx timeout [ 3038.207995][ T527] Bluetooth: hci4: command 0x0406 tx timeout [ 3038.936269][ T6191] Bluetooth: hci15: command tx timeout [ 3042.203600][ T527] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 3042.215122][ T527] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 3042.235730][ T527] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 3042.263789][ T527] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 3042.279405][ T527] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 3042.290453][ T527] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 3044.371831][ T6191] Bluetooth: hci16: command tx timeout [ 3046.214469][ T527] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 3046.236223][ T527] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 3046.247107][ T527] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 3046.256172][ T527] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 3046.270653][ T527] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 3046.278414][ T527] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 3046.446135][T10175] Bluetooth: hci16: command tx timeout [ 3048.369802][T10175] Bluetooth: hci17: command tx timeout [ 3048.449626][T10175] Bluetooth: hci7: command 0x0406 tx timeout [ 3048.449638][ T9146] Bluetooth: hci2: command 0x0406 tx timeout [ 3048.526249][ T6191] Bluetooth: hci16: command tx timeout [ 3050.446255][ T6191] Bluetooth: hci17: command tx timeout [ 3050.606345][ T6191] Bluetooth: hci16: command tx timeout [ 3052.529009][ T6191] Bluetooth: hci17: command tx timeout [ 3054.607356][ T6191] Bluetooth: hci17: command tx timeout [ 3058.527475][ T7638] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3058.894297][ T4337] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 3058.906047][ T4337] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 3058.916474][ T4337] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 3058.930382][ T4337] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 3058.938288][ T4337] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 3058.945689][ T4337] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 3059.624317][ T6191] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 3059.635331][ T6191] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 3059.645337][ T6191] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 3059.654264][ T6191] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 3059.665564][ T6191] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 3059.674285][ T6191] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 3061.016175][ T4337] Bluetooth: hci18: command tx timeout [ 3061.731703][ T6191] Bluetooth: hci19: command tx timeout [ 3063.086324][ T6191] Bluetooth: hci18: command tx timeout [ 3063.810950][ T6191] Bluetooth: hci19: command tx timeout [ 3063.811033][ T527] Bluetooth: hci9: command 0x0406 tx timeout [ 3063.816742][ T6191] Bluetooth: hci8: command 0x0406 tx timeout [ 3065.166336][ T4337] Bluetooth: hci18: command tx timeout [ 3065.897099][ T4337] Bluetooth: hci19: command tx timeout [ 3067.246191][ T4337] Bluetooth: hci18: command tx timeout [ 3067.966476][ T4337] Bluetooth: hci19: command tx timeout [ 3077.726282][ T30] INFO: task kworker/u8:4:62 blocked for more than 143 seconds. [ 3077.734058][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3077.769080][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3077.794922][ T30] task:kworker/u8:4 state:D stack:18736 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 3077.857985][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 3077.864134][ T30] Call Trace: [ 3077.918528][ T30] [ 3077.921503][ T30] __schedule+0x1800/0x4a60 [ 3077.957394][ T30] ? __pfx___schedule+0x10/0x10 [ 3077.962402][ T30] ? __pfx_lock_release+0x10/0x10 [ 3077.995114][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3078.001998][ T30] ? kthread_data+0x52/0xd0 [ 3078.007134][ T30] ? schedule+0x90/0x320 [ 3078.011424][ T30] ? wq_worker_sleeping+0x66/0x240 [ 3078.027229][ T30] ? schedule+0x90/0x320 [ 3078.032660][ T30] schedule+0x14b/0x320 [ 3078.040402][ T30] schedule_preempt_disabled+0x13/0x30 [ 3078.069392][ T30] __mutex_lock+0x6a4/0xd70 [ 3078.074022][ T30] ? mark_lock+0x9a/0x350 [ 3078.097814][ T30] ? __mutex_lock+0x527/0xd70 [ 3078.102624][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 3078.114738][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3078.139922][ T30] addrconf_dad_work+0xd0/0x16f0 [ 3078.144914][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 3078.166095][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3078.172488][ T30] ? process_scheduled_works+0x945/0x1830 [ 3078.181292][ T30] process_scheduled_works+0xa2c/0x1830 [ 3078.187257][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 3078.193303][ T30] ? assign_work+0x364/0x3d0 [ 3078.209822][ T30] worker_thread+0x86d/0xd10 [ 3078.217552][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3078.223498][ T30] ? __kthread_parkme+0x169/0x1d0 [ 3078.257588][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3078.262870][ T30] kthread+0x2f0/0x390 [ 3078.277168][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3078.283408][ T30] ? __pfx_kthread+0x10/0x10 [ 3078.311481][ T30] ret_from_fork+0x4b/0x80 [ 3078.327160][ T30] ? __pfx_kthread+0x10/0x10 [ 3078.331806][ T30] ret_from_fork_asm+0x1a/0x30 [ 3078.347400][ T30] [ 3078.354831][ T30] INFO: task kworker/1:0:23414 blocked for more than 143 seconds. [ 3078.386684][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3078.394347][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3078.415336][ T30] task:kworker/1:0 state:D stack:20240 pid:23414 tgid:23414 ppid:2 flags:0x00004000 [ 3078.438575][ T30] Workqueue: events switchdev_deferred_process_work [ 3078.445215][ T30] Call Trace: [ 3078.475113][ T30] [ 3078.487507][ T30] __schedule+0x1800/0x4a60 [ 3078.492081][ T30] ? __pfx___schedule+0x10/0x10 [ 3078.507330][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3078.514381][ T30] ? __pfx_lock_release+0x10/0x10 [ 3078.537488][ T30] ? kick_pool+0x45c/0x620 [ 3078.541957][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 3078.558577][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 3078.565095][ T30] ? schedule+0x90/0x320 [ 3078.579697][ T30] schedule+0x14b/0x320 [ 3078.583901][ T30] schedule_preempt_disabled+0x13/0x30 [ 3078.610459][ T30] __mutex_lock+0x6a4/0xd70 [ 3078.615010][ T30] ? __mutex_lock+0x527/0xd70 [ 3078.634300][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 3078.658934][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3078.664011][ T30] ? process_scheduled_works+0x945/0x1830 [ 3078.689661][ T30] switchdev_deferred_process_work+0xe/0x20 [ 3078.695600][ T30] process_scheduled_works+0xa2c/0x1830 [ 3078.714423][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 3078.736381][ T30] ? assign_work+0x364/0x3d0 [ 3078.741392][ T30] worker_thread+0x86d/0xd10 [ 3078.746515][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3078.752511][ T30] ? __kthread_parkme+0x169/0x1d0 [ 3078.758987][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3078.764128][ T30] kthread+0x2f0/0x390 [ 3078.768812][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3078.774390][ T30] ? __pfx_kthread+0x10/0x10 [ 3078.779668][ T30] ret_from_fork+0x4b/0x80 [ 3078.784500][ T30] ? __pfx_kthread+0x10/0x10 [ 3078.789299][ T30] ret_from_fork_asm+0x1a/0x30 [ 3078.794113][ T30] [ 3078.797190][ T30] INFO: task kworker/u8:9:31130 blocked for more than 144 seconds. [ 3078.805100][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3078.815829][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3078.824558][ T30] task:kworker/u8:9 state:D stack:21008 pid:31130 tgid:31130 ppid:2 flags:0x00004000 [ 3078.834872][ T30] Workqueue: netns cleanup_net [ 3078.839720][ T30] Call Trace: [ 3078.843014][ T30] [ 3078.845996][ T30] __schedule+0x1800/0x4a60 [ 3078.850992][ T30] ? __pfx___schedule+0x10/0x10 [ 3078.856520][ T30] ? __pfx_lock_release+0x10/0x10 [ 3078.861589][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3078.868559][ T30] ? kthread_data+0x52/0xd0 [ 3078.873117][ T30] ? schedule+0x90/0x320 [ 3078.877505][ T30] ? wq_worker_sleeping+0x66/0x240 [ 3078.883101][ T30] ? schedule+0x90/0x320 [ 3078.887880][ T30] schedule+0x14b/0x320 [ 3078.892507][ T30] schedule_preempt_disabled+0x13/0x30 [ 3078.898507][ T30] __mutex_lock+0x6a4/0xd70 [ 3078.903532][ T30] ? __mutex_lock+0x527/0xd70 [ 3078.908318][ T30] ? nsim_create+0x408/0x890 [ 3078.912942][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3078.918151][ T30] ? kmemdup_noprof+0x45/0x60 [ 3078.922874][ T30] ? nsim_udp_tunnels_info_create+0x592/0x7c0 [ 3078.929055][ T30] nsim_create+0x408/0x890 [ 3078.933505][ T30] ? debugfs_create_symlink+0x191/0x1f0 [ 3078.939230][ T30] __nsim_dev_port_add+0x6c0/0xae0 [ 3078.944794][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 3078.950769][ T30] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 3078.956955][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 3078.963275][ T30] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 3078.969200][ T30] ? nsim_dev_hwstats_init+0x3c2/0x3d0 [ 3078.975118][ T30] nsim_dev_reload_up+0x69b/0x8e0 [ 3078.981756][ T30] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 3078.987840][ T30] devlink_reload+0x478/0x870 [ 3078.993112][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 3078.998536][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 3079.004041][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 3079.010496][ T30] ? class_remove_file_ns+0x121/0x160 [ 3079.015908][ T30] cleanup_net+0x615/0xcc0 [ 3079.020535][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 3079.025512][ T30] ? process_scheduled_works+0x945/0x1830 [ 3079.031340][ T30] process_scheduled_works+0xa2c/0x1830 [ 3079.037505][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 3079.043948][ T30] ? assign_work+0x364/0x3d0 [ 3079.049040][ T30] worker_thread+0x86d/0xd10 [ 3079.054083][ T30] ? __kthread_parkme+0x169/0x1d0 [ 3079.059680][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3079.064873][ T30] kthread+0x2f0/0x390 [ 3079.069414][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3079.074966][ T30] ? __pfx_kthread+0x10/0x10 [ 3079.080092][ T30] ret_from_fork+0x4b/0x80 [ 3079.084541][ T30] ? __pfx_kthread+0x10/0x10 [ 3079.097797][ T30] ret_from_fork_asm+0x1a/0x30 [ 3079.102635][ T30] [ 3079.105690][ T30] INFO: task kworker/u8:10:31132 blocked for more than 144 seconds. [ 3079.130100][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3079.145621][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3079.181518][ T30] task:kworker/u8:10 state:D stack:19888 pid:31132 tgid:31132 ppid:2 flags:0x00004000 [ 3079.195295][ T30] Workqueue: events_unbound linkwatch_event [ 3079.204785][ T30] Call Trace: [ 3079.221255][ T30] [ 3079.225267][ T30] __schedule+0x1800/0x4a60 [ 3079.233346][ T30] ? __pfx___schedule+0x10/0x10 [ 3079.243971][ T30] ? __pfx_lock_release+0x10/0x10 [ 3079.260471][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3079.268427][ T30] ? kthread_data+0x52/0xd0 [ 3079.274066][ T30] ? schedule+0x90/0x320 [ 3079.279799][ T30] ? wq_worker_sleeping+0x66/0x240 [ 3079.286112][ T30] ? schedule+0x90/0x320 [ 3079.290404][ T30] schedule+0x14b/0x320 [ 3079.294591][ T30] schedule_preempt_disabled+0x13/0x30 [ 3079.305606][ T30] __mutex_lock+0x6a4/0xd70 [ 3079.337206][ T30] ? __mutex_lock+0x527/0xd70 [ 3079.341930][ T30] ? linkwatch_event+0xe/0x60 [ 3079.359565][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3079.365116][ T30] ? process_scheduled_works+0x945/0x1830 [ 3079.371322][ T30] linkwatch_event+0xe/0x60 [ 3079.375854][ T30] process_scheduled_works+0xa2c/0x1830 [ 3079.382036][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 3079.388130][ T30] ? assign_work+0x364/0x3d0 [ 3079.392758][ T30] worker_thread+0x86d/0xd10 [ 3079.397540][ T30] ? __kthread_parkme+0x169/0x1d0 [ 3079.402601][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3079.407942][ T30] kthread+0x2f0/0x390 [ 3079.412602][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3079.418329][ T30] ? __pfx_kthread+0x10/0x10 [ 3079.423410][ T30] ret_from_fork+0x4b/0x80 [ 3079.429433][ T30] ? __pfx_kthread+0x10/0x10 [ 3079.434056][ T30] ret_from_fork_asm+0x1a/0x30 [ 3079.439414][ T30] [ 3079.442969][ T30] INFO: task syz.4.8099:10008 blocked for more than 145 seconds. [ 3079.476238][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3079.483894][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3079.525095][ T30] task:syz.4.8099 state:D stack:25632 pid:10008 tgid:9991 ppid:7203 flags:0x00000004 [ 3079.581407][ T30] Call Trace: [ 3079.584719][ T30] [ 3079.597141][ T30] __schedule+0x1800/0x4a60 [ 3079.602798][ T30] ? __pfx___schedule+0x10/0x10 [ 3079.616643][ T30] ? __pfx_lock_release+0x10/0x10 [ 3079.621713][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3079.647326][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3079.653781][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 3079.675098][ T30] ? schedule+0x90/0x320 [ 3079.679983][ T30] schedule+0x14b/0x320 [ 3079.684600][ T30] ? down_read+0x6a5/0xa40 [ 3079.689356][ T30] schedule_preempt_disabled+0x13/0x30 [ 3079.695239][ T30] down_read+0x705/0xa40 [ 3079.699583][ T30] ? __lock_acquire+0x137a/0x2040 [ 3079.704646][ T30] ? __pfx_down_read+0x10/0x10 [ 3079.710099][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 3079.715700][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 3079.721605][ T30] ? __pfx___up_read+0x10/0x10 [ 3079.727075][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 3079.732528][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 3079.738493][ T30] ? count_memcg_event_mm+0x90/0x420 [ 3079.743836][ T30] ? __filemap_get_folio+0x984/0xc10 [ 3079.749302][ T30] filemap_fault+0x828/0x1760 [ 3079.754021][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 3079.760692][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 3079.766376][ T30] ? __pfx_lock_release+0x10/0x10 [ 3079.777439][ T30] ? pte_alloc_one+0x443/0x5d0 [ 3079.783915][ T30] __do_fault+0x135/0x460 [ 3079.795685][ T30] handle_pte_fault+0x321f/0x6fc0 [ 3079.800951][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 3079.815636][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 3079.821286][ T30] ? mark_lock+0x9a/0x350 [ 3079.826116][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 3079.831916][ T30] ? __lock_acquire+0x137a/0x2040 [ 3079.846857][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 3079.853261][ T30] ? __pfx_lock_release+0x10/0x10 [ 3079.865347][ T30] handle_mm_fault+0x1109/0x1bc0 [ 3079.871441][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 3079.879554][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3079.894207][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 3079.900103][ T30] exc_page_fault+0x2b9/0x8c0 [ 3079.905272][ T30] asm_exc_page_fault+0x26/0x30 [ 3079.910764][ T30] RIP: 0010:__get_user_4+0x11/0x20 [ 3079.915907][ T30] Code: 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 3079.936181][ T30] RSP: 0018:ffffc90005127cb0 EFLAGS: 00050202 [ 3079.942287][ T30] RAX: 0000000020000040 RBX: 0000000000000114 RCX: ffffc90005127c03 [ 3079.950463][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608d40 [ 3079.958491][ T30] RBP: ffff8880633d8f80 R08: ffffffff90186f2f R09: 1ffffffff2030de5 [ 3079.967188][ T30] R10: dffffc0000000000 R11: fffffbfff2030de6 R12: dffffc0000000000 [ 3079.975210][ T30] R13: 0000000020000040 R14: 0000000000002718 R15: ffff888069354800 [ 3079.984807][ T30] rds_getsockopt+0x80/0x530 [ 3079.990017][ T30] ? __pfx_rds_getsockopt+0x10/0x10 [ 3079.995632][ T30] do_sock_getsockopt+0x373/0x850 [ 3080.001526][ T30] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 3080.007707][ T30] ? __fget_files+0x3f6/0x470 [ 3080.012899][ T30] __sys_getsockopt+0x271/0x330 [ 3080.018253][ T30] ? __pfx___sys_getsockopt+0x10/0x10 [ 3080.023658][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3080.030196][ T30] ? do_syscall_64+0x100/0x230 [ 3080.034993][ T30] __x64_sys_getsockopt+0xb5/0xd0 [ 3080.040116][ T30] do_syscall_64+0xf3/0x230 [ 3080.044655][ T30] ? clear_bhb_loop+0x35/0x90 [ 3080.049562][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3080.055894][ T30] RIP: 0033:0x7f7b0a579eb9 [ 3080.060799][ T30] RSP: 002b:00007f7b0b2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 3080.069764][ T30] RAX: ffffffffffffffda RBX: 00007f7b0a716058 RCX: 00007f7b0a579eb9 [ 3080.078215][ T30] RDX: 0000000000002718 RSI: 0000200000000114 RDI: 0000000000000008 [ 3080.087911][ T30] RBP: 00007f7b0a5e793e R08: 0000000020000040 R09: 0000000000000000 [ 3080.105134][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3080.147531][ T30] R13: 0000000000000000 R14: 00007f7b0a716058 R15: 00007f7b0a83fa28 [ 3080.163826][ T30] [ 3080.168131][ T30] INFO: task syz.4.8099:10009 blocked for more than 145 seconds. [ 3080.183941][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3080.203546][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3080.215730][ T30] task:syz.4.8099 state:D stack:27360 pid:10009 tgid:9991 ppid:7203 flags:0x00000004 [ 3080.228032][ T30] Call Trace: [ 3080.231360][ T30] [ 3080.234396][ T30] __schedule+0x1800/0x4a60 [ 3080.250960][ T30] ? __pfx___schedule+0x10/0x10 [ 3080.255885][ T30] ? __pfx_lock_release+0x10/0x10 [ 3080.264857][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3080.280223][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3080.291989][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 3080.297299][ T30] ? schedule+0x90/0x320 [ 3080.301572][ T30] schedule+0x14b/0x320 [ 3080.305759][ T30] ? down_read+0x6a5/0xa40 [ 3080.310542][ T30] schedule_preempt_disabled+0x13/0x30 [ 3080.316184][ T30] down_read+0x705/0xa40 [ 3080.320459][ T30] ? __pfx_down_read+0x10/0x10 [ 3080.325661][ T30] ? release_fault_lock+0xa6/0x230 [ 3080.331339][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 3080.336830][ T30] ? count_memcg_event_mm+0x90/0x420 [ 3080.342618][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 3080.351153][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 3080.357563][ T30] ? count_memcg_event_mm+0x90/0x420 [ 3080.363335][ T30] ? __filemap_get_folio+0x984/0xc10 [ 3080.369310][ T30] filemap_fault+0x828/0x1760 [ 3080.374427][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 3080.379625][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 3080.384846][ T30] ? __pfx_lock_release+0x10/0x10 [ 3080.390074][ T30] ? pte_alloc_one+0x443/0x5d0 [ 3080.394882][ T30] __do_fault+0x135/0x460 [ 3080.399286][ T30] handle_pte_fault+0x321f/0x6fc0 [ 3080.404735][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 3080.410096][ T30] ? stack_depot_save_flags+0x29/0x830 [ 3080.416214][ T30] ? mark_lock+0x9a/0x350 [ 3080.420980][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 3080.426505][ T30] ? __lock_acquire+0x137a/0x2040 [ 3080.431973][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 3080.437836][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 3080.443511][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 3080.450314][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 3080.458944][ T30] handle_mm_fault+0x1109/0x1bc0 [ 3080.463951][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 3080.469389][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 3080.474636][ T30] ? exc_page_fault+0x113/0x8c0 [ 3080.479608][ T30] exc_page_fault+0x459/0x8c0 [ 3080.484326][ T30] asm_exc_page_fault+0x26/0x30 [ 3080.489364][ T30] RIP: 0033:0x7f7b0a44b009 [ 3080.494243][ T30] RSP: 002b:00007f7b0b2d3f70 EFLAGS: 00010246 [ 3080.500843][ T30] RAX: 0000000020000192 RBX: 00000000000010d0 RCX: 0000000000000000 [ 3080.509546][ T30] RDX: 0000000000000001 RSI: 00007f7b0a840320 RDI: 00007f7b0a841c58 [ 3080.518119][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f7b0a8413f0 [ 3080.527011][ T30] R10: 00000000000010d0 R11: 0000000000000293 R12: 0000000000000003 [ 3080.535389][ T30] R13: 0000000000000036 R14: 0000000020000180 R15: 00007f7b0a8413f0 [ 3080.543945][ T30] [ 3080.547676][ T30] INFO: task syz-executor:9993 blocked for more than 146 seconds. [ 3080.555515][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3080.563242][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3080.574985][ T30] task:syz-executor state:D stack:20992 pid:9993 tgid:9993 ppid:1 flags:0x00004004 [ 3080.585251][ T30] Call Trace: [ 3080.588670][ T30] [ 3080.591629][ T30] __schedule+0x1800/0x4a60 [ 3080.596259][ T30] ? __pfx___schedule+0x10/0x10 [ 3080.601158][ T30] ? __pfx_lock_release+0x10/0x10 [ 3080.607308][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3080.612827][ T30] ? schedule+0x90/0x320 [ 3080.617367][ T30] schedule+0x14b/0x320 [ 3080.621812][ T30] schedule_preempt_disabled+0x13/0x30 [ 3080.627919][ T30] __mutex_lock+0x6a4/0xd70 [ 3080.632892][ T30] ? __mutex_lock+0x527/0xd70 [ 3080.638129][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3080.643745][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3080.649384][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3080.654789][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 3080.660003][ T30] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 3080.667289][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3080.673237][ T30] netlink_rcv_skb+0x1e3/0x430 [ 3080.680691][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3080.686393][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3080.691732][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 3080.696919][ T30] netlink_unicast+0x7f6/0x990 [ 3080.701722][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 3080.707254][ T30] ? __virt_addr_valid+0x183/0x530 [ 3080.712834][ T30] ? __check_object_size+0x49c/0x900 [ 3080.718605][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 3080.724357][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 3080.729683][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3080.735409][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3080.741514][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 3080.747048][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3080.752394][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 3080.758348][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3080.764075][ T30] __sock_sendmsg+0x221/0x270 [ 3080.769077][ T30] __sys_sendto+0x3a4/0x4f0 [ 3080.773620][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 3080.782901][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3080.792502][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3080.798992][ T30] __x64_sys_sendto+0xde/0x100 [ 3080.804240][ T30] do_syscall_64+0xf3/0x230 [ 3080.809341][ T30] ? clear_bhb_loop+0x35/0x90 [ 3080.814063][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3080.820453][ T30] RIP: 0033:0x7f0cead7bd4c [ 3080.825447][ T30] RSP: 002b:00007f0ceb03f670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3080.834404][ T30] RAX: ffffffffffffffda RBX: 00007f0ceba44620 RCX: 00007f0cead7bd4c [ 3080.842901][ T30] RDX: 0000000000000028 RSI: 00007f0ceba44670 RDI: 0000000000000003 [ 3080.851516][ T30] RBP: 0000000000000000 R08: 00007f0ceb03f6c4 R09: 000000000000000c [ 3080.859566][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3080.867700][ T30] R13: 0000000000000000 R14: 00007f0ceba44670 R15: 0000000000000000 [ 3080.875755][ T30] [ 3080.878873][ T30] INFO: task syz-executor:10078 blocked for more than 146 seconds. [ 3080.932994][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3080.952225][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3080.983549][ T30] task:syz-executor state:D stack:21728 pid:10078 tgid:10078 ppid:1 flags:0x00000004 [ 3081.007699][ T30] Call Trace: [ 3081.011011][ T30] [ 3081.013963][ T30] __schedule+0x1800/0x4a60 [ 3081.046681][ T30] ? __pfx___schedule+0x10/0x10 [ 3081.051649][ T30] ? __pfx_lock_release+0x10/0x10 [ 3081.078475][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3081.084920][ T30] ? schedule+0x90/0x320 [ 3081.096574][ T30] schedule+0x14b/0x320 [ 3081.100780][ T30] schedule_preempt_disabled+0x13/0x30 [ 3081.126008][ T30] __mutex_lock+0x6a4/0xd70 [ 3081.130680][ T30] ? __mutex_lock+0x527/0xd70 [ 3081.135774][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3081.143446][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3081.149803][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3081.154781][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 3081.160579][ T30] ? __lock_acquire+0x137a/0x2040 [ 3081.166787][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3081.172305][ T30] netlink_rcv_skb+0x1e3/0x430 [ 3081.177851][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3081.183784][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3081.189766][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 3081.194999][ T30] netlink_unicast+0x7f6/0x990 [ 3081.200091][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 3081.205412][ T30] ? __virt_addr_valid+0x183/0x530 [ 3081.210782][ T30] ? __check_object_size+0x49c/0x900 [ 3081.216643][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 3081.222195][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 3081.227641][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3081.233091][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3081.239742][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 3081.245120][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3081.252970][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 3081.259767][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3081.265488][ T30] __sock_sendmsg+0x221/0x270 [ 3081.270843][ T30] __sys_sendto+0x3a4/0x4f0 [ 3081.275386][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 3081.280746][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3081.286956][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3081.293333][ T30] __x64_sys_sendto+0xde/0x100 [ 3081.298457][ T30] do_syscall_64+0xf3/0x230 [ 3081.302993][ T30] ? clear_bhb_loop+0x35/0x90 [ 3081.307959][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3081.314408][ T30] RIP: 0033:0x7f9fb9b7bd4c [ 3081.319547][ T30] RSP: 002b:00007f9fb9e3f660 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3081.328638][ T30] RAX: ffffffffffffffda RBX: 00007f9fba844620 RCX: 00007f9fb9b7bd4c [ 3081.337365][ T30] RDX: 0000000000000054 RSI: 00007f9fba844670 RDI: 0000000000000003 [ 3081.345747][ T30] RBP: 0000000000000000 R08: 00007f9fb9e3f6b4 R09: 000000000000000c [ 3081.353992][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3081.364716][ T30] R13: 0000000000000000 R14: 00007f9fba844670 R15: 0000000000000000 [ 3081.374172][ T30] [ 3081.377772][ T30] INFO: task syz-executor:10114 blocked for more than 147 seconds. [ 3081.385686][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3081.396116][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3081.405199][ T30] task:syz-executor state:D stack:21728 pid:10114 tgid:10114 ppid:1 flags:0x00004004 [ 3081.416140][ T30] Call Trace: [ 3081.419442][ T30] [ 3081.422400][ T30] __schedule+0x1800/0x4a60 [ 3081.427255][ T30] ? __pfx___schedule+0x10/0x10 [ 3081.432150][ T30] ? __pfx_lock_release+0x10/0x10 [ 3081.437635][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3081.443141][ T30] ? schedule+0x90/0x320 [ 3081.447657][ T30] schedule+0x14b/0x320 [ 3081.452250][ T30] schedule_preempt_disabled+0x13/0x30 [ 3081.458466][ T30] __mutex_lock+0x6a4/0xd70 [ 3081.463447][ T30] ? __mutex_lock+0x527/0xd70 [ 3081.470606][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3081.477390][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3081.482473][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3081.488395][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 3081.493954][ T30] ? __lock_acquire+0x137a/0x2040 [ 3081.499717][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3081.505231][ T30] netlink_rcv_skb+0x1e3/0x430 [ 3081.510300][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3081.515801][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3081.521455][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 3081.526893][ T30] netlink_unicast+0x7f6/0x990 [ 3081.532108][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 3081.538158][ T30] ? __virt_addr_valid+0x183/0x530 [ 3081.543446][ T30] ? __check_object_size+0x49c/0x900 [ 3081.549403][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 3081.554961][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 3081.560529][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3081.576100][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 3081.582172][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3081.601434][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 3081.617002][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3081.623429][ T30] __sock_sendmsg+0x221/0x270 [ 3081.636999][ T30] __sys_sendto+0x3a4/0x4f0 [ 3081.641563][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 3081.659629][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3081.666372][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3081.672770][ T30] __x64_sys_sendto+0xde/0x100 [ 3081.707270][ T30] do_syscall_64+0xf3/0x230 [ 3081.713154][ T30] ? clear_bhb_loop+0x35/0x90 [ 3081.726022][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3081.731993][ T30] RIP: 0033:0x7f4e19f7bd4c [ 3081.747103][ T30] RSP: 002b:00007f4e1a23f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3081.756566][ T30] RAX: ffffffffffffffda RBX: 00007f4e1ac44620 RCX: 00007f4e19f7bd4c [ 3081.764568][ T30] RDX: 0000000000000044 RSI: 00007f4e1ac44670 RDI: 0000000000000003 [ 3081.803140][ T30] RBP: 0000000000000000 R08: 00007f4e1a23f704 R09: 000000000000000c [ 3081.816005][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3081.824008][ T30] R13: 0000000000000000 R14: 00007f4e1ac44670 R15: 0000000000000000 [ 3081.840891][ T30] [ 3081.844392][ T30] INFO: task syz.1.8135:10125 blocked for more than 147 seconds. [ 3081.915283][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3081.953450][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3081.964231][ T30] task:syz.1.8135 state:D stack:25632 pid:10125 tgid:10125 ppid:7767 flags:0x00000004 [ 3081.992380][ T30] Call Trace: [ 3081.996156][ T30] [ 3081.999524][ T30] __schedule+0x1800/0x4a60 [ 3082.004091][ T30] ? __pfx___schedule+0x10/0x10 [ 3082.009481][ T30] ? __pfx_lock_release+0x10/0x10 [ 3082.014553][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3082.020692][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3082.027196][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 3082.032347][ T30] ? schedule+0x90/0x320 [ 3082.037559][ T30] schedule+0x14b/0x320 [ 3082.042191][ T30] ? down_read+0x6a5/0xa40 [ 3082.047359][ T30] schedule_preempt_disabled+0x13/0x30 [ 3082.052851][ T30] down_read+0x705/0xa40 [ 3082.057184][ T30] ? __pfx_down_read+0x10/0x10 [ 3082.062409][ T30] ? release_fault_lock+0xa6/0x230 [ 3082.068165][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 3082.073975][ T30] ? count_memcg_event_mm+0x90/0x420 [ 3082.079790][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 3082.085619][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 3082.092084][ T30] ? count_memcg_event_mm+0x90/0x420 [ 3082.097480][ T30] ? __filemap_get_folio+0x984/0xc10 [ 3082.102809][ T30] filemap_fault+0x828/0x1760 [ 3082.107711][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3082.114098][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 3082.119444][ T30] ? pte_alloc_one+0x443/0x5d0 [ 3082.124621][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 3082.130565][ T30] ? __pfx_validate_chain+0x10/0x10 [ 3082.135796][ T30] ? __pfx_validate_chain+0x10/0x10 [ 3082.141527][ T30] __do_fault+0x135/0x460 [ 3082.147526][ T30] handle_pte_fault+0x1176/0x6fc0 [ 3082.152638][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3082.159098][ T30] ? mark_lock+0x9a/0x350 [ 3082.163967][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 3082.169979][ T30] ? __lock_acquire+0x137a/0x2040 [ 3082.175053][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 3082.180904][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 3082.186789][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 3082.192738][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 3082.198533][ T30] handle_mm_fault+0x1109/0x1bc0 [ 3082.203537][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 3082.214599][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.221033][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.221297][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 3082.233287][ T30] ? exc_page_fault+0x113/0x8c0 [ 3082.238616][ T30] exc_page_fault+0x459/0x8c0 [ 3082.243767][ T30] asm_exc_page_fault+0x26/0x30 [ 3082.249215][ T30] RIP: 0033:0x7fc31ac41043 [ 3082.253657][ T30] RSP: 002b:00007fc31b03fb50 EFLAGS: 00010246 [ 3082.261106][ T30] RAX: 00000000200ca3c0 RBX: 0000000000000008 RCX: 0000000000000000 [ 3082.269646][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558bf253c8 [ 3082.278235][ T30] RBP: 00007fc31b03fc68 R08: 0000000000000000 R09: 0000000000000000 [ 3082.286596][ T30] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000002cab09 [ 3082.295031][ T30] R13: 00007fc31b03fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 3082.303126][ T30] [ 3082.306304][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3082.315407][ T30] INFO: task syz.1.8135:10126 blocked for more than 147 seconds. [ 3082.323201][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3082.331410][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3082.350262][ T30] task:syz.1.8135 state:D stack:25624 pid:10126 tgid:10125 ppid:7767 flags:0x00004004 [ 3082.360918][ T30] Call Trace: [ 3082.364214][ T30] [ 3082.368333][ T30] __schedule+0x1800/0x4a60 [ 3082.372904][ T30] ? __pfx___schedule+0x10/0x10 [ 3082.377850][ T30] ? __pfx_lock_release+0x10/0x10 [ 3082.382899][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3082.389486][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3082.396289][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 3082.401832][ T30] ? schedule+0x90/0x320 [ 3082.406691][ T30] schedule+0x14b/0x320 [ 3082.411288][ T30] ? down_read+0x6a5/0xa40 [ 3082.416172][ T30] schedule_preempt_disabled+0x13/0x30 [ 3082.421655][ T30] down_read+0x705/0xa40 [ 3082.425916][ T30] ? __lock_acquire+0x137a/0x2040 [ 3082.431143][ T30] ? __pfx_down_read+0x10/0x10 [ 3082.435955][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 3082.441600][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 3082.447200][ T30] ? __pfx___up_read+0x10/0x10 [ 3082.452003][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 3082.457643][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 3082.463963][ T30] ? count_memcg_event_mm+0x90/0x420 [ 3082.469912][ T30] ? __filemap_get_folio+0x984/0xc10 [ 3082.475657][ T30] filemap_fault+0x828/0x1760 [ 3082.481334][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 3082.487069][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 3082.492750][ T30] ? __pfx_lock_release+0x10/0x10 [ 3082.498262][ T30] ? pte_alloc_one+0x443/0x5d0 [ 3082.503484][ T30] __do_fault+0x135/0x460 [ 3082.508419][ T30] handle_pte_fault+0x321f/0x6fc0 [ 3082.513480][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 3082.518771][ T30] ? __pfx_validate_chain+0x10/0x10 [ 3082.524000][ T30] ? mark_lock+0x9a/0x350 [ 3082.528628][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 3082.534029][ T30] ? __lock_acquire+0x137a/0x2040 [ 3082.539141][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 3082.545480][ T30] ? mt_find+0x226/0x850 [ 3082.550414][ T30] ? __pfx_lock_release+0x10/0x10 [ 3082.555886][ T30] handle_mm_fault+0x1109/0x1bc0 [ 3082.561337][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 3082.567370][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3082.573775][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 3082.579151][ T30] exc_page_fault+0x2b9/0x8c0 [ 3082.583868][ T30] asm_exc_page_fault+0x26/0x30 [ 3082.589707][ T30] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 3082.595547][ T30] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 3082.615857][ T30] RSP: 0018:ffffc9000466fa90 EFLAGS: 00050212 [ 3082.622007][ T30] RAX: ffffffff84b28801 RBX: 0000000020000074 RCX: 0000000000000034 [ 3082.630552][ T30] RDX: 0000000000000001 RSI: 0000000020000040 RDI: ffffc9000466fb00 [ 3082.639032][ T30] RBP: ffffc9000466fbb0 R08: 0000000000000003 R09: fffff520008cdf66 [ 3082.647244][ T30] R10: dffffc0000000000 R11: fffff520008cdf66 R12: 0000000020000040 [ 3082.655256][ T30] R13: ffffc9000466fb00 R14: ffffc9000466fb00 R15: 0000000000000034 [ 3082.663324][ T30] ? _copy_from_user+0x41/0xe0 [ 3082.668319][ T30] _copy_from_user+0x8c/0xe0 [ 3082.673409][ T30] ip_tunnel_parm_from_user+0xa5/0x400 [ 3082.679558][ T30] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 3082.685673][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 3082.691583][ T30] ip_tunnel_siocdevprivate+0x9a/0x180 [ 3082.698499][ T30] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 3082.705001][ T30] ? full_name_hash+0x93/0xe0 [ 3082.710302][ T30] dev_ifsioc+0xaec/0xe70 [ 3082.715077][ T30] ? __pfx_dev_ifsioc+0x10/0x10 [ 3082.720007][ T30] ? dev_load+0x21/0x1f0 [ 3082.724281][ T30] dev_ioctl+0x881/0x1340 [ 3082.729176][ T30] sock_ioctl+0x7f2/0x8e0 [ 3082.733559][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 3082.738472][ T30] ? __fget_files+0x3f6/0x470 [ 3082.743198][ T30] ? __fget_files+0x29/0x470 [ 3082.747989][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3082.752963][ T30] ? security_file_ioctl+0x87/0xb0 [ 3082.758167][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 3082.763550][ T30] __se_sys_ioctl+0xfc/0x170 [ 3082.768883][ T30] do_syscall_64+0xf3/0x230 [ 3082.773868][ T30] ? clear_bhb_loop+0x35/0x90 [ 3082.779042][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3082.785374][ T30] RIP: 0033:0x7fc31ad79eb9 [ 3082.790138][ T30] RSP: 002b:00007fc31bb24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3082.799086][ T30] RAX: ffffffffffffffda RBX: 00007fc31af15f80 RCX: 00007fc31ad79eb9 [ 3082.808539][ T30] RDX: 00000000200005c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 3082.817021][ T30] RBP: 00007fc31ade793e R08: 0000000000000000 R09: 0000000000000000 [ 3082.825019][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3082.833176][ T30] R13: 0000000000000000 R14: 00007fc31af15f80 R15: 00007fc31b03fa28 [ 3082.841225][ T30] [ 3082.844275][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3082.854323][ T30] INFO: task syz.1.8135:10128 blocked for more than 148 seconds. [ 3082.862149][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3082.869987][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3082.879183][ T30] task:syz.1.8135 state:D stack:25632 pid:10128 tgid:10125 ppid:7767 flags:0x00000004 [ 3082.889904][ T30] Call Trace: [ 3082.893206][ T30] [ 3082.896377][ T30] __schedule+0x1800/0x4a60 [ 3082.901336][ T30] ? __pfx___schedule+0x10/0x10 [ 3082.906841][ T30] ? __pfx_lock_release+0x10/0x10 [ 3082.911909][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3082.919224][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3082.925587][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 3082.931337][ T30] ? schedule+0x90/0x320 [ 3082.936100][ T30] schedule+0x14b/0x320 [ 3082.940300][ T30] ? down_read+0x6a5/0xa40 [ 3082.944739][ T30] schedule_preempt_disabled+0x13/0x30 [ 3082.950407][ T30] down_read+0x705/0xa40 [ 3082.954682][ T30] ? __lock_acquire+0x137a/0x2040 [ 3082.959805][ T30] ? __pfx_down_read+0x10/0x10 [ 3082.965016][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 3082.970758][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 3082.976191][ T30] ? __pfx___up_read+0x10/0x10 [ 3082.981009][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 3082.987026][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 3082.993396][ T30] ? count_memcg_event_mm+0x90/0x420 [ 3082.999184][ T30] ? __filemap_get_folio+0x984/0xc10 [ 3083.004896][ T30] filemap_fault+0x828/0x1760 [ 3083.010387][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3083.017640][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 3083.022793][ T30] ? pte_alloc_one+0x443/0x5d0 [ 3083.028592][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 3083.033745][ T30] ? __pfx_validate_chain+0x10/0x10 [ 3083.039038][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 3083.044483][ T30] __do_fault+0x135/0x460 [ 3083.048991][ T30] handle_pte_fault+0x1176/0x6fc0 [ 3083.054043][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 3083.059374][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 3083.064626][ T30] ? finish_task_switch+0x1e5/0x870 [ 3083.070405][ T30] ? mark_lock+0x9a/0x350 [ 3083.074779][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 3083.080603][ T30] ? __lock_acquire+0x137a/0x2040 [ 3083.085694][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 3083.092191][ T30] ? mt_find+0x226/0x850 [ 3083.096903][ T30] ? __pfx_lock_release+0x10/0x10 [ 3083.101971][ T30] handle_mm_fault+0x1109/0x1bc0 [ 3083.107132][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 3083.112893][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3083.119970][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 3083.125684][ T30] exc_page_fault+0x2b9/0x8c0 [ 3083.131017][ T30] asm_exc_page_fault+0x26/0x30 [ 3083.135902][ T30] RIP: 0010:__put_user_4+0x11/0x20 [ 3083.141979][ T30] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 3083.161810][ T30] RSP: 0018:ffffc90004b17dd8 EFLAGS: 00050202 [ 3083.168470][ T30] RAX: 0000000000000010 RBX: 0000000000000000 RCX: 0000000020000040 [ 3083.176654][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608d40 [ 3083.185056][ T30] RBP: ffffc90004b17ed0 R08: ffffffff90186f2f R09: 1ffffffff2030de5 [ 3083.193564][ T30] R10: dffffc0000000000 R11: fffffbfff2030de6 R12: 0000000000000000 [ 3083.202090][ T30] R13: 1ffff92000962fc4 R14: 1ffff92000962fcc R15: 0000000020000040 [ 3083.210575][ T30] __sys_socketpair+0x186/0x720 [ 3083.215873][ T30] ? __pfx___sys_socketpair+0x10/0x10 [ 3083.221845][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3083.228462][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3083.235229][ T30] ? do_syscall_64+0x100/0x230 [ 3083.240213][ T30] __x64_sys_socketpair+0x9b/0xb0 [ 3083.245272][ T30] do_syscall_64+0xf3/0x230 [ 3083.258128][ T30] ? clear_bhb_loop+0x35/0x90 [ 3083.262853][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3083.268958][ T30] RIP: 0033:0x7fc31ad79eb9 [ 3083.273399][ T30] RSP: 002b:00007fc31bae2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3083.282316][ T30] RAX: ffffffffffffffda RBX: 00007fc31af16130 RCX: 00007fc31ad79eb9 [ 3083.290894][ T30] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 3083.299346][ T30] RBP: 00007fc31ade793e R08: 0000000000000000 R09: 0000000000000000 [ 3083.307960][ T30] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 3083.316390][ T30] R13: 0000000000000000 R14: 00007fc31af16130 R15: 00007fc31b03fa28 [ 3083.324853][ T30] [ 3083.328498][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3083.337778][ T30] INFO: task syz.2.8137:10140 blocked for more than 148 seconds. [ 3083.345935][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3083.353751][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3083.363760][ T30] task:syz.2.8137 state:D stack:27136 pid:10140 tgid:10133 ppid:8806 flags:0x00004004 [ 3083.374166][ T30] Call Trace: [ 3083.377534][ T30] [ 3083.380483][ T30] __schedule+0x1800/0x4a60 [ 3083.385044][ T30] ? __pfx___schedule+0x10/0x10 [ 3083.390084][ T30] ? __pfx_lock_release+0x10/0x10 [ 3083.395156][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3083.400759][ T30] ? schedule+0x90/0x320 [ 3083.405036][ T30] schedule+0x14b/0x320 [ 3083.409575][ T30] schedule_preempt_disabled+0x13/0x30 [ 3083.415062][ T30] __mutex_lock+0x6a4/0xd70 [ 3083.419694][ T30] ? __mutex_lock+0x527/0xd70 [ 3083.424403][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3083.430068][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3083.435136][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3083.440605][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 3083.446235][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3083.452147][ T30] ? ref_tracker_free+0x643/0x7e0 [ 3083.457882][ T30] netlink_rcv_skb+0x1e3/0x430 [ 3083.463117][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3083.469937][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3083.475677][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 3083.481123][ T30] netlink_unicast+0x7f6/0x990 [ 3083.485936][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 3083.491709][ T30] ? __virt_addr_valid+0x183/0x530 [ 3083.496993][ T30] ? __check_object_size+0x49c/0x900 [ 3083.502311][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 3083.507525][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 3083.512789][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3083.518686][ T30] ? __import_iovec+0x536/0x820 [ 3083.523953][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 3083.529453][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3083.535188][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 3083.540858][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3083.546650][ T30] __sock_sendmsg+0x221/0x270 [ 3083.551810][ T30] ____sys_sendmsg+0x525/0x7d0 [ 3083.557179][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3083.562530][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 3083.567342][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 3083.572646][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3083.580101][ T30] ? do_syscall_64+0x100/0x230 [ 3083.584894][ T30] ? do_syscall_64+0xb6/0x230 [ 3083.590039][ T30] do_syscall_64+0xf3/0x230 [ 3083.594571][ T30] ? clear_bhb_loop+0x35/0x90 [ 3083.599807][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3083.606227][ T30] RIP: 0033:0x7f9a1a779eb9 [ 3083.611072][ T30] RSP: 002b:00007f9a1b575038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3083.620054][ T30] RAX: ffffffffffffffda RBX: 00007f9a1a916208 RCX: 00007f9a1a779eb9 [ 3083.628497][ T30] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000009 [ 3083.637031][ T30] RBP: 00007f9a1a7e793e R08: 0000000000000000 R09: 0000000000000000 [ 3083.645029][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3083.653838][ T30] R13: 0000000000000000 R14: 00007f9a1a916208 R15: 00007f9a1aa3fa28 [ 3083.662055][ T30] [ 3083.665096][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3083.674261][ T30] [ 3083.674261][ T30] Showing all locks held in the system: [ 3083.682226][ T30] 1 lock held by khungtaskd/30: [ 3083.688196][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 3083.698600][ T30] 3 locks held by kworker/1:1/47: [ 3083.704042][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 3083.717027][ T30] #1: ffffc90000b77d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 3083.728311][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 3083.738065][ T30] 3 locks held by kworker/u8:4/62: [ 3083.743231][ T30] #0: ffff88802fd02948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 3083.755296][ T30] #1: ffffc900015d7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 3083.768710][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 3083.778687][ T30] 1 lock held by klogd/4678: [ 3083.783711][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 3083.794347][ T30] 2 locks held by udevd/4689: [ 3083.799978][ T30] 2 locks held by getty/4993: [ 3083.804676][ T30] #0: ffff8880307210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3083.814660][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 3083.824856][ T30] 3 locks held by kworker/1:0/23414: [ 3083.830285][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 3083.841330][ T30] #1: ffffc90002f4fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 3083.852925][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 3083.863845][ T30] 6 locks held by kworker/u8:9/31130: [ 3083.869802][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 3083.881228][ T30] #1: ffffc900048bfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 3083.892366][ T30] #2: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 3083.902499][ T30] #3: ffff88806c2f30e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 3083.914078][ T30] #4: ffff88806c2f0250 (&devlink->lock_key#202){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 3083.925580][ T30] #5: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x408/0x890 [ 3083.934640][ T30] 3 locks held by kworker/u8:10/31132: [ 3083.940186][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 3083.952444][ T30] #1: ffffc90004877d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 3083.963938][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 3083.973467][ T30] 4 locks held by kworker/1:4/3575: [ 3083.979151][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 3083.989663][ T30] #1: ffffc900043b7d00 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 3084.004857][ T30] #2: ffff8880b892a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 3084.014876][ T30] #3: ffffffff9a56ab20 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 3084.034558][ T30] 1 lock held by kworker/0:0H/7987: [ 3084.056037][ T30] 1 lock held by syz.2.7706/8717: [ 3084.061091][ T30] 1 lock held by syz.4.8099/10008: [ 3084.071039][ T30] #0: ffff88802314f0c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 3084.096342][ T30] 1 lock held by syz.4.8099/10009: [ 3084.102651][ T30] #0: ffff88802314f0c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 3084.137057][ T30] 1 lock held by syz-executor/9993: [ 3084.142323][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3084.165594][ T30] 1 lock held by syz-executor/10078: [ 3084.197664][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3084.211204][ T30] 1 lock held by syz-executor/10114: [ 3084.240090][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3084.260972][ T30] 1 lock held by syz.1.8135/10125: [ 3084.266608][ T30] #0: ffff88802314f0c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 3084.277966][ T30] 2 locks held by syz.1.8135/10126: [ 3084.283176][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 3084.300430][ T30] #1: ffff88802314f0c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 3084.312312][ T30] 1 lock held by syz.1.8135/10128: [ 3084.318044][ T30] #0: ffff88802314f0c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 3084.329933][ T30] 1 lock held by syz.2.8137/10140: [ 3084.335477][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 3084.345795][ T30] 2 locks held by syz-executor/10143: [ 3084.351971][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.362042][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.373360][ T30] 2 locks held by syz-executor/10146: [ 3084.378951][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.388659][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.399293][ T30] 2 locks held by syz-executor/10153: [ 3084.405091][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.415251][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.425843][ T30] 2 locks held by syz-executor/10156: [ 3084.431935][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.441964][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.452671][ T30] 2 locks held by syz-executor/10159: [ 3084.458843][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.468961][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.480537][ T30] 2 locks held by syz-executor/10162: [ 3084.485930][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.495552][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.505937][ T30] 2 locks held by syz-executor/10165: [ 3084.511495][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.521642][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.532363][ T30] 2 locks held by syz-executor/10168: [ 3084.538613][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.548619][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.559327][ T30] 2 locks held by syz-executor/10171: [ 3084.565129][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.575535][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.586323][ T30] 2 locks held by syz-executor/10174: [ 3084.591762][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.602411][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.612683][ T30] 2 locks held by syz-executor/10178: [ 3084.618323][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.627931][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.638623][ T30] 2 locks held by syz-executor/10181: [ 3084.644013][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 3084.654130][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 3084.664814][ T30] [ 3084.667366][ T30] ============================================= [ 3084.667366][ T30] [ 3084.675807][ T30] NMI backtrace for cpu 0 [ 3084.680149][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3084.690661][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3084.700735][ T30] Call Trace: [ 3084.704030][ T30] [ 3084.706978][ T30] dump_stack_lvl+0x241/0x360 [ 3084.711701][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3084.716924][ T30] ? __pfx__printk+0x10/0x10 [ 3084.721539][ T30] ? vprintk_emit+0x667/0x7c0 [ 3084.726235][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 3084.731304][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 3084.736269][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3084.741731][ T30] ? _printk+0xd5/0x120 [ 3084.745893][ T30] ? __pfx__printk+0x10/0x10 [ 3084.750500][ T30] ? __wake_up_klogd+0xcc/0x110 [ 3084.755352][ T30] ? __pfx__printk+0x10/0x10 [ 3084.759941][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 3084.764968][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3084.770950][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 3084.776948][ T30] watchdog+0xff4/0x1040 [ 3084.781195][ T30] ? watchdog+0x1ea/0x1040 [ 3084.785619][ T30] ? __pfx_watchdog+0x10/0x10 [ 3084.790304][ T30] kthread+0x2f0/0x390 [ 3084.794403][ T30] ? __pfx_watchdog+0x10/0x10 [ 3084.799097][ T30] ? __pfx_kthread+0x10/0x10 [ 3084.803682][ T30] ret_from_fork+0x4b/0x80 [ 3084.808099][ T30] ? __pfx_kthread+0x10/0x10 [ 3084.812687][ T30] ret_from_fork_asm+0x1a/0x30 [ 3084.817466][ T30] [ 3084.820901][ T30] Sending NMI from CPU 0 to CPUs 1: [ 3084.826220][ C1] NMI backtrace for cpu 1 [ 3084.826232][ C1] CPU: 1 UID: 0 PID: 2954 Comm: kworker/u8:11 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3084.826251][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3084.826261][ C1] Workqueue: bat_events batadv_nc_worker [ 3084.826299][ C1] RIP: 0010:__lock_acquire+0x898/0x2040 [ 3084.826325][ C1] Code: 8b 5d 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 40 48 1e 94 be 08 00 00 00 e8 a0 fe 8a 00 48 0f a3 1d c8 6c ae 12 <73> 1a 48 69 c3 c8 00 00 00 48 8d 98 40 c7 ba 93 48 ba 00 00 00 00 [ 3084.826338][ C1] RSP: 0018:ffffc90009b278f0 EFLAGS: 00000057 [ 3084.826351][ C1] RAX: 0000000000000001 RBX: 00000000000006d1 RCX: ffffffff816fdb70 [ 3084.826363][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff941e4918 [ 3084.826373][ C1] RBP: 0000000000000000 R08: ffffffff941e491f R09: 1ffffffff283c923 [ 3084.826385][ C1] R10: dffffc0000000000 R11: fffffbfff283c924 R12: 0000000000000001 [ 3084.826396][ C1] R13: ffff888031362928 R14: 0000000000000001 R15: ffff888031362928 [ 3084.826408][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 3084.826421][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3084.826432][ C1] CR2: 00007fb5e7c3bbd0 CR3: 000000007d692000 CR4: 00000000003506f0 [ 3084.826446][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3084.826456][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3084.826466][ C1] Call Trace: [ 3084.826473][ C1] [ 3084.826479][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 3084.826499][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 3084.826521][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3084.826554][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 3084.826573][ C1] ? nmi_handle+0x14f/0x5a0 [ 3084.826589][ C1] ? nmi_handle+0x2a/0x5a0 [ 3084.826604][ C1] ? __lock_acquire+0x898/0x2040 [ 3084.826625][ C1] ? default_do_nmi+0x63/0x160 [ 3084.826645][ C1] ? exc_nmi+0x123/0x1f0 [ 3084.826664][ C1] ? end_repeat_nmi+0xf/0x53 [ 3084.826688][ C1] ? __lock_acquire+0x890/0x2040 [ 3084.826709][ C1] ? __lock_acquire+0x898/0x2040 [ 3084.826730][ C1] ? __lock_acquire+0x898/0x2040 [ 3084.826752][ C1] ? __lock_acquire+0x898/0x2040 [ 3084.826773][ C1] [ 3084.826779][ C1] [ 3084.826792][ C1] lock_acquire+0x1ed/0x550 [ 3084.826812][ C1] ? batadv_nc_worker+0xcb/0x610 [ 3084.826837][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 3084.826859][ C1] ? batadv_nc_worker+0xcb/0x610 [ 3084.826880][ C1] ? __pfx_lock_release+0x10/0x10 [ 3084.826903][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3084.826927][ C1] batadv_nc_worker+0xec/0x610 [ 3084.826949][ C1] ? batadv_nc_worker+0xcb/0x610 [ 3084.826969][ C1] ? batadv_nc_worker+0xcb/0x610 [ 3084.826992][ C1] ? process_scheduled_works+0x945/0x1830 [ 3084.827012][ C1] process_scheduled_works+0xa2c/0x1830 [ 3084.827044][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 3084.827068][ C1] ? assign_work+0x364/0x3d0 [ 3084.827089][ C1] worker_thread+0x86d/0xd10 [ 3084.827116][ C1] ? __kthread_parkme+0x169/0x1d0 [ 3084.827139][ C1] ? __pfx_worker_thread+0x10/0x10 [ 3084.827177][ C1] kthread+0x2f0/0x390 [ 3084.827191][ C1] ? __pfx_worker_thread+0x10/0x10 [ 3084.827212][ C1] ? __pfx_kthread+0x10/0x10 [ 3084.827227][ C1] ret_from_fork+0x4b/0x80 [ 3084.827250][ C1] ? __pfx_kthread+0x10/0x10 [ 3084.827265][ C1] ret_from_fork_asm+0x1a/0x30 [ 3084.827296][ C1] [ 3084.830515][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 3085.170698][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 3085.181191][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3085.191252][ T30] Call Trace: [ 3085.194553][ T30] [ 3085.197479][ T30] dump_stack_lvl+0x241/0x360 [ 3085.202178][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3085.207379][ T30] ? __pfx__printk+0x10/0x10 [ 3085.211966][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3085.217952][ T30] ? vscnprintf+0x5d/0x90 [ 3085.222291][ T30] panic+0x349/0x860 [ 3085.226204][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3085.232409][ T30] ? __pfx_panic+0x10/0x10 [ 3085.236831][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 3085.242206][ T30] ? __irq_work_queue_local+0x137/0x410 [ 3085.247758][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 3085.253127][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3085.259292][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 3085.265443][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 3085.271598][ T30] watchdog+0x1033/0x1040 [ 3085.275932][ T30] ? watchdog+0x1ea/0x1040 [ 3085.280356][ T30] ? __pfx_watchdog+0x10/0x10 [ 3085.285033][ T30] kthread+0x2f0/0x390 [ 3085.289095][ T30] ? __pfx_watchdog+0x10/0x10 [ 3085.293771][ T30] ? __pfx_kthread+0x10/0x10 [ 3085.298354][ T30] ret_from_fork+0x4b/0x80 [ 3085.302783][ T30] ? __pfx_kthread+0x10/0x10 [ 3085.307371][ T30] ret_from_fork_asm+0x1a/0x30 [ 3085.312152][ T30] [ 3085.315474][ T30] Kernel Offset: disabled [ 3085.319797][ T30] Rebooting in 86400 seconds..