last executing test programs: 23.608735254s ago: executing program 0 (id=120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0xfc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 23.407628757s ago: executing program 0 (id=123): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x0, 0xe, 0x1, "86"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x40, 0x15, 0x2, "069e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.956508741s ago: executing program 2 (id=135): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 21.912961203s ago: executing program 2 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) 21.812430647s ago: executing program 2 (id=137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 21.702446612s ago: executing program 3 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0xc815) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "2e15cd42"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, 0x0, 0x0, &(0x7f0000000a80)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@generic={0x3, 0x10, 0xb}, @wireless={0xb, 0x10, 0x1, 0xc, 0x54, 0x0, 0x40, 0x1, 0x80}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x3f, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5b") 21.652396752s ago: executing program 0 (id=139): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x409, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="01", 0x24}]) 21.601672627s ago: executing program 1 (id=140): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) 21.564307822s ago: executing program 0 (id=141): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/189) 21.43466176s ago: executing program 0 (id=142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) 21.434333514s ago: executing program 1 (id=143): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000380)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 21.296704965s ago: executing program 1 (id=145): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x14) shutdown(r0, 0x2) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000000)=""/74, 0x4a}, {&(0x7f0000000580)=""/193, 0xc1}], 0x5}, 0x10140) 21.186605055s ago: executing program 4 (id=146): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0xfffe, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @local, 'veth0_vlan\x00'}}, 0x1e) 21.145061041s ago: executing program 3 (id=147): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 21.135710044s ago: executing program 4 (id=148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f00000001c0)="550bbbec2b28850d", 0x8}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) 20.882488359s ago: executing program 4 (id=149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="10be436f1ef06b42f4ac781daca60ffb0a6ab9d3f81ed3f335afd5234da3c6dfdf5306ba9eaa1251288280f6874ef47bef427ef38e75ce4298df305a2c6701f5924268738b824fe7e04394daeaa081c4"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 20.881513877s ago: executing program 1 (id=150): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) 20.881207753s ago: executing program 2 (id=151): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x409, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 20.880405227s ago: executing program 3 (id=152): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x300, 0x0) 20.762759655s ago: executing program 1 (id=153): syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r0], 0x0) 20.699488692s ago: executing program 3 (id=154): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, 0x0) 20.646584869s ago: executing program 4 (id=155): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0xfc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 20.546830357s ago: executing program 4 (id=156): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x2) 20.501611459s ago: executing program 3 (id=157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r1, 0x309, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) 20.498680081s ago: executing program 2 (id=158): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0xfffe, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @local, 'veth0_vlan\x00'}}, 0x1e) 20.35864957s ago: executing program 4 (id=159): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20.358093456s ago: executing program 2 (id=160): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x5a, 0x0, 0x3e, 0x20, 0x408, 0x3090, 0x1561, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf1, 0xfb, 0xa0, 0x2a, [{{0x9, 0x4, 0xd5, 0xa3, 0x0, 0xe, 0x1, 0x0, 0x3}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 20.345563938s ago: executing program 3 (id=161): socket(0x200000000000011, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 13.007313452s ago: executing program 0 (id=162): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x80045440, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 10.28753451s ago: executing program 1 (id=163): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x14) shutdown(r0, 0x2) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000000)=""/74, 0x4a}, {&(0x7f0000000580)=""/193, 0xc1}], 0x5}, 0x10140) 0s ago: executing program 32 (id=160): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x5a, 0x0, 0x3e, 0x20, 0x408, 0x3090, 0x1561, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf1, 0xfb, 0xa0, 0x2a, [{{0x9, 0x4, 0xd5, 0xa3, 0x0, 0xe, 0x1, 0x0, 0x3}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 38.694613][ T6516] cgroup: Unknown subsys name 'net' [ 38.777973][ T6516] cgroup: Unknown subsys name 'cpuset' [ 38.781821][ T6516] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 38.986853][ T6516] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 40.584721][ T6529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.588616][ T6534] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.591378][ T6534] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.596290][ T6533] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.599312][ T6533] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.602512][ T6533] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.605796][ T6533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.616473][ T6529] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.616688][ T6529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.623204][ T6536] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.623410][ T6536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.623965][ T6536] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 40.625606][ T6536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 40.626754][ T6536] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 40.627051][ T6536] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 40.627594][ T6536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.627882][ T6536] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 40.628542][ T6536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.629288][ T6536] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 40.629451][ T6536] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 40.631479][ T6536] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.636754][ T6541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 40.662434][ T6539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.662797][ T6536] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 40.667592][ T6539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.000048][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 41.005435][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 41.018338][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 41.131499][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 41.149194][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.149379][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.149522][ T6530] bridge_slave_0: entered allmulticast mode [ 41.150486][ T6530] bridge_slave_0: entered promiscuous mode [ 41.188846][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.188931][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.189046][ T6530] bridge_slave_1: entered allmulticast mode [ 41.189919][ T6530] bridge_slave_1: entered promiscuous mode [ 41.208665][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.210855][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.213439][ T6535] bridge_slave_0: entered allmulticast mode [ 41.214285][ T6535] bridge_slave_0: entered promiscuous mode [ 41.215665][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.215710][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.215816][ T6535] bridge_slave_1: entered allmulticast mode [ 41.216618][ T6535] bridge_slave_1: entered promiscuous mode [ 41.261535][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.264852][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.266974][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.268171][ T6527] bridge_slave_0: entered allmulticast mode [ 41.269026][ T6527] bridge_slave_0: entered promiscuous mode [ 41.270624][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.270683][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.270855][ T6527] bridge_slave_1: entered allmulticast mode [ 41.271992][ T6527] bridge_slave_1: entered promiscuous mode [ 41.275545][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.277554][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.293381][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.342895][ T6535] team0: Port device team_slave_0 added [ 41.344573][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.346944][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.366174][ T6530] team0: Port device team_slave_0 added [ 41.369406][ T6530] team0: Port device team_slave_1 added [ 41.380766][ T6535] team0: Port device team_slave_1 added [ 41.415265][ T6540] chnl_net:caif_netlink_parms(): no params data found [ 41.421134][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.422533][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.422673][ T6526] bridge_slave_0: entered allmulticast mode [ 41.423860][ T6526] bridge_slave_0: entered promiscuous mode [ 41.425262][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.425309][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.425413][ T6526] bridge_slave_1: entered allmulticast mode [ 41.426307][ T6526] bridge_slave_1: entered promiscuous mode [ 41.438905][ T6527] team0: Port device team_slave_0 added [ 41.440094][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.440125][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.440159][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.441714][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.441742][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.441776][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.471391][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.473509][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.476372][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.477576][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.477603][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.477634][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.484583][ T6527] team0: Port device team_slave_1 added [ 41.526906][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.529320][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.535866][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.553869][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.555654][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.573984][ T6535] hsr_slave_0: entered promiscuous mode [ 41.574605][ T6535] hsr_slave_1: entered promiscuous mode [ 41.584314][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.586369][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.592295][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.641375][ T6526] team0: Port device team_slave_0 added [ 41.657579][ T6530] hsr_slave_0: entered promiscuous mode [ 41.658137][ T6530] hsr_slave_1: entered promiscuous mode [ 41.658448][ T6530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.658543][ T6530] Cannot create hsr debugfs directory [ 41.673671][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.673780][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.673902][ T6540] bridge_slave_0: entered allmulticast mode [ 41.674836][ T6540] bridge_slave_0: entered promiscuous mode [ 41.677981][ T6526] team0: Port device team_slave_1 added [ 41.699931][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.702242][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.704489][ T6540] bridge_slave_1: entered allmulticast mode [ 41.707152][ T6540] bridge_slave_1: entered promiscuous mode [ 41.730322][ T6527] hsr_slave_0: entered promiscuous mode [ 41.730868][ T6527] hsr_slave_1: entered promiscuous mode [ 41.731171][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.731200][ T6527] Cannot create hsr debugfs directory [ 41.750453][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.750525][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.750563][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.751746][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.751775][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.751820][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.801977][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.825950][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.831766][ T6526] hsr_slave_0: entered promiscuous mode [ 41.833226][ T6526] hsr_slave_1: entered promiscuous mode [ 41.833593][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.833622][ T6526] Cannot create hsr debugfs directory [ 41.897483][ T6540] team0: Port device team_slave_0 added [ 41.920331][ T6540] team0: Port device team_slave_1 added [ 42.007883][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.007954][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.007998][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.009147][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.009173][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.009211][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.105313][ T6540] hsr_slave_0: entered promiscuous mode [ 42.105897][ T6540] hsr_slave_1: entered promiscuous mode [ 42.106221][ T6540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.106251][ T6540] Cannot create hsr debugfs directory [ 42.150086][ T6535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.156389][ T6535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.168321][ T6535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.172691][ T6535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.246354][ T6530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.250250][ T6530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.256403][ T6530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.264877][ T6530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.326920][ T6526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.329364][ T6526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.346307][ T6526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.350148][ T6526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.367397][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.406172][ T6527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.415502][ T6527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.421049][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.426943][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.427119][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.440697][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.442797][ T6527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.447145][ T6527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.459731][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.474673][ T206] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.474771][ T206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.488786][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.488908][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.511476][ T6540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.524238][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.524310][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.534078][ T6540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.538275][ T6540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.543014][ T6540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.597842][ T6535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.628938][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.648008][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.652747][ T6533] Bluetooth: hci4: command tx timeout [ 42.652990][ T6533] Bluetooth: hci2: command tx timeout [ 42.659613][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.672731][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.672821][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.687857][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.687959][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.695423][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.699858][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.699939][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.708038][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.708121][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.732805][ T52] Bluetooth: hci1: command tx timeout [ 42.732913][ T6533] Bluetooth: hci0: command tx timeout [ 42.733001][ T52] Bluetooth: hci3: command tx timeout [ 42.777417][ T6527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.780487][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.830131][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.848032][ T6526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.852044][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.878354][ T6535] veth0_vlan: entered promiscuous mode [ 42.895279][ T6535] veth1_vlan: entered promiscuous mode [ 42.910177][ T6535] veth0_macvtap: entered promiscuous mode [ 42.914457][ T6535] veth1_macvtap: entered promiscuous mode [ 42.931599][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.945625][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.954901][ T6540] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.960463][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.987305][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.987398][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.000317][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.001169][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.001236][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.018453][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.030162][ T6535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.030268][ T6535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.030298][ T6535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.030327][ T6535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.121541][ T6530] veth0_vlan: entered promiscuous mode [ 43.151260][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.151349][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.156422][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.175756][ T6527] veth0_vlan: entered promiscuous mode [ 43.220205][ T6530] veth1_vlan: entered promiscuous mode [ 43.231204][ T6527] veth1_vlan: entered promiscuous mode [ 43.257227][ T4516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.257293][ T4516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.264387][ T6526] veth0_vlan: entered promiscuous mode [ 43.277778][ T6530] veth0_macvtap: entered promiscuous mode [ 43.297919][ T6530] veth1_macvtap: entered promiscuous mode [ 43.313619][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.314930][ T6526] veth1_vlan: entered promiscuous mode [ 43.319492][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.329425][ T6535] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 43.332776][ T6527] veth0_macvtap: entered promiscuous mode [ 43.337724][ T6530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.340286][ T6530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.343368][ T6530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.345881][ T6530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.350760][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.358416][ T6527] veth1_macvtap: entered promiscuous mode [ 43.383270][ T6526] veth0_macvtap: entered promiscuous mode [ 43.386956][ T6526] veth1_macvtap: entered promiscuous mode [ 43.409009][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.412003][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.444839][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.448849][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.474707][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.486165][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.491612][ T6527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.494071][ T6527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.494112][ T6527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.494142][ T6527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.512522][ T6526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.516882][ T6526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.516952][ T6526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.516988][ T6526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.577945][ T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.578018][ T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.639733][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.639823][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.654933][ T6540] veth0_vlan: entered promiscuous mode [ 43.668449][ T6540] veth1_vlan: entered promiscuous mode [ 43.678035][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.678102][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.687646][ T6540] veth0_macvtap: entered promiscuous mode [ 43.700577][ T6540] veth1_macvtap: entered promiscuous mode [ 43.728667][ T4637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.731418][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.731488][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.736437][ T4637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.745191][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.749679][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.761523][ T6540] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767433][ T6540] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767512][ T6540] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767542][ T6540] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.826717][ T4637] Bluetooth: hci5: Frame reassembly failed (-84) [ 43.829485][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.829788][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.849147][ T206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.849209][ T206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.928708][ T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.928772][ T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.941119][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.941427][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.039105][ T4637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.039175][ T4637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.123929][ T6652] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 44.441125][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.441424][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.606080][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.610153][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.742461][ T6533] Bluetooth: hci4: command tx timeout [ 44.744212][ T6096] Bluetooth: hci2: command tx timeout [ 44.809803][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.813161][ T6533] Bluetooth: hci0: command tx timeout [ 44.813228][ T6533] Bluetooth: hci1: command tx timeout [ 44.815416][ T6096] Bluetooth: hci3: command tx timeout [ 44.820600][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.112653][ T6597] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.590031][ T6681] loop4: detected capacity change from 0 to 4096 [ 45.637581][ T6684] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.106710][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 46.202724][ T6681] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 46.215655][ T6681] Remounting filesystem read-only [ 46.306332][ T6597] usb 1-1: Using ep0 maxpacket: 32 [ 46.387875][ T6597] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 46.393213][ T6597] usb 1-1: config 0 has no interface number 0 [ 46.403854][ T6597] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 46.415264][ T6597] usb 1-1: config 0 interface 85 has no altsetting 0 [ 46.459658][ T6688] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 46.510660][ T6597] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 46.516000][ T6597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.526539][ T6597] usb 1-1: Product: syz [ 46.537118][ T6597] usb 1-1: Manufacturer: syz [ 46.542360][ T6597] usb 1-1: SerialNumber: syz [ 46.694768][ T6597] usb 1-1: config 0 descriptor?? [ 46.826314][ T6096] Bluetooth: hci2: command tx timeout [ 46.826399][ T6096] Bluetooth: hci4: command tx timeout [ 47.006746][ T52] Bluetooth: hci1: command tx timeout [ 47.006841][ T52] Bluetooth: hci3: command tx timeout [ 47.006898][ T52] Bluetooth: hci0: command tx timeout [ 48.932376][ T6096] Bluetooth: hci4: command tx timeout [ 48.932460][ T6096] Bluetooth: hci2: command tx timeout [ 49.352358][ T52] Bluetooth: hci0: command tx timeout [ 49.366506][ T52] Bluetooth: hci3: command tx timeout [ 49.376365][ T52] Bluetooth: hci1: command tx timeout [ 49.752588][ T6597] appletouch 1-1:0.85: Failed to read mode from device. [ 49.762462][ T6597] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 49.892895][ T6597] usb 1-1: USB disconnect, device number 2 [ 50.760788][ T6710] @: renamed from vlan0 (while UP) [ 51.267544][ T6724] loop2: detected capacity change from 0 to 4096 [ 51.313502][ T6725] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.379976][ T6724] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 51.387946][ T6724] Remounting filesystem read-only [ 51.701649][ T6729] binder: BINDER_SET_CONTEXT_MGR already set [ 51.708243][ T6729] binder: 6728:6729 ioctl 4018620d 20000040 returned -16 [ 51.722038][ T6729] binder: 6728:6729 got transaction to invalid handle, 1 [ 51.725161][ T6729] binder: 6729:6728 cannot find target node [ 51.731014][ T6729] binder: 6728:6729 transaction async to 0:0 failed 3/29201/-22, code 0 size 112-24 line 3152 [ 51.736085][ T6643] binder: undelivered TRANSACTION_ERROR: 29201 [ 51.985876][ T6733] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.990399][ T6733] netlink: 'syz.2.31': attribute type 12 has an invalid length. [ 51.996542][ T6733] netlink: 'syz.2.31': attribute type 29 has an invalid length. [ 51.999073][ T6733] netlink: 148 bytes leftover after parsing attributes in process `syz.2.31'. [ 52.003142][ T6733] Zero length message leads to an empty skb [ 52.290774][ T6597] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.332075][ C1] sched: DL replenish lagged too much [ 52.540666][ T6597] usb 1-1: Using ep0 maxpacket: 16 [ 52.628153][ T6597] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 52.636206][ T6597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.685678][ T6743] autofs: Unknown parameter '00000000000000000000' [ 52.729560][ T6597] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 52.737497][ T6597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.737525][ T6597] usb 1-1: Product: syz [ 52.737546][ T6597] usb 1-1: Manufacturer: syz [ 52.737567][ T6597] usb 1-1: SerialNumber: syz [ 52.745876][ T6597] usb 1-1: config 0 descriptor?? [ 52.765019][ T6746] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.779227][ T6597] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 52.784221][ T6597] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 53.476825][ T6755] loop3: detected capacity change from 0 to 4096 [ 53.518210][ T6758] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.555651][ T6597] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 53.580094][ T6597] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 54.128218][ T6768] autofs: Unknown parameter '00000000000000000000' [ 54.219661][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.225906][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.236681][ T6597] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 54.500597][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.509020][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.561180][ T6780] @: renamed from vlan0 (while UP) [ 54.625935][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.626233][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.909862][ T6597] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 54.938278][ T6597] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 55.034055][ T6597] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 55.073216][ T6597] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 55.115517][ T6597] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 55.189718][ T6597] usb 1-1: USB disconnect, device number 3 [ 55.329028][ T6794] autofs: Unknown parameter '00000000000000000000' [ 55.511437][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.516074][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.306012][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.313666][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.558842][ T6827] autofs: Unknown parameter '00000000000000000000' [ 56.676475][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.680422][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.845928][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.850632][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.939845][ T6836] netlink: 'syz.1.72': attribute type 12 has an invalid length. [ 56.946944][ T6836] netlink: 'syz.1.72': attribute type 29 has an invalid length. [ 56.949261][ T6836] netlink: 148 bytes leftover after parsing attributes in process `syz.1.72'. [ 57.310047][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.314212][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.594254][ T6851] autofs: Unknown parameter '00000000000000000000' [ 57.689946][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.694059][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.021390][ T6864] netlink: 'syz.1.84': attribute type 12 has an invalid length. [ 58.026084][ T6864] netlink: 'syz.1.84': attribute type 29 has an invalid length. [ 58.029593][ T6864] netlink: 148 bytes leftover after parsing attributes in process `syz.1.84'. [ 58.178825][ T6866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.186626][ T6866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.422430][ T6876] random: crng reseeded on system resumption [ 58.661614][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.661947][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.685749][ T6881] autofs: Unknown parameter '00000000000000000000' [ 58.779974][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 59.081884][ T6898] binder: 6896:6898 tried to acquire reference to desc 0, got 1 instead [ 59.086434][ T6898] binder: 6896:6898 sending u0000000000000003 node 9, cookie mismatch 00000000000000fc != 0000000000000000 [ 59.090564][ T6898] binder: 6898:6896 translate binder failed [ 59.096498][ T6898] binder: 6896:6898 transaction async to 6896:0 failed 14/29201/-22, code 0 size 72-24 line 3480 [ 59.101345][ T10] binder: undelivered TRANSACTION_COMPLETE [ 59.104441][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.131203][ T10] binder: undelivered transaction 8, process died. [ 59.144630][ T6903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.147691][ T6903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.483318][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 59.638542][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.638612][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.638658][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.638700][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.638731][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.664514][ T10] usb 1-1: config 0 descriptor?? [ 59.744576][ T6924] binder: 6923:6924 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 59.750606][ T6924] binder: 6923:6924 got transaction to invalid handle, 1 [ 59.753383][ T6924] binder: 6924:6923 cannot find target node [ 59.755245][ T6924] binder: 6923:6924 transaction async to 0:0 failed 19/29201/-22, code 0 size 112-24 line 3152 [ 59.759546][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.827552][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.830771][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.903052][ T6930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.906157][ T6930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.124492][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 60.124614][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 60.127171][ T6930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.127453][ T6930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.139197][ T10] usb 1-1: USB disconnect, device number 4 [ 60.625519][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.637511][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.804310][ T9] IPVS: starting estimator thread 0... [ 60.892343][ T6960] IPVS: using max 34 ests per chain, 81600 per kthread [ 60.991766][ T6964] binder: 6962:6964 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 61.027451][ T6964] binder: 6962:6964 got transaction to invalid handle, 1 [ 61.027510][ T6964] binder: 6964:6962 cannot find target node [ 61.027542][ T6964] binder: 6962:6964 transaction async to 0:0 failed 22/29201/-22, code 0 size 112-24 line 3152 [ 61.337608][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.348251][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.382451][ T6643] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.533428][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 61.535999][ T6643] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.536066][ T6643] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 61.536110][ T6643] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 61.536141][ T6643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.558680][ T6643] usb 1-1: config 0 descriptor?? [ 62.211992][ T6643] Bluetooth: Can't get version to change to load ram patch err [ 62.213105][ T6643] Bluetooth: Loading sysconfig file failed [ 62.213168][ T6643] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 62.223540][ T6643] usb 1-1: USB disconnect, device number 5 [ 62.791366][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.799700][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.665701][ T7048] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.150'. [ 63.679456][ T7050] binder: 7046:7050 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.679524][ T7050] binder: 7050 RLIMIT_NICE not set [ 63.730008][ T7047] autofs: Unknown parameter 'fd00000000000000000000' [ 63.861923][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.872370][ T7058] binder: 7056:7058 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 63.878287][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.197456][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.197756][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.942291][ T2404] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.952636][ T2404] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.259488][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 66.304427][ T6096] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 76.857184][ T3914] cfg80211: failed to load regulatory.db [ 127.655623][ T2404] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.665280][ T2404] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.469991][ T6536] Bluetooth: hci1: command 0x0406 tx timeout [ 167.475161][ T6536] Bluetooth: hci3: command 0x0406 tx timeout [ 167.498446][ T6536] Bluetooth: hci0: command 0x0406 tx timeout [ 167.503693][ T6536] Bluetooth: hci2: command 0x0406 tx timeout [ 187.607708][ T2404] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.616171][ T2404] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.013424][ T2404] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.030382][ T2404] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.360756][ T32] INFO: task kworker/1:8:6685 blocked for more than 149 seconds. [ 293.369242][ T32] Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 [ 293.377607][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.386207][ T32] task:kworker/1:8 state:D stack:0 pid:6685 tgid:6685 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 293.403579][ T32] Workqueue: events reg_todo [ 293.429454][ T32] Call trace: [ 293.438000][ T32] __switch_to+0x418/0x87c (T) [ 293.446469][ T32] __schedule+0x141c/0x2a14 [ 293.454979][ T32] schedule+0xb4/0x230 [ 293.463479][ T32] schedule_preempt_disabled+0x18/0x2c [ 293.480226][ T32] __mutex_lock_common+0xbd0/0x2190 [ 293.488655][ T32] mutex_lock_nested+0x2c/0x38 [ 293.497136][ T32] reg_process_self_managed_hints+0xc4/0x1c0 [ 293.505881][ T32] reg_todo+0x834/0x968 [ 293.514755][ T32] process_one_work+0x7e8/0x155c [ 293.523162][ T32] worker_thread+0x958/0xed8 [ 293.539845][ T32] kthread+0x5fc/0x75c [ 293.548316][ T32] ret_from_fork+0x10/0x20 [ 293.556761][ T32] [ 293.556761][ T32] Showing all locks held in the system: [ 293.565210][ T32] 1 lock held by kthreadd/2: [ 293.573625][ T32] 1 lock held by kworker/R-kvfre/6: [ 293.582138][ T32] 4 locks held by kworker/0:1/10: [ 293.598849][ T32] #0: ffff0000dc056548 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c