last executing test programs: 6.3961682s ago: executing program 1 (id=300): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b80)=@nat={'nat\x00', 0x19, 0x2, 0x27e, [0x200000000780, 0x0, 0x0, 0x2000000007b0, 0x2000000007e0], 0x0, 0x0, &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x18e, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x0, 0x5, 0x18, 'veth1_virt_wifi\x00', 'veth0\x00', 'veth0\x00', 'ip_vti0\x00', @remote, [0x7f, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, [0x0, 0xff, 0xff, 0x0, 0xff], 0xbe, 0xbe, 0x1ee, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@loopback, [0xffffffff, 0xffffff00, 0xffffff00, 0xf06d13e53c527b98], 0x4e21, 0x6, 0x0, 0x4e23, 0x8, 0x4}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:scanner_device_t:s0\x00'}}}}]}]}, 0x2f6) 6.083241734s ago: executing program 1 (id=302): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000005c0)={0x4, {{0xa, 0x4e21, 0x6, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000030000ff0200000000a4ffffffffffffff0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) 5.949925768s ago: executing program 3 (id=304): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1001400}}}}}, 0x0) 5.731881024s ago: executing program 1 (id=305): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40), 0x0, 0x48100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x24bc, &(0x7f0000000080)={0x0, 0x20000, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000009c0)={0x2020}, 0x2020) r6 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r6}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x79) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000070000000000000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000240000000030900010073797a3000000000140000001100010000000000000000000000000a"], 0x94}}, 0x40880) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010000104000000", @ANYBLOB], 0x58}}, 0x2040000) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) 5.69806269s ago: executing program 3 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x8000000], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 5.471253441s ago: executing program 3 (id=308): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000340)=""/154, 0x9a}], 0x2) r2 = socket(0x22, 0x2, 0x24) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '\x00'}) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r8) sendmmsg$inet(r4, 0x0, 0x0, 0xf00) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6e, 0x39, 0x2b, 0x8, 0x6cd, 0x119, 0xe6d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xfc, 0x2, 0x0, 0xba, 0x70, 0xc3, 0x8}}]}}]}}, 0x0) 4.828177394s ago: executing program 2 (id=311): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0xc663, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@deltaction={0x30, 0x31, 0x14, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2bc}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}]}, 0x30}}, 0x0) unshare(0x62040200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000000000080012c0fffffffa11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r7, 0x40305839, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x7003}, &(0x7f0000000100)=0x54) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000004"], 0x68) unshare(0x8050000) 2.800060025s ago: executing program 2 (id=318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x8848, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0xfe0f0000) 2.508009418s ago: executing program 2 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_MPU={0x8, 0xe, 0x6a}]}}]}, 0x54}, 0x1, 0x0, 0x3000000}, 0x0) 2.29139157s ago: executing program 3 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000002000000030000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2.150454176s ago: executing program 2 (id=321): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x400, 0x300, 0x0, 0x0, 0xa, 0x0, 0xffdd, 0xfffffffd, {0xfffffffc, 0x6b4}, {0x0, 0x2, 0xfffffffc}, {0x3, 0x4000, 0x10002}, {0x9, 0x400, 0x803}, 0x0, 0x3f0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x100, 0x0, 0xffffffff, 0x1, 0x1, 0x200, 0x3}) 1.887535867s ago: executing program 1 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, @void, @value}, 0x11) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="20003300d0000000081011000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x40010c5}, 0x0) 1.814580033s ago: executing program 3 (id=323): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x4}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x47, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3303910daa658744d2d010203010902350001080010000904df0203080662ff09050c022000f0060309050710003e8fc167020102070824", @ANYBLOB="0132b8"], 0x0) 1.742075786s ago: executing program 1 (id=324): r0 = socket$rds(0x15, 0x5, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, '\x00', 0x18}, 0xffff8001}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x15, 0x0, 0x1}]}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x4, 0x24, 0x13, 0x7f}, @mdlm_detail={0x4, 0x24, 0x13, 0xfb}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) 1.679761078s ago: executing program 2 (id=325): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000030801040000000000000000070000070500030084060000340004800800014000000401ec000140000000040800011d0000deff0800014000000597080001400000000908000140000000010500030011"], 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x810) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r1, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000001000)={'raw\x00', 0x0, [0x5, 0x9, 0x100, 0x2800004, 0xfffffffa]}, &(0x7f00000010c0)=0x54) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000001100)={0xe6, 0x3, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x6, 0x7e1, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0xf4, 0xa0, 0x28, 0xff, 0xc45, 0x6280, 0x2ff1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7cf, 0x3, 0x33, 0xe, 0x90, 0x7, [{{0x9, 0x4, 0x92, 0xba, 0x9, 0xf7, 0x58, 0x62, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xe356}, {0xd, 0x24, 0xf, 0x1, 0x1765, 0x4, 0x81, 0x10}, [@ncm={0x6}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x200, 0x7, 0xf7, 0x8001, 0x7}, @mdlm={0x15}, @ncm={0x6, 0x24, 0x1a, 0x3, 0xc}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'V'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xb, 0x0, 0x7a}, [@network_terminal={0x7, 0x24, 0xa, 0xb, 0x8, 0x4, 0xa}, @mdlm_detail={0xce, 0x24, 0x13, 0xd, "03fba45a584af5615f174f51fde7024d12f36b13e6477ced52d6a6925395253005f4cd983480e2caee9ae13046d4ad9b444e682fb528866da83e08e1bbcee4f194b6236c12174eab50617ed8cbd9b2723cd7decd5e3b359ea477154666648f9a8fe0a3fe4d90de3da9d73712e09c95875603212d795e4cae1a2d590accc9d1f47f068ca44c001bd0157ee9fab9e2c1a55587499b1c131d7ecb5e639652b16dbffff8877983bec3150f1310a50656345dc7a6027df3538fd6e652221b49ae58ae2e8a3e145d6270cd78b0"}, @dmm={0x7, 0x24, 0x14, 0x9, 0xfff0}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x3}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0xa}]}], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x2c, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x9}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x3, 0x80, 0x2}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x2, 0x5, 0x9, [@generic={0x11, 0xb, "db4568aeac7969980efbb6a7df7c4e"}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x8, 0x1}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x0, 0x8, 0xb, [@generic={0x66, 0x31, "a7bb20ea4d6abb0a984ccd22c2216e26d1302d33956f000447f12ed56fd525d5843b1879e0508c2fefd0cf40eed049e1470a5a3e731169964b3c539aac26dc7a45f410782694075373f71964e3c7ff2a421af5bc3c0c13f90df9fe2bfe3a8ba2668dc34a"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x7, 0xe1, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0x6, 0x2, [@generic={0xc4, 0x10, "9119c4877121adf5bff7a970c6ade9ebd41b9dfd4dee826646d9686c6058162417717e82d7bb43d2aa6f8ddc94ea27c1463cc08b370b274d8d9af5d42090bad925953917c9fff622dedf181dd3ecfd4788bd81fce6245ede2d15317be4bd19a25a070b39248e13df5bffbbcfa508b0c98a139342aa2c6ab74a777148fea98c80448a2d5e51bdf8a764542b6129871995b1650b19ea89b2019326d02be3276d5bf1dcc7f9e18f05086c25d501bf77cf3c3ca41a6419fe7099418fa62cc00d484b12f2"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x3, 0x5, 0x1, [@generic={0x79, 0xc, "2325a0b1a240d6fdc850d68f812ed91d22f490ea51c998c0134dabc84516439f81bdba489bf99dc8e1514e1163d44c841e1816925e4441244df113892fd13bcc911146e758a2221e3cff7ff9f2a31eb2ec8b2a9a76be516e70fb35de3d0fe6f3a7e110f1c46a6870ead0aa4c6ebcc85eb9cd36b972974a"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x8, 0x4d, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa8, 0xff}, @generic={0x30, 0x22, "b42f73659e16438b5b303c2f0950e3d0ef15bbf0a7325075e398cd9022aac439f7473c66323bc091076860d65af3"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xad, 0x7, 0x9, [@generic={0x26, 0x6, "ebd89e58cb30ea982737ffb453c12a7914a8bba5bac4c87b19aa76eb152936ed9ee44ff4"}]}}]}}, {{0x9, 0x4, 0x3, 0x3, 0xe, 0xe5, 0x64, 0x26, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x8, 0xf9, 0x5}}, {{0x9, 0x5, 0x8b, 0x4, 0x10, 0x5, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6d, 0x2}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x5, 0xff, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x8, 0x0, 0x3, [@generic={0xe1, 0x30, "16d9128a7cdc53c8d9be4986562487358cab9380f61cb52dcc67a3603756bf99e6aecff0906544dd2da62b3efb546ea7dab8be36281c9c0ac727fd784464b4d08d402e1b7424990e36f8481a04ca3f51908ca2141895bd1e53b4173df33bc874bafaba71c48e5a15d89f8b470b3a5f7c2a04756498bab682159fc919442d2cb1985d81ad0a3e0a419200adf9af7ef3ddef5fa0c4cc4967c877488567a37888eb6cfecaf2c14591215a464e66a231e5f8e8ad0e8bd1f5d5267fa4d12d93e239919c71cf3c0d97017ad5a4e26782336f91385751fe3624fca8c3a4a723489f03"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0xa, 0x81, 0x63}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x8, 0x80, 0x6, [@generic={0x22, 0x3, "d5ffb81943d0244fbc917308e8d7a1ab106967bc4563b44401cd5b76833e56f3"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x43, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x2}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x6, 0xc9, 0x81, [@generic={0x62, 0x23, "a0e0fdd5a71ddfec28f55579ba9db79c35dd5aafd901b2369d2d10502a5237570241dc2e859b539100645273c8bf54feb32f635fed021349fc4e82addd0a84d4a158030add560c22043ac62f595bd305052c49a1605539238f5aff6c7e3cea0c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x0, 0xc, 0x6, [@generic={0xc1, 0x9, "8e04c2557361883eac5d73c5bf1314c4e84144b9fdb3e308986bef58f6aa68dedc0c8880b6ebeb8cee42126b5942ff6f0b3588feb87a4dfd600cb79fe72549ae435fdee0df1bd0a9fdbc55a47e2d2dc1b14c42bb37911fc1d0827c296c03ccc3e814c7cb7c5f6727a359e0e2ff86b87af393f02ba3be34b2ede5111bb59caf4f342b6145f64bb5fa3a200cec961a5714c58febf10d85577bf79edf80beb1fdb0f575c99308f4c2640de7b1913cd93ee14da1d7cd3b69d04b8f45f984abefa7"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x2}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0x5, 0x4, 0x5, [@generic={0x5c, 0x22, "78bd0c3f61dd9069abc79a79fef2178c075f6747bd5680baf008af3538849ec6a64831806ee9aeffc91f1b64ecd1d5a11c744b35d06f52db8ec4259acc1181dbfd6fa594d65e504cb6795087c337e1db214c48b6828b2b3911b9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0x40, 0x3}}, {{0x9, 0x5, 0x6, 0x4, 0x0, 0x5, 0x44, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x7, 0x6, 0xf0}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0xb, 0x1, 0x1, [@generic={0x93, 0x23, "91a2fe959718d76e00b1611022bd6649fa6a9b5ea543abb22dc5599d2fd47f6a9854274dcc9b120784a3437aa7da2778a4f7aa324e40d284894cc2126caa7ef1bee4eb29d4fe5e95c9f16b798c789c5b854fc055843525bca40db7d6285f4725cd12c9ef550e9e4544484fc00c79b1b6c1023a95ce4db5e3abc9ab12ef8e82e05d1a0732bf5a206fdfe4a1bb170bc9d896"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xdbe}]}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x2, 0x5b, 0x71, 0x7e, 0x5, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "dbec"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x1, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x6, 0x2, 0x8, 0x2, 0x7, 0x5}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0xff, 0x2, 0xd}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0x11, 0x2, 0x40, 0x3}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x3, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x53, 0x3}]}, 0x6, [{0x9b, &(0x7f0000000a00)=@string={0x9b, 0x3, "a7f7940525d7e728cf472b5e1297c6b9e145bbb7456a342d5f6fe24fb6e2f4fc9f6cee956cc3856c1ea88dde9e27a566b789902196b2302f784829a9ac0744ec543c709a2ca4a385a0c6311232e7f2b5d3f1618870f06a7fe689f2338bea4f047887726134e4dcd4e184b44520804d41dd86105d6a6cdfb0f2e7e8ba63b1c11d646b17089ccf49ed4c5563dfd8bade3f9cb030cf34bc5c5d02"}}, {0x6e, &(0x7f0000000b40)=@string={0x6e, 0x3, "daec1b3fedab9b7b98f73c81121b99e2f279b2f9309f8e51c7374330d21fb723ef8f26f0c0f6568a58687db9f85b4c0f54cc11b74ce60c8886ad8900e7f40b179ad11d004134f43722d05b712c3bfc75108edc2c6b5c7d67850c60f7983f0205216b93e92163f60b7e047a63"}}, {0x44, &(0x7f0000000bc0)=@string={0x44, 0x3, "b61292216804836db01a3ac0b7d7aef34b09a19a3fec6b27d83b17460aaffd08c20f685c44a30b08cab46e689a5750dd6669f21f5f6f4b96dbf9245a18382fe8a207"}}, {0x2a, &(0x7f00000000c0)=@string={0x2a, 0x3, "1482694282491dfbbf893a53b22ef6f807a7e1c7552728bf69a08f21226045848e382defb38a0ef8"}}, {0xc9, &(0x7f0000000c40)=@string={0xc9, 0x3, "41b29c758144c635a0b2998cae063a60dad00024c769dcfc1e977bd4cde7cc5ef13d967a16ce228862578015bd1c01020538a0d0a4c2a3568d46f7d64d9bba9f9d11326f19e3525a0901a3514d0ab1d77e21a627e62c759896063820d56aa04bfcd63a2584992d6f7d6d447682ac085a51d7e9d74ac8b3d3be2c350262d8c2909267fac72e67d1767cb728bcdf090f3e4259fcd750abdfbd0269f1dc2a6d6186d180b05c0d88ec877108ae61582e985327af90023f67483f3cb0a5860ce1a04ab1c22bc9bde84c"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x405}}]}) 1.614944209s ago: executing program 0 (id=326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00"/31, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000100000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 1.52464686s ago: executing program 0 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8018000000001"], 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x7c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) 1.227994478s ago: executing program 4 (id=328): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c04"], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r4, 0x0) copy_file_range(r4, &(0x7f0000000080)=0x204, r3, &(0x7f0000000100)=0x1, 0x206a2e2c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.227452725s ago: executing program 0 (id=329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0xf4ff, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.041397991s ago: executing program 0 (id=330): syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xff, 0x1, 0x0, @private=0xa010104, @local}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}, {@dev}, {@dev={0xac, 0x14, 0x14, 0x1}}, {@rand_addr=0x64010101, 0xe0}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffc00}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) 954.989611ms ago: executing program 2 (id=331): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x169080, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x7fffffff, r0, 0x2}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff110701010009050102"], 0x0) (async) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff110701010009050102"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000002c0)={0x18, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) 884.040924ms ago: executing program 4 (id=332): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x2fa556aaffffffff, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 856.993465ms ago: executing program 0 (id=333): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000, 0xb000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 683.168507ms ago: executing program 4 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, @void, @value}, 0x11) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="20003300d0000000081011000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x40010c5}, 0x0) 467.90281ms ago: executing program 0 (id=335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000007e40), 0x0, 0x0) 460.294173ms ago: executing program 4 (id=336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="90000000100037040000000afcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700feff"], 0x90}}, 0x0) 239.083447ms ago: executing program 4 (id=337): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read(r0, &(0x7f0000000640)=""/4096, 0x1000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r1, &(0x7f0000000040)=[{0xc4, 0x9, 0x0, 0x0, @time={0x7, 0x5}, {}, {}, @raw32={[0x5, 0x71d, 0x5]}}], 0x1c) 115.145635ms ago: executing program 1 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x5, 0x2, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x780, 0x62}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltfilter={0x5c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0xffff}, {0x4, 0xb}, {0xfffc, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x401}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x24, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) 70.641292ms ago: executing program 4 (id=339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) io_setup(0xffff, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x22580, 0x44, 0x3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x4000010) sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f00000001c0)=@xdp={0x2c, 0x8, r5, 0x1e}, 0x80, &(0x7f00000014c0)=[{0xffffffffffffffff}, {&(0x7f0000000240)="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", 0xc00}, {&(0x7f0000001240)="e2c9cbd97096393d4678030613e6fd82b94002b84a7e94c4566c3ebcdd44b195656f1e8f2139e52f7210cdd1d050c0105526b818da4ee2670c5ae7352b1bd1efbe679d6f968e26b4a145c878b1de28d0f2c16d2b5fd825e49197d27444de53da735082", 0x63}, {&(0x7f00000012c0)="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", 0xfc}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="e524b5b42f0da0eb5131b7c64abdb27a500942706c6267550e706937a70406a8d17717b1ec63e83ff9cd3b7c1006d9dc4e285c3cc576493056ad683dd6e757a45c1015f4ce1d88b5dbd43122104ae1905acb37ddf31c27d697831a785fd89eccae381c849bbb2f8f603b5624c11d0533a0b15ddcc7331605647a2ca421fb28da95402da956c8d190255e010de8b08fe0dc64dc55affc62142727338c7e", 0x9d}], 0x6}, 0x4000040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat(r3, &(0x7f00000013c0)='./file1\x00', 0x680602, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/51, 0x33, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x0, 0xfffcff7f}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x200, 0xa}, {0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x100000}, {0x0, 0xfff, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3506, 0x0, 0x2, 0x3}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 3 (id=340): ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000140)=0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setpipe(r0, 0x8, 0xbfc) io_setup(0x8, &(0x7f0000004200)=0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7, r2, &(0x7f0000000480)="77490811eb857ac34adc81919193b1151e82e99542ba1446c133bb5a7bd4bc13bc99d9460088b909c49e08610c44a7d9f070149777774da24b70bf3eeb2e7a1ac9266251c7e86fd6f2061df754da38b8f60600a62568a55b221df33914e4b2c6b07722c6e1c2c28a870249a84c0700a42877b458468bc99c9e28b8ff00"/140, 0x8c, 0x8001, 0x0, 0x0, r2}]) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xfa, &(0x7f0000000200), &(0x7f0000000280)=0x1c) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0xffff, 0x4, 0x9, 0x6}]}) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5435, 0x0) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8) (async) syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0xf958, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)=0x0) (async) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x1, 0x0, r2, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, 0x1000}) r8 = io_uring_setup(0x2189, &(0x7f0000000600)={0x0, 0x52d7, 0x1000, 0x1, 0x1cd}) keyctl$dh_compute(0x17, &(0x7f0000000280), 0xfffffffffffffffd, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={'cbcmac(cast6-generic)\x00'}}) (async) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000240), 0x4) (async) creat(&(0x7f0000000080)='./file0\x00', 0x11c) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090200000000000000000f000000050030000000000008000300", @ANYRES32=r11], 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000000ff30104000000000000004100000000", @ANYRES32=0x0, @ANYBLOB="40040500000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r11, @ANYBLOB], 0x54}}, 0x0) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000700)=0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 82.056689][ T5825] cgroup: Unknown subsys name 'net' [ 82.174773][ T5825] cgroup: Unknown subsys name 'cpuset' [ 82.184096][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.829683][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.508602][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.530409][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.550685][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.561175][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.569006][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.601102][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.609488][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.679879][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.688149][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.696575][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.697012][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.704751][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.719081][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.726251][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.734998][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.742593][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.751121][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.759148][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.766922][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.775132][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.783114][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.810368][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.821034][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.850425][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.861907][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.533858][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 87.657254][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.849205][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.856952][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.864637][ T5852] bridge_slave_0: entered allmulticast mode [ 87.875598][ T5852] bridge_slave_0: entered promiscuous mode [ 87.889530][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.896801][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.904524][ T5852] bridge_slave_1: entered allmulticast mode [ 87.912081][ T5852] bridge_slave_1: entered promiscuous mode [ 87.976602][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 88.022856][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.041027][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.076427][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.084717][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.092766][ T5844] bridge_slave_0: entered allmulticast mode [ 88.100066][ T5844] bridge_slave_0: entered promiscuous mode [ 88.115379][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.122786][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.130028][ T5844] bridge_slave_1: entered allmulticast mode [ 88.137867][ T5844] bridge_slave_1: entered promiscuous mode [ 88.157253][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 88.214445][ T5852] team0: Port device team_slave_0 added [ 88.223396][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 88.273796][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.285590][ T5852] team0: Port device team_slave_1 added [ 88.329185][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.490303][ T5844] team0: Port device team_slave_0 added [ 88.497072][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.505648][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.532294][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.563019][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.571053][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.578280][ T5857] bridge_slave_0: entered allmulticast mode [ 88.586484][ T5857] bridge_slave_0: entered promiscuous mode [ 88.596211][ T5844] team0: Port device team_slave_1 added [ 88.617235][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.624882][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.651341][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.691305][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.698908][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.706844][ T56] Bluetooth: hci0: command tx timeout [ 88.707046][ T5857] bridge_slave_1: entered allmulticast mode [ 88.721098][ T5857] bridge_slave_1: entered promiscuous mode [ 88.781101][ T56] Bluetooth: hci1: command tx timeout [ 88.792247][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.799405][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.807137][ T5855] bridge_slave_0: entered allmulticast mode [ 88.814846][ T5855] bridge_slave_0: entered promiscuous mode [ 88.823443][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.832771][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.839989][ T5855] bridge_slave_1: entered allmulticast mode [ 88.848417][ T5855] bridge_slave_1: entered promiscuous mode [ 88.871041][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.878050][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.904661][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.917657][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.924947][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.951102][ T56] Bluetooth: hci2: command tx timeout [ 88.954763][ T5837] Bluetooth: hci4: command tx timeout [ 88.956782][ T56] Bluetooth: hci3: command tx timeout [ 88.968191][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.023045][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.054766][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.062071][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.069303][ T5853] bridge_slave_0: entered allmulticast mode [ 89.077187][ T5853] bridge_slave_0: entered promiscuous mode [ 89.087623][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.101140][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.132161][ T5852] hsr_slave_0: entered promiscuous mode [ 89.139333][ T5852] hsr_slave_1: entered promiscuous mode [ 89.146793][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.154114][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.161714][ T5853] bridge_slave_1: entered allmulticast mode [ 89.169103][ T5853] bridge_slave_1: entered promiscuous mode [ 89.178567][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.298609][ T5844] hsr_slave_0: entered promiscuous mode [ 89.305249][ T5844] hsr_slave_1: entered promiscuous mode [ 89.312049][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.320342][ T5844] Cannot create hsr debugfs directory [ 89.356258][ T5857] team0: Port device team_slave_0 added [ 89.396199][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.408744][ T5855] team0: Port device team_slave_0 added [ 89.419444][ T5855] team0: Port device team_slave_1 added [ 89.428611][ T5857] team0: Port device team_slave_1 added [ 89.456114][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.574602][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.582837][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.609046][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.622551][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.629517][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.655554][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.678015][ T5853] team0: Port device team_slave_0 added [ 89.688145][ T5853] team0: Port device team_slave_1 added [ 89.695377][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.703014][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.729416][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.743156][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.750696][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.777251][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.922727][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.929723][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.956873][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.969277][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.977068][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.003139][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.114313][ T5857] hsr_slave_0: entered promiscuous mode [ 90.121274][ T5857] hsr_slave_1: entered promiscuous mode [ 90.127447][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.135140][ T5857] Cannot create hsr debugfs directory [ 90.155857][ T5855] hsr_slave_0: entered promiscuous mode [ 90.162399][ T5855] hsr_slave_1: entered promiscuous mode [ 90.168476][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.176295][ T5855] Cannot create hsr debugfs directory [ 90.326625][ T5853] hsr_slave_0: entered promiscuous mode [ 90.333277][ T5853] hsr_slave_1: entered promiscuous mode [ 90.339417][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.347581][ T5853] Cannot create hsr debugfs directory [ 90.536743][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.553540][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.598022][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.638412][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.745459][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.780329][ T56] Bluetooth: hci0: command tx timeout [ 90.806044][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.824094][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.860400][ T56] Bluetooth: hci1: command tx timeout [ 90.864192][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.967346][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.977363][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.011103][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.022217][ T5837] Bluetooth: hci4: command tx timeout [ 91.027666][ T5837] Bluetooth: hci2: command tx timeout [ 91.029057][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.033678][ T56] Bluetooth: hci3: command tx timeout [ 91.179108][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.213154][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.227137][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.239027][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.261662][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.320980][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.336612][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.349430][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.367264][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.377085][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.394291][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.446866][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.454307][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.481592][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.488741][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.577494][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.614749][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.621977][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.654519][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.661740][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.708810][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.778802][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.803825][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.845238][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.852447][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.872181][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.907978][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.946362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.953607][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.968432][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.975665][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.004731][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.033460][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.040714][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.063735][ T975] cfg80211: failed to load regulatory.db [ 92.071035][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.117751][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.188221][ T5852] veth0_vlan: entered promiscuous mode [ 92.219279][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.245101][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.252285][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.278779][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.285975][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.303875][ T5852] veth1_vlan: entered promiscuous mode [ 92.321204][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.357683][ T5844] veth0_vlan: entered promiscuous mode [ 92.388020][ T5844] veth1_vlan: entered promiscuous mode [ 92.475399][ T5852] veth0_macvtap: entered promiscuous mode [ 92.506185][ T5852] veth1_macvtap: entered promiscuous mode [ 92.535965][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.564477][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.588355][ T5855] veth0_vlan: entered promiscuous mode [ 92.606810][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.635557][ T5844] veth0_macvtap: entered promiscuous mode [ 92.651568][ T5855] veth1_vlan: entered promiscuous mode [ 92.658956][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.669264][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.678149][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.687792][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.713370][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.753008][ T5844] veth1_macvtap: entered promiscuous mode [ 92.797100][ T5857] veth0_vlan: entered promiscuous mode [ 92.857664][ T5857] veth1_vlan: entered promiscuous mode [ 92.864137][ T56] Bluetooth: hci0: command tx timeout [ 92.876646][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.889443][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.906047][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.918740][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.933350][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.944889][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.954187][ T56] Bluetooth: hci1: command tx timeout [ 92.961562][ T5855] veth0_macvtap: entered promiscuous mode [ 92.987598][ T5853] veth0_vlan: entered promiscuous mode [ 93.009820][ T5855] veth1_macvtap: entered promiscuous mode [ 93.032918][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.041923][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.050979][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.059715][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.099761][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.112547][ T56] Bluetooth: hci3: command tx timeout [ 93.116165][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.117992][ T5843] Bluetooth: hci4: command tx timeout [ 93.128175][ T5837] Bluetooth: hci2: command tx timeout [ 93.140399][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.151077][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.162980][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.189088][ T5853] veth1_vlan: entered promiscuous mode [ 93.214053][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.225790][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.265262][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.276134][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.286821][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.297652][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.309309][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.355442][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.369132][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.379058][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.389397][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.402955][ T5857] veth0_macvtap: entered promiscuous mode [ 93.431191][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.445464][ T5857] veth1_macvtap: entered promiscuous mode [ 93.451835][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.465527][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.480988][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.525792][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.540068][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.550071][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.561398][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.571631][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.583284][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.595874][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.652042][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.664494][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.674959][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.685833][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.695894][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.706604][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.718998][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.742699][ T5853] veth0_macvtap: entered promiscuous mode [ 93.743567][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.779533][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.783232][ T5853] veth1_macvtap: entered promiscuous mode [ 93.797945][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.815353][ T5857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.825386][ T5857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.838356][ T5857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.847970][ T5857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.923250][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.948441][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.970450][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.984924][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.995034][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.005686][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.016562][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.027225][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.038849][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.055418][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.073428][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.084372][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.096923][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.107077][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.118316][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.128369][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.139440][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.150149][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.160850][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.177327][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.203617][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.214562][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.223628][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.232911][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327692][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.361329][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.400632][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.463075][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.482277][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.594124][ T5896] usb 2-1: config 1 interface 1 has no altsetting 0 [ 94.619310][ T5896] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.683753][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.704495][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.739686][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.760447][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.782998][ T5896] usb 2-1: Product: syz [ 94.811509][ T5896] usb 2-1: Manufacturer: syz [ 94.821623][ T5896] usb 2-1: SerialNumber: syz [ 94.843509][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.879804][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.946246][ T5837] Bluetooth: hci0: command tx timeout [ 95.034411][ T5837] Bluetooth: hci1: command tx timeout [ 95.052607][ T5891] usb 1-1: config 0 has no interfaces? [ 95.069265][ T5891] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 95.079195][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.087945][ T5891] usb 1-1: Product: syz [ 95.096598][ T5891] usb 1-1: Manufacturer: syz [ 95.103911][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.115796][ T5891] usb 1-1: SerialNumber: syz [ 95.143690][ T5891] usb 1-1: config 0 descriptor?? [ 95.174223][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.183102][ T975] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.186981][ T5901] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.192546][ T5837] Bluetooth: hci2: command tx timeout [ 95.202595][ T56] Bluetooth: hci3: command tx timeout [ 95.206726][ T5837] Bluetooth: hci4: command tx timeout [ 95.238893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.250372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.260147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 95.270146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.316180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.385522][ T5908] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.398107][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.418645][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.492269][ T975] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 95.538149][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.585249][ T975] usb 3-1: config 0 descriptor?? [ 96.060653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.069318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.078138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.086967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.095611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.188068][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.601191][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.677103][ T975] usbhid 3-1:0.0: can't add hid device: -71 [ 96.690531][ T975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 96.729296][ T975] usb 3-1: USB disconnect, device number 2 [ 96.944246][ T5897] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.067245][ T5896] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 97.122159][ T5897] usb 4-1: device descriptor read/64, error -71 [ 97.128632][ T5896] usb 2-1: 2:1 : sample bitwidth 232 in over sample bytes 4 [ 97.169189][ T5896] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 97.234627][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 97.282923][ T5896] usb 2-1: USB disconnect, device number 2 [ 97.401659][ T5897] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.741690][ T5897] usb 4-1: device descriptor read/64, error -71 [ 97.749942][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.832813][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.911523][ T5897] usb usb4-port1: attempt power cycle [ 98.087189][ T5891] usb 5-1: config 0 has no interfaces? [ 98.107939][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 98.120458][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.219889][ T5891] usb 5-1: Product: syz [ 98.273467][ T5897] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.284957][ T5893] usb 1-1: USB disconnect, device number 2 [ 98.314759][ T5897] usb 4-1: device descriptor read/8, error -71 [ 98.326074][ T5891] usb 5-1: Manufacturer: syz [ 98.338934][ T5891] usb 5-1: SerialNumber: syz [ 98.487902][ T5891] usb 5-1: config 0 descriptor?? [ 98.580306][ T5897] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.582672][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.751927][ T5897] usb 4-1: device descriptor read/8, error -71 [ 98.864891][ T5897] usb usb4-port1: unable to enumerate USB device [ 98.953090][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.978121][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.387695][ T5948] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13'. [ 99.656780][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.007378][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 100.068555][ T5967] (unnamed net_device) (uninitialized): option mode: invalid value (47) [ 100.471086][ T5911] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.642778][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.689367][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.718593][ T5911] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.11 [ 100.731316][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.770145][ T5911] usb 3-1: SerialNumber: syz [ 100.891117][ T5897] usb 5-1: USB disconnect, device number 2 [ 101.013548][ T5911] usb 3-1: 0:2 : does not exist [ 101.051359][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.4.25'. [ 101.097950][ T5911] usb 3-1: USB disconnect, device number 3 [ 101.294553][ T5974] Zero length message leads to an empty skb [ 101.344281][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.381090][ T5897] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.608890][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.676564][ T5897] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 101.725818][ T5994] mmap: syz.3.22 (5994) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.751623][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.767599][ T5897] usb 5-1: config 0 descriptor?? [ 101.794950][ T5897] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 102.422322][ T6012] batadv0: entered promiscuous mode [ 102.428813][ T6012] batadv_slave_0: entered promiscuous mode [ 102.438294][ T6012] batadv_slave_0: left promiscuous mode [ 102.444287][ T6012] batadv0: left promiscuous mode [ 102.460542][ T5891] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.630378][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 102.646469][ T5891] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 61 [ 102.680197][ T5891] usb 2-1: can't read configurations, error -22 [ 102.816046][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.35'. [ 102.830300][ T5891] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.000200][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 103.028044][ T5891] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 61 [ 103.049462][ T5891] usb 2-1: can't read configurations, error -22 [ 103.071243][ T5891] usb usb2-port1: attempt power cycle [ 103.080270][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 103.106708][ T6025] team_slave_0: entered promiscuous mode [ 103.112742][ T6025] team_slave_1: entered promiscuous mode [ 103.162256][ T6025] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 103.461024][ T5891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.508230][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 103.517622][ T5891] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 61 [ 103.529341][ T5891] usb 2-1: can't read configurations, error -22 [ 103.560231][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.684147][ T5891] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.710418][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.730505][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 103.740879][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 103.772657][ T5891] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 61 [ 103.782535][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.798023][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 103.805884][ T5911] usb 3-1: can't read configurations, error -61 [ 103.813829][ T5891] usb 2-1: can't read configurations, error -22 [ 104.040210][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 104.041378][ T5891] usb usb2-port1: unable to enumerate USB device [ 104.067116][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.094472][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.136617][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.153857][ T5915] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.166424][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.180465][ T5911] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.188167][ T5915] usb 4-1: config 0 descriptor?? [ 104.390226][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 104.398105][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.417319][ T5915] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 104.431280][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 104.466182][ T5911] usb 3-1: can't read configurations, error -61 [ 104.467897][ T5915] microsoft 0003:045E:07DA.0001: unknown main item tag 0x7 [ 104.474967][ T5911] usb usb3-port1: attempt power cycle [ 104.490288][ T5915] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 104.500817][ T5915] microsoft 0003:045E:07DA.0001: reserved main item tag 0xe [ 104.518483][ T5915] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 104.541000][ T5915] microsoft 0003:045E:07DA.0001: parse failed [ 104.557097][ T5915] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 104.830218][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.884289][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 104.897448][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.926136][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 104.960237][ T5911] usb 3-1: can't read configurations, error -61 [ 105.130252][ T5911] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.175138][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 105.192768][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.228022][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 105.270182][ T5911] usb 3-1: can't read configurations, error -61 [ 105.298549][ T5911] usb usb3-port1: unable to enumerate USB device [ 105.412849][ T5911] usb 5-1: USB disconnect, device number 3 [ 105.600227][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.675845][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.50'. [ 105.762965][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.812624][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.893763][ T5897] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 105.927463][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.968878][ T5897] usb 1-1: config 0 descriptor?? [ 106.251850][ T6071] netlink: 'syz.4.53': attribute type 10 has an invalid length. [ 106.264292][ T6071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.53'. [ 106.273918][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 106.307149][ T5897] usbhid 1-1:0.0: can't add hid device: -71 [ 106.314914][ T5897] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.334223][ T5897] usb 1-1: USB disconnect, device number 3 [ 106.449994][ T6071] team0: Port device geneve0 added [ 106.496355][ T5911] usb 4-1: USB disconnect, device number 6 [ 106.890223][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.907626][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.960644][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.981104][ T5911] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.050214][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 107.064313][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 107.096531][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 107.102155][ T5849] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 107.121258][ T5915] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.139182][ T5915] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 107.148980][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 107.152705][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.157814][ T5915] usb 3-1: Product: syz [ 107.169549][ T5915] usb 3-1: Manufacturer: syz [ 107.174623][ T5915] usb 3-1: SerialNumber: syz [ 107.180579][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 107.198540][ T5911] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 107.199678][ T5915] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 107.211035][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.229474][ T5911] usb 4-1: Product: syz [ 107.234862][ T5911] usb 4-1: Manufacturer: syz [ 107.239865][ T5911] usb 4-1: SerialNumber: syz [ 107.257308][ T5911] usb 4-1: config 0 descriptor?? [ 107.282278][ T5849] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 107.291593][ T5849] usb 5-1: config 8 has no interface number 0 [ 107.306344][ T5849] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 107.327102][ T5849] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 107.338085][ T5891] usb 1-1: config 0 has an invalid interface number: 45 but max is 0 [ 107.346875][ T5891] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 107.359493][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.61'. [ 107.359829][ T5891] usb 1-1: config 0 has no interface number 0 [ 107.375103][ T5849] usb 5-1: config 8 interface 177 has no altsetting 0 [ 107.382919][ T5849] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 107.392706][ T5891] usb 1-1: too many endpoints for config 0 interface 45 altsetting 36: 229, using maximum allowed: 30 [ 107.414426][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.442581][ T5891] usb 1-1: config 0 interface 45 altsetting 36 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 107.458997][ T5891] usb 1-1: config 0 interface 45 has no altsetting 0 [ 107.473281][ T5891] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.483048][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.498597][ T5891] usb 1-1: Product: syz [ 107.509775][ T5891] usb 1-1: Manufacturer: syz [ 107.514937][ T5891] usb 1-1: SerialNumber: syz [ 107.583749][ T6089] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 107.606592][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 107.608126][ T5891] usb 1-1: config 0 descriptor?? [ 107.727777][ T6101] team_slave_0: entered promiscuous mode [ 107.733600][ T6101] team_slave_1: entered promiscuous mode [ 107.747111][ T5897] usb 3-1: USB disconnect, device number 8 [ 107.766173][ T5911] usb 4-1: USB disconnect, device number 7 [ 107.773653][ T6101] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 107.840971][ T5897] appletouch 3-1:1.0: input: appletouch disconnected [ 107.959085][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.020170][ T5891] usb 1-1: USB disconnect, device number 4 [ 108.030499][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.153374][ T5849] usb 5-1: string descriptor 0 read error: -71 [ 108.166312][ T5849] ir_toy 5-1:8.177: required endpoints not found [ 108.205764][ T5849] usb 5-1: USB disconnect, device number 4 [ 108.257740][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.371707][ T6109] netlink: 64 bytes leftover after parsing attributes in process `syz.2.66'. [ 108.416602][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.629884][ T6111] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 108.682949][ T6114] batadv0: entered promiscuous mode [ 108.748949][ T6114] batadv_slave_0: entered promiscuous mode [ 108.779406][ T6114] batadv_slave_0: left promiscuous mode [ 108.820448][ T6114] batadv0: left promiscuous mode [ 109.323816][ T6130] input: syz0 as /devices/virtual/input/input6 [ 109.960888][ T5849] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.238385][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 110.249486][ T5849] usb 5-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 110.263512][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.277274][ T5849] usb 5-1: config 0 descriptor?? [ 110.561067][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.572171][ T5895] usb 5-1: USB disconnect, device number 5 [ 110.592114][ T6168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 110.735771][ T5891] usb 2-1: config 0 has no interfaces? [ 110.746046][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 110.756162][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.789956][ T5891] usb 2-1: Product: syz [ 110.841333][ T5891] usb 2-1: Manufacturer: syz [ 110.845975][ T5891] usb 2-1: SerialNumber: syz [ 110.920673][ T5849] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.929213][ T5891] usb 2-1: config 0 descriptor?? [ 111.126501][ T6174] xt_nfacct: accounting object `syz1' does not exists [ 111.139039][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 111.146968][ T5849] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 111.222992][ T6164] input: syz1 as /devices/virtual/input/input7 [ 111.306511][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.325244][ T6178] netlink: 48 bytes leftover after parsing attributes in process `syz.4.89'. [ 111.627504][ T5849] usb 4-1: config 0 has no interface number 0 [ 111.644274][ T5849] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 111.678711][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.736964][ T5849] usb 4-1: config 0 descriptor?? [ 111.748297][ T5849] usb 4-1: Found UVC 0.00 device (0bd3:0555) [ 111.756042][ T5849] usb 4-1: No valid video chain found. [ 112.037930][ T5915] usb 4-1: USB disconnect, device number 8 [ 112.150347][ T5849] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.402704][ T5849] usb 5-1: config 0 has no interfaces? [ 112.411853][ T5849] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 112.424379][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.442917][ T5849] usb 5-1: Product: syz [ 112.450638][ T5849] usb 5-1: Manufacturer: syz [ 112.464634][ T5849] usb 5-1: SerialNumber: syz [ 112.492406][ T5849] usb 5-1: config 0 descriptor?? [ 112.745134][ T6182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.90'. [ 112.804224][ T6182] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.813351][ T6182] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.822193][ T6182] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.830971][ T6182] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.010189][ T5849] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.430230][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.745246][ T5915] usb 2-1: USB disconnect, device number 7 [ 113.952404][ T6200] delete_channel: no stack [ 114.042412][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.052527][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.065801][ T5849] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 114.097084][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.491026][ T5849] usb 3-1: config 0 descriptor?? [ 114.551149][ T5915] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.753326][ T5897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.899518][ T5911] usb 5-1: USB disconnect, device number 6 [ 114.985549][ T5897] usb 1-1: device descriptor read/64, error -71 [ 114.995741][ T5849] usbhid 3-1:0.0: can't add hid device: -71 [ 115.010568][ T5849] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 115.030423][ T5849] usb 3-1: USB disconnect, device number 9 [ 115.120452][ T5915] usb 2-1: config 0 has no interfaces? [ 115.163805][ T5915] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 115.223139][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.261308][ T5915] usb 2-1: Product: syz [ 115.277978][ T5915] usb 2-1: Manufacturer: syz [ 115.282882][ T5897] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.299777][ T5915] usb 2-1: SerialNumber: syz [ 115.331031][ T5915] usb 2-1: config 0 descriptor?? [ 115.414071][ T48] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.442902][ T5897] usb 1-1: device descriptor read/64, error -71 [ 115.571225][ T5897] usb usb1-port1: attempt power cycle [ 115.638348][ T48] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.742858][ T48] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 115.793976][ T48] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 115.935656][ T48] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.956763][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.004864][ T48] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.012223][ T5897] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.134461][ T5897] usb 1-1: device descriptor read/8, error -71 [ 116.196063][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 116.259582][ T6210] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.281827][ T6218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.100'. [ 116.296314][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 116.321612][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.368380][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.446242][ T5897] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.551191][ T5897] usb 1-1: device descriptor read/8, error -71 [ 116.602205][ T48] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 116.699160][ T5897] usb usb1-port1: unable to enumerate USB device [ 116.802104][ T5849] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.939047][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.072641][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 117.097785][ T5849] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 117.148105][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.245693][ T5849] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 117.295584][ T5849] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 117.349013][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.398172][ T5849] usb 5-1: config 0 descriptor?? [ 117.611424][ T5849] usb 5-1: USB disconnect, device number 7 [ 117.637950][ T5897] usb 2-1: USB disconnect, device number 8 [ 117.839850][ T6241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.111'. [ 117.944306][ T6245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.112'. [ 117.997008][ T6243] netlink: 56 bytes leftover after parsing attributes in process `syz.2.113'. [ 118.019711][ T6243] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 118.459839][ T5911] usb 4-1: USB disconnect, device number 9 [ 118.501071][ T6252] xt_nfacct: accounting object `syz1' does not exists [ 118.582125][ T5897] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 118.810761][ T5897] usb 1-1: config 0 has no interfaces? [ 118.822563][ T5897] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 118.842195][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.874893][ T5897] usb 1-1: Product: syz [ 118.879171][ T5897] usb 1-1: Manufacturer: syz [ 118.905095][ T5897] usb 1-1: SerialNumber: syz [ 118.931464][ T5897] usb 1-1: config 0 descriptor?? [ 119.022107][ T5837] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 119.031525][ T5837] Bluetooth: hci3: Injecting HCI hardware error event [ 119.039710][ T5837] Bluetooth: hci3: hardware error 0x00 [ 120.090252][ T5836] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 120.166246][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 120.232238][ T6288] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 120.302707][ T6291] netlink: 76 bytes leftover after parsing attributes in process `syz.4.127'. [ 120.322103][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 120.340724][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.354380][ T5836] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.373511][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.416231][ T5836] usb 3-1: config 0 descriptor?? [ 120.677694][ T5836] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 120.702789][ T6296] vlan2: entered allmulticast mode [ 120.708800][ T6296] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 120.916991][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 120.930637][ T5849] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 121.187568][ T5849] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 121.208963][ T5849] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 121.243105][ T5849] usb 5-1: config 0 has no interface number 0 [ 121.267359][ T5837] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 121.280937][ T5849] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.296068][ T5849] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 8 [ 121.309295][ T5849] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 121.319467][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.334817][ T5849] usb 5-1: config 0 descriptor?? [ 121.355793][ T6291] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 121.520192][ T5895] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 121.720857][ T5891] usb 1-1: USB disconnect, device number 9 [ 121.728263][ T5895] usb 4-1: device descriptor read/64, error -71 [ 121.813419][ T5849] usb 5-1: USB disconnect, device number 8 [ 122.012867][ T5895] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 122.360242][ T5895] usb 4-1: device descriptor read/64, error -71 [ 122.578839][ T5895] usb usb4-port1: attempt power cycle [ 122.950300][ T5895] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 122.972275][ T5895] usb 4-1: device descriptor read/8, error -71 [ 123.272305][ T5895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 123.306310][ T5849] usb 3-1: USB disconnect, device number 10 [ 123.400323][ T5895] usb 4-1: device descriptor read/8, error -71 [ 123.510665][ T5895] usb usb4-port1: unable to enumerate USB device [ 123.522547][ T6328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.140'. [ 123.856913][ T6336] xt_socket: unknown flags 0xd0 [ 123.890259][ T5849] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 124.040671][ T5897] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.084288][ T5849] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 124.096128][ T5849] usb 3-1: config 0 has no interface number 0 [ 124.116044][ T5849] usb 3-1: config 0 interface 29 has no altsetting 0 [ 124.134799][ T5849] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 124.159297][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.168530][ T5849] usb 3-1: Product: syz [ 124.173075][ T5849] usb 3-1: Manufacturer: syz [ 124.188556][ T5849] usb 3-1: SerialNumber: syz [ 124.210452][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 124.211029][ T5849] usb 3-1: config 0 descriptor?? [ 124.237167][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.265147][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.308910][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.338350][ T5897] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 124.370430][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.386475][ T5897] usb 2-1: config 0 descriptor?? [ 124.463431][ T5849] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 124.665416][ T5849] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 124.673021][ T5849] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 124.681722][ T5849] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 124.741249][ T5849] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -22 [ 124.803324][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.813272][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.875939][ T5911] usb 3-1: USB disconnect, device number 11 [ 125.051432][ T5915] usb 2-1: USB disconnect, device number 9 [ 125.355813][ T6355] FAULT_INJECTION: forcing a failure. [ 125.355813][ T6355] name failslab, interval 1, probability 0, space 0, times 1 [ 125.368724][ T6355] CPU: 0 UID: 0 PID: 6355 Comm: syz.4.150 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 125.368744][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.368757][ T6355] Call Trace: [ 125.368763][ T6355] [ 125.368769][ T6355] dump_stack_lvl+0x241/0x360 [ 125.368806][ T6355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.368828][ T6355] ? __pfx__printk+0x10/0x10 [ 125.368852][ T6355] ? __pfx___might_resched+0x10/0x10 [ 125.368876][ T6355] should_fail_ex+0x424/0x570 [ 125.368895][ T6355] should_failslab+0xac/0x100 [ 125.368917][ T6355] __kmalloc_noprof+0xdf/0x4d0 [ 125.368939][ T6355] ? fuse_dev_do_write+0x1fd2/0x5900 [ 125.368959][ T6355] fuse_dev_do_write+0x1fd2/0x5900 [ 125.368989][ T6355] ? rcu_is_watching+0x15/0xb0 [ 125.369011][ T6355] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 125.369029][ T6355] ? check_path+0x21/0x40 [ 125.369049][ T6355] ? check_noncircular+0xee/0x160 [ 125.369082][ T6355] ? lockdep_unlock+0x8d/0x120 [ 125.369102][ T6355] ? validate_chain+0x8a7/0x24e0 [ 125.369147][ T6355] ? __lock_acquire+0xad5/0xd80 [ 125.369176][ T6355] ? aa_file_perm+0x139/0xf60 [ 125.369199][ T6355] ? aa_file_perm+0x139/0xf60 [ 125.369221][ T6355] ? aa_file_perm+0x3f1/0xf60 [ 125.369248][ T6355] ? __lock_acquire+0xad5/0xd80 [ 125.369263][ T6355] ? __pfx_aa_file_perm+0x10/0x10 [ 125.369300][ T6355] fuse_dev_write+0x179/0x220 [ 125.369314][ T6355] ? __pfx_fuse_dev_write+0x10/0x10 [ 125.369328][ T6355] ? end_current_label_crit_section+0x151/0x180 [ 125.369362][ T6355] ? bpf_lsm_file_permission+0x9/0x10 [ 125.369385][ T6355] vfs_write+0x70f/0xd10 [ 125.369407][ T6355] ? __pfx_fuse_dev_write+0x10/0x10 [ 125.369422][ T6355] ? __pfx_vfs_write+0x10/0x10 [ 125.369441][ T6355] ? __fget_files+0x2a/0x420 [ 125.369457][ T6355] ? __fget_files+0x2a/0x420 [ 125.369476][ T6355] ksys_write+0x19d/0x2d0 [ 125.369494][ T6355] ? __pfx_ksys_write+0x10/0x10 [ 125.369516][ T6355] ? do_syscall_64+0xb6/0x230 [ 125.369536][ T6355] do_syscall_64+0xf3/0x230 [ 125.369555][ T6355] ? clear_bhb_loop+0x45/0xa0 [ 125.369572][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.369592][ T6355] RIP: 0033:0x7f9f56b8d169 [ 125.369627][ T6355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.369638][ T6355] RSP: 002b:00007f9f549d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.369659][ T6355] RAX: ffffffffffffffda RBX: 00007f9f56da6080 RCX: 00007f9f56b8d169 [ 125.369670][ T6355] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 125.369679][ T6355] RBP: 00007f9f549d5090 R08: 0000000000000000 R09: 0000000000000000 [ 125.369687][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.369696][ T6355] R13: 0000000000000000 R14: 00007f9f56da6080 R15: 00007f9f56ecfa28 [ 125.369717][ T6355] [ 125.651496][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b2d0000: rx timeout, send abort [ 125.661458][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b2d0000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.018980][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 126.379065][ T6374] netlink: 48 bytes leftover after parsing attributes in process `syz.4.158'. [ 126.930370][ T5849] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.539924][ T5849] usb 2-1: config 0 has no interfaces? [ 127.724832][ T5849] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 127.734114][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.743230][ T5849] usb 2-1: Product: syz [ 127.748826][ T5849] usb 2-1: Manufacturer: syz [ 127.754095][ T5849] usb 2-1: SerialNumber: syz [ 127.761209][ T5849] usb 2-1: config 0 descriptor?? [ 127.814461][ T6402] xt_nfacct: accounting object `syz1' does not exists [ 127.934169][ T5897] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.140262][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 128.142716][ T5897] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 128.142745][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.142765][ T5897] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 128.142803][ T5897] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 128.142827][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.145943][ T5897] usb 5-1: config 0 descriptor?? [ 128.435778][ T6414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 128.616943][ T5897] usb 5-1: USB disconnect, device number 9 [ 128.740529][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 128.759228][ T6425] team_slave_0: entered promiscuous mode [ 128.765442][ T6425] team_slave_1: entered promiscuous mode [ 128.777624][ T6425] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 128.790237][ T5895] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 128.897413][ T6427] vlan2: entered allmulticast mode [ 128.910164][ T6427] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 128.954032][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.969983][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.984430][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.998261][ T5895] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.010211][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.025865][ T5895] usb 4-1: config 0 descriptor?? [ 129.213572][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 129.300270][ T5836] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.449840][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.485516][ T5836] usb 3-1: config 0 has no interfaces? [ 129.495371][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.514242][ T5836] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 129.558235][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.559127][ T5849] usb 2-1: USB disconnect, device number 10 [ 129.577279][ T5836] usb 3-1: Product: syz [ 129.607795][ T5836] usb 3-1: Manufacturer: syz [ 129.622034][ T5836] usb 3-1: SerialNumber: syz [ 129.670670][ T6416] vlan2: entered allmulticast mode [ 129.672248][ T5836] usb 3-1: config 0 descriptor?? [ 129.740318][ T6416] hsr0: entered allmulticast mode [ 129.780333][ T6416] hsr_slave_0: entered allmulticast mode [ 129.802214][ T6416] hsr_slave_1: entered allmulticast mode [ 130.003423][ T5915] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.077556][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 130.098978][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.144440][ T5895] usb 4-1: USB disconnect, device number 14 [ 130.186007][ T5915] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 130.212677][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.241370][ T5915] usb 1-1: Product: syz [ 130.254910][ T5915] usb 1-1: Manufacturer: syz [ 130.274865][ T30] audit: type=1800 audit(1744331713.025:2): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.189" name="file1" dev="tmpfs" ino=177 res=0 errno=0 [ 130.295558][ T5915] usb 1-1: SerialNumber: syz [ 130.307832][ T6452] debugfs: Directory '!' with parent 'ieee80211' already present! [ 130.325027][ T5915] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 130.365064][ T5836] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 130.805912][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.849122][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.918919][ T6462] process 'syz.4.193' launched '/dev/fd/3' with NULL argv: empty string added [ 131.238084][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.270403][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.297562][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.396868][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.421920][ T5836] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 131.429789][ T5836] ath9k_htc: Failed to initialize the device [ 131.439568][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.471235][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 131.479698][ T5897] usb 5-1: config 143 has too many interfaces: 181, using maximum allowed: 32 [ 131.498221][ T5836] usb 1-1: ath9k_htc: USB layer deinitialized [ 131.510344][ T5897] usb 5-1: config 143 has 1 interface, different from the descriptor's value: 181 [ 131.536204][ T5897] usb 5-1: config 143 has no interface number 0 [ 131.547092][ T5897] usb 5-1: config 143 interface 8 altsetting 0 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 131.570910][ T5897] usb 5-1: config 143 interface 8 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 131.607713][ T5897] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 131.617425][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 131.639457][ T5897] usb 5-1: Product: syz [ 131.649788][ T5897] usb 5-1: SerialNumber: syz [ 131.805810][ T5849] usb 1-1: USB disconnect, device number 10 [ 131.887504][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 131.958380][ T5915] usb 3-1: USB disconnect, device number 12 [ 132.093207][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.110853][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.247218][ T6497] xt_socket: unknown flags 0xd0 [ 132.257074][ T6494] delete_channel: no stack [ 132.279294][ T5897] cm109 5-1:143.8: invalid payload size 92, expected 4 [ 132.312816][ T5897] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:143.8/input/input12 [ 132.335127][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.343787][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.351330][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.358881][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.366292][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.373662][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.381955][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.389328][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.396812][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.404238][ C1] cm109 5-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 132.481012][ T5897] usb 5-1: USB disconnect, device number 10 [ 132.487037][ C1] cm109 5-1:143.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 132.555100][ T5897] cm109 5-1:143.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 132.730310][ T5895] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 132.906397][ T5895] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.933239][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.964369][ T5895] usb 3-1: config 0 descriptor?? [ 132.988694][ T5895] cp210x 3-1:0.0: cp210x converter detected [ 133.039824][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.050260][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.190872][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 133.205977][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.238414][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.279969][ T6526] ip6tnl1: entered allmulticast mode [ 133.303819][ T6524] FAULT_INJECTION: forcing a failure. [ 133.303819][ T6524] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.320410][ T6524] CPU: 1 UID: 0 PID: 6524 Comm: syz.4.213 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 133.320440][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.320453][ T6524] Call Trace: [ 133.320462][ T6524] [ 133.320471][ T6524] dump_stack_lvl+0x241/0x360 [ 133.320507][ T6524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.320532][ T6524] ? __pfx__printk+0x10/0x10 [ 133.320564][ T6524] should_fail_ex+0x424/0x570 [ 133.320589][ T6524] _copy_to_user+0x31/0xb0 [ 133.320618][ T6524] simple_read_from_buffer+0xc4/0x170 [ 133.320646][ T6524] proc_fail_nth_read+0x1ef/0x260 [ 133.320666][ T6524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.320686][ T6524] ? rw_verify_area+0x246/0x630 [ 133.320704][ T6524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.320726][ T6524] vfs_read+0x21f/0xb90 [ 133.320755][ T6524] ? __pfx___mutex_lock+0x10/0x10 [ 133.320778][ T6524] ? __pfx_vfs_read+0x10/0x10 [ 133.320799][ T6524] ? __fget_files+0x2a/0x420 [ 133.320816][ T6524] ? __fget_files+0x39d/0x420 [ 133.320829][ T6524] ? __fget_files+0x2a/0x420 [ 133.320852][ T6524] ksys_read+0x19d/0x2d0 [ 133.320874][ T6524] ? __pfx_ksys_read+0x10/0x10 [ 133.320902][ T6524] ? do_syscall_64+0xb6/0x230 [ 133.320925][ T6524] do_syscall_64+0xf3/0x230 [ 133.320946][ T6524] ? clear_bhb_loop+0x45/0xa0 [ 133.320973][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.320990][ T6524] RIP: 0033:0x7f9f56b8bb7c [ 133.321004][ T6524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.321021][ T6524] RSP: 002b:00007f9f549d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.321041][ T6524] RAX: ffffffffffffffda RBX: 00007f9f56da6080 RCX: 00007f9f56b8bb7c [ 133.321053][ T6524] RDX: 000000000000000f RSI: 00007f9f549d50a0 RDI: 0000000000000005 [ 133.321063][ T6524] RBP: 00007f9f549d5090 R08: 0000000000000000 R09: 0000000000000000 [ 133.321074][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.321083][ T6524] R13: 0000000000000000 R14: 00007f9f56da6080 R15: 00007f9f56ecfa28 [ 133.321108][ T6524] [ 133.571495][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.590501][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.620684][ T6531] netlink: 'syz.2.204': attribute type 13 has an invalid length. [ 133.648805][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 133.767478][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 134.101186][ T6531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.111230][ T6545] netlink: 48 bytes leftover after parsing attributes in process `syz.3.219'. [ 134.133351][ T5897] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 134.306183][ T5895] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 134.320325][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 134.344789][ T5897] usb 5-1: config 0 has an invalid interface number: 149 but max is 0 [ 134.374488][ T5897] usb 5-1: config 0 has no interface number 0 [ 134.403031][ T5897] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 134.440574][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.472902][ T5897] usb 5-1: Product: syz [ 134.477337][ T5897] usb 5-1: Manufacturer: syz [ 134.503230][ T5897] usb 5-1: SerialNumber: syz [ 134.521733][ T5897] usb 5-1: config 0 descriptor?? [ 134.576468][ T5895] usb 3-1: cp210x converter now attached to ttyUSB0 [ 134.643415][ T6558] batadv0: entered promiscuous mode [ 134.651660][ T6558] batadv_slave_0: entered promiscuous mode [ 134.658407][ T6558] batadv_slave_0: left promiscuous mode [ 134.677759][ T6558] batadv0: left promiscuous mode [ 134.736633][ T48] usb 3-1: USB disconnect, device number 13 [ 134.755721][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 134.755800][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.797120][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.819250][ T48] cp210x 3-1:0.0: device disconnected [ 134.853456][ T5897] peak_usb 5-1:0.149 can0: unable to request usb[type=0 value=1] err=-71 [ 134.862163][ T5915] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 134.879262][ T5897] peak_usb 5-1:0.149: unable to read PCAN-Chip USB firmware info (err -71) [ 134.910513][ T5895] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 134.961641][ T5897] peak_usb 5-1:0.149: probe with driver peak_usb failed with error -71 [ 134.982767][ T5897] usb 5-1: USB disconnect, device number 11 [ 135.052007][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.065526][ T5895] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 135.083267][ T5895] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 135.093185][ T5895] usb 1-1: config 0 has no interface number 0 [ 135.099342][ T5895] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.100202][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.128356][ T5895] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 135.140040][ T5895] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.141766][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.155848][ T5895] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 135.180389][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.204071][ T5895] usb 1-1: config 0 descriptor?? [ 135.206625][ T5915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.230238][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.251473][ T5915] usb 2-1: config 0 descriptor?? [ 135.669865][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.701838][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.771368][ T6560] vlan2: entered allmulticast mode [ 135.816297][ T6560] hsr0: entered allmulticast mode [ 135.831440][ T6560] hsr_slave_0: entered allmulticast mode [ 135.846747][ T5895] usb 1-1: USB disconnect, device number 11 [ 135.856949][ T6560] hsr_slave_1: entered allmulticast mode [ 135.928516][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.234'. [ 136.034569][ T5915] usbhid 2-1:0.0: can't add hid device: -71 [ 136.043346][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 136.063835][ T5915] usb 2-1: USB disconnect, device number 11 [ 136.173872][ T6591] xt_nfacct: accounting object `syz1' does not exists [ 136.479563][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 136.660708][ T5891] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 136.734630][ T6613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.245'. [ 136.828101][ T5891] usb 5-1: config 0 has no interfaces? [ 136.850987][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 136.870272][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.884632][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 136.886873][ T6619] netlink: 56 bytes leftover after parsing attributes in process `syz.0.244'. [ 136.896420][ T5891] usb 5-1: Product: syz [ 136.912560][ T5891] usb 5-1: Manufacturer: syz [ 136.926849][ T5891] usb 5-1: SerialNumber: syz [ 136.942823][ T5891] usb 5-1: config 0 descriptor?? [ 136.980252][ T5911] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.150704][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 137.163114][ T6603] veth0: entered promiscuous mode [ 137.173117][ T5911] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 137.186304][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.204891][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 137.214647][ T5911] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 137.225675][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.241883][ T5911] usb 2-1: config 0 descriptor?? [ 137.320310][ T5897] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 137.456737][ T5891] usb 2-1: USB disconnect, device number 12 [ 137.491365][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 137.502893][ T5897] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.516470][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.529247][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.552999][ T5897] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.581502][ T5897] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.591026][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.716944][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.250'. [ 137.818055][ T5897] usb 4-1: GET_CAPABILITIES returned 0 [ 137.826057][ T5897] usbtmc 4-1:16.0: can't read capabilities [ 138.051350][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.082710][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.122452][ T6624] syzkaller1: entered promiscuous mode [ 138.134846][ T6624] syzkaller1: entered allmulticast mode [ 138.170387][ T5891] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 138.348183][ T5891] usb 3-1: config 0 has no interfaces? [ 138.369723][ T5891] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 138.369759][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.369782][ T5891] usb 3-1: Product: syz [ 138.369799][ T5891] usb 3-1: Manufacturer: syz [ 138.369816][ T5891] usb 3-1: SerialNumber: syz [ 138.476374][ T5891] usb 3-1: config 0 descriptor?? [ 138.520269][ T5891] usb 4-1: USB disconnect, device number 15 [ 139.388323][ T6603] veth0: left promiscuous mode [ 139.415990][ T5891] usb 5-1: USB disconnect, device number 12 [ 139.435957][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.257'. [ 139.807441][ T6664] netlink: 72 bytes leftover after parsing attributes in process `syz.3.263'. [ 139.827765][ T6664] vti0: entered promiscuous mode [ 139.850247][ T5849] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 139.988226][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 140.010991][ T5849] usb 1-1: device descriptor read/64, error -71 [ 140.250594][ T5849] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.391926][ T5849] usb 1-1: device descriptor read/64, error -71 [ 140.469253][ T6688] xt_socket: unknown flags 0xd0 [ 140.477889][ T6689] netlink: 'syz.1.272': attribute type 72 has an invalid length. [ 140.486890][ T6689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.272'. [ 140.520787][ T5849] usb usb1-port1: attempt power cycle [ 140.638582][ T6694] netlink: 64 bytes leftover after parsing attributes in process `syz.1.275'. [ 140.801168][ T6700] netlink: 48 bytes leftover after parsing attributes in process `syz.4.276'. [ 140.818859][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 140.870347][ T5849] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.874293][ T5915] usb 3-1: USB disconnect, device number 14 [ 140.939752][ T5849] usb 1-1: device descriptor read/8, error -71 [ 141.030199][ T5911] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 141.176729][ T5911] usb 4-1: device descriptor read/64, error -71 [ 141.191375][ T5849] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 141.222256][ T5849] usb 1-1: device descriptor read/8, error -71 [ 141.360662][ T5849] usb usb1-port1: unable to enumerate USB device [ 141.403484][ T6721] netlink: 'syz.2.285': attribute type 72 has an invalid length. [ 141.412358][ T6721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.285'. [ 141.424474][ T5911] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 141.560196][ T5911] usb 4-1: device descriptor read/64, error -71 [ 141.690517][ T5911] usb usb4-port1: attempt power cycle [ 142.051265][ T5911] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 142.102081][ T6739] netlink: 48 bytes leftover after parsing attributes in process `syz.2.292'. [ 142.154553][ T5911] usb 4-1: device descriptor read/8, error -71 [ 142.400773][ T5897] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.403461][ T5911] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 142.420874][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.296'. [ 142.502880][ T5911] usb 4-1: device descriptor read/8, error -71 [ 142.597836][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 142.638780][ T5911] usb usb4-port1: unable to enumerate USB device [ 142.732512][ T5897] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 142.772841][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.946140][ T5897] usb 5-1: config 0 has no interface number 0 [ 142.975691][ T5897] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 143.018507][ T6758] netlink: 'syz.1.297': attribute type 72 has an invalid length. [ 143.032400][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.080853][ T5897] usb 5-1: config 0 descriptor?? [ 143.123782][ T5897] usb 5-1: Found UVC 0.00 device (0bd3:0555) [ 143.180554][ T5897] usb 5-1: No valid video chain found. [ 143.278567][ T6760] capability: warning: `syz.0.299' uses 32-bit capabilities (legacy support in use) [ 143.320706][ T5897] usb 5-1: USB disconnect, device number 13 [ 144.010273][ T5897] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 144.111338][ T6776] xt_nfacct: accounting object `syz1' does not exists [ 144.254766][ T5897] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 144.278769][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.320422][ T5915] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.337054][ T5897] usb 1-1: config 0 descriptor?? [ 144.490249][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 144.716506][ T6783] delete_channel: no stack [ 144.842556][ T5897] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 144.860498][ T5915] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 144.869045][ T5897] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 144.879385][ T5915] usb 2-1: config 179 has no interface number 0 [ 144.889545][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 144.904441][ T6786] __nla_validate_parse: 1 callbacks suppressed [ 144.904462][ T6786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.310'. [ 145.011466][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 145.020752][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 145.050396][ T5911] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 145.095041][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.172732][ T5897] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 145.244988][ T5911] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.256917][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 145.258704][ T5911] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.267280][ T5897] [drm] Initialized udl on minor 2 [ 145.274996][ T5897] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 145.301921][ T5911] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.317868][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.337208][ T6783] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 145.345249][ T5915] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 145.350001][ T5911] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.363286][ T5897] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 145.396834][ T5915] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 145.489167][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.516121][ T5896] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 145.530393][ T5897] usb 1-1: USB disconnect, device number 16 [ 145.561681][ T5896] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 145.725287][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.761461][ T6772] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.773633][ T6796] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 145.781815][ T6796] vlan2: entered promiscuous mode [ 145.787942][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.817227][ T5915] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 146.300631][ T6772] netlink: 56 bytes leftover after parsing attributes in process `syz.1.305'. [ 146.460679][ T5897] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 146.650363][ T5897] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.667733][ T5897] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.698629][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.705660][ T5911] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 146.720290][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.765724][ T6801] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 146.780789][ T5897] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.882645][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 146.937621][ T5911] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 146.974667][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.093686][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.122638][ T5911] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 147.147788][ T5911] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 147.173962][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.194568][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.208198][ T5911] usb 1-1: config 0 descriptor?? [ 147.338381][ T5897] usb 4-1: USB disconnect, device number 20 [ 147.377924][ T6801] bond_slave_0: entered promiscuous mode [ 147.383859][ T6801] bond_slave_1: entered promiscuous mode [ 147.422302][ T6801] bond_slave_0: left promiscuous mode [ 147.427855][ T6801] bond_slave_1: left promiscuous mode [ 147.449980][ T5849] usb 1-1: USB disconnect, device number 17 [ 147.598768][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 147.648382][ T5911] usb 5-1: USB disconnect, device number 14 [ 147.669988][ T5897] usb 2-1: USB disconnect, device number 13 [ 147.725398][ T6819] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 147.845545][ T6822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.322'. [ 147.975868][ T6826] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma? [ 148.028435][ T6828] capability: warning: `syz.2.325' uses deprecated v2 capabilities in a way that may be insecure [ 148.190778][ T5891] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 148.250232][ T5911] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 148.360447][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 148.369510][ T5891] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 148.388564][ T5891] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 148.430285][ T5891] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 148.461683][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.473366][ T5891] usb 4-1: config 8 has no interface number 0 [ 148.479537][ T5891] usb 4-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 148.506371][ T6835] fuse: Unknown parameter '' [ 148.512315][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.530232][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.538464][ T5891] usb 4-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 148.560161][ T5911] usb 2-1: Product: syz [ 148.564407][ T5911] usb 2-1: Manufacturer: syz [ 148.569037][ T5911] usb 2-1: SerialNumber: syz [ 148.574469][ T5891] usb 4-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.630207][ T5891] usb 4-1: config 8 interface 223 has no altsetting 0 [ 148.639471][ T5911] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 148.680588][ T5911] cdc_ncm 2-1:1.0: bind() failure [ 148.688442][ T5891] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 148.700298][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.708370][ T5891] usb 4-1: Product: syz [ 148.735300][ T5911] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 148.763408][ T5891] usb 4-1: Manufacturer: syz [ 148.768113][ T5891] usb 4-1: SerialNumber: syz [ 148.774170][ T5911] cdc_ncm 2-1:1.1: bind() failure [ 148.814021][ T6824] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.850784][ T5849] usb 2-1: USB disconnect, device number 14 [ 148.868615][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.920979][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.060821][ T5891] usb 4-1: USB disconnect, device number 21 [ 149.083404][ T6850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.334'. [ 149.220629][ T5895] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 149.247576][ T6854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.336'. [ 149.402182][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 149.460320][ T5895] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 149.468656][ T5895] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 149.514959][ T5895] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 149.560793][ T5895] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 149.588142][ T5895] usb 3-1: config 250 has no interface number 0 [ 149.601194][ T5895] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.041768][ T5895] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.281670][ T5895] usb 3-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 150.559455][ T5895] usb 3-1: config 250 interface 228 has no altsetting 0 [ 150.571010][ T30] audit: type=1326 audit(1744331733.315:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0df8d169 code=0x7ffc0000 [ 150.816065][ T5895] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 158.580089][ C0] sched: DL replenish lagged too much [ 159.617518][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 162.043165][ T30] audit: type=1326 audit(1744331733.355:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0df8d169 code=0x7ffc0000 [ 167.562917][ T5895] usb 3-1: Product: syz [ 167.587537][ T5895] usb 3-1: SerialNumber: syz [ 169.654466][ T30] audit: type=1326 audit(1744331733.355:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f0df8d169 code=0x7ffc0000 [ 194.713070][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.733599][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.453841][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 216.482144][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 217.630961][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 217.650390][ C1] hrtimer: interrupt took 1001900 ns [ 224.327320][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 240.394713][ T30] audit: type=1326 audit(1744331733.355:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0df8d169 code=0x7ffc0000 [ 255.668303][ T30] audit: type=1326 audit(1744331733.355:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0df8d169 code=0x7ffc0000 [ 258.992266][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.014959][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.290365][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 266.297384][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6869/1:b..l [ 266.305705][ C1] rcu: (detected by 1, t=10502 jiffies, g=19157, q=804338 ncpus=2) [ 266.313726][ C1] task:syz.4.339 state:R running task stack:26696 pid:6869 tgid:6862 ppid:5853 task_flags:0x400040 flags:0x00004006 [ 266.328182][ C1] Call Trace: [ 266.331503][ C1] [ 266.334463][ C1] __schedule+0x1b88/0x5240 [ 266.339008][ C1] ? stack_trace_save+0x71/0x1d0 [ 266.343991][ C1] ? __lock_acquire+0xad5/0xd80 [ 266.348869][ C1] ? preempt_schedule_irq+0xfe/0x1c0 [ 266.354194][ C1] ? __pfx___schedule+0x10/0x10 [ 266.359096][ C1] ? __bfs+0x14a/0x270 [ 266.363220][ C1] ? preempt_schedule_irq+0xf3/0x1c0 [ 266.368538][ C1] preempt_schedule_irq+0xfe/0x1c0 [ 266.373678][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 266.379454][ C1] irqentry_exit+0x5e/0x90 [ 266.383903][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.389964][ C1] RIP: 0010:lock_acquire+0x167/0x2f0 [ 266.395292][ C1] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 266.414941][ C1] RSP: 0018:ffffc9001cae7088 EFLAGS: 00000206 [ 266.421047][ C1] RAX: 50b0bd0d745f4400 RBX: ffffffff8ed3dfe0 RCX: 50b0bd0d745f4400 [ 266.429051][ C1] RDX: 0000000000000000 RSI: ffffffff8e4fd5a1 RDI: ffffffff8ca1b6a0 [ 266.437066][ C1] RBP: ffffffff9368a020 R08: 0000000000000000 R09: 0000000000000000 [ 266.445072][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 266.453074][ C1] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 266.461112][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 266.466270][ C1] ? usb_gadget_register_driver_owner+0xf7/0x260 [ 266.472634][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 266.477780][ C1] unwind_next_frame+0xd5/0x23b0 [ 266.482750][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 266.487905][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 266.493057][ C1] ? usb_gadget_register_driver_owner+0xf7/0x260 [ 266.499416][ C1] ? usb_gadget_register_driver_owner+0xf7/0x260 [ 266.505878][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 266.512077][ C1] arch_stack_walk+0x11e/0x150 [ 266.516917][ C1] ? usb_gadget_register_driver_owner+0xf7/0x260 [ 266.523287][ C1] stack_trace_save+0x11a/0x1d0 [ 266.528184][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 266.533600][ C1] ? do_raw_spin_lock+0x151/0x370 [ 266.538767][ C1] kasan_save_track+0x3f/0x80 [ 266.543477][ C1] ? kasan_save_track+0x3f/0x80 [ 266.548352][ C1] ? kasan_save_free_info+0x40/0x50 [ 266.553575][ C1] ? __kasan_slab_free+0x59/0x70 [ 266.558548][ C1] ? kfree+0x198/0x430 [ 266.562649][ C1] ? free_slab_obj_exts+0x25/0x60 [ 266.567702][ C1] ? __free_slab+0x98/0x180 [ 266.572234][ C1] ? __slab_free+0x2c6/0x390 [ 266.576851][ C1] ? qlist_free_all+0x9a/0x140 [ 266.581642][ C1] ? kasan_quarantine_reduce+0x14f/0x170 [ 266.587394][ C1] ? __kasan_slab_alloc+0x23/0x80 [ 266.592450][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 266.598119][ C1] ? __kernfs_new_node+0xdf/0x890 [ 266.603176][ C1] ? kernfs_new_node+0x114/0x220 [ 266.608152][ C1] ? __kernfs_create_file+0x49/0x2e0 [ 266.613479][ C1] ? sysfs_add_file_mode_ns+0x24a/0x310 [ 266.619079][ C1] ? sysfs_create_file_ns+0x197/0x2c0 [ 266.624499][ C1] ? bus_add_driver+0x49a/0x670 [ 266.629388][ C1] ? driver_register+0x23a/0x320 [ 266.634374][ C1] ? usb_gadget_register_driver_owner+0xf7/0x260 [ 266.640886][ C1] kasan_save_free_info+0x40/0x50 [ 266.645942][ C1] __kasan_slab_free+0x59/0x70 [ 266.650754][ C1] kfree+0x198/0x430 [ 266.654696][ C1] ? free_slab_obj_exts+0x25/0x60 [ 266.659758][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 266.666156][ C1] free_slab_obj_exts+0x25/0x60 [ 266.671074][ C1] __free_slab+0x98/0x180 [ 266.675451][ C1] __slab_free+0x2c6/0x390 [ 266.679988][ C1] ? __phys_addr+0xba/0x170 [ 266.684543][ C1] qlist_free_all+0x9a/0x140 [ 266.689198][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 266.694709][ C1] __kasan_slab_alloc+0x23/0x80 [ 266.699600][ C1] kmem_cache_alloc_noprof+0x1e1/0x390 [ 266.705105][ C1] ? __kernfs_new_node+0xdf/0x890 [ 266.710175][ C1] __kernfs_new_node+0xdf/0x890 [ 266.715066][ C1] ? __lock_acquire+0xad5/0xd80 [ 266.719956][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 266.725458][ C1] ? kernfs_root+0x1c/0x230 [ 266.729992][ C1] ? kernfs_root+0x1c/0x230 [ 266.734542][ C1] kernfs_new_node+0x114/0x220 [ 266.739314][ C1] __kernfs_create_file+0x49/0x2e0 [ 266.744436][ C1] sysfs_add_file_mode_ns+0x24a/0x310 [ 266.749940][ C1] sysfs_create_file_ns+0x197/0x2c0 [ 266.755176][ C1] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 266.760922][ C1] ? module_add_driver+0x20f/0x360 [ 266.766060][ C1] bus_add_driver+0x49a/0x670 [ 266.770766][ C1] driver_register+0x23a/0x320 [ 266.775538][ C1] usb_gadget_register_driver_owner+0xf7/0x260 [ 266.781720][ C1] raw_ioctl+0x1495/0x4100 [ 266.786171][ C1] ? tomoyo_path_number_perm+0x215/0x790 [ 266.791823][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.797816][ C1] ? handle_mm_fault+0x1830/0x1bf0 [ 266.802978][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 266.807776][ C1] ? __lock_acquire+0xad5/0xd80 [ 266.812668][ C1] ? __fget_files+0x2a/0x420 [ 266.817282][ C1] ? __fget_files+0x2a/0x420 [ 266.821922][ C1] ? __fget_files+0x2a/0x420 [ 266.826530][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 266.831321][ C1] __se_sys_ioctl+0xf1/0x160 [ 266.835925][ C1] do_syscall_64+0xf3/0x230 [ 266.840434][ C1] ? clear_bhb_loop+0x45/0xa0 [ 266.845146][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.851042][ C1] RIP: 0033:0x7f9f56b8cd6b [ 266.855485][ C1] RSP: 002b:00007f9f549b1f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.863902][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f9f56b8cd6b [ 266.871873][ C1] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 266.879853][ C1] RBP: 00007f9f549b2fe0 R08: 0000000000000000 R09: 00342e6364755f79 [ 266.887822][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.895876][ C1] R13: 00007f9f549b1fb0 R14: 0000200000000000 R15: 00007f9f56ed0320 [ 266.903859][ C1]