last executing test programs: 7m54.928556459s ago: executing program 4 (id=5): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) 7m54.442281604s ago: executing program 0 (id=15): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac", 0x1d}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce", 0xad}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2", 0xbf}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)="d6f6da22", 0x4}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 7m54.061211884s ago: executing program 4 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000002a000701fcffffff23000000057c000008000100e5fa851c400d60bdc1480fd0db362cad19654ca94db386e611793e6eaec5dd68c84875575282ae8287a6e7e6a7c222f4fc0de2d4e98faf6a259a1107e9bec506875a3e8ab42360bc704cc594173b9f22c448a3abb1be76f0098206f1f4651da483ef43b9e1294c09e276a316a28afba80517deb4b53cdd690806f336fecf6593225aac4c4a98335fb6181ebf", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000001c0)=@filename='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') 7m53.689405987s ago: executing program 4 (id=17): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) lseek(r0, 0x2004, 0x0) 7m53.658624696s ago: executing program 0 (id=18): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m48.751028851s ago: executing program 4 (id=25): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b9b66040ac0501b300e4090203010902120001000000000904000000ff0101"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) 7m46.857483635s ago: executing program 0 (id=27): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x40d, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22040, 0x5019}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x40000399}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00', @ANYBLOB="9b0f"], 0x30}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) io_uring_enter(r1, 0x3ab, 0x8688, 0x17, 0x0, 0x0) landlock_restrict_self(r0, 0xa) 7m46.5843192s ago: executing program 0 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket(0x10, 0xa, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89, 0x48006}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000880)=""/146, &(0x7f0000000940)=0x92) recvfrom(r0, 0x0, 0x0, 0x17, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/73, 0x49}], 0x1}, 0x7fffffff}], 0x2, 0x10002, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000840)={0x3, 0x1, 0x10, 0x18, 0x1ae, &(0x7f0000000440)}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000002a000701fcffffff23000000057c000008000100e5fa851c400d60bdc1480fd0db362cad19654ca94db386e611793e6eaec5dd68c84875575282ae8287a6e7e6a7c222f4fc0de2d4e98faf6a259a1107e9bec506875a3e8ab42360bc704cc594173b9f22c448a3abb1be76f0098206f1f4651da483ef43b9e1294c09e276a316a28afba80517deb4b53cdd690806f336fecf6593225aac4c4a98335fb6181ebf", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000001c0)=@filename='./file0\x00', r3, &(0x7f0000000240)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00'}) 7m45.2814833s ago: executing program 4 (id=30): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) writev(r0, &(0x7f00000001c0), 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x1d5, 0x3, {{0x17, 0x4, 0x2, 0x5, 0x5c, 0x64, 0x0, 0x9, 0x4, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x2, [{@loopback, 0xfffffff2}, {@rand_addr=0x64010100, 0x10}, {@multicast1, 0x9}, {@multicast1, 0xec4d}, {@remote, 0x53c6dbb6}]}, @timestamp_prespec={0x44, 0x4, 0xfd, 0x3, 0x6}, @lsrr={0x83, 0xf, 0x17, [@local, @multicast2, @broadcast]}, @ra={0x94, 0x4}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffaba}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x180c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0xc000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb016029", @ANYRES32=0x0], 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7m42.738741483s ago: executing program 0 (id=33): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f00000000c0), 0xb9) 7m42.426173997s ago: executing program 0 (id=35): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000300)={0x8, r7}) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000340)={0x8, r6}) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r5, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000400)={0x8, r4}) close(r2) 7m29.877177868s ago: executing program 32 (id=30): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) writev(r0, &(0x7f00000001c0), 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x1d5, 0x3, {{0x17, 0x4, 0x2, 0x5, 0x5c, 0x64, 0x0, 0x9, 0x4, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x2, [{@loopback, 0xfffffff2}, {@rand_addr=0x64010100, 0x10}, {@multicast1, 0x9}, {@multicast1, 0xec4d}, {@remote, 0x53c6dbb6}]}, @timestamp_prespec={0x44, 0x4, 0xfd, 0x3, 0x6}, @lsrr={0x83, 0xf, 0x17, [@local, @multicast2, @broadcast]}, @ra={0x94, 0x4}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffaba}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x180c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0xc000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb016029", @ANYRES32=0x0], 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7m25.437240994s ago: executing program 33 (id=35): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000300)={0x8, r7}) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000340)={0x8, r6}) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r5, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000400)={0x8, r4}) close(r2) 4m35.524907069s ago: executing program 1 (id=381): openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r0, 0x6145, 0x7721, 0x17, 0x0, 0x0) 4m35.085316261s ago: executing program 1 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="b9f43502cb7387aff15a3cc974c9352311fddd7d151acf", 0x17) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x4d}, 0x1, 0x0, 0x0, 0x448d3}, 0x20004000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f00000001c0)="1851e47b04c4076f14e63d3bea6fc88af55c313e447b5b04d1f666c0e3a65c5b9ef8e6d1e49339069c09623cef9fa97da79ed07f89b385dc5b3523a3c878bc10941400a528f93b87e6a97ca020caeb10f909c702b726a3b76145d80c731230082f930dc19bd6fa1027269d8e5a20482aab44fcda00ec588be83485b15ba9f80653e5ce2c63cc924fe0eb1e49faa7c7443f6ceeb53bf8086f3bd37d57", 0x9c, 0x0, 0x56d, 0xffffffffffffffff}, 0x1}, 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0x1, 0x0, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 4m34.719666029s ago: executing program 1 (id=384): recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000000780)=""/4115, 0x1013}], 0x3}, 0x70001}], 0x1, 0x102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x2000000002, 0x4, 0x81, 0x9c2, 0x5, 0x1006, 0xc, 0x6, 0x8000, 0x1], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24048884) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}}, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000780)={0x6, 0x1000000, [{0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x6, 0xffffffff}, {0x6, 0x50000000, 0x0, 0x8001, 0x29, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0x4, 0xe5f, 0x2, 0x30e, 0x8001, 0x6, 0x80000001}, {0xa, 0x2bb, 0x2, 0xd, 0x3, 0x7ff, 0x400}, {0x2, 0x44, 0x4, 0x6, 0x4, 0x4, 0x3}]}) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)={0x18, 0x43, 0x107, 0x2, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) write$proc_mixer(r10, &(0x7f0000000040)=ANY=[@ANYBLOB=' \''], 0x33) close(r10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000000000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c0d0) 4m32.924572834s ago: executing program 1 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="b9f43502cb7387aff15a3cc974c9352311fddd7d151acf", 0x17) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x4d}, 0x1, 0x0, 0x0, 0x448d3}, 0x20004000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f00000001c0)="1851e47b04c4076f14e63d3bea6fc88af55c313e447b5b04d1f666c0e3a65c5b9ef8e6d1e49339069c09623cef9fa97da79ed07f89b385dc5b3523a3c878bc10941400a528f93b87e6a97ca020caeb10f909c702b726a3b76145d80c731230082f930dc19bd6fa1027269d8e5a20482aab44fcda00ec588be83485b15ba9f80653e5ce2c63cc924fe0eb1e49faa7c7443f6ceeb53bf8086f3bd37d57", 0x9c, 0x0, 0x56d, 0xffffffffffffffff}, 0x1}, 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0x1, 0x0, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 4m32.280119772s ago: executing program 1 (id=395): r0 = creat(0x0, 0x43) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0], [0xa13, 0x0, 0x3, 0x2], [0x2, 0x2, 0x40001, 0x3], [0x0, 0xfffffffffffffffa, 0xfffffffffefffff8, 0xb]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fb, 0x36314742, 0x3, [r4, 0x0, 0x0, r5], [0x2b8]}) 4m31.97717965s ago: executing program 1 (id=399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000004400cd02000000008fe9178bb9"], &(0x7f0000000480), 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x884) 4m14.268020366s ago: executing program 34 (id=399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000004400cd02000000008fe9178bb9"], &(0x7f0000000480), 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x884) 4m10.473211796s ago: executing program 2 (id=436): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$tipc(0x1e, 0x1, 0x0) 4m7.838095255s ago: executing program 2 (id=441): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x43) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r2, 0x1ff, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0], [0xa13, 0x0, 0x3, 0x2], [0x2, 0x2, 0x40001, 0x3], [0x0, 0xfffffffffffffffa, 0xfffffffffefffff8, 0xb]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fb, 0x36314742, 0x3, [r3, 0x0, 0x0, r4], [0x2b8]}) 4m7.078714797s ago: executing program 2 (id=443): syz_open_dev$hidraw(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008800) recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x2000) 4m5.296364476s ago: executing program 2 (id=446): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x20100) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 4m4.59949589s ago: executing program 2 (id=449): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='9', 0x1}], 0x1, 0x4, 0x1) 4m4.197228965s ago: executing program 2 (id=451): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940b, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010102, 0x15, 0x3, 'dh\x00', 0x28, 0x0, 0x72}, 0x2c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x844) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000540), 0x4}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000002c0)=0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r7, 0x40046109, 0x0) close(r7) 3m49.102358428s ago: executing program 35 (id=451): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940b, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010102, 0x15, 0x3, 'dh\x00', 0x28, 0x0, 0x72}, 0x2c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x844) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000540), 0x4}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000002c0)=0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r7, 0x40046109, 0x0) close(r7) 2m28.165907111s ago: executing program 8 (id=541): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x102, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0xa8c17000) 231.398389ms ago: executing program 3 (id=4302): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100010ac05470200000000000109024300010000000009040000010300000009210000000122a00009058103"], 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000140)={0x40, 0x31, 0xfc, {0xfc, 0x21, "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"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000640)={0x34, &(0x7f0000000400)={0x20, 0xb, 0xec, "daa32002f8a3b902cb5ec9ed262126735c552128516f223d3ff75c35506e10b457903bcec1a2f09912a753ebcf12dfc3cf2049434bd2aea64444ff94f1f79cd30c41308b3f9f72aeac219a630b83d19d51eb4686b977d73a947e71dd359ca2ef06e24f901b3571f4a54d399eba437790830d2bc011e5992b596548f49a47acc1b262dfb7bbed48f0c472740b0b3ff8041c8d802abdb15e8d9cd602f73523f7bb5dbeeb73753e97021b7895d9b819ca973e97d7f52f7fb39eafff013b63cf777895bf91f394452961f5f8d9e808d9d67055fd475a0c60660dccc10b30182f778a1fcd08e63c5ec8472f6f82a4"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x87}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0xba8}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 141.309039ms ago: executing program 3 (id=4303): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9c0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980905, 0xe, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendfile(r2, r2, 0x0, 0xc) socket(0x18, 0xc9289ec26f5ceb35, 0x10000003) pread64(r1, &(0x7f0000000040)=""/29, 0x1d, 0x5f) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0xe) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003"], 0x80}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="c6916a68ef17f08a03cec942eebe4a36ac141caaac1414bb0000000004000000ffffffff00000000ac141415ac1414aa"], 0x20) clock_gettime(0x6, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000003800010326bd07000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="210329a27000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0) recvmmsg(r6, 0x0, 0x0, 0x10001, 0x0) 137.215248ms ago: executing program 3 (id=4304): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8080000, 0x3, 0x8f, 0x0, 0x0, [{0x8, 0x0, 0x5, '\x00', 0x8}, {0x2, 0x4c, 0x9, '\x00', 0x9}, {0x9, 0xc, 0x1, '\x00', 0x4}, {0x81, 0xe, 0x4, '\x00', 0x4}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x8d, 0x10, 0x9, '\x00', 0x5}, {0x1, 0x8, 0x3, '\x00', 0x5}, {0xdb, 0x9, 0xb, '\x00', 0x9}, {0x3, 0x4, 0xb, '\x00', 0x2}, {0x0, 0x5, 0x4, '\x00', 0x9}, {0xf7, 0xa2, 0xf0, '\x00', 0x8}, {0x7f, 0x3, 0x1, '\x00', 0x2}, {0x4, 0x4, 0x4, '\x00', 0x9}, {0x8, 0x5, 0x1}, {0x79, 0xf, 0xf, '\x00', 0xe}, {0x4, 0xc6, 0xd, '\x00', 0x9}, {0x5, 0x9, 0x2, '\x00', 0xc8}, {0x5, 0x9, 0x7e, '\x00', 0xf}, {0x9, 0x6, 0x5, '\x00', 0xc}, {0x8, 0x4, 0x5, '\x00', 0x8}, {0x2, 0x81, 0x8, '\x00', 0x8}, {0x5, 0x4a, 0x1, '\x00', 0x4}, {0x5, 0x7, 0x8, '\x00', 0xfe}, {0xe, 0x5b, 0x8, '\x00', 0x33}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 92.238412ms ago: executing program 3 (id=4305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.52486ms ago: executing program 3 (id=4306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) r3 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0xbb13, 0x2000, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ecryptfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000640)={0x800, 0x31364d4e, 0x2, @discrete={0x5, 0x200}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kernel console output (not intermixed with test programs): would solve the problem. [ 77.455981][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.677841][ T5823] hsr_slave_0: entered promiscuous mode [ 77.679253][ T5823] hsr_slave_1: entered promiscuous mode [ 77.692551][ T5822] hsr_slave_0: entered promiscuous mode [ 77.693739][ T5822] hsr_slave_1: entered promiscuous mode [ 77.694747][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 77.694867][ T5822] Cannot create hsr debugfs directory [ 77.723004][ T5820] hsr_slave_0: entered promiscuous mode [ 77.724549][ T5820] hsr_slave_1: entered promiscuous mode [ 77.726048][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 77.726070][ T5820] Cannot create hsr debugfs directory [ 77.761594][ T5824] hsr_slave_0: entered promiscuous mode [ 77.763454][ T5824] hsr_slave_1: entered promiscuous mode [ 77.764346][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 77.764366][ T5824] Cannot create hsr debugfs directory [ 77.780156][ T5821] hsr_slave_0: entered promiscuous mode [ 77.781410][ T5821] hsr_slave_1: entered promiscuous mode [ 77.782213][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 77.782234][ T5821] Cannot create hsr debugfs directory [ 78.774946][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.831775][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.834442][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.872526][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.873560][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.921063][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.941133][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.959219][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.068898][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.095454][ T59] Bluetooth: hci4: command tx timeout [ 79.110778][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.117372][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.158902][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.160882][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.165644][ T59] Bluetooth: hci1: command tx timeout [ 79.200463][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.228558][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.246503][ T59] Bluetooth: hci2: command tx timeout [ 79.246533][ T59] Bluetooth: hci0: command tx timeout [ 79.246550][ T59] Bluetooth: hci3: command tx timeout [ 79.275844][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.404556][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.439240][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.449237][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.491490][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.500913][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.540063][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.560053][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.600024][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.730526][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.770274][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.779561][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.818237][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.820812][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.842414][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.869045][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.909875][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.004216][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.032653][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.069480][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.080158][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.118749][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.122380][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.144527][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.156385][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.189517][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.225877][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.277213][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.290744][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.290945][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.329610][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.329715][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.413910][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.457027][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.459925][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.488050][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.522381][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.522519][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.600275][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.630619][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.658215][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.658288][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.739384][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.739478][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.813904][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.887167][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.888032][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.924594][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.962210][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.962424][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.079687][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.166739][ T5831] Bluetooth: hci4: command tx timeout [ 81.171241][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.171369][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.228300][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.246910][ T5831] Bluetooth: hci1: command tx timeout [ 81.252849][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.253026][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.325591][ T5831] Bluetooth: hci3: command tx timeout [ 81.325620][ T5831] Bluetooth: hci0: command tx timeout [ 81.325639][ T5831] Bluetooth: hci2: command tx timeout [ 81.480109][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.660197][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.690461][ T5822] veth0_vlan: entered promiscuous mode [ 81.810585][ T822] cfg80211: failed to load regulatory.db [ 81.838902][ T5822] veth1_vlan: entered promiscuous mode [ 82.098170][ T5820] veth0_vlan: entered promiscuous mode [ 82.140471][ T5820] veth1_vlan: entered promiscuous mode [ 82.164563][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.224507][ T5822] veth0_macvtap: entered promiscuous mode [ 82.248887][ T5822] veth1_macvtap: entered promiscuous mode [ 82.361778][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.367131][ T5820] veth0_macvtap: entered promiscuous mode [ 82.414129][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.414704][ T5820] veth1_macvtap: entered promiscuous mode [ 82.442189][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.479450][ T5823] veth0_vlan: entered promiscuous mode [ 82.481795][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.528869][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.568272][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.577021][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.662001][ T5823] veth1_vlan: entered promiscuous mode [ 82.667805][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.740387][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.905222][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.926310][ T5824] veth0_vlan: entered promiscuous mode [ 82.934292][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.967799][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.973176][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.081780][ T5824] veth1_vlan: entered promiscuous mode [ 83.103724][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.103749][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.173658][ T5821] veth0_vlan: entered promiscuous mode [ 83.221456][ T5823] veth0_macvtap: entered promiscuous mode [ 83.247483][ T59] Bluetooth: hci4: command tx timeout [ 83.335929][ T59] Bluetooth: hci1: command tx timeout [ 83.407262][ T59] Bluetooth: hci0: command tx timeout [ 83.413493][ T5823] veth1_macvtap: entered promiscuous mode [ 83.416122][ T59] Bluetooth: hci2: command tx timeout [ 83.416158][ T59] Bluetooth: hci3: command tx timeout [ 83.459275][ T5821] veth1_vlan: entered promiscuous mode [ 83.460505][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.460519][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.533000][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.533018][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.637405][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.681093][ T5824] veth0_macvtap: entered promiscuous mode [ 83.709401][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.722586][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.722605][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.748347][ T5824] veth1_macvtap: entered promiscuous mode [ 83.780622][ T183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.798257][ T183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.820677][ T183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.824829][ T5821] veth0_macvtap: entered promiscuous mode [ 83.850858][ T183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.919312][ T5821] veth1_macvtap: entered promiscuous mode [ 83.994343][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.075172][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.197976][ T2971] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.206858][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.208025][ T2971] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.212572][ T2971] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.217667][ T2971] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.234432][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.346440][ T183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.349341][ T183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.409261][ T183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.516093][ T183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.613398][ T3379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.613417][ T3379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.588637][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.588656][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.737341][ T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.737362][ T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.202470][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.202489][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.399439][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.399457][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.412301][ T822] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.612119][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.612139][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.754845][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.754872][ T822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 86.754924][ T822] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 86.754946][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.242038][ T822] usb 2-1: config 0 descriptor?? [ 87.647658][ T822] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 87.669464][ T822] dvb-usb: bulk message failed: -22 (3/0) [ 88.120698][ T822] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 88.159545][ T822] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 88.159622][ T822] usb 2-1: media controller created [ 88.324145][ T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.529415][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.602982][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.833054][ T822] dvb-usb: bulk message failed: -22 (6/0) [ 88.841247][ T822] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 90.311809][ T5902] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 90.311840][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.311858][ T5902] usb 5-1: Product: syz [ 90.311872][ T5902] usb 5-1: Manufacturer: syz [ 90.311885][ T5902] usb 5-1: SerialNumber: syz [ 90.424582][ T5902] usb 5-1: config 0 descriptor?? [ 90.587531][ T822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 90.944508][ T5902] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 91.090399][ T822] dvb-usb: schedule remote query interval to 150 msecs. [ 91.090423][ T822] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.383030][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 91.383081][ T5923] dvb-usb: error while querying for an remote control event. [ 91.472964][ T5902] gspca_sunplus: reg_r err -110 [ 91.537797][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 91.537826][ T5923] dvb-usb: error while querying for an remote control event. [ 91.840912][ T822] usb 2-1: USB disconnect, device number 2 [ 91.843371][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 91.843402][ T5902] dvb-usb: error while querying for an remote control event. [ 92.038083][ T5809] dvb-usb: bulk message failed: -22 (1/0) [ 92.038115][ T5809] dvb-usb: error while querying for an remote control event. [ 92.434107][ T5902] usb 5-1: USB disconnect, device number 2 [ 93.508109][ T5809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.767344][ T5809] usb 5-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 93.767374][ T5809] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 93.767393][ T5809] usb 5-1: Product: syz [ 93.767406][ T5809] usb 5-1: Manufacturer: syz [ 93.767420][ T5809] usb 5-1: SerialNumber: syz [ 93.854060][ T5809] usb 5-1: config 0 descriptor?? [ 95.238302][ T822] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.288350][ T6019] IPVS: length: 146 != 24 [ 95.423396][ T5923] usb 5-1: USB disconnect, device number 3 [ 95.688923][ T5809] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.911649][ T5809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.912196][ T5809] usb 1-1: not running at top speed; connect to a high speed hub [ 95.933992][ T5809] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 96.056220][ T5809] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 96.056250][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.056269][ T5809] usb 1-1: Product: syz [ 96.056282][ T5809] usb 1-1: Manufacturer: syz [ 96.056295][ T5809] usb 1-1: SerialNumber: syz [ 98.119160][ T5923] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 98.321099][ T5809] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.517984][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.518039][ T5923] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.518066][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.696681][ T5923] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.696711][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.696730][ T5923] usb 5-1: Product: syz [ 98.696744][ T5923] usb 5-1: Manufacturer: syz [ 98.696757][ T5923] usb 5-1: SerialNumber: syz [ 98.839242][ T5923] usb 5-1: config 0 descriptor?? [ 98.898247][ T6039] Zero length message leads to an empty skb [ 99.889428][ T6043] loop2: detected capacity change from 0 to 7 [ 100.557249][ T6043] Dev loop2: unable to read RDB block 7 [ 100.557288][ T6043] loop2: AHDI p1 p2 p3 [ 100.557318][ T6043] loop2: partition table partially beyond EOD, truncated [ 100.658334][ T6043] loop2: p1 start 1601398130 is beyond EOD, truncated [ 100.658362][ T6043] loop2: p2 start 1702059890 is beyond EOD, truncated [ 103.608593][ T5809] snd-usb-audio 1-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 104.715818][ T5809] usb 1-1: USB disconnect, device number 2 [ 105.361886][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.247786][ T5902] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 108.945558][ T5923] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 110.201933][ T5923] usb 5-1: USB disconnect, device number 4 [ 111.426678][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.630886][ T6071] netlink: 'syz.2.41': attribute type 13 has an invalid length. [ 113.445425][ T5902] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.758486][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 113.789712][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.789763][ T5902] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 113.789785][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.996741][ T5902] usb 2-1: config 0 descriptor?? [ 117.895874][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 118.026097][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 118.784808][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.814989][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.871664][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.026429][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.031725][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.359200][ T5902] usb 2-1: USB disconnect, device number 3 [ 119.525507][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 119.719993][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 119.720021][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 119.720040][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.720058][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 119.720093][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 119.720114][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.843699][ T6110] loop5: detected capacity change from 0 to 7 [ 121.560030][ T6110] Dev loop5: unable to read RDB block 7 [ 121.560059][ T6110] loop5: AHDI p1 [ 121.560077][ T6110] loop5: partition table partially beyond EOD, truncated [ 121.655239][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.709817][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.712808][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.716047][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.717201][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.127121][ T5831] Bluetooth: hci5: command tx timeout [ 123.766320][ T6076] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 123.766401][ T6076] syzkaller0: entered promiscuous mode [ 123.766419][ T6076] syzkaller0: entered allmulticast mode [ 124.129988][ T5831] Bluetooth: hci6: command tx timeout [ 124.205478][ T5831] Bluetooth: hci5: command tx timeout [ 125.110343][ T5809] usb 4-1: USB disconnect, device number 3 [ 126.205417][ T5831] Bluetooth: hci6: command tx timeout [ 126.285406][ T5831] Bluetooth: hci5: command tx timeout [ 126.365407][ T5809] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.545750][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 126.566835][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.566883][ T5809] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.566905][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.640870][ T5809] usb 3-1: config 0 descriptor?? [ 127.531702][ T6141] loop5: detected capacity change from 0 to 7 [ 128.281787][ T6141] Dev loop5: unable to read RDB block 7 [ 128.281821][ T6141] loop5: AHDI p1 [ 128.281836][ T6141] loop5: partition table partially beyond EOD, truncated [ 128.289638][ T5831] Bluetooth: hci6: command tx timeout [ 128.365508][ T5831] Bluetooth: hci5: command tx timeout [ 129.685467][ T5809] usbhid 3-1:0.0: can't add hid device: -71 [ 129.685590][ T5809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 129.867843][ T5809] usb 3-1: USB disconnect, device number 2 [ 130.365625][ T5831] Bluetooth: hci6: command tx timeout [ 130.555417][ T5809] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 130.748120][ T5809] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 130.748148][ T5809] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 130.748173][ T5809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.748190][ T5809] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 130.748223][ T5809] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 130.748245][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.872249][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872317][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.698887][ T3585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.705471][ T5923] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.865447][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 135.868736][ T5923] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 135.868781][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.868805][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.868828][ T5923] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.868868][ T5923] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.868890][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.214336][ T5923] usb 3-1: GET_CAPABILITIES returned 0 [ 136.214382][ T5923] usbtmc 3-1:16.0: can't read capabilities [ 136.603982][ T5923] usb 3-1: USB disconnect, device number 3 [ 136.917705][ T5809] usb 4-1: USB disconnect, device number 4 [ 137.807931][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.956632][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 137.958762][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.958807][ T5902] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.958829][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.026855][ T5809] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.065548][ T5902] usb 2-1: config 0 descriptor?? [ 138.185377][ T5809] usb 4-1: Using ep0 maxpacket: 8 [ 138.189480][ T5809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 138.189511][ T5809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.189586][ T5809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.189608][ T5809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.189644][ T5809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.189665][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.592702][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.611968][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.670854][ T5809] usb 4-1: GET_CAPABILITIES returned 0 [ 138.670957][ T5809] usbtmc 4-1:16.0: can't read capabilities [ 139.120173][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 139.120289][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 139.145136][ T3585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.326531][ T5902] usb 2-1: USB disconnect, device number 4 [ 139.738815][ T5809] usb 4-1: USB disconnect, device number 5 [ 140.457442][ T5809] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 140.617951][ T5809] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 140.617979][ T5809] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 140.617999][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.618016][ T5809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 140.618063][ T5809] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 140.618085][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.346435][ T6205] netlink: 'syz.2.81': attribute type 4 has an invalid length. [ 141.381842][ T3585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.867441][ T6208] netlink: 'syz.2.81': attribute type 4 has an invalid length. [ 144.415425][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.604002][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 144.628745][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.628769][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.628816][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 144.628842][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 144.628883][ T5923] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 144.628904][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.736993][ T5923] hub 4-1:1.0: bad descriptor, ignoring hub [ 144.737031][ T5923] hub 4-1:1.0: probe with driver hub failed with error -5 [ 144.762897][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 144.762917][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 144.888996][ T5923] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 144.889032][ T5923] cdc_wdm 4-1:1.0: Unknown control protocol [ 145.053085][ T5923] usb 4-1: USB disconnect, device number 6 [ 145.465687][ T5902] usb 2-1: USB disconnect, device number 5 [ 145.755473][ T5923] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.905410][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 145.907591][ T5923] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 145.907615][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.907660][ T5923] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.907698][ T5923] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.907720][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.252154][ T5923] hub 4-1:1.0: bad descriptor, ignoring hub [ 146.252192][ T5923] hub 4-1:1.0: probe with driver hub failed with error -5 [ 146.253090][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 146.253104][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 146.287451][ T5923] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 146.406545][ T5923] usb 4-1: USB disconnect, device number 7 [ 146.575463][ T822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.756091][ T822] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 146.756117][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.756135][ T822] usb 2-1: config 0 has no interface number 0 [ 146.832097][ T822] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 146.832127][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.832146][ T822] usb 2-1: Product: syz [ 146.832159][ T822] usb 2-1: Manufacturer: syz [ 146.832173][ T822] usb 2-1: SerialNumber: syz [ 146.952698][ T822] usb 2-1: config 0 descriptor?? [ 147.076195][ T822] cyberjack 2-1:0.69: required endpoints missing [ 147.814642][ T6221] mmap: syz.1.86 (6221) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.265745][ T3585] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.453835][ T6228] team_slave_0: entered promiscuous mode [ 148.453890][ T6228] team_slave_1: entered promiscuous mode [ 148.474598][ T6228] macsec1: entered promiscuous mode [ 148.474621][ T6228] vlan2: entered promiscuous mode [ 148.474633][ T6228] team0: entered promiscuous mode [ 148.550554][ T5809] usb 2-1: USB disconnect, device number 6 [ 149.352174][ T6243] binder: 6241:6243 ioctl c0306201 200000001440 returned -11 [ 150.287185][ T6258] loop5: detected capacity change from 0 to 7 [ 150.346488][ T6258] Dev loop5: unable to read RDB block 7 [ 150.346517][ T6258] loop5: AHDI p1 [ 150.346544][ T6258] loop5: partition table partially beyond EOD, truncated [ 151.795460][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.915426][ T5809] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.959206][ T5902] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 151.959233][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.959251][ T5902] usb 2-1: config 0 has no interface number 0 [ 151.959291][ T5902] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.962249][ T5902] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 151.962276][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.962295][ T5902] usb 2-1: Product: syz [ 151.962309][ T5902] usb 2-1: Manufacturer: syz [ 151.962322][ T5902] usb 2-1: SerialNumber: syz [ 152.074796][ T5902] usb 2-1: config 0 descriptor?? [ 152.100756][ T5902] cyberjack 2-1:0.69: required endpoints missing [ 152.117743][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.119150][ T5809] usb 3-1: config 208 has an invalid interface number: 119 but max is 0 [ 152.119174][ T5809] usb 3-1: config 208 has no interface number 0 [ 152.119220][ T5809] usb 3-1: config 208 interface 119 has no altsetting 0 [ 152.121550][ T5809] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 152.121575][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.121593][ T5809] usb 3-1: Product: syz [ 152.121607][ T5809] usb 3-1: Manufacturer: syz [ 152.121620][ T5809] usb 3-1: SerialNumber: syz [ 152.567189][ T5809] ums-alauda 3-1:208.119: USB Mass Storage device detected [ 152.869293][ T6280] binder: 6279:6280 ioctl c0306201 200000001440 returned -11 [ 153.317253][ T6286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.110'. [ 153.701259][ T6093] chnl_net:caif_netlink_parms(): no params data found [ 154.107715][ T6104] chnl_net:caif_netlink_parms(): no params data found [ 154.393533][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.393647][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.393864][ T6093] bridge_slave_0: entered allmulticast mode [ 154.420006][ T6093] bridge_slave_0: entered promiscuous mode [ 154.448345][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.448745][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.449333][ T6093] bridge_slave_1: entered allmulticast mode [ 154.452036][ T6093] bridge_slave_1: entered promiscuous mode [ 154.988871][ T6093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.284626][ T5809] usb 3-1: USB disconnect, device number 4 [ 155.896509][ T6314] binder: 6313:6314 ioctl c0306201 200000001440 returned -11 [ 156.005493][ T5902] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.083498][ T822] usb 2-1: USB disconnect, device number 7 [ 156.176746][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 156.197595][ T5902] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 156.197624][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.197643][ T5902] usb 4-1: Product: syz [ 156.197656][ T5902] usb 4-1: Manufacturer: syz [ 156.197670][ T5902] usb 4-1: SerialNumber: syz [ 156.270268][ T5902] usb 4-1: config 0 descriptor?? [ 156.370503][ T5902] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 156.370663][ T5902] dvb-usb: bulk message failed: -22 (4/0) [ 156.370678][ T5902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 156.396996][ T5902] dvb-usb: bulk message failed: -22 (5/0) [ 156.397017][ T5902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 156.602303][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.604722][ T5902] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 156.623075][ T5902] usb 4-1: media controller created [ 156.687140][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.735468][ T5902] usb 4-1: selecting invalid altsetting 3 [ 156.735487][ T5902] ttusb2: set interface to alts=3 failed [ 156.793566][ T5902] DVB: Unable to find symbol tda10086_attach() [ 156.793582][ T5902] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 156.812161][ T5902] dvb-usb: bulk message failed: -22 (4/0) [ 156.812180][ T5902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 156.812299][ T5902] dvb-usb: bulk message failed: -22 (5/0) [ 156.812312][ T5902] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 156.812374][ T5902] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 156.861335][ T822] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.920618][ T5902] usb 4-1: USB disconnect, device number 8 [ 157.006919][ T822] usb 2-1: Using ep0 maxpacket: 32 [ 157.013416][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 157.013458][ T822] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 157.013482][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 157.091178][ T822] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 157.091206][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.091225][ T822] usb 2-1: Product: syz [ 157.091239][ T822] usb 2-1: Manufacturer: syz [ 157.091252][ T822] usb 2-1: SerialNumber: syz [ 157.149065][ T822] usb 2-1: config 0 descriptor?? [ 157.199880][ T822] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 157.701651][ T5902] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 158.381041][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 158.562630][ T10] usb 2-1: USB disconnect, device number 8 [ 158.562722][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 158.822906][ T3585] bridge_slave_1: left allmulticast mode [ 158.823025][ T3585] bridge_slave_1: left promiscuous mode [ 158.865097][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.391481][ T6336] binder: 6335:6336 ioctl c0306201 200000001440 returned -11 [ 159.906894][ T3585] bridge_slave_0: left allmulticast mode [ 159.906924][ T3585] bridge_slave_0: left promiscuous mode [ 159.954938][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.186995][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 160.343754][ T10] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 160.343782][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.343799][ T10] usb 2-1: config 0 has no interface number 0 [ 160.343840][ T10] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.401988][ T10] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 160.402020][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.402039][ T10] usb 2-1: Product: syz [ 160.402052][ T10] usb 2-1: Manufacturer: syz [ 160.402066][ T10] usb 2-1: SerialNumber: syz [ 160.492203][ T10] usb 2-1: config 0 descriptor?? [ 160.540275][ T10] cyberjack 2-1:0.69: required endpoints missing [ 160.988999][ T822] usb 2-1: USB disconnect, device number 9 [ 161.110443][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.255438][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 161.257695][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 161.257727][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 161.257751][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 161.264358][ T10] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 161.264386][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.264405][ T10] usb 4-1: Product: syz [ 161.264418][ T10] usb 4-1: Manufacturer: syz [ 161.264432][ T10] usb 4-1: SerialNumber: syz [ 161.349785][ T10] usb 4-1: config 0 descriptor?? [ 161.386740][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 163.951792][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 164.321195][ T10] usb 4-1: USB disconnect, device number 9 [ 164.321300][ C0] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 165.545399][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 165.702519][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.702547][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 165.702598][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 165.702620][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.753105][ T10] usb 4-1: config 0 descriptor?? [ 165.785287][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 165.785332][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 165.837784][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 165.838669][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 165.838719][ T10] usb 4-1: media controller created [ 165.840546][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.902667][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 165.902746][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 165.955658][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 165.964141][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 165.964163][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 166.115436][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 166.115468][ T10] dvb-usb: error while querying for an remote control event. [ 166.256584][ T6368] netlink: 212112 bytes leftover after parsing attributes in process `syz.3.143'. [ 166.261921][ T10] usb 4-1: USB disconnect, device number 10 [ 166.500859][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 166.515717][ T3585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.596399][ T3585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.630087][ T3585] bond0 (unregistering): Released all slaves [ 166.672627][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.672753][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.672984][ T6104] bridge_slave_0: entered allmulticast mode [ 166.703596][ T6104] bridge_slave_0: entered promiscuous mode [ 166.742339][ T6093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.774627][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 166.880323][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.880453][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.880686][ T6104] bridge_slave_1: entered allmulticast mode [ 166.919502][ T6104] bridge_slave_1: entered promiscuous mode [ 167.345417][ T822] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.420005][ T6093] team0: Port device team_slave_0 added [ 167.461729][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.478538][ T6093] team0: Port device team_slave_1 added [ 167.483406][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.497990][ T822] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 167.498017][ T822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.498035][ T822] usb 4-1: config 0 has no interface number 0 [ 167.498076][ T822] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.509370][ T822] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 167.509402][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.509421][ T822] usb 4-1: Product: syz [ 167.509435][ T822] usb 4-1: Manufacturer: syz [ 167.509448][ T822] usb 4-1: SerialNumber: syz [ 167.694952][ T822] usb 4-1: config 0 descriptor?? [ 167.758986][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 167.759002][ T6376] binder: 6375:6376 ioctl 4018620d 200000000040 returned -16 [ 167.760218][ T822] cyberjack 4-1:0.69: required endpoints missing [ 167.765505][ T6376] binder: 6375:6376 ioctl c0306201 200000001440 returned -11 [ 167.906497][ T6093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.906513][ T6093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.906537][ T6093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.277015][ T5902] usb 4-1: USB disconnect, device number 11 [ 168.457420][ T6104] team0: Port device team_slave_0 added [ 168.467648][ T6093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.467663][ T6093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.467694][ T6093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.515678][ T6104] team0: Port device team_slave_1 added [ 168.685932][ T5809] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 168.839815][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 168.842721][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 168.842755][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 168.842778][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 168.888970][ T5809] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 168.889012][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.889031][ T5809] usb 2-1: Product: syz [ 168.889045][ T5809] usb 2-1: Manufacturer: syz [ 168.889058][ T5809] usb 2-1: SerialNumber: syz [ 169.084557][ T5809] usb 2-1: config 0 descriptor?? [ 169.151539][ T5809] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 169.318625][ T6384] process 'syz.3.151' launched './file0' with NULL argv: empty string added [ 170.043086][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 171.259713][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 171.259778][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 171.264096][ T5809] usb 2-1: USB disconnect, device number 10 [ 172.576609][ T5809] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 172.655404][ T822] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 172.734907][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.734933][ T5809] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 172.734981][ T5809] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 172.735016][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.799970][ T5809] usb 2-1: config 0 descriptor?? [ 172.815826][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 172.815856][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 172.830864][ T822] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.830894][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.830913][ T822] usb 4-1: Product: syz [ 172.830926][ T822] usb 4-1: Manufacturer: syz [ 172.830940][ T822] usb 4-1: SerialNumber: syz [ 172.909625][ T5809] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 172.909673][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 172.962756][ T822] usb 4-1: config 0 descriptor?? [ 173.014802][ T6397] netlink: 212112 bytes leftover after parsing attributes in process `syz.1.154'. [ 173.047816][ T5809] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 173.088112][ T5809] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 173.088169][ T5809] usb 2-1: media controller created [ 173.108499][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.385230][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 173.418598][ T5809] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 173.673925][ T5809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 173.769068][ T5809] dvb-usb: schedule remote query interval to 150 msecs. [ 173.769091][ T5809] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 173.876571][ T5809] usb 2-1: USB disconnect, device number 11 [ 173.973094][ T6101] dvb-usb: bulk message failed: -22 (1/0) [ 173.973130][ T6101] dvb-usb: error while querying for an remote control event. [ 175.719257][ T5809] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 176.172839][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.235042][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.251233][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.263240][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.302209][ T5809] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.552175][ T5809] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 176.552203][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.552220][ T5809] usb 2-1: config 0 has no interface number 0 [ 176.552341][ T5809] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.601303][ T5809] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 176.601542][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.601562][ T5809] usb 2-1: Product: syz [ 176.601575][ T5809] usb 2-1: Manufacturer: syz [ 176.601590][ T5809] usb 2-1: SerialNumber: syz [ 176.649469][ T5809] usb 2-1: config 0 descriptor?? [ 176.733088][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.819591][ T5809] cyberjack 2-1:0.69: required endpoints missing [ 178.592241][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.632886][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.647918][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.659713][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.662434][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.786844][ T822] usb 2-1: USB disconnect, device number 12 [ 178.811548][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.811565][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.811588][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.027176][ T5484] 8021q: adding VLAN 0 to HW filter on device eth1 [ 179.108720][ T6417] syz_tun: entered promiscuous mode [ 179.109092][ T6417] macvtap1: entered promiscuous mode [ 179.637954][ T822] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 179.809662][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 179.814540][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.814587][ T822] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 179.814610][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.954186][ T822] usb 2-1: config 0 descriptor?? [ 179.965425][ T5831] Bluetooth: hci3: command tx timeout [ 180.083184][ T6417] syz_tun: left promiscuous mode [ 180.519143][ T822] usbhid 2-1:0.0: can't add hid device: -71 [ 180.519261][ T822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 180.579649][ T822] usb 2-1: USB disconnect, device number 13 [ 180.765892][ T5831] Bluetooth: hci4: command tx timeout [ 181.676787][ T6101] usb 4-1: USB disconnect, device number 12 [ 182.053344][ T5831] Bluetooth: hci3: command tx timeout [ 182.505663][ T6101] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.657656][ T6101] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 182.657683][ T6101] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.657701][ T6101] usb 4-1: config 0 has no interface number 0 [ 182.657741][ T6101] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.662796][ T6101] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 182.662825][ T6101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.662844][ T6101] usb 4-1: Product: syz [ 182.662858][ T6101] usb 4-1: Manufacturer: syz [ 182.662871][ T6101] usb 4-1: SerialNumber: syz [ 182.758018][ T6101] usb 4-1: config 0 descriptor?? [ 182.798269][ T6101] cyberjack 4-1:0.69: required endpoints missing [ 182.846909][ T5831] Bluetooth: hci4: command tx timeout [ 183.179647][ T10] usb 4-1: USB disconnect, device number 13 [ 183.206212][ T6101] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 183.382443][ T6101] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 183.382473][ T6101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.382492][ T6101] usb 2-1: Product: syz [ 183.382505][ T6101] usb 2-1: Manufacturer: syz [ 183.382519][ T6101] usb 2-1: SerialNumber: syz [ 183.492709][ T6101] usb 2-1: config 0 descriptor?? [ 183.583176][ T6101] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 183.730558][ T5831] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 184.101892][ T6101] gspca_sunplus: reg_r err -110 [ 184.125467][ T5831] Bluetooth: hci3: command tx timeout [ 184.282932][ T10] usb 2-1: USB disconnect, device number 14 [ 184.779918][ T6101] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 184.925752][ T5831] Bluetooth: hci4: command tx timeout [ 184.959258][ T6101] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.959284][ T6101] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.959410][ T6101] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 184.959434][ T6101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.058243][ T6101] usb 3-1: config 0 descriptor?? [ 185.167691][ T6101] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 185.167738][ T6101] dvb-usb: bulk message failed: -22 (3/0) [ 185.274820][ T6479] netlink: 212112 bytes leftover after parsing attributes in process `syz.2.176'. [ 185.536937][ T6101] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 185.543973][ T6101] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 185.544145][ T6101] usb 3-1: media controller created [ 185.579611][ T6101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.677038][ T6101] dvb-usb: bulk message failed: -22 (6/0) [ 185.677118][ T6101] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 185.912982][ T6101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 186.034577][ T6101] dvb-usb: schedule remote query interval to 150 msecs. [ 186.034599][ T6101] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 186.115520][ T6101] usb 3-1: USB disconnect, device number 5 [ 186.205425][ T5831] Bluetooth: hci3: command tx timeout [ 187.005665][ T5831] Bluetooth: hci4: command tx timeout [ 187.071776][ T6101] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 187.663764][ T5484] 8021q: adding VLAN 0 to HW filter on device eth2 [ 188.205663][ T5809] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 188.232634][ T3585] hsr_slave_0: left promiscuous mode [ 188.258759][ T3585] hsr_slave_1: left promiscuous mode [ 188.259940][ T3585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.260031][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.348419][ T3585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.348446][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.372596][ T5902] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.384398][ T5809] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 188.384424][ T5809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.384441][ T5809] usb 3-1: config 0 has no interface number 0 [ 188.384480][ T5809] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.434748][ T5809] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 188.434778][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.434797][ T5809] usb 3-1: Product: syz [ 188.434811][ T5809] usb 3-1: Manufacturer: syz [ 188.434824][ T5809] usb 3-1: SerialNumber: syz [ 188.475716][ T5809] usb 3-1: config 0 descriptor?? [ 188.502933][ T5809] cyberjack 3-1:0.69: required endpoints missing [ 188.545561][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 188.547831][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 188.547863][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 188.547888][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 188.550583][ T5902] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 188.550610][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.550629][ T5902] usb 2-1: Product: syz [ 188.550642][ T5902] usb 2-1: Manufacturer: syz [ 188.550656][ T5902] usb 2-1: SerialNumber: syz [ 188.628462][ T5902] usb 2-1: config 0 descriptor?? [ 188.646623][ T5902] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 189.989451][ T5809] usb 3-1: USB disconnect, device number 6 [ 190.057827][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 190.057893][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 190.057963][ T5902] usb 2-1: USB disconnect, device number 15 [ 190.600296][ T3585] veth1_macvtap: left promiscuous mode [ 190.660396][ T3585] veth0_macvtap: left promiscuous mode [ 190.660777][ T3585] veth1_vlan: left promiscuous mode [ 190.661156][ T3585] veth0_vlan: left promiscuous mode [ 190.765496][ T5809] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 190.927575][ T5809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.927603][ T5809] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 190.927656][ T5809] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 190.927678][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.143701][ T5809] usb 3-1: config 0 descriptor?? [ 191.226055][ T5809] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 191.226103][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 191.310882][ T5809] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 191.313999][ T5809] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 191.314054][ T5809] usb 3-1: media controller created [ 191.368665][ T6531] netlink: 212112 bytes leftover after parsing attributes in process `syz.2.186'. [ 191.419663][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.497694][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 191.500517][ T5809] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 191.534838][ T5809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 191.563244][ T5809] dvb-usb: schedule remote query interval to 150 msecs. [ 191.563269][ T5809] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 191.593652][ T5809] usb 3-1: USB disconnect, device number 7 [ 192.150869][ T5809] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 192.892532][ T3585] team0 (unregistering): Port device team_slave_1 removed [ 192.956304][ T3585] team0 (unregistering): Port device team_slave_0 removed [ 193.503678][ T6541] bond_slave_0: entered promiscuous mode [ 193.503744][ T6541] bond_slave_1: entered promiscuous mode [ 193.504117][ T6541] macsec1: entered promiscuous mode [ 193.504131][ T6541] vlan2: entered promiscuous mode [ 193.504143][ T6541] bond0: entered promiscuous mode [ 194.255446][ T822] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 194.255628][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.298783][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.298849][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.429273][ T5902] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 194.429300][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.429318][ T5902] usb 3-1: config 0 has no interface number 0 [ 194.429361][ T5902] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.445635][ T5902] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 194.445665][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.445684][ T5902] usb 3-1: Product: syz [ 194.445697][ T5902] usb 3-1: Manufacturer: syz [ 194.445711][ T5902] usb 3-1: SerialNumber: syz [ 194.517456][ T822] usb 2-1: Using ep0 maxpacket: 32 [ 194.566402][ T5902] usb 3-1: config 0 descriptor?? [ 194.601280][ T5902] cyberjack 3-1:0.69: required endpoints missing [ 194.639370][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 194.639404][ T822] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 194.639428][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 194.728607][ T822] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 194.728637][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.728656][ T822] usb 2-1: Product: syz [ 194.728669][ T822] usb 2-1: Manufacturer: syz [ 194.728683][ T822] usb 2-1: SerialNumber: syz [ 194.870624][ T822] usb 2-1: config 0 descriptor?? [ 194.978929][ T822] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 196.673995][ T822] usb 3-1: USB disconnect, device number 8 [ 197.011488][ T10] usb 2-1: USB disconnect, device number 16 [ 197.011583][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 198.652762][ T6429] chnl_net:caif_netlink_parms(): no params data found [ 199.026410][ T822] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 199.055486][ T5902] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.187799][ T822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.189982][ T822] usb 2-1: config 208 has an invalid interface number: 119 but max is 0 [ 199.190019][ T822] usb 2-1: config 208 has no interface number 0 [ 199.190049][ T822] usb 2-1: config 208 interface 119 has no altsetting 0 [ 199.232230][ T5902] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 199.232257][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.232274][ T5902] usb 3-1: config 0 has no interface number 0 [ 199.232314][ T5902] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 199.233872][ T822] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 199.233897][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.233916][ T822] usb 2-1: Product: syz [ 199.233929][ T822] usb 2-1: Manufacturer: syz [ 199.233942][ T822] usb 2-1: SerialNumber: syz [ 199.321619][ T5902] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 199.321648][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.321666][ T5902] usb 3-1: Product: syz [ 199.321679][ T5902] usb 3-1: Manufacturer: syz [ 199.321693][ T5902] usb 3-1: SerialNumber: syz [ 199.411145][ T5902] usb 3-1: config 0 descriptor?? [ 199.626170][ T5902] cyberjack 3-1:0.69: required endpoints missing [ 199.814479][ T822] ums-alauda 2-1:208.119: USB Mass Storage device detected [ 200.455429][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 200.820000][ T6614] fuse: Unknown parameter '0x0000000000000005' [ 200.943730][ T5484] 8021q: adding VLAN 0 to HW filter on device eth3 [ 201.570663][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 201.649779][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 201.725756][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 202.103315][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.103438][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.103661][ T6429] bridge_slave_0: entered allmulticast mode [ 202.136719][ T6429] bridge_slave_0: entered promiscuous mode [ 202.245166][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.257292][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.257562][ T6429] bridge_slave_1: entered allmulticast mode [ 202.260303][ T6429] bridge_slave_1: entered promiscuous mode [ 202.419316][ T822] usb 2-1: USB disconnect, device number 17 [ 203.308906][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.310877][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.310997][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.311193][ T6425] bridge_slave_0: entered allmulticast mode [ 203.361328][ T6425] bridge_slave_0: entered promiscuous mode [ 203.402640][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.403723][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.403847][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.404054][ T6425] bridge_slave_1: entered allmulticast mode [ 203.563536][ T6425] bridge_slave_1: entered promiscuous mode [ 203.803684][ T6429] team0: Port device team_slave_0 added [ 203.826673][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.867928][ T6429] team0: Port device team_slave_1 added [ 203.871581][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.005061][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.005077][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.005099][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.070131][ T6425] team0: Port device team_slave_0 added [ 204.082070][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.082086][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.082110][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.182562][ T6425] team0: Port device team_slave_1 added [ 204.945539][ T5902] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 205.099202][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.100477][ T5902] usb 2-1: config 208 has an invalid interface number: 119 but max is 0 [ 205.100501][ T5902] usb 2-1: config 208 has no interface number 0 [ 205.100530][ T5902] usb 2-1: config 208 interface 119 has no altsetting 0 [ 205.102975][ T5902] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 205.103000][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.103019][ T5902] usb 2-1: Product: syz [ 205.103032][ T5902] usb 2-1: Manufacturer: syz [ 205.103045][ T5902] usb 2-1: SerialNumber: syz [ 205.490796][ T5902] ums-alauda 2-1:208.119: USB Mass Storage device detected [ 205.598645][ T5923] usb 3-1: USB disconnect, device number 9 [ 206.898016][ T5902] usb 2-1: USB disconnect, device number 18 [ 207.473409][ T5484] 8021q: adding VLAN 0 to HW filter on device eth4 [ 207.565878][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.565907][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.565932][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.757080][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.757097][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.757122][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.053549][ T6429] hsr_slave_0: entered promiscuous mode [ 208.068515][ T6429] hsr_slave_1: entered promiscuous mode [ 208.070910][ T6429] debugfs: 'hsr0' already exists in 'hsr' [ 208.070936][ T6429] Cannot create hsr debugfs directory [ 208.575435][ T6101] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 208.595968][ T6425] hsr_slave_0: entered promiscuous mode [ 208.600630][ T6425] hsr_slave_1: entered promiscuous mode [ 208.623349][ T6425] debugfs: 'hsr0' already exists in 'hsr' [ 208.623376][ T6425] Cannot create hsr debugfs directory [ 208.732838][ T6101] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 208.732865][ T6101] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.732883][ T6101] usb 4-1: config 0 has no interface number 0 [ 208.732924][ T6101] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.782080][ T6101] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 208.782109][ T6101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.782128][ T6101] usb 4-1: Product: syz [ 208.782141][ T6101] usb 4-1: Manufacturer: syz [ 208.782155][ T6101] usb 4-1: SerialNumber: syz [ 208.842578][ T6101] usb 4-1: config 0 descriptor?? [ 208.861346][ T6101] cyberjack 4-1:0.69: required endpoints missing [ 209.777123][ T6101] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 209.921973][ T5902] usb 4-1: USB disconnect, device number 14 [ 209.972724][ T6101] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.994089][ T6101] usb 2-1: config 208 has an invalid interface number: 119 but max is 0 [ 209.994117][ T6101] usb 2-1: config 208 has no interface number 0 [ 209.994147][ T6101] usb 2-1: config 208 interface 119 has no altsetting 0 [ 210.262942][ T6101] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 210.262971][ T6101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.262990][ T6101] usb 2-1: Product: syz [ 210.263003][ T6101] usb 2-1: Manufacturer: syz [ 210.263017][ T6101] usb 2-1: SerialNumber: syz [ 210.602070][ T6101] ums-alauda 2-1:208.119: USB Mass Storage device detected [ 211.026802][ T6101] usb 2-1: USB disconnect, device number 19 [ 211.053247][ T6049] udevd[6049]: setting mode of /dev/bus/usb/002/019 to 020664 failed: No such file or directory [ 211.053415][ T6049] udevd[6049]: setting owner of /dev/bus/usb/002/019 to uid=0, gid=0 failed: No such file or directory [ 211.658177][ T3585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.400828][ T3585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.160973][ T3585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.391506][ T6720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.085566][ T5923] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 214.248196][ T5923] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 214.248223][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.248241][ T5923] usb 3-1: config 0 has no interface number 0 [ 214.248281][ T5923] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.250910][ T5923] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 214.250938][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.250957][ T5923] usb 3-1: Product: syz [ 214.250971][ T5923] usb 3-1: Manufacturer: syz [ 214.250984][ T5923] usb 3-1: SerialNumber: syz [ 214.354775][ T5923] usb 3-1: config 0 descriptor?? [ 214.364297][ T5923] cyberjack 3-1:0.69: required endpoints missing [ 216.531498][ T5902] usb 3-1: USB disconnect, device number 10 [ 217.605185][ T3585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.706001][ T6429] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 221.136179][ T6429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.188025][ T6101] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 221.362920][ T6429] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 221.392571][ T6101] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 221.392599][ T6101] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.392617][ T6101] usb 4-1: config 0 has no interface number 0 [ 221.392658][ T6101] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.451889][ T6101] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 221.451921][ T6101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.451948][ T6101] usb 4-1: Product: syz [ 221.451962][ T6101] usb 4-1: Manufacturer: syz [ 221.451975][ T6101] usb 4-1: SerialNumber: syz [ 221.508392][ T6101] usb 4-1: config 0 descriptor?? [ 221.569373][ T6101] cyberjack 4-1:0.69: required endpoints missing [ 222.569330][ T6429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.420796][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 223.558069][ T6429] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 223.864184][ T6429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.972568][ T6101] usb 4-1: USB disconnect, device number 15 [ 224.968876][ T6429] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.092335][ T6429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.325449][ T822] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 226.362020][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 226.484571][ T822] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 226.484599][ T822] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 226.484619][ T822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.484636][ T822] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 226.484656][ T822] usb 4-1: config 1 has no interface number 0 [ 226.484699][ T822] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 226.484720][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.715490][ T5923] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 226.858291][ T822] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 226.889009][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 226.989250][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.993087][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.063290][ T5923] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 227.063321][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.063340][ T5923] usb 2-1: Product: syz [ 227.063353][ T5923] usb 2-1: Manufacturer: syz [ 227.063367][ T5923] usb 2-1: SerialNumber: syz [ 227.297727][ T5923] usb 2-1: config 0 descriptor?? [ 227.447152][ T822] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 227.447670][ T822] snd_usb_pod 4-1:1.1: invalid control EP [ 227.447685][ T822] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 227.448298][ T822] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 227.491759][ T822] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 227.891209][ T5923] usb 4-1: USB disconnect, device number 16 [ 228.596842][ T822] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 228.639750][ T10] usb 2-1: USB disconnect, device number 20 [ 228.760870][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 228.797678][ T5923] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 228.877985][ T822] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 228.878015][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.878033][ T822] usb 3-1: Product: syz [ 228.878047][ T822] usb 3-1: Manufacturer: syz [ 228.878060][ T822] usb 3-1: SerialNumber: syz [ 228.969094][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 228.974729][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 228.974763][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 228.974787][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 229.032532][ T822] usb 3-1: config 0 descriptor?? [ 229.182814][ T5923] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 229.182843][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.182859][ T5923] usb 4-1: Product: syz [ 229.182871][ T5923] usb 4-1: Manufacturer: syz [ 229.182884][ T5923] usb 4-1: SerialNumber: syz [ 229.242872][ T5923] usb 4-1: config 0 descriptor?? [ 229.431677][ T5923] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 229.436190][ T822] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 011 [ 231.516195][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 231.516260][ C0] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 231.516337][ T5923] usb 4-1: USB disconnect, device number 17 [ 231.669383][ T10] usb 3-1: USB disconnect, device number 11 [ 233.068674][ T6425] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.426446][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 233.549866][ T5976] udevd[5976]: setting mode of /dev/bus/usb/004/017 to 020664 failed: No such file or directory [ 233.550037][ T5976] udevd[5976]: setting owner of /dev/bus/usb/004/017 to uid=0, gid=0 failed: No such file or directory [ 233.875446][ T5923] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 234.025467][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 234.027504][ T5923] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.027535][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 234.027567][ T5923] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 234.027588][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.108143][ T5923] usb 4-1: config 0 descriptor?? [ 234.257170][ T822] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 234.448923][ T822] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 234.448950][ T822] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 234.448969][ T822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.448987][ T822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 234.449058][ T822] usb 2-1: config 1 has no interface number 0 [ 234.449100][ T822] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 234.449122][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.644659][ T822] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 234.977743][ T822] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 234.978106][ T822] snd_usb_pod 2-1:1.1: invalid control EP [ 234.978119][ T822] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 234.978404][ T822] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 234.978941][ T822] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 235.129111][ T5923] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 235.226141][ T822] usb 2-1: USB disconnect, device number 21 [ 235.494770][ T5923] usb 4-1: USB disconnect, device number 18 [ 235.750432][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.819365][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.977080][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.979345][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.982617][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.116291][ T3585] bridge_slave_1: left allmulticast mode [ 236.116318][ T3585] bridge_slave_1: left promiscuous mode [ 236.116557][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.565384][ T822] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 236.715582][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 236.894189][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 236.894224][ T822] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 236.894248][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 236.941138][ T822] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 236.941168][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.941187][ T822] usb 4-1: Product: syz [ 236.941201][ T822] usb 4-1: Manufacturer: syz [ 236.941214][ T822] usb 4-1: SerialNumber: syz [ 236.995967][ T822] usb 4-1: config 0 descriptor?? [ 237.025409][ T822] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 237.475668][ T3585] bridge_slave_0: left allmulticast mode [ 237.475697][ T3585] bridge_slave_0: left promiscuous mode [ 237.476913][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.047303][ T5831] Bluetooth: hci5: command tx timeout [ 238.748897][ T10] usb 4-1: USB disconnect, device number 19 [ 238.748990][ C0] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 239.149122][ T3585] bridge_slave_1: left allmulticast mode [ 239.149153][ T3585] bridge_slave_1: left promiscuous mode [ 239.149378][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.176575][ T5960] udevd[5960]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 239.402620][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.570373][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.574418][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.612828][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.613632][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.840329][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 239.840352][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 239.953710][ T3585] bridge_slave_0: left allmulticast mode [ 239.953739][ T3585] bridge_slave_0: left promiscuous mode [ 239.954001][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.125558][ T5831] Bluetooth: hci5: command tx timeout [ 240.140921][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 240.275444][ T10] usb 3-1: device descriptor read/64, error -71 [ 240.530601][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 240.665524][ T10] usb 3-1: device descriptor read/64, error -71 [ 240.775978][ T10] usb usb3-port1: attempt power cycle [ 240.826240][ T5809] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 240.849625][ T3585] bridge_slave_1: left allmulticast mode [ 240.849653][ T3585] bridge_slave_1: left promiscuous mode [ 240.849876][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.960504][ T3585] bridge_slave_0: left allmulticast mode [ 240.960532][ T3585] bridge_slave_0: left promiscuous mode [ 240.961209][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.984137][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 240.984972][ T5809] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 241.004544][ T5809] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 241.004579][ T5809] usb 4-1: can't read configurations, error -61 [ 241.145456][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 241.145909][ T5809] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 241.172857][ T10] usb 3-1: device descriptor read/8, error -71 [ 241.315394][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 241.316474][ T5809] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 241.321903][ T5809] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 241.321937][ T5809] usb 4-1: can't read configurations, error -61 [ 241.322496][ T5809] usb usb4-port1: attempt power cycle [ 241.434978][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 241.456151][ T10] usb 3-1: device descriptor read/8, error -71 [ 241.566017][ T10] usb usb3-port1: unable to enumerate USB device [ 241.725501][ T5831] Bluetooth: hci6: command tx timeout [ 241.747261][ T3585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.775470][ T5809] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 241.794546][ T3585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.806559][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 241.807174][ T5809] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 241.808964][ T5809] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 241.808995][ T5809] usb 4-1: can't read configurations, error -61 [ 241.897791][ T3585] bond0 (unregistering): Released all slaves [ 241.935571][ T5809] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 241.957773][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 241.959728][ T5809] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 241.961871][ T5809] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 241.961902][ T5809] usb 4-1: can't read configurations, error -61 [ 242.001720][ T5809] usb usb4-port1: unable to enumerate USB device [ 242.205505][ T5831] Bluetooth: hci5: command tx timeout [ 242.214652][ T3585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.307758][ T3585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.384860][ T3585] bond0 (unregistering): Released all slaves [ 242.762653][ T822] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 242.907362][ T822] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 242.907388][ T822] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 242.907408][ T822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.907425][ T822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 242.907445][ T822] usb 3-1: config 1 has no interface number 0 [ 242.907486][ T822] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 242.907507][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.014221][ T822] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 243.325164][ T822] snd_usb_pod 3-1:1.1: set_interface failed [ 243.367316][ T822] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 243.367513][ T822] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 243.398130][ T822] usb 3-1: USB disconnect, device number 16 [ 243.739953][ T3585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.807656][ T5831] Bluetooth: hci6: command tx timeout [ 243.852134][ T3585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.868441][ T3585] bond0 (unregistering): Released all slaves [ 243.954181][ T6425] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.268775][ T6425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.288169][ T5831] Bluetooth: hci5: command tx timeout [ 244.383516][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 244.384133][ T6918] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 244.571509][ T6954] syzkaller0: entered promiscuous mode [ 244.571534][ T6954] syzkaller0: entered allmulticast mode [ 244.842638][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 244.996978][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 244.999034][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 244.999066][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 244.999098][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 245.001404][ T10] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 245.001429][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.001448][ T10] usb 2-1: Product: syz [ 245.001462][ T10] usb 2-1: Manufacturer: syz [ 245.001475][ T10] usb 2-1: SerialNumber: syz [ 245.133575][ T10] usb 2-1: config 0 descriptor?? [ 245.519645][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 245.911311][ T5831] Bluetooth: hci6: command tx timeout [ 246.773435][ T10] usb 2-1: USB disconnect, device number 22 [ 246.773511][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 246.773570][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 247.207476][ T6980] loop5: detected capacity change from 0 to 7 [ 247.289860][ T6980] Dev loop5: unable to read RDB block 7 [ 247.289890][ T6980] loop5: AHDI p1 [ 247.289917][ T6980] loop5: partition table partially beyond EOD, truncated [ 247.803315][ T36] audit: type=1326 audit(1776866017.144:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.1.311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab98afc819 code=0x0 [ 247.891326][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 247.965374][ T5831] Bluetooth: hci6: command tx timeout [ 250.135413][ T5923] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 250.309700][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.309726][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 250.309782][ T5923] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 250.309805][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.317878][ T5923] usb 4-1: config 0 descriptor?? [ 250.395121][ T5923] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 250.395187][ T5923] dvb-usb: bulk message failed: -22 (3/0) [ 250.419575][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 250.421822][ T5923] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 250.421875][ T5923] usb 4-1: media controller created [ 250.464146][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.517527][ T5923] dvb-usb: bulk message failed: -22 (6/0) [ 250.517606][ T5923] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 250.549022][ T7009] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.315'. [ 250.619406][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 250.655605][ T5923] dvb-usb: schedule remote query interval to 150 msecs. [ 250.655627][ T5923] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 250.687154][ T5923] usb 4-1: USB disconnect, device number 24 [ 251.563895][ T5923] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 251.955300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 255.744136][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744200][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.955542][ T10] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 258.114085][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.114110][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.114156][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 258.114178][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.265038][ T10] usb 4-1: config 0 descriptor?? [ 258.314625][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 258.314673][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 258.377112][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 258.404126][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 258.404192][ T10] usb 4-1: media controller created [ 258.438036][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.543819][ T7038] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.326'. [ 258.602858][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 258.602939][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 258.689843][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 258.900892][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 258.900914][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 258.973554][ T10] usb 4-1: USB disconnect, device number 25 [ 259.643726][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 259.712497][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 259.712525][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 260.065358][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 260.100566][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.204767][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.207658][ T5923] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 260.215356][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 260.231761][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.231794][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.231825][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 260.231847][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.298169][ T10] usb 4-1: config 0 descriptor?? [ 260.413256][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.417017][ T5902] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 260.457887][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.459867][ T5923] usb 2-1: config 208 has an invalid interface number: 119 but max is 0 [ 260.459892][ T5923] usb 2-1: config 208 has no interface number 0 [ 260.459922][ T5923] usb 2-1: config 208 interface 119 has no altsetting 0 [ 260.463774][ T5923] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 260.463800][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.463818][ T5923] usb 2-1: Product: syz [ 260.463881][ T5923] usb 2-1: Manufacturer: syz [ 260.463895][ T5923] usb 2-1: SerialNumber: syz [ 260.638162][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 260.638199][ T5902] usb 3-1: can't read configurations, error -61 [ 260.825372][ T5902] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 260.968022][ T10] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 261.043626][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.043662][ T5902] usb 3-1: can't read configurations, error -61 [ 261.073538][ T5902] usb usb3-port1: attempt power cycle [ 261.434483][ T3585] hsr_slave_0: left promiscuous mode [ 261.435978][ T5902] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 261.562730][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.562767][ T5902] usb 3-1: can't read configurations, error -61 [ 261.600823][ T3585] hsr_slave_1: left promiscuous mode [ 261.614327][ T3585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.614353][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.669332][ T3585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.669358][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.715449][ T5902] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 261.875027][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.875063][ T5902] usb 3-1: can't read configurations, error -61 [ 261.917098][ T5902] usb usb3-port1: unable to enumerate USB device [ 262.101197][ T3585] veth1_macvtap: left promiscuous mode [ 262.101543][ T3585] veth0_macvtap: left promiscuous mode [ 262.102042][ T3585] veth1_vlan: left promiscuous mode [ 262.142421][ T3585] veth0_vlan: left promiscuous mode [ 262.598408][ T10] usb 4-1: USB disconnect, device number 26 [ 263.177409][ T5923] ums-alauda 2-1:208.119: USB Mass Storage device detected [ 263.620576][ T5923] usb 2-1: USB disconnect, device number 23 [ 264.144108][ T5923] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 264.385453][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 264.387822][ T5923] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 264.387854][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 264.387878][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.387900][ T5923] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.387938][ T5923] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.387960][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.736844][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.891804][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.909497][ T5923] usb 2-1: GET_CAPABILITIES returned 0 [ 264.909551][ T5923] usbtmc 2-1:16.0: can't read capabilities [ 265.677810][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 265.795552][ T5809] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 265.795825][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 265.936189][ T5809] usb 4-1: device descriptor read/64, error -32 [ 266.185487][ T5809] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 266.185836][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 266.350736][ T5809] usb 4-1: device descriptor read/64, error -32 [ 266.455831][ T5809] usb usb4-port1: attempt power cycle [ 266.797473][ T5809] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 266.815630][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 266.816693][ T5809] usb 4-1: device descriptor read/8, error -32 [ 266.926965][ T5809] raw-gadget.1 gadget.3: failed to queue suspend event [ 266.952836][ T5809] raw-gadget.1 gadget.3: failed to queue reset event [ 267.026167][ T5809] raw-gadget.1 gadget.3: failed to queue resume event [ 267.085447][ T5809] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 267.107686][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 267.107802][ T5809] usb 4-1: device descriptor read/8, error -32 [ 267.215444][ T5809] raw-gadget.1 gadget.3: failed to queue suspend event [ 267.219753][ T5809] usb usb4-port1: unable to enumerate USB device [ 267.278717][ T3585] team0 (unregistering): Port device team_slave_1 removed [ 267.353871][ T3585] team0 (unregistering): Port device team_slave_0 removed [ 267.806905][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 267.806928][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 268.307663][ T3585] team0 (unregistering): Port device team_slave_1 removed [ 268.379485][ T3585] team0 (unregistering): Port device team_slave_0 removed [ 269.327038][ T3585] team0 (unregistering): Port device team_slave_1 removed [ 269.366353][ T3585] team0 (unregistering): Port device team_slave_0 removed [ 271.149680][ T7089] bond0: Caught tx_queue_len zero misconfig [ 271.611361][ T5809] usb 2-1: USB disconnect, device number 24 [ 272.814881][ T7068] raw-gadget.1 gadget.3: failed to queue disconnect event [ 273.095552][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 273.275991][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 273.276027][ T10] usb 2-1: can't read configurations, error -61 [ 273.405487][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 273.589650][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 273.589686][ T10] usb 2-1: can't read configurations, error -61 [ 273.590070][ T10] usb usb2-port1: attempt power cycle [ 273.925383][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 273.949475][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 273.949511][ T10] usb 2-1: can't read configurations, error -61 [ 274.075646][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 274.100221][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 274.100258][ T10] usb 2-1: can't read configurations, error -61 [ 274.100639][ T10] usb usb2-port1: unable to enumerate USB device [ 275.700461][ T7129] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 275.703977][ T5484] 8021q: adding VLAN 0 to HW filter on device eth5 [ 276.122602][ T6913] chnl_net:caif_netlink_parms(): no params data found [ 276.270591][ T6940] chnl_net:caif_netlink_parms(): no params data found [ 277.187389][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.187518][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.187693][ T6913] bridge_slave_0: entered allmulticast mode [ 277.192414][ T6913] bridge_slave_0: entered promiscuous mode [ 277.419351][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.419489][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.419729][ T6913] bridge_slave_1: entered allmulticast mode [ 277.425704][ T6913] bridge_slave_1: entered promiscuous mode [ 277.458935][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.459055][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.459457][ T6940] bridge_slave_0: entered allmulticast mode [ 277.493957][ T6940] bridge_slave_0: entered promiscuous mode [ 277.592299][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.592435][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.592637][ T6940] bridge_slave_1: entered allmulticast mode [ 277.635702][ T6940] bridge_slave_1: entered promiscuous mode [ 277.830344][ T6913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.019494][ T7173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.080498][ T6913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.099048][ T7175] fuse: Unknown parameter '00000000000000000005' [ 278.140181][ T6940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.293891][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 278.319861][ T6940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.639023][ T6913] team0: Port device team_slave_0 added [ 278.789633][ T6913] team0: Port device team_slave_1 added [ 278.815120][ T6940] team0: Port device team_slave_0 added [ 279.016372][ T6940] team0: Port device team_slave_1 added [ 279.345512][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 279.495446][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 279.497780][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 279.497804][ T10] usb 4-1: config 0 has no interface number 0 [ 279.500342][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 279.500367][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.500386][ T10] usb 4-1: Product: syz [ 279.500399][ T10] usb 4-1: Manufacturer: syz [ 279.500412][ T10] usb 4-1: SerialNumber: syz [ 279.572579][ T10] usb 4-1: config 0 descriptor?? [ 279.586997][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 280.049651][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.060723][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.129589][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 280.161862][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 282.343635][ T5484] 8021q: adding VLAN 0 to HW filter on device eth6 [ 282.707091][ T7204] openvswitch: netlink: Flow key attr not present in new flow. [ 283.838324][ T7188] pim6reg: entered allmulticast mode [ 283.863196][ T7190] pim6reg: left allmulticast mode [ 284.401116][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.401132][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.401157][ T6913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.515136][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.515153][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.552623][ T6913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.592043][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.592060][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.592135][ T6940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.209001][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.209018][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.209042][ T6940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.914426][ T7228] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.442985][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 287.443627][ T5923] usb 4-1: USB disconnect, device number 31 [ 287.649775][ T5923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 287.693506][ T7239] ALSA: mixer_oss: invalid OSS volume 'ev/kvm' [ 287.746695][ T6913] hsr_slave_0: entered promiscuous mode [ 287.767486][ T6913] hsr_slave_1: entered promiscuous mode [ 287.844410][ T5923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 287.877619][ T5923] quatech2 4-1:0.51: device disconnected [ 288.605371][ T6940] hsr_slave_0: entered promiscuous mode [ 288.613836][ T6940] hsr_slave_1: entered promiscuous mode [ 288.623888][ T6940] debugfs: 'hsr0' already exists in 'hsr' [ 288.623915][ T6940] Cannot create hsr debugfs directory [ 292.635732][ T5809] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 292.786238][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 292.788601][ T5809] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 292.788633][ T5809] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 292.788657][ T5809] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.788679][ T5809] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.788730][ T5809] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.788753][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.416509][ T7305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.445712][ T7305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.475764][ T5809] usb 3-1: usb_control_msg returned -32 [ 293.475926][ T5809] usbtmc 3-1:16.0: can't read capabilities [ 294.120433][ T5923] usb 3-1: USB disconnect, device number 21 [ 294.849582][ T7319] openvswitch: netlink: IP tunnel dst address not specified [ 297.331085][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.401006][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.410992][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.414420][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.429276][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.565835][ T59] Bluetooth: hci3: command tx timeout [ 301.269940][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.328903][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.339508][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.345024][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.347608][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.645356][ T59] Bluetooth: hci3: command tx timeout [ 303.405741][ T59] Bluetooth: hci4: command tx timeout [ 303.726282][ T59] Bluetooth: hci3: command tx timeout [ 303.772313][ T5484] 8021q: adding VLAN 0 to HW filter on device eth7 [ 305.485493][ T59] Bluetooth: hci4: command tx timeout [ 305.805381][ T59] Bluetooth: hci3: command tx timeout [ 307.565971][ T59] Bluetooth: hci4: command tx timeout [ 309.491806][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.530681][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.532812][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.651451][ T5831] Bluetooth: hci4: command tx timeout [ 309.680464][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.699797][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.095663][ T7382] openvswitch: netlink: Flow key attr not present in new flow. [ 311.686861][ T822] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 311.900595][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 311.904236][ T5831] Bluetooth: hci5: command tx timeout [ 311.937106][ T822] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 311.937138][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.937171][ T822] usb 3-1: Product: syz [ 311.937185][ T822] usb 3-1: Manufacturer: syz [ 311.937200][ T822] usb 3-1: SerialNumber: syz [ 312.248447][ T822] usb 3-1: config 0 descriptor?? [ 312.451394][ T822] hub 3-1:0.0: bad descriptor, ignoring hub [ 312.451433][ T822] hub 3-1:0.0: probe with driver hub failed with error -5 [ 312.574976][ T822] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 313.967792][ T5831] Bluetooth: hci5: command tx timeout [ 314.731609][ T822] input: failed to attach handler mousedev to device input20, error: -5 [ 314.871743][ T822] usb 3-1: USB disconnect, device number 22 [ 316.045618][ T5831] Bluetooth: hci5: command tx timeout [ 317.201865][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.201936][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.125546][ T5831] Bluetooth: hci5: command tx timeout [ 325.738455][ T822] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 333.073045][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.131497][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.133265][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.153278][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.168710][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.370971][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.404246][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.413968][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.518324][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.539789][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 356.445376][ T5831] Bluetooth: hci0: command tx timeout [ 358.525378][ T5831] Bluetooth: hci0: command tx timeout [ 359.740886][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.780645][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.831864][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.927854][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.931395][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.605947][ T59] Bluetooth: hci0: command tx timeout [ 360.925518][ T59] Bluetooth: hci7: command tx timeout [ 361.863128][ T5484] 8021q: adding VLAN 0 to HW filter on device eth8 [ 362.045536][ T59] Bluetooth: hci6: command tx timeout [ 362.685634][ T59] Bluetooth: hci0: command tx timeout [ 363.005403][ T59] Bluetooth: hci7: command tx timeout [ 364.129096][ T59] Bluetooth: hci6: command tx timeout [ 365.085380][ T59] Bluetooth: hci7: command tx timeout [ 366.208484][ T59] Bluetooth: hci6: command tx timeout [ 367.167277][ T59] Bluetooth: hci7: command tx timeout [ 367.964183][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 368.017940][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 368.020419][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 368.031157][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 368.033470][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 368.285492][ T59] Bluetooth: hci6: command tx timeout [ 378.611169][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.611237][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.088274][ T59] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 397.165495][ T9261] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 414.629834][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.757135][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.789315][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.793075][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.793778][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.968239][ T5831] Bluetooth: hci8: command tx timeout [ 416.267711][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.351142][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.353984][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.456490][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.457805][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.925410][ T59] Bluetooth: hci3: command tx timeout [ 418.045372][ T59] Bluetooth: hci8: command tx timeout [ 418.605545][ T59] Bluetooth: hci4: command tx timeout [ 419.005365][ T59] Bluetooth: hci3: command tx timeout [ 420.126227][ T59] Bluetooth: hci8: command tx timeout [ 420.685522][ T59] Bluetooth: hci4: command tx timeout [ 421.085250][ T59] Bluetooth: hci3: command tx timeout [ 421.264311][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.318500][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.334371][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.466487][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.467328][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.686138][ T59] Bluetooth: hci8: command tx timeout [ 422.765471][ T5834] Bluetooth: hci4: command tx timeout [ 423.165306][ T59] Bluetooth: hci3: command tx timeout [ 424.845384][ T59] Bluetooth: hci4: command tx timeout [ 428.022603][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 428.069267][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 428.070575][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 428.083043][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 428.084037][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 440.073832][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.073905][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.251947][ T5844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 474.294049][ T5844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 474.301701][ T5844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 474.303498][ T5844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 474.306463][ T5844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 476.759511][ T5827] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 476.790739][ T5827] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 476.793116][ T5827] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 476.800288][ T5827] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 476.801117][ T5827] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 481.897357][T12330] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 481.940517][T12330] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 481.941845][T12330] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 481.944536][T12330] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 482.026124][T12330] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 483.089461][T12330] Bluetooth: hci6: command 0x0406 tx timeout [ 487.999372][T12342] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 488.034317][T12342] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 488.043100][T12342] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 488.044705][T12342] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 488.073471][T12342] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 501.491497][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.491564][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.974748][T12342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.012155][T12342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.013782][T12342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.049629][T12342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.050835][T12342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 536.365358][ T5831] Bluetooth: hci9: command tx timeout [ 536.366006][ T59] Bluetooth: hci1: command tx timeout [ 537.572963][T14442] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 537.614825][T14442] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 537.730246][T14442] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 537.763366][T14442] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 537.764475][T14442] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 538.445491][T14442] Bluetooth: hci1: command tx timeout [ 538.445520][T14442] Bluetooth: hci9: command tx timeout [ 539.405529][T14466] Bluetooth: hci4: command 0x0406 tx timeout [ 539.405836][T14466] Bluetooth: hci3: command 0x0406 tx timeout [ 540.525349][T14466] Bluetooth: hci1: command tx timeout [ 540.525440][T12562] Bluetooth: hci9: command tx timeout [ 542.605410][T14466] Bluetooth: hci1: command tx timeout [ 542.605456][T12562] Bluetooth: hci9: command tx timeout [ 542.781016][T14466] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 542.831668][T14466] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 542.834019][T14466] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 542.863011][T14466] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 542.882926][T14466] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 547.803982][ T5827] Bluetooth: hci11: command tx timeout [ 549.805499][T14443] Bluetooth: hci10: command tx timeout [ 549.806074][T12330] Bluetooth: hci11: command tx timeout [ 550.317744][T12330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.389898][T12330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.412609][T12330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.415052][T12330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.438761][T12330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.005337][T12330] Bluetooth: hci12: command tx timeout [ 551.085356][T12330] Bluetooth: hci7: command tx timeout [ 551.165556][ T5831] Bluetooth: hci0: command tx timeout [ 551.166023][ T5831] Bluetooth: hci14: command tx timeout [ 551.166302][T12330] Bluetooth: hci13: command tx timeout [ 551.898437][T12330] Bluetooth: hci10: command tx timeout [ 551.958262][ T5834] Bluetooth: hci11: command tx timeout [ 552.687976][ T5834] Bluetooth: hci5: command tx timeout [ 553.085416][ T5834] Bluetooth: hci12: command tx timeout [ 553.165293][ T5834] Bluetooth: hci7: command tx timeout [ 553.246209][T12330] Bluetooth: hci14: command tx timeout [ 553.246241][T12330] Bluetooth: hci0: command tx timeout [ 553.246366][ T5834] Bluetooth: hci13: command tx timeout [ 553.965849][ T5834] Bluetooth: hci10: command tx timeout [ 554.045357][ T5834] Bluetooth: hci11: command tx timeout [ 554.765309][ T5834] Bluetooth: hci5: command tx timeout [ 555.165411][ T5834] Bluetooth: hci12: command tx timeout [ 555.255360][ T5834] Bluetooth: hci7: command tx timeout [ 555.325351][ T5831] Bluetooth: hci0: command tx timeout [ 555.325384][ T5831] Bluetooth: hci14: command tx timeout [ 555.325514][ T5834] Bluetooth: hci13: command tx timeout [ 556.045533][ T5834] Bluetooth: hci10: command tx timeout [ 556.845411][ T5834] Bluetooth: hci5: command tx timeout [ 557.245492][ T5834] Bluetooth: hci12: command tx timeout [ 557.325428][ T5834] Bluetooth: hci7: command tx timeout [ 557.405338][T12330] Bluetooth: hci14: command tx timeout [ 557.405370][T12330] Bluetooth: hci0: command tx timeout [ 557.410628][ T5834] Bluetooth: hci13: command tx timeout [ 558.925415][ T5834] Bluetooth: hci5: command tx timeout [ 561.645585][ T37] INFO: task kworker/u8:16:3549 blocked for more than 143 seconds. [ 561.645610][ T37] Not tainted syzkaller #0 [ 561.645621][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.645630][ T37] task:kworker/u8:16 state:D stack:20656 pid:3549 tgid:3549 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 561.645684][ T37] Workqueue: ipv6_addrconf addrconf_dad_work [ 561.645913][ T37] Call Trace: [ 561.645947][ T37] [ 561.646019][ T37] __schedule+0x1681/0x54c0 [ 561.646170][ T37] ? __pfx___schedule+0x10/0x10 [ 561.646237][ T37] rt_mutex_schedule+0x76/0xf0 [ 561.646333][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 561.646408][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 561.646439][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 561.646467][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 561.646514][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 561.646547][ T37] ? addrconf_dad_work+0x124/0x1680 [ 561.646572][ T37] mutex_lock_nested+0x168/0x1d0 [ 561.646598][ T37] ? addrconf_dad_work+0x124/0x1680 [ 561.646626][ T37] addrconf_dad_work+0x124/0x1680 [ 561.646653][ T37] ? lock_acquire+0x106/0x350 [ 561.646704][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 561.646727][ T37] ? __pfx_addrconf_dad_work+0x10/0x10 [ 561.646753][ T37] ? process_scheduled_works+0xa70/0x1860 [ 561.646852][ T37] ? process_scheduled_works+0xa70/0x1860 [ 561.646879][ T37] ? process_scheduled_works+0xa70/0x1860 [ 561.646933][ T37] process_scheduled_works+0xb5d/0x1860 [ 561.646991][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 561.647026][ T37] ? assign_work+0x3d5/0x5e0 [ 561.647058][ T37] worker_thread+0xa53/0xfc0 [ 561.647100][ T37] kthread+0x388/0x470 [ 561.647150][ T37] ? __pfx_worker_thread+0x10/0x10 [ 561.647167][ T37] ? __pfx_kthread+0x10/0x10 [ 561.647189][ T37] ret_from_fork+0x514/0xb70 [ 561.647259][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 561.647278][ T37] ? __switch_to+0xc79/0x1410 [ 561.647352][ T37] ? __pfx_kthread+0x10/0x10 [ 561.647376][ T37] ret_from_fork_asm+0x1a/0x30 [ 561.647427][ T37] [ 561.647450][ T37] INFO: task dhcpcd:5484 blocked for more than 143 seconds. [ 561.647465][ T37] Not tainted syzkaller #0 [ 561.647474][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.647483][ T37] task:dhcpcd state:D stack:21464 pid:5484 tgid:5484 ppid:5483 task_flags:0x400140 flags:0x00080000 [ 561.647540][ T37] Call Trace: [ 561.647547][ T37] [ 561.647557][ T37] __schedule+0x1681/0x54c0 [ 561.647607][ T37] ? __pfx___schedule+0x10/0x10 [ 561.647642][ T37] rt_mutex_schedule+0x76/0xf0 [ 561.647669][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 561.647713][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 561.647743][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 561.647772][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 561.647810][ T37] ? inet6_rtm_newaddr+0x65f/0xe30 [ 561.647834][ T37] ? inet6_rtm_newaddr+0x65f/0xe30 [ 561.647860][ T37] ? inet6_rtm_newaddr+0x65f/0xe30 [ 561.647878][ T37] mutex_lock_nested+0x168/0x1d0 [ 561.647910][ T37] inet6_rtm_newaddr+0x65f/0xe30 [ 561.647934][ T37] ? kernel_text_address+0xa5/0xe0 [ 561.647959][ T37] ? __kernel_text_address+0xd/0x30 [ 561.647984][ T37] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 561.648013][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 561.648124][ T37] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 561.648145][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 561.648169][ T37] ? kasan_save_track+0x3e/0x80 [ 561.648268][ T37] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 561.648352][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 561.648377][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.648403][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 561.648435][ T37] netlink_rcv_skb+0x232/0x4b0 [ 561.648533][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.648560][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.648599][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.648625][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.648657][ T37] netlink_unicast+0x780/0x920 [ 561.648691][ T37] netlink_sendmsg+0x813/0xb40 [ 561.648728][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.648763][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.648862][ T37] ____sys_sendmsg+0x94c/0x9c0 [ 561.648921][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.648949][ T37] ? import_iovec+0x73/0xa0 [ 561.649036][ T37] ___sys_sendmsg+0x2a5/0x360 [ 561.649056][ T37] ? __asan_memcpy+0x40/0x70 [ 561.649108][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.649162][ T37] ? __pfx_vfs_read+0x10/0x10 [ 561.649238][ T37] __x64_sys_sendmsg+0x1c3/0x2a0 [ 561.649261][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.649290][ T37] ? __pfx_ksys_read+0x10/0x10 [ 561.649306][ T37] ? __task_pid_nr_ns+0x28/0x470 [ 561.649336][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.649375][ T37] do_syscall_64+0x15f/0xf80 [ 561.649424][ T37] ? trace_irq_disable+0x3b/0x140 [ 561.649482][ T37] ? clear_bhb_loop+0x40/0x90 [ 561.649504][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.649533][ T37] RIP: 0033:0x7efda18cc407 [ 561.649555][ T37] RSP: 002b:00007fffafe705e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 561.649607][ T37] RAX: ffffffffffffffda RBX: 00007efda1842780 RCX: 00007efda18cc407 [ 561.649621][ T37] RDX: 0000000000000000 RSI: 00007fffafe847c0 RDI: 0000000000000004 [ 561.649632][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.649643][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffafe949f0 [ 561.649656][ T37] R13: 00007efda1842708 R14: 0000000000000048 R15: 00007fffafe847c0 [ 561.649685][ T37] [ 561.649744][ T37] INFO: task syz.2.451:7417 blocked for more than 143 seconds. [ 561.649759][ T37] Not tainted syzkaller #0 [ 561.649767][ T37] Blocked by coredump. [ 561.649773][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.649781][ T37] task:syz.2.451 state:D stack:26184 pid:7417 tgid:7415 ppid:5821 task_flags:0x40054c flags:0x00080001 [ 561.649835][ T37] Call Trace: [ 561.649841][ T37] [ 561.649852][ T37] __schedule+0x1681/0x54c0 [ 561.649902][ T37] ? __pfx___schedule+0x10/0x10 [ 561.649937][ T37] rt_mutex_schedule+0x76/0xf0 [ 561.649964][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 561.650010][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 561.650039][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 561.650067][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 561.650109][ T37] ? tun_chr_close+0x41/0x1c0 [ 561.650258][ T37] ? tun_chr_close+0x41/0x1c0 [ 561.650281][ T37] mutex_lock_nested+0x168/0x1d0 [ 561.650311][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 561.650337][ T37] tun_chr_close+0x41/0x1c0 [ 561.650363][ T37] __fput+0x461/0xa70 [ 561.650424][ T37] task_work_run+0x1d9/0x270 [ 561.650451][ T37] ? __pfx_task_work_run+0x10/0x10 [ 561.650476][ T37] ? do_exit+0x70a/0x22c0 [ 561.650525][ T37] ? kmem_cache_free+0x187/0x6c0 [ 561.650553][ T37] ? put_net+0x191/0x260 [ 561.650594][ T37] ? do_exit+0x70a/0x22c0 [ 561.650619][ T37] do_exit+0x70f/0x22c0 [ 561.650645][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 561.650671][ T37] ? __pfx_do_exit+0x10/0x10 [ 561.650690][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 561.650716][ T37] ? reacquire_held_locks+0x104/0x190 [ 561.650741][ T37] ? rt_spin_lock+0x1e0/0x400 [ 561.650779][ T37] do_group_exit+0x21b/0x2d0 [ 561.650808][ T37] ? rt_spin_unlock+0x160/0x200 [ 561.650838][ T37] get_signal+0x125c/0x1310 [ 561.650944][ T37] arch_do_signal_or_restart+0xbc/0x830 [ 561.650971][ T37] ? unshare_nsproxy_namespaces+0x172/0x190 [ 561.651002][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 561.651026][ T37] ? ksys_unshare+0x8f1/0x9f0 [ 561.651089][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.651109][ T37] exit_to_user_mode_loop+0x86/0x480 [ 561.651161][ T37] ? rcu_is_watching+0x15/0xb0 [ 561.651238][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.651259][ T37] do_syscall_64+0x33e/0xf80 [ 561.651280][ T37] ? trace_irq_disable+0x3b/0x140 [ 561.651299][ T37] ? clear_bhb_loop+0x40/0x90 [ 561.651323][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.651341][ T37] RIP: 0033:0x7f59f364c819 [ 561.651357][ T37] RSP: 002b:00007f59f189e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 561.651377][ T37] RAX: fffffffffffffffc RBX: 00007f59f38c5fa0 RCX: 00007f59f364c819 [ 561.651391][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 561.651403][ T37] RBP: 00007f59f36e2c91 R08: 0000000000000000 R09: 0000000000000000 [ 561.651415][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.651427][ T37] R13: 00007f59f38c6038 R14: 00007f59f38c5fa0 R15: 00007ffc5c20cc48 [ 561.651457][ T37] [ 561.651468][ T37] INFO: task syz-executor:8172 blocked for more than 143 seconds. [ 561.651482][ T37] Not tainted syzkaller #0 [ 561.651491][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.651500][ T37] task:syz-executor state:D stack:25752 pid:8172 tgid:8172 ppid:1 task_flags:0x400140 flags:0x00080002 [ 561.651560][ T37] Call Trace: [ 561.651567][ T37] [ 561.651578][ T37] __schedule+0x1681/0x54c0 [ 561.651597][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 561.651659][ T37] ? kernel_text_address+0xa5/0xe0 [ 561.651699][ T37] ? __pfx___schedule+0x10/0x10 [ 561.651733][ T37] rt_mutex_schedule+0x76/0xf0 [ 561.651760][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 561.651804][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 561.651834][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 561.651862][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 561.651907][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 561.651933][ T37] ? rtnl_newlink+0x883/0x1bb0 [ 561.651956][ T37] mutex_lock_nested+0x168/0x1d0 [ 561.651983][ T37] ? rtnl_newlink+0x883/0x1bb0 [ 561.652010][ T37] rtnl_newlink+0x883/0x1bb0 [ 561.652046][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 561.652070][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 561.652098][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 561.652123][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 561.652148][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 561.652172][ T37] ? unwind_next_frame+0xa6/0x2550 [ 561.652253][ T37] ? unwind_next_frame+0xa6/0x2550 [ 561.652277][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 561.652313][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 561.652341][ T37] ? kernel_text_address+0xa5/0xe0 [ 561.652365][ T37] ? __kernel_text_address+0xd/0x30 [ 561.652389][ T37] ? unwind_get_return_address+0x4d/0x90 [ 561.652389][ T37] ? unwind_get_return_address+0x4d/0x90 [ 561.652410][ T37] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 561.652454][ T37] ? arch_stack_walk+0xfb/0x150 [ 561.652517][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 561.652562][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 561.652586][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 561.652610][ T37] ? kasan_save_track+0x3e/0x80 [ 561.652636][ T37] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 561.652667][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 561.652691][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.652718][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 561.652751][ T37] netlink_rcv_skb+0x232/0x4b0 [ 561.652780][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.652807][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.652845][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.652871][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.652903][ T37] netlink_unicast+0x780/0x920 [ 561.652938][ T37] netlink_sendmsg+0x813/0xb40 [ 561.652974][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.653007][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.653034][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.653063][ T37] __sys_sendto+0x67f/0x710 [ 561.653096][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 561.653145][ T37] ? fput_close_sync+0x11f/0x240 [ 561.653171][ T37] ? __pfx_fput_close_sync+0x10/0x10 [ 561.653204][ T37] __x64_sys_sendto+0xde/0x100 [ 561.653231][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.653252][ T37] do_syscall_64+0x15f/0xf80 [ 561.653273][ T37] ? trace_irq_disable+0x3b/0x140 [ 561.653292][ T37] ? clear_bhb_loop+0x40/0x90 [ 561.653315][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.653334][ T37] RIP: 0033:0x7fd47125d04e [ 561.653350][ T37] RSP: 002b:00007ffc7e968218 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 561.653368][ T37] RAX: ffffffffffffffda RBX: 000055556cda7500 RCX: 00007fd47125d04e [ 561.653382][ T37] RDX: 000000000000002c RSI: 00007fd472044670 RDI: 0000000000000003 [ 561.653394][ T37] RBP: 0000000000000001 R08: 00007ffc7e968294 R09: 000000000000000c [ 561.653406][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 561.653417][ T37] R13: 0000000000000000 R14: 00007fd472044670 R15: 0000000000000000 [ 561.653446][ T37] [ 561.653454][ T37] INFO: task syz-executor:10066 blocked for more than 143 seconds. [ 561.653468][ T37] Not tainted syzkaller #0 [ 561.653477][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.653485][ T37] task:syz-executor state:D stack:25752 pid:10066 tgid:10066 ppid:1 task_flags:0x400140 flags:0x00080002 [ 561.653545][ T37] Call Trace: [ 561.653552][ T37] [ 561.653562][ T37] __schedule+0x1681/0x54c0 [ 561.653611][ T37] ? __pfx___schedule+0x10/0x10 [ 561.653646][ T37] rt_mutex_schedule+0x76/0xf0 [ 561.653673][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 561.653716][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 561.653746][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 561.653774][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 561.653813][ T37] ? inet_rtm_newaddr+0x404/0x1ad0 [ 561.653882][ T37] ? inet_rtm_newaddr+0x404/0x1ad0 [ 561.653913][ T37] ? inet_rtm_newaddr+0x404/0x1ad0 [ 561.653936][ T37] mutex_lock_nested+0x168/0x1d0 [ 561.653968][ T37] inet_rtm_newaddr+0x404/0x1ad0 [ 561.653994][ T37] ? __kernel_text_address+0xd/0x30 [ 561.654027][ T37] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 561.654069][ T37] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 561.654092][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 561.654115][ T37] ? kasan_save_track+0x3e/0x80 [ 561.654141][ T37] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 561.654172][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 561.654197][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.654222][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 561.654256][ T37] netlink_rcv_skb+0x232/0x4b0 [ 561.654283][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.654311][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.654349][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.654375][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.654407][ T37] netlink_unicast+0x780/0x920 [ 561.654441][ T37] netlink_sendmsg+0x813/0xb40 [ 561.654477][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.654511][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.654546][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.654574][ T37] __sys_sendto+0x67f/0x710 [ 561.654606][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 561.654656][ T37] ? exc_page_fault+0x6a/0xc0 [ 561.654682][ T37] ? do_user_addr_fault+0xc6f/0x1340 [ 561.654705][ T37] __x64_sys_sendto+0xde/0x100 [ 561.654733][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.654754][ T37] do_syscall_64+0x15f/0xf80 [ 561.654775][ T37] ? trace_irq_disable+0x3b/0x140 [ 561.654794][ T37] ? clear_bhb_loop+0x40/0x90 [ 561.654817][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.654836][ T37] RIP: 0033:0x7f61ee7dd04e [ 561.654852][ T37] RSP: 002b:00007ffe9a689288 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 561.654870][ T37] RAX: ffffffffffffffda RBX: 000055556ae91500 RCX: 00007f61ee7dd04e [ 561.654884][ T37] RDX: 0000000000000028 RSI: 00007f61ef5c4670 RDI: 0000000000000003 [ 561.654896][ T37] RBP: 0000000000000001 R08: 00007ffe9a689304 R09: 000000000000000c [ 561.654908][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 561.654919][ T37] R13: 0000000000000000 R14: 00007f61ef5c4670 R15: 0000000000000000 [ 561.654948][ T37] [ 561.654957][ T37] INFO: task syz-executor:10079 blocked for more than 143 seconds. [ 561.654970][ T37] Not tainted syzkaller #0 [ 561.654980][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.654989][ T37] task:syz-executor state:D stack:25752 pid:10079 tgid:10079 ppid:1 task_flags:0x400140 flags:0x00080002 [ 561.655041][ T37] Call Trace: [ 561.655047][ T37] [ 561.655058][ T37] __schedule+0x1681/0x54c0 [ 562.195611][ T37] ? __pfx___schedule+0x10/0x10 [ 562.195661][ T37] rt_mutex_schedule+0x76/0xf0 [ 562.195689][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 562.195734][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 562.195765][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 562.195794][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 562.195831][ T37] ? inet_rtm_newaddr+0x404/0x1ad0 [ 562.195861][ T37] ? inet_rtm_newaddr+0x404/0x1ad0 [ 562.195890][ T37] ? inet_rtm_newaddr+0x404/0x1ad0 [ 562.195914][ T37] mutex_lock_nested+0x168/0x1d0 [ 562.195946][ T37] inet_rtm_newaddr+0x404/0x1ad0 [ 562.195972][ T37] ? __kernel_text_address+0xd/0x30 [ 562.196006][ T37] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 562.196046][ T37] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 562.196071][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 562.196096][ T37] ? kasan_save_track+0x3e/0x80 [ 562.196123][ T37] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 562.196153][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 562.196178][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 562.196203][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 562.196238][ T37] netlink_rcv_skb+0x232/0x4b0 [ 562.196273][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 562.196299][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 562.196338][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.196364][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.196396][ T37] netlink_unicast+0x780/0x920 [ 562.196430][ T37] netlink_sendmsg+0x813/0xb40 [ 562.196467][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.196501][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 562.196546][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.196574][ T37] __sys_sendto+0x67f/0x710 [ 562.196608][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 562.196672][ T37] ? exc_page_fault+0x6a/0xc0 [ 562.196699][ T37] ? do_user_addr_fault+0xc6f/0x1340 [ 562.196722][ T37] __x64_sys_sendto+0xde/0x100 [ 562.196751][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.196772][ T37] do_syscall_64+0x15f/0xf80 [ 562.196794][ T37] ? trace_irq_disable+0x3b/0x140 [ 562.196814][ T37] ? clear_bhb_loop+0x40/0x90 [ 562.196838][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.196857][ T37] RIP: 0033:0x7f2debf3d04e [ 562.196875][ T37] RSP: 002b:00007ffd13c435a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 562.196895][ T37] RAX: ffffffffffffffda RBX: 000055558ef5e500 RCX: 00007f2debf3d04e [ 562.196910][ T37] RDX: 0000000000000028 RSI: 00007f2decd24670 RDI: 0000000000000003 [ 562.196922][ T37] RBP: 0000000000000001 R08: 00007ffd13c43624 R09: 000000000000000c [ 562.196934][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 562.196946][ T37] R13: 0000000000000000 R14: 00007f2decd24670 R15: 0000000000000000 [ 562.196975][ T37] [ 562.334362][ T37] [ 562.334362][ T37] Showing all locks held in the system: [ 562.334380][ T37] 3 locks held by kworker/0:1/10: [ 562.334459][ T37] 4 locks held by pr/legacy/17: [ 562.334477][ T37] 3 locks held by kworker/1:0/31: [ 562.334487][ T37] #0: ffff88801a04f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 562.334648][ T37] #1: ffffc90000a5fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 562.334701][ T37] #2: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 562.334822][ T37] 1 lock held by khungtaskd/37: [ 562.334833][ T37] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 562.334889][ T37] 3 locks held by kworker/1:1/50: [ 562.334901][ T37] 5 locks held by kworker/u8:4/66: [ 562.334911][ T37] 4 locks held by kworker/u8:5/69: [ 562.334925][ T37] 4 locks held by kworker/u8:6/153: [ 562.334942][ T37] 6 locks held by kworker/u8:10/1240: [ 562.334967][ T37] 2 locks held by kworker/1:2/3137: [ 562.334978][ T37] 3 locks held by kworker/u8:14/3379: [ 562.334989][ T37] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 562.335042][ T37] #1: ffffc9000f12fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 562.346171][ T37] #2: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 562.346232][ T37] 2 locks held by kworker/u8:15/3526: [ 562.346245][ T37] 3 locks held by kworker/u8:16/3549: [ 562.346255][ T37] #0: ffff888032914138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 562.346310][ T37] #1: ffffc9000f3efc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 562.346364][ T37] #2: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 562.346414][ T37] 6 locks held by kworker/u8:19/3585: [ 562.346425][ T37] #0: ffff88801b2a8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 562.346484][ T37] #1: ffffc9000f4dfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 562.346535][ T37] #2: ffffffff8f35d120 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 562.346664][ T37] #3: ffff888028cff160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 562.346750][ T37] #4: ffff888065a9e310 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 562.492352][ T37] #5: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 562.492492][ T37] 1 lock held by syslogd/5171: [ 562.492505][ T37] 3 locks held by klogd/5178: [ 562.492517][ T37] 1 lock held by dhcpcd/5484: [ 562.492527][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 562.492579][ T37] 2 locks held by getty/5579: [ 562.492589][ T37] #0: ffff8880377750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 562.492720][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 562.492769][ T37] 4 locks held by kworker/1:3/5830: [ 562.492780][ T37] 5 locks held by kworker/1:5/5836: [ 562.492799][ T37] 11 locks held by kworker/1:8/6020: [ 562.492810][ T37] 6 locks held by kworker/1:9/6281: [ 562.492824][ T37] 1 lock held by syz-executor/7333: [ 562.492834][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 562.492885][ T37] 1 lock held by syz-executor/7373: [ 562.492896][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 562.492943][ T37] 1 lock held by syz.2.451/7417: [ 562.492953][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 562.493011][ T37] 1 lock held by syz-executor/8172: [ 562.493025][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 562.493075][ T37] 1 lock held by syz-executor/10066: [ 562.493085][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493134][ T37] 1 lock held by syz-executor/10079: [ 562.493144][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493193][ T37] 1 lock held by syz-executor/10144: [ 562.493204][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493252][ T37] 1 lock held by syz-executor/10388: [ 562.493263][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493311][ T37] 1 lock held by syz-executor/12152: [ 562.493322][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493370][ T37] 1 lock held by syz-executor/12211: [ 562.493381][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493430][ T37] 1 lock held by syz-executor/12340: [ 562.493440][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493496][ T37] 1 lock held by syz-executor/12561: [ 562.493507][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493555][ T37] 1 lock held by syz-executor/14404: [ 562.493566][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493614][ T37] 1 lock held by syz-executor/14446: [ 562.493624][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493674][ T37] 1 lock held by syz-executor/14552: [ 562.493684][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.493732][ T37] 1 lock held by syz-executor/14748: [ 562.632631][ T37] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 562.632701][ T37] [ 562.632706][ T37] ============================================= [ 562.632706][ T37] [ 562.632735][ T37] NMI backtrace for cpu 0 [ 562.632757][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 562.632777][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 562.632788][ T37] Call Trace: [ 562.632798][ T37] [ 562.632807][ T37] dump_stack_lvl+0xe8/0x150 [ 562.632839][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 562.632974][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 562.633064][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 562.633094][ T37] sys_info+0x135/0x170 [ 562.633144][ T37] watchdog+0xfd3/0x1030 [ 562.633201][ T37] ? watchdog+0x1c9/0x1030 [ 562.633224][ T37] kthread+0x388/0x470 [ 562.633247][ T37] ? __pfx_watchdog+0x10/0x10 [ 562.633262][ T37] ? __pfx_kthread+0x10/0x10 [ 562.633285][ T37] ret_from_fork+0x514/0xb70 [ 562.633306][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 562.633323][ T37] ? __switch_to+0xc79/0x1410 [ 562.633350][ T37] ? __pfx_kthread+0x10/0x10 [ 562.633373][ T37] ret_from_fork_asm+0x1a/0x30 [ 562.633407][ T37] [ 562.633415][ T37] Sending NMI from CPU 0 to CPUs 1: [ 562.633443][ C1] NMI backtrace for cpu 1 [ 562.633456][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 562.633474][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 562.633489][ C1] RIP: 0010:kasan_check_range+0x1ca/0x2c0 [ 562.633508][ C1] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 0f 85 a1 00 00 00 [ 562.633564][ C1] RSP: 0018:ffffc90000a3fa80 EFLAGS: 00000256 [ 562.633578][ C1] RAX: 1ffff11009a40a01 RBX: ffff88804d205000 RCX: ffffffff88fc673f [ 562.633590][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88804d205258 [ 562.633600][ C1] RBP: 0000000000000001 R08: ffff88804d20525f R09: 1ffff11009a40a4b [ 562.633610][ C1] R10: dffffc0000000000 R11: ffffed1009a40a4c R12: ffff88804d205480 [ 562.633621][ C1] R13: dffffc0000000000 R14: ffffed1009a40a4c R15: 1ffff11009a40a4b [ 562.633633][ C1] FS: 0000000000000000(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000 [ 562.633645][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.633655][ C1] CR2: 00007f4948046a00 CR3: 0000000041b9e000 CR4: 00000000003526f0 [ 562.633669][ C1] Call Trace: [ 562.633675][ C1] [ 562.633682][ C1] __netif_schedule+0x5f/0x200 [ 562.633698][ C1] ? advance_sched+0xa43/0xc90 [ 562.633742][ C1] ? advance_sched+0xa01/0xc90 [ 562.633757][ C1] advance_sched+0xaa3/0xc90 [ 562.633777][ C1] ? __pfx_advance_sched+0x10/0x10 [ 562.633792][ C1] __hrtimer_run_queues+0x405/0xb10 [ 562.633845][ C1] hrtimer_run_softirq+0x18f/0x260 [ 562.633869][ C1] handle_softirqs+0x1de/0x6d0 [ 562.633895][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 562.633934][ C1] run_ktimerd+0x69/0x100 [ 562.633950][ C1] smpboot_thread_fn+0x541/0xa50 [ 562.633966][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 562.633984][ C1] kthread+0x388/0x470 [ 562.634001][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 562.634016][ C1] ? __pfx_kthread+0x10/0x10 [ 562.634034][ C1] ret_from_fork+0x514/0xb70 [ 562.634049][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 562.634062][ C1] ? __switch_to+0xc79/0x1410 [ 562.634083][ C1] ? __pfx_kthread+0x10/0x10 [ 562.634100][ C1] ret_from_fork_asm+0x1a/0x30 [ 562.634123][ C1] [ 562.742475][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 562.742496][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 562.742519][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 562.742530][ T37] Call Trace: [ 562.742540][ T37] [ 562.742549][ T37] vpanic+0x56c/0xa60 [ 562.742577][ T37] ? __pfx___schedule+0x10/0x10 [ 562.742599][ T37] ? __pfx_vpanic+0x10/0x10 [ 562.742627][ T37] panic+0xc5/0xd0 [ 562.742644][ T37] ? __pfx_panic+0x10/0x10 [ 562.742664][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 562.742695][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 562.742727][ T37] watchdog+0x102c/0x1030 [ 562.742752][ T37] ? watchdog+0x1c9/0x1030 [ 562.742775][ T37] kthread+0x388/0x470 [ 562.742798][ T37] ? __pfx_watchdog+0x10/0x10 [ 562.742814][ T37] ? __pfx_kthread+0x10/0x10 [ 562.742837][ T37] ret_from_fork+0x514/0xb70 [ 562.742858][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 562.742876][ T37] ? __switch_to+0xc79/0x1410 [ 562.742903][ T37] ? __pfx_kthread+0x10/0x10 [ 562.742925][ T37] ret_from_fork_asm+0x1a/0x30 [ 562.742959][ T37] [ 562.743237][ T37] Kernel Offset: disabled