last executing test programs:

6.26182092s ago: executing program 0 (id=22738):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="110000001400a10c000000d5b400000002000000", @ANYRES32=0x0], 0x18}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x80005b, 0x10089, 0x2053, 0xffffffffffffffff, 0x3ee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x48)
socket$pppoe(0x18, 0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xbb70835dcb9f386, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488ad8ca9dbc4a9509a000000000000"], 0x0, 0x38}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91f4ff2769a9aab702000000fbd6315f63f5a4dbd3f53eec0000008500000002000000b7000000000000ea9400000000000000"], 0x0}, 0x90)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

5.998645912s ago: executing program 0 (id=22742):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge0\x00', <r2=>0x0})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, 'vlan1\x00', {}, 0x4})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000940), {[{{@uncond, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x0, 0x0, 0x4, 0x0, 0x252}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x1000, 0xd563, '\x00', 'syz0\x00', {0x7fff}}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x0, 0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001900)=0x1, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r5=>0xffffffffffffffff, 0x1f, 0x0, 0x200})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x5, 0x9, 0x10f93f86, 0x2004}, 0x14)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x40814}, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b40)={@local, @broadcast}, 0x10)
preadv(r5, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/132, 0x84}, {&(0x7f0000000980)=""/77, 0x4d}, {&(0x7f0000000c80)=""/24, 0x18}], 0x3, 0x4, 0x7)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "13e352749fe43eaa", "83295ec8282de5a154c39aa28132a90f0adaa071395b96916ba87969ca08b156", "7b12920c", "03a5d9bcd4d7fc07"}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000780)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b40)}, {0x0}, {&(0x7f0000000d40)="f02fca57865f96bd1f4c427d89f66a116e01560c8616ed5eef430c8df81abfe9ddc5c706c8ed0276130d383238f33d3dd0a281a1bd69a5e7ce72d8dd125742f884d6ab0e7ab751a550c1460b4f5ae9dd897089b1a1c30a4560629961f621ef348768", 0x62}, {&(0x7f0000000dc0)="144aa81d213fb45e2f4ab9405706a3628fc20f55983b03e44812a423461155d6bcc7ebaadaa30e5e10a0865934f6214a7baebdec48ffc6a0475cc5e1cf758e21", 0x40}], 0x4, 0x0, 0x1a0}, 0x5)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f80), 0x30d082, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="005b000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0)

5.69982676s ago: executing program 0 (id=22748):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = mq_open(&(0x7f0000000000)='^\x00', 0x80, 0x40, &(0x7f0000000040)={0x4, 0x5, 0x100000000, 0x20})
mq_getsetattr(r3, &(0x7f0000000100)={0x0, 0x7fff}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802cc7d57eba000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000"], 0x8c}}, 0x40)

4.218378251s ago: executing program 0 (id=22768):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11030300ffff"], 0xffdd)

4.069435768s ago: executing program 3 (id=22769):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge0\x00', <r2=>0x0})
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, 'vlan1\x00', {}, 0x4})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000940), {[{{@uncond, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x0, 0x0, 0x4, 0x0, 0x252}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x1000, 0xd563, '\x00', 'syz0\x00', {0x7fff}}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x0, 0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001900)=0x1, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r5=>0xffffffffffffffff, 0x1f, 0x0, 0x200})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x5, 0x9, 0x10f93f86, 0x2004}, 0x14)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x40814}, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b40)={@local, @broadcast}, 0x10)
preadv(r5, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/132, 0x84}, {&(0x7f0000000980)=""/77, 0x4d}, {&(0x7f0000000c80)=""/24, 0x18}], 0x3, 0x4, 0x7)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "13e352749fe43eaa", "83295ec8282de5a154c39aa28132a90f0adaa071395b96916ba87969ca08b156", "7b12920c", "03a5d9bcd4d7fc07"}, 0x38)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="005b000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0)

4.061248474s ago: executing program 0 (id=22771):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x15c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x378}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

3.810552968s ago: executing program 0 (id=22775):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000200)='V', 0x1)
write$char_usb(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x2, "e3a58ef8"}, @local=@item_012={0x0, 0x2, 0x4}]}}, 0x0}, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd5, 0x5b, 0x44, 0x0, 0x565, 0x1, 0x828f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd6, 0xda, 0x52}}]}}]}}, 0x0)
syz_open_dev$hidraw(&(0x7f00000000c0), 0x8, 0x151880)
syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/97, 0x61)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

3.741229148s ago: executing program 3 (id=22776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

3.607999712s ago: executing program 3 (id=22778):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0)

3.48361811s ago: executing program 3 (id=22781):
r0 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x2}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}}, 0x0)

3.397364371s ago: executing program 3 (id=22782):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.835169459s ago: executing program 4 (id=22807):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)={0x100, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x44, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}]}]}, 0x100}}, 0x0)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0)

1.76757176s ago: executing program 4 (id=22809):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

1.590566776s ago: executing program 4 (id=22811):
sched_setscheduler(0x0, 0x0, &(0x7f0000000100))

1.497432803s ago: executing program 1 (id=22812):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500ff000004000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="110000001400a10c000000d5b400000002000000", @ANYRES32=0x0], 0x18}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x80005b, 0x10089, 0x2053, 0xffffffffffffffff, 0x3ee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x48)
socket$pppoe(0x18, 0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xbb70835dcb9f386, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488ad8ca9dbc4a9509a000000000000"], 0x0, 0x38}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91f4ff2769a9aab702000000fbd6315f63f5a4dbd3f53eec0000008500000002000000b7000000000000ea9400000000000000"], 0x0}, 0x90)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2}}, 0x18)

1.418383485s ago: executing program 4 (id=22813):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

1.198376628s ago: executing program 4 (id=22814):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}}, 0x1c}}, 0x0)

1.177674009s ago: executing program 1 (id=22815):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = mq_open(&(0x7f0000000000)='^\x00', 0x80, 0x40, &(0x7f0000000040)={0x4, 0x5, 0x100000000, 0x20})
mq_getsetattr(r3, &(0x7f0000000100)={0x0, 0x7fff}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802cc7d57eba000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000"], 0x8c}}, 0x40)

1.125085427s ago: executing program 4 (id=22816):
syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendto(r0, &(0x7f0000000400)="ffd939898a4520b7a62c04ba32e6281450735c0fd83b2fbb75e3070f38292f09e9a9e3e0e80e5c088aafcadc4241467fe93bb86bfe92cbc03214ad4b5c75c1c63fc8758f926fd42ab5ad42a653e3bdc8fef61c3ccb7d9e94c779d146d6030b4efb349b986503c4f17c25cf4e352aea873b7f44521d6734d632f1224ac0d811340041e9043b36b7562c546798d28f1c41cb22d30501b5966e9032", 0x9a, 0x40000000, &(0x7f0000000300)=@hci={0x1f, 0x0, 0x4}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0)

737.6914ms ago: executing program 2 (id=22817):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2, &(0x7f0000003700)={0x77359400})

682.971761ms ago: executing program 2 (id=22818):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64"], 0x48}}, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

628.606668ms ago: executing program 2 (id=22819):
r0 = socket(0x10, 0x0, 0x0)
write(r0, &(0x7f0000000000)="1c0000001a005f0400f9f407000904018000"/28, 0x1c)

601.717631ms ago: executing program 1 (id=22820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0)

539.561808ms ago: executing program 2 (id=22821):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

494.373032ms ago: executing program 1 (id=22822):
socket$inet(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
io_setup(0x685, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

444.401903ms ago: executing program 2 (id=22823):
syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x18, 0x21, 0x0, @local, @local, {[@fragment], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0)

298.242056ms ago: executing program 2 (id=22824):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="110000001400a10c000000d5b400000002000000", @ANYRES32=0x0], 0x18}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x80005b, 0x10089, 0x2053, 0xffffffffffffffff, 0x3ee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x48)
socket$pppoe(0x18, 0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xbb70835dcb9f386, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488ad8ca9dbc4a9509a000000000000"], 0x0, 0x38}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000000000018200000", @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91f4ff2769a9aab702000000fbd6315f63f5a4dbd3f53eec0000008500000002000000b7000000000000ea9400000000000000"], 0x0}, 0x90)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

285.042041ms ago: executing program 3 (id=22825):
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
fcntl$notify(r0, 0x402, 0x2)
unshare(0xc040400)
r1 = gettid()
socket$inet6(0xa, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1})
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

194.472571ms ago: executing program 1 (id=22826):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}}, 0x1c}}, 0x0)

0s ago: executing program 1 (id=22827):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0xc})
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x81)
syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, '`'}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x5, 0x2, [0x9, 0xa]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xffd0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "", "8e89d0"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}}}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00'})

kernel console output (not intermixed with test programs):

ting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3179.950201][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3179.959319][ T6129] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3179.970913][ T6129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3180.004583][ T6129] usb 4-1: Product: syz
[ 3180.023493][ T6129] usb 4-1: Manufacturer: syz
[ 3180.038447][ T6129] usb 4-1: SerialNumber: syz
[ 3180.076169][ T6129] usb 4-1: selecting invalid altsetting 1
[ 3180.123733][ T5926] veth0_vlan: entered promiscuous mode
[ 3180.163476][ T5926] veth1_vlan: entered promiscuous mode
[ 3180.303034][ T5926] veth0_macvtap: entered promiscuous mode
[ 3180.349915][ T5926] veth1_macvtap: entered promiscuous mode
[ 3180.430772][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3180.450990][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.472637][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3180.491819][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.502187][ T6129] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS
[ 3180.502285][ T6129] cdc_ncm 4-1:1.1: bind() failure
[ 3180.526496][ T6129] usb 4-1: USB disconnect, device number 90
[ 3180.534024][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3180.551482][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.573244][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3180.584310][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.600437][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3180.612604][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.631959][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3180.658717][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3180.701538][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.718409][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3180.731372][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.742361][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3180.781196][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.794131][ T6138] netlink: 'syz.0.21780': attribute type 3 has an invalid length.
[ 3180.804902][ T6138] netlink: 182 bytes leftover after parsing attributes in process `syz.0.21780'.
[ 3180.808868][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3180.840593][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.851392][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3180.862653][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3180.882709][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3181.034324][ T5926] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3181.055799][ T5926] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3181.072293][ T5926] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3181.093499][ T5926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3181.525539][T12486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3181.940608][T12486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3181.994956][ T6165] tipc: Started in network mode
[ 3182.007380][ T6165] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[ 3182.036675][ T6165] tipc: Enabled bearer <eth:team0>, priority 17
[ 3182.153346][T12486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3182.195539][T12558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3182.215831][T12558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3182.268753][T15520] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 3182.339492][T12486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3182.375219][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 3182.390822][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 3182.401292][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 3182.420261][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 3182.439175][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 3182.453521][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 3182.509876][T15520] usb 1-1: Using ep0 maxpacket: 32
[ 3182.530086][T15520] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3182.544646][T15520] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3182.555030][T15520] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 3182.561444][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3182.601299][T15520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3182.610564][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3182.653533][T15520] hub 1-1:4.0: USB hub found
[ 3182.877796][T15520] hub 1-1:4.0: config failed, can't read hub descriptor (err -22)
[ 3182.947195][T15520] usb 1-1: USB disconnect, device number 64
[ 3183.166401][ T5149] tipc: Node number set to 11578026
[ 3183.216872][T12486] bridge_slave_1: left allmulticast mode
[ 3183.222919][T12486] bridge_slave_1: left promiscuous mode
[ 3183.255731][T12486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3183.292646][T12486] bridge_slave_0: left allmulticast mode
[ 3183.321194][T12486] bridge_slave_0: left promiscuous mode
[ 3183.341769][T12486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3183.846788][ T6213] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.21802'.
[ 3184.133598][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 3184.150710][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 3184.177391][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 3184.192094][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 3184.228769][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 3184.241765][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 3184.538534][T23569] Bluetooth: hci1: command tx timeout
[ 3184.678305][T12486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3184.691079][T12486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3184.703508][T12486] bond0 (unregistering): Released all slaves
[ 3184.799825][ T6207] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[ 3185.278450][ T6180] chnl_net:caif_netlink_parms(): no params data found
[ 3185.613017][T12486] hsr_slave_0: left promiscuous mode
[ 3185.619413][ T6249] net_ratelimit: 242 callbacks suppressed
[ 3185.619436][ T6249] openvswitch: netlink: Flow actions attr not present in new flow.
[ 3185.634744][T12486] hsr_slave_1: left promiscuous mode
[ 3185.655580][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3185.674767][T12486] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3185.692639][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3185.726123][T12486] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3185.808193][T12486] veth1_macvtap: left promiscuous mode
[ 3185.814027][T12486] veth0_macvtap: left promiscuous mode
[ 3185.833782][T12486] veth1_vlan: left promiscuous mode
[ 3185.839557][T12486] veth0_vlan: left promiscuous mode
[ 3186.348231][T23569] Bluetooth: hci2: command tx timeout
[ 3186.600552][T23569] Bluetooth: hci1: command tx timeout
[ 3186.956065][T15534] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 3187.150962][T15534] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 3187.181799][T15534] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3187.192272][T15534] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3187.203888][T15534] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3187.212654][T15534] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3187.222126][T15534] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3187.234024][T15534] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3187.244751][T15534] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3187.255450][T15534] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3187.258932][T12486] team0 (unregistering): Port device team_slave_1 removed
[ 3187.266750][T15534] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3187.268390][T15534] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3187.296621][T15534] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3187.308705][T15534] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3187.317215][T15534] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3187.327032][T15534] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3187.338717][T15534] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3187.350063][T15534] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3187.372403][T15534] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3187.398924][T15534] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3187.414512][T15534] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3187.426956][T12486] team0 (unregistering): Port device team_slave_0 removed
[ 3187.437362][T15534] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3187.460667][T15534] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3187.479027][T15534] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3187.502095][T15534] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3187.514570][T15534] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3187.524774][T15534] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3187.534461][T15534] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3187.553452][T15534] usb 2-1: Product: syz
[ 3187.569671][T15534] usb 2-1: Manufacturer: syz
[ 3187.584826][T15534] usb 2-1: SerialNumber: syz
[ 3187.606407][T15534] usb 2-1: config 0 descriptor??
[ 3187.646306][T15534] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[ 3188.190604][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3188.212839][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3188.435965][T23569] Bluetooth: hci2: command tx timeout
[ 3188.462026][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3188.472134][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3188.497649][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3188.511343][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3188.607022][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3188.634875][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3188.678662][T23569] Bluetooth: hci1: command tx timeout
[ 3188.790830][T19820] usb 2-1: USB disconnect, device number 116
[ 3188.890284][ T6256] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[ 3189.232229][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3189.245875][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3189.253684][ T6180] bridge_slave_0: entered allmulticast mode
[ 3189.261605][ T6180] bridge_slave_0: entered promiscuous mode
[ 3189.286677][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3189.294339][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3189.308401][ T6180] bridge_slave_1: entered allmulticast mode
[ 3189.316822][ T6180] bridge_slave_1: entered promiscuous mode
[ 3189.580775][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3189.624903][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3189.656786][ T6217] chnl_net:caif_netlink_parms(): no params data found
[ 3189.845373][ T6180] team0: Port device team_slave_0 added
[ 3189.888651][ T6180] team0: Port device team_slave_1 added
[ 3189.955950][T19820] yurex 2-1:0.0: USB YUREX #0 now disconnected
[ 3190.154294][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3190.184390][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3190.259714][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3190.367862][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3190.380164][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3190.433972][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3190.508483][T23569] Bluetooth: hci2: command tx timeout
[ 3190.557251][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3190.566080][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3190.573434][ T6217] bridge_slave_0: entered allmulticast mode
[ 3190.598191][ T6217] bridge_slave_0: entered promiscuous mode
[ 3190.691173][ T6349] netlink: 'syz.0.21834': attribute type 29 has an invalid length.
[ 3190.699599][ T6349] netlink: 182 bytes leftover after parsing attributes in process `syz.0.21834'.
[ 3190.745868][T23569] Bluetooth: hci1: command tx timeout
[ 3190.764886][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3190.843836][ T6354] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.21835'.
[ 3190.875114][ T6354] netlink: zone id is out of range
[ 3190.899019][ T6354] netlink: zone id is out of range
[ 3190.904218][ T6354] netlink: zone id is out of range
[ 3190.916728][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3190.924564][ T6354] netlink: zone id is out of range
[ 3190.926244][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3190.938237][ T6217] bridge_slave_1: entered allmulticast mode
[ 3190.946465][ T6354] netlink: zone id is out of range
[ 3190.952825][ T6217] bridge_slave_1: entered promiscuous mode
[ 3190.954921][ T6354] netlink: zone id is out of range
[ 3190.976907][ T6354] netlink: zone id is out of range
[ 3190.982329][ T6354] netlink: zone id is out of range
[ 3190.996802][ T6354] netlink: zone id is out of range
[ 3191.002020][ T6354] netlink: zone id is out of range
[ 3191.059385][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3191.249531][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3191.295028][ T6180] hsr_slave_0: entered promiscuous mode
[ 3191.326478][ T6180] hsr_slave_1: entered promiscuous mode
[ 3191.355946][ T6180] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3191.363600][ T6180] Cannot create hsr debugfs directory
[ 3191.417720][ T6217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3191.451472][ T6217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3191.550260][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3191.669750][ T6217] team0: Port device team_slave_0 added
[ 3191.676755][ T6129] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 3191.794506][ T6217] team0: Port device team_slave_1 added
[ 3191.891218][ T6129] usb 5-1: too many configurations: 9, using maximum allowed: 8
[ 3191.911980][ T6129] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3191.929348][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3191.936965][ T6129] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3191.948620][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3191.984462][ T6129] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3192.003499][ T6129] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3192.005788][ T6217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3192.012536][ T6129] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3192.065065][ T6129] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3192.074988][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3192.092921][ T6129] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3192.106130][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3192.123196][ T6129] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3192.158243][ T6217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3192.179183][ T6129] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3192.191556][ T6129] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3192.215832][ T6129] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3192.240618][ T6129] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3192.249633][ T6129] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3192.263602][ T6129] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3192.287023][ T6399] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.21852'.
[ 3192.332722][ T6129] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3192.368021][ T6129] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3192.396595][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21852'.
[ 3192.401138][ T6129] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3192.458913][ T6129] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3192.477249][ T6129] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3192.496911][ T6129] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3192.533614][ T6129] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3192.565054][ T6129] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3192.585777][T23569] Bluetooth: hci2: command tx timeout
[ 3192.594250][ T6129] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3192.660767][ T6129] usb 5-1: config 0 interface 0 has no altsetting 0
[ 3192.678164][   T11] bridge_slave_1: left allmulticast mode
[ 3192.683893][   T11] bridge_slave_1: left promiscuous mode
[ 3192.707492][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3192.737276][ T6129] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3192.749082][ T6129] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3192.772498][   T11] bridge_slave_0: left allmulticast mode
[ 3192.775775][ T6129] usb 5-1: Product: syz
[ 3192.782420][ T6129] usb 5-1: Manufacturer: syz
[ 3192.785699][   T11] bridge_slave_0: left promiscuous mode
[ 3192.803509][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3192.803538][ T6129] usb 5-1: SerialNumber: syz
[ 3192.849143][ T6129] usb 5-1: config 0 descriptor??
[ 3192.872801][ T6129] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[ 3193.427051][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3193.457811][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3193.761378][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3193.773689][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3193.813603][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3193.822864][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3193.937384][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3193.949949][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3193.959333][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3193.981643][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3194.001077][   T11] bond0 (unregistering): Released all slaves
[ 3194.083327][T15520] usb 5-1: USB disconnect, device number 81
[ 3194.227096][ T6217] hsr_slave_0: entered promiscuous mode
[ 3194.242722][ T6217] hsr_slave_1: entered promiscuous mode
[ 3194.256988][ T6217] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3194.264816][ T6217] Cannot create hsr debugfs directory
[ 3195.155958][T15520] yurex 5-1:0.0: USB YUREX #0 now disconnected
[ 3195.167629][   T11] hsr_slave_0: left promiscuous mode
[ 3195.201037][   T11] hsr_slave_1: left promiscuous mode
[ 3195.234704][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3195.249981][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3195.285952][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3195.305432][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3195.383298][   T11] veth1_macvtap: left promiscuous mode
[ 3195.403692][   T11] veth0_macvtap: left promiscuous mode
[ 3195.410076][   T11] veth1_vlan: left promiscuous mode
[ 3195.416560][   T11] veth0_vlan: left promiscuous mode
[ 3196.415236][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 3196.504414][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 3198.097576][ T6180] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 3198.138245][ T6180] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 3198.356044][ T6180] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 3198.397175][ T6180] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 3198.932859][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3199.029259][ T6180] 8021q: adding VLAN 0 to HW filter on device team0
[ 3199.128169][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21887'.
[ 3199.155783][ T6527] net_ratelimit: 242 callbacks suppressed
[ 3199.155807][ T6527] openvswitch: netlink: Flow key attr not present in new flow.
[ 3199.173810][T19820] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3199.181111][T19820] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3199.291209][T15520] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3199.298497][T15520] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3199.423364][ T6217] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3199.471591][ T6217] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3199.495173][ T6217] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3199.549010][ T6217] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3199.880763][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3200.036176][ T6217] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3200.094988][ T6180] veth0_vlan: entered promiscuous mode
[ 3200.122716][ T6217] 8021q: adding VLAN 0 to HW filter on device team0
[ 3200.145177][ T6180] veth1_vlan: entered promiscuous mode
[ 3200.183319][T15497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3200.190618][T15497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3200.272113][T15497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3200.279397][T15497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3200.362343][ T6180] veth0_macvtap: entered promiscuous mode
[ 3200.395293][ T6180] veth1_macvtap: entered promiscuous mode
[ 3200.499630][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3200.521974][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3200.541079][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3200.582376][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3200.610280][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3200.635033][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3200.646368][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3200.678003][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3200.709341][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3200.878047][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3200.906045][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3200.925759][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3200.946368][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3200.967177][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3200.992051][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3201.035904][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3201.062318][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3201.084107][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3201.122295][ T6180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3201.145547][ T6180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3201.165074][ T6180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3201.190237][ T6180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3201.479615][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3201.582780][ T6589] netlink: 'syz.1.21904': attribute type 4 has an invalid length.
[ 3201.806885][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3202.065967][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3202.138756][ T6217] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3202.268568][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3202.323910][T15535] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 3202.339645][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 3202.357406][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 3202.359858][  T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3202.403508][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 3202.412079][  T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3202.437636][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 3202.445582][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 3202.458558][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 3202.573976][T15535] usb 1-1: too many configurations: 9, using maximum allowed: 8
[ 3202.596142][  T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3202.620884][  T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3202.635832][T15535] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3202.663070][T15535] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3202.706240][T15535] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3202.765456][T15535] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3202.797636][T15535] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3202.824881][T15535] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3202.862820][T15535] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3202.878343][T15535] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3202.891361][T15535] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3202.930160][T15535] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3202.950859][T15535] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3202.964659][   T11] bridge_slave_1: left allmulticast mode
[ 3202.972810][T15535] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3202.986073][   T11] bridge_slave_1: left promiscuous mode
[ 3202.992219][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3202.994589][T15535] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3203.045937][T15535] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3203.062475][T15535] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3203.071948][T15535] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3203.082095][T15535] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3203.093180][T15535] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3203.101445][T15535] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3203.110869][T15535] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3203.122142][T15535] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3203.131017][T15535] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3203.131396][   T11] bridge_slave_0: left allmulticast mode
[ 3203.141327][T15535] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3203.160438][T15535] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3203.175344][T15535] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3203.184744][T15535] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3203.193269][T15535] usb 1-1: Product: syz
[ 3203.197919][T15535] usb 1-1: Manufacturer: syz
[ 3203.202666][T15535] usb 1-1: SerialNumber: syz
[ 3203.218238][   T11] bridge_slave_0: left promiscuous mode
[ 3203.218428][T15535] usb 1-1: config 0 descriptor??
[ 3203.224498][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3203.242424][T15535] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[ 3203.774874][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3203.829070][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3204.147432][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3204.167402][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3204.221660][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3204.251051][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3204.338141][ T6636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3204.357553][ T6636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3204.454394][ T7483] usb 1-1: USB disconnect, device number 65
[ 3204.588901][T23569] Bluetooth: hci4: command tx timeout
[ 3204.718914][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3204.731859][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3204.744155][   T11] bond0 (unregistering): Released all slaves
[ 3204.792171][ T6217] veth0_vlan: entered promiscuous mode
[ 3204.866983][   T11] tipc: Disabling bearer <eth:team0>
[ 3204.879323][   T11] tipc: Left network mode
[ 3204.921295][ T6217] veth1_vlan: entered promiscuous mode
[ 3205.095422][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21921'.
[ 3205.113062][ T6648] openvswitch: netlink: Flow key attr not present in new flow.
[ 3205.317527][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 3205.326359][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[ 3205.535001][ T6217] veth0_macvtap: entered promiscuous mode
[ 3205.546736][ T7483] yurex 1-1:0.0: USB YUREX #0 now disconnected
[ 3205.675873][   T11] hsr_slave_0: left promiscuous mode
[ 3205.702278][   T11] hsr_slave_1: left promiscuous mode
[ 3205.736153][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3205.743675][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3205.783876][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3205.805828][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3205.864936][   T11] veth1_macvtap: left promiscuous mode
[ 3205.888696][   T11] veth0_macvtap: left promiscuous mode
[ 3205.894714][   T11] veth1_vlan: left promiscuous mode
[ 3205.901411][   T11] veth0_vlan: left promiscuous mode
[ 3206.668435][T23569] Bluetooth: hci4: command tx timeout
[ 3207.250945][ T6683] syz.0.21928 (6683): drop_caches: 1
[ 3207.469782][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 3207.577885][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 3207.668611][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21931'.
[ 3207.678265][ T6690] openvswitch: netlink: Flow key attr not present in new flow.
[ 3208.604670][ T6613] chnl_net:caif_netlink_parms(): no params data found
[ 3208.659070][ T6672] netlink: 'syz.2.21926': attribute type 4 has an invalid length.
[ 3208.734726][ T6217] veth1_macvtap: entered promiscuous mode
[ 3208.747170][T23569] Bluetooth: hci4: command tx timeout
[ 3209.067039][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3209.085525][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3209.103904][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3209.115934][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3209.126706][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3209.140547][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3209.160886][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3209.171947][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3209.186732][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3209.206108][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3209.216059][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3209.232155][ T6613] bridge_slave_0: entered allmulticast mode
[ 3209.247086][ T6613] bridge_slave_0: entered promiscuous mode
[ 3209.266401][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3209.282779][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3209.299370][ T6613] bridge_slave_1: entered allmulticast mode
[ 3209.324534][ T6613] bridge_slave_1: entered promiscuous mode
[ 3209.389875][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3209.415944][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3209.455774][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3209.485831][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3209.495838][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3209.525759][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3209.549616][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3209.575746][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3209.597706][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3209.731225][ T6722] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.21940'.
[ 3209.795956][ T6722] netlink: zone id is out of range
[ 3209.797980][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3209.810368][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21940'.
[ 3209.843303][ T6722] netlink: zone id is out of range
[ 3209.864142][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3209.868345][ T6722] netlink: zone id is out of range
[ 3209.895755][ T6722] netlink: zone id is out of range
[ 3209.904416][ T6722] netlink: zone id is out of range
[ 3209.913709][ T6217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3209.923148][ T6722] netlink: zone id is out of range
[ 3209.936914][ T6722] netlink: zone id is out of range
[ 3209.942425][ T6217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3209.951775][ T6722] netlink: zone id is out of range
[ 3209.968761][ T6217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3209.983097][ T6217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3210.065756][ T6729] netlink: 'syz.1.21942': attribute type 4 has an invalid length.
[ 3210.200882][ T6613] team0: Port device team_slave_0 added
[ 3210.221911][ T6613] team0: Port device team_slave_1 added
[ 3210.364526][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3210.378921][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3210.456890][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3210.482808][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3210.498386][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3210.551059][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3210.708719][ T6613] hsr_slave_0: entered promiscuous mode
[ 3210.718301][ T6613] hsr_slave_1: entered promiscuous mode
[ 3210.734304][ T6613] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3210.743142][ T6613] Cannot create hsr debugfs directory
[ 3210.826156][T23569] Bluetooth: hci4: command tx timeout
[ 3210.937735][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21952'.
[ 3210.947010][ T6763] net_ratelimit: 118 callbacks suppressed
[ 3210.947030][ T6763] openvswitch: netlink: Flow key attr not present in new flow.
[ 3211.141958][T28288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3211.164692][ T6766] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.21953'.
[ 3211.184586][T28288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3211.193447][ T6766] netlink: zone id is out of range
[ 3211.211959][ T6766] netlink: zone id is out of range
[ 3211.223384][ T6766] netlink: zone id is out of range
[ 3211.234126][ T6766] netlink: zone id is out of range
[ 3211.244151][ T6766] netlink: zone id is out of range
[ 3211.245919][ T6768] netlink: 'syz.0.21954': attribute type 4 has an invalid length.
[ 3211.254293][ T6766] netlink: zone id is out of range
[ 3211.270654][ T6766] netlink: zone id is out of range
[ 3211.293803][ T6766] netlink: zone id is out of range
[ 3211.330156][ T6766] netlink: zone id is out of range
[ 3211.439507][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3211.458258][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21956'.
[ 3211.475923][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3211.668045][T28288] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3211.983485][T28288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3212.389192][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21963'.
[ 3212.449583][T28288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3212.468074][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 3212.486217][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 3212.503863][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 3212.523040][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 3212.537095][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 3212.544886][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 3212.642257][ T6804] netlink: 'syz.2.21964': attribute type 4 has an invalid length.
[ 3212.766176][T28288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3212.782077][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21968'.
[ 3212.817304][ T6814] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.21967'.
[ 3212.833141][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21967'.
[ 3213.531753][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21977'.
[ 3213.562678][ T6805] chnl_net:caif_netlink_parms(): no params data found
[ 3213.716069][T28288] bridge_slave_1: left allmulticast mode
[ 3213.721804][T28288] bridge_slave_1: left promiscuous mode
[ 3213.750597][T28288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3213.827274][T28288] bridge_slave_0: left allmulticast mode
[ 3213.833014][T28288] bridge_slave_0: left promiscuous mode
[ 3213.850842][T28288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3214.666112][T23569] Bluetooth: hci0: command tx timeout
[ 3215.219745][T28288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3215.244090][T28288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3215.260370][T28288] bond0 (unregistering): Released all slaves
[ 3215.277947][ T6613] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 3215.409679][ T6613] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 3215.450446][ T6613] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 3215.795754][ T9722] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 3215.811745][ T6613] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 3215.983063][ T6916] tipc: Can't bind to reserved service type 0
[ 3216.008039][ T9722] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3216.038664][ T9722] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3216.070560][ T9722] usb 1-1: config 1 has no interface number 0
[ 3216.093649][ T9722] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3216.117727][ T9722] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 3216.152105][ T9722] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 3216.188943][ T9722] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3216.220362][ T9722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3216.262369][ T9722] usb 1-1: Product: syz
[ 3216.273870][ T9722] usb 1-1: Manufacturer: syz
[ 3216.289124][ T9722] usb 1-1: SerialNumber: syz
[ 3216.314288][ T9722] usb 1-1: selecting invalid altsetting 1
[ 3216.456222][ T6902] syz.2.21988 (6902): drop_caches: 1
[ 3216.518390][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3216.539851][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3216.557395][ T6805] bridge_slave_0: entered allmulticast mode
[ 3216.594209][ T6805] bridge_slave_0: entered promiscuous mode
[ 3216.706675][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3216.729404][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3216.745833][ T9722] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS
[ 3216.755761][T23569] Bluetooth: hci0: command tx timeout
[ 3216.772430][ T9722] cdc_ncm 1-1:1.1: bind() failure
[ 3216.782808][ T6805] bridge_slave_1: entered allmulticast mode
[ 3216.806838][ T9722] usb 1-1: USB disconnect, device number 66
[ 3216.830810][ T6805] bridge_slave_1: entered promiscuous mode
[ 3216.907499][T28288] hsr_slave_0: left promiscuous mode
[ 3216.947528][T28288] hsr_slave_1: left promiscuous mode
[ 3217.041127][T28288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3217.055520][ T6902] syz.2.21988 (6902): drop_caches: 1
[ 3217.082169][T28288] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3217.112451][T28288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3217.140666][T28288] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3217.258290][T28288] veth1_macvtap: left promiscuous mode
[ 3217.284231][T28288] veth0_macvtap: left promiscuous mode
[ 3217.306053][T28288] veth1_vlan: left promiscuous mode
[ 3217.321757][T28288] veth0_vlan: left promiscuous mode
[ 3218.468654][T28288] team0 (unregistering): Port device team_slave_1 removed
[ 3218.563674][T28288] team0 (unregistering): Port device team_slave_0 removed
[ 3218.835778][T23569] Bluetooth: hci0: command tx timeout
[ 3219.628797][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3219.691127][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3219.883130][ T6805] team0: Port device team_slave_0 added
[ 3219.911530][ T6805] team0: Port device team_slave_1 added
[ 3220.021367][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3220.031615][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3220.117915][ T6805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3220.161051][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3220.182056][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3220.219045][ T6805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3220.465079][ T6990] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22013'.
[ 3220.490521][ T6805] hsr_slave_0: entered promiscuous mode
[ 3220.509698][ T6990] net_ratelimit: 244 callbacks suppressed
[ 3220.509720][ T6990] netlink: zone id is out of range
[ 3220.522337][ T6805] hsr_slave_1: entered promiscuous mode
[ 3220.538820][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22013'.
[ 3220.560189][ T6990] netlink: zone id is out of range
[ 3220.565375][ T6990] netlink: zone id is out of range
[ 3220.605699][ T6990] netlink: zone id is out of range
[ 3220.636735][ T6990] netlink: zone id is out of range
[ 3220.645308][ T6990] netlink: zone id is out of range
[ 3220.667477][ T6990] netlink: zone id is out of range
[ 3220.675799][ T6990] netlink: zone id is out of range
[ 3220.707362][ T6990] netlink: zone id is out of range
[ 3220.719060][ T6990] netlink: zone id is out of range
[ 3220.849497][ T7006] netlink: 'syz.3.22019': attribute type 4 has an invalid length.
[ 3220.871566][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3220.905997][T23569] Bluetooth: hci0: command tx timeout
[ 3221.065314][ T6613] 8021q: adding VLAN 0 to HW filter on device team0
[ 3221.325540][T19820] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3221.332861][T19820] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3221.357848][T19820] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3221.365181][T19820] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3221.562444][ T7033] netlink: 'syz.0.22031': attribute type 4 has an invalid length.
[ 3222.155467][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3222.708163][ T6805] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 3222.749594][ T6805] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 3222.806096][ T6613] veth0_vlan: entered promiscuous mode
[ 3222.845380][ T6805] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 3222.861022][ T6805] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 3222.925234][ T7075] netlink: 'syz.2.22043': attribute type 4 has an invalid length.
[ 3222.959441][ T6613] veth1_vlan: entered promiscuous mode
[ 3223.180233][ T6613] veth0_macvtap: entered promiscuous mode
[ 3223.213999][ T6613] veth1_macvtap: entered promiscuous mode
[ 3223.429414][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3223.450910][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3223.502872][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3223.526882][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3223.553651][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3223.584800][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3223.615861][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3223.655713][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3223.672507][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3223.703208][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3223.800871][ T6805] 8021q: adding VLAN 0 to HW filter on device team0
[ 3223.824241][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3223.857975][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3223.880898][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3223.923009][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3223.955867][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3223.986316][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3224.013173][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3224.023810][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3224.043795][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3224.092239][ T7114] netlink: 'syz.2.22054': attribute type 4 has an invalid length.
[ 3224.108673][T15520] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3224.116288][T15520] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3224.153359][ T6613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3224.171102][ T6613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3224.182748][ T6613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3224.211471][ T6613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3224.231867][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22058'.
[ 3224.278350][T19820] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3224.285678][T19820] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3224.645250][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3224.666601][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3224.780518][  T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3224.815708][  T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3224.911266][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3225.075804][T15520] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 3225.119310][ T6805] veth0_vlan: entered promiscuous mode
[ 3225.179462][ T6805] veth1_vlan: entered promiscuous mode
[ 3225.222810][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22070'.
[ 3225.297843][T15520] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3225.326156][ T6805] veth0_macvtap: entered promiscuous mode
[ 3225.336964][T15520] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3225.359487][T15520] usb 1-1: config 1 has no interface number 0
[ 3225.379921][ T6805] veth1_macvtap: entered promiscuous mode
[ 3225.392475][T15520] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3225.433922][T15520] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 3225.456127][T15520] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 3225.493480][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3225.520331][T15520] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3225.539841][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3225.540300][T15520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3225.572142][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3225.599195][T15520] usb 1-1: Product: syz
[ 3225.603535][T15520] usb 1-1: Manufacturer: syz
[ 3225.611723][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3225.624570][T15520] usb 1-1: SerialNumber: syz
[ 3225.649240][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3225.659186][T15520] usb 1-1: selecting invalid altsetting 1
[ 3225.673755][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3225.709995][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3225.745927][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3225.767544][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3225.808648][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3225.831150][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3225.869707][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3225.931391][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3225.961000][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3225.993873][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3226.025369][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3226.064566][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3226.074699][T15520] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS
[ 3226.084883][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3226.091221][T15520] cdc_ncm 1-1:1.1: bind() failure
[ 3226.125671][T15520] usb 1-1: USB disconnect, device number 67
[ 3226.125694][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3226.125722][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3226.214543][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3226.244773][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3226.324275][ T6805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3226.352044][ T6805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3226.386162][ T6805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3226.414138][ T6805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3226.557231][ T7201] bridge0: port 3(team0) entered blocking state
[ 3226.575931][ T7201] bridge0: port 3(team0) entered disabled state
[ 3226.582501][ T7201] team0: entered allmulticast mode
[ 3226.635044][ T7201] team_slave_0: entered allmulticast mode
[ 3226.656522][ T7201] team_slave_1: entered allmulticast mode
[ 3226.665338][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22080'.
[ 3226.674340][ T7201] team0: entered promiscuous mode
[ 3226.674459][ T7201] team_slave_0: entered promiscuous mode
[ 3226.674712][ T7201] team_slave_1: entered promiscuous mode
[ 3226.687022][ T7201] bridge0: port 3(team0) entered blocking state
[ 3226.698527][ T7201] bridge0: port 3(team0) entered forwarding state
[ 3226.817826][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22082'.
[ 3226.836737][ T7210] net_ratelimit: 118 callbacks suppressed
[ 3226.836761][ T7210] openvswitch: netlink: Flow key attr not present in new flow.
[ 3226.884210][T12558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3226.924849][T12558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3227.038442][ T2886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3227.064758][ T2886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3227.079772][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22084'.
[ 3227.185801][T15497] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 3227.399121][T15497] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 3227.431296][T15497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3227.444129][ T7231] netlink: 'syz.0.22089': attribute type 4 has an invalid length.
[ 3227.464374][T15497] usb 4-1: config 0 descriptor??
[ 3227.730082][T15497] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[ 3227.770512][T15497] usb 4-1: USB disconnect, device number 91
[ 3227.916545][T15520] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 3228.044275][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22096'.
[ 3228.141817][ T7248] bridge0: port 3(team0) entered disabled state
[ 3228.160126][T15520] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3228.176386][T15520] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3228.200893][T15520] usb 2-1: config 1 has no interface number 0
[ 3228.222960][T15520] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3228.244504][T15520] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 3228.264895][T15520] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 3228.304570][T15520] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3228.322720][T15520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3228.353183][T15520] usb 2-1: Product: syz
[ 3228.365798][T15520] usb 2-1: Manufacturer: syz
[ 3228.370487][T15520] usb 2-1: SerialNumber: syz
[ 3228.430597][T15520] usb 2-1: selecting invalid altsetting 1
[ 3228.549322][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22098'.
[ 3228.625270][ T7222] netlink: 56 bytes leftover after parsing attributes in process `syz.4.22086'.
[ 3228.866612][T15520] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS
[ 3228.872731][T15520] cdc_ncm 2-1:1.1: bind() failure
[ 3228.916634][T15520] usb 2-1: USB disconnect, device number 117
[ 3228.930781][ T7263] netlink: 'syz.3.22103': attribute type 4 has an invalid length.
[ 3229.260404][ T7272] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22106'.
[ 3229.291961][ T7272] netlink: zone id is out of range
[ 3229.298155][ T7272] netlink: zone id is out of range
[ 3229.313834][ T7272] netlink: zone id is out of range
[ 3229.323973][ T7272] netlink: zone id is out of range
[ 3229.334138][ T7272] netlink: zone id is out of range
[ 3229.352064][ T7272] netlink: zone id is out of range
[ 3229.353662][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22106'.
[ 3229.366896][T15504] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 3229.391114][ T7272] netlink: zone id is out of range
[ 3229.417872][ T7272] netlink: zone id is out of range
[ 3229.423189][ T7272] netlink: zone id is out of range
[ 3229.565790][T15504] usb 4-1: Using ep0 maxpacket: 16
[ 3229.604788][T15504] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[ 3229.635889][T15504] usb 4-1: config 0 has no interface number 0
[ 3229.642273][T15504] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3229.725534][T15504] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 3229.745136][T15504] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3229.764163][T15504] usb 4-1: Product: syz
[ 3229.778080][T15504] usb 4-1: SerialNumber: syz
[ 3229.804522][T15504] usb 4-1: config 0 descriptor??
[ 3229.820250][T15504] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[ 3230.325733][ T5149] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 3230.506705][ T5149] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 3230.516149][ T5149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3230.535408][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3230.563416][ T5149] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3230.575533][T15504] usb 4-1: USB disconnect, device number 92
[ 3230.600927][ T5149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3230.635915][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3230.676170][ T5149] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3230.700608][ T5149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3230.711653][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3230.735750][ T5149] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3230.744281][ T5149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3230.755172][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3230.788594][ T5149] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3230.800960][ T5149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3230.824632][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3230.854480][ T5149] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3230.883157][ T5149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3230.897573][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3230.930379][ T5149] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3230.940909][ T5149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3230.987061][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3231.020743][ T5149] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3231.046582][ T5149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3231.056674][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3231.078128][ T5149] usb 2-1: config 0 interface 0 has no altsetting 0
[ 3231.095268][ T5149] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3231.109676][ T5149] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3231.125517][ T5149] usb 2-1: Product: syz
[ 3231.139083][ T5149] usb 2-1: Manufacturer: syz
[ 3231.154096][ T5149] usb 2-1: SerialNumber: syz
[ 3231.186612][ T5149] usb 2-1: config 0 descriptor??
[ 3231.223541][ T5149] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[ 3231.288236][ T7307] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22119'.
[ 3231.351038][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22119'.
[ 3231.837952][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3231.860466][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3232.107338][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22129'.
[ 3232.177474][ T7334] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.22128'.
[ 3232.192130][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3232.196209][ T7334] net_ratelimit: 117 callbacks suppressed
[ 3232.196243][ T7334] netlink: zone id is out of range
[ 3232.209443][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3232.272173][ T7334] netlink: zone id is out of range
[ 3232.282266][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3232.296521][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22128'.
[ 3232.317210][ T7334] netlink: zone id is out of range
[ 3232.322950][ T7334] netlink: zone id is out of range
[ 3232.335776][T15520] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 3232.344106][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3232.377025][ T7334] netlink: zone id is out of range
[ 3232.382317][ T7334] netlink: zone id is out of range
[ 3232.409461][ T7334] netlink: zone id is out of range
[ 3232.415549][ T7334] netlink: zone id is out of range
[ 3232.435817][ T7334] netlink: zone id is out of range
[ 3232.454656][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3232.455740][ T7334] netlink: zone id is out of range
[ 3232.472867][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3232.551939][T15520] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 3232.581501][T15520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3232.601648][T15504] usb 2-1: USB disconnect, device number 118
[ 3232.610593][T15520] usb 1-1: Product: syz
[ 3232.625764][T15520] usb 1-1: Manufacturer: syz
[ 3232.630721][T15520] usb 1-1: SerialNumber: syz
[ 3232.676885][T15520] usb 1-1: config 0 descriptor??
[ 3232.695249][T15520] ch341 1-1:0.0: ch341-uart converter detected
[ 3232.842710][T15497] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 3232.961277][ T7354] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22137'.
[ 3232.981023][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22137'.
[ 3233.035854][T15497] usb 5-1: Using ep0 maxpacket: 16
[ 3233.056827][T15497] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[ 3233.086036][T15497] usb 5-1: config 0 has no interface number 0
[ 3233.092259][T15497] usb 5-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3233.127576][T15497] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 3233.137891][T15497] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3233.147276][T15497] usb 5-1: Product: syz
[ 3233.151512][T15497] usb 5-1: SerialNumber: syz
[ 3233.173709][T15497] usb 5-1: config 0 descriptor??
[ 3233.193007][T15497] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[ 3233.533217][T15520] usb 1-1: failed to send control message: -71
[ 3233.542085][T15520] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 3233.550387][T15504] yurex 2-1:0.0: USB YUREX #0 now disconnected
[ 3233.588267][T15520] usb 1-1: USB disconnect, device number 68
[ 3233.589811][T15520] ch341 1-1:0.0: device disconnected
[ 3233.735850][T19820] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 3233.821257][T15504] usb 5-1: USB disconnect, device number 82
[ 3233.915894][T19820] usb 3-1: Using ep0 maxpacket: 16
[ 3233.923012][T19820] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 3233.941476][T19820] usb 3-1: config 0 has no interface number 0
[ 3233.955835][T19820] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3233.975826][T19820] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 3233.998583][T19820] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 3234.015670][T19820] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3234.023875][T19820] usb 3-1: Product: syz
[ 3234.045727][T19820] usb 3-1: SerialNumber: syz
[ 3234.066919][T19820] usb 3-1: config 0 descriptor??
[ 3234.078539][T19820] cm109 3-1:0.8: invalid payload size 0, expected 4
[ 3234.098811][T19820] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input160
[ 3234.326112][ T7382] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.22149'.
[ 3234.396778][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22149'.
[ 3234.592128][    C1] cm109_urb_ctl_callback: 31 callbacks suppressed
[ 3234.592158][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 3234.592870][T15497] usb 3-1: USB disconnect, device number 70
[ 3234.598624][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 3234.716871][T15497] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 3235.196045][T15520] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 3235.376465][T19820] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 3235.412437][T15520] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 3235.422488][T15520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3235.438585][T15520] usb 4-1: config 0 descriptor??
[ 3235.583834][ T7417] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.22163'.
[ 3235.609672][T19820] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 3235.621993][T19820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3235.641367][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22163'.
[ 3235.650874][T19820] usb 5-1: Product: syz
[ 3235.655188][T19820] usb 5-1: Manufacturer: syz
[ 3235.677353][T19820] usb 5-1: SerialNumber: syz
[ 3235.684090][ T7419] usb usb8: usbfs: process 7419 (syz.1.22164) did not claim interface 0 before use
[ 3235.705294][T19820] usb 5-1: config 0 descriptor??
[ 3235.723288][T19820] ch341 5-1:0.0: ch341-uart converter detected
[ 3235.778462][T15520] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 3235.794117][T15520] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 3235.807513][T15520] [drm:udl_init] *ERROR* Selecting channel failed
[ 3235.849517][T15520] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[ 3235.865922][T15520] [drm] Initialized udl on minor 2
[ 3235.877857][T15520] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3235.897087][T15520] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 3235.901077][ T7421] netlink: 'syz.1.22166': attribute type 7 has an invalid length.
[ 3235.915456][ T7483] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3235.932778][ T7421] netlink: 'syz.1.22166': attribute type 39 has an invalid length.
[ 3235.956299][T15520] usb 4-1: USB disconnect, device number 93
[ 3235.966021][ T7483] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 3236.040247][ T7424] netlink: 'syz.1.22166': attribute type 7 has an invalid length.
[ 3236.087842][ T7424] netlink: 'syz.1.22166': attribute type 39 has an invalid length.
[ 3236.272648][ T7428] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.22168'.
[ 3236.558631][T19820] usb 5-1: failed to send control message: -71
[ 3236.564923][T19820] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 3236.599185][T19820] usb 5-1: USB disconnect, device number 83
[ 3236.615460][T19820] ch341 5-1:0.0: device disconnected
[ 3236.765933][T15520] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 3236.959140][T15520] usb 1-1: Using ep0 maxpacket: 16
[ 3236.977403][T15520] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 3236.991719][T15520] usb 1-1: config 0 has no interface number 0
[ 3237.000826][T15520] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3237.025240][T15520] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 3237.038628][T15520] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 3237.064484][T15520] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3237.082959][T15520] usb 1-1: Product: syz
[ 3237.087514][T15520] usb 1-1: SerialNumber: syz
[ 3237.096199][T15520] usb 1-1: config 0 descriptor??
[ 3237.110077][T15520] cm109 1-1:0.8: invalid payload size 0, expected 4
[ 3237.127799][T15520] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input161
[ 3237.276675][T15497] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 3237.505869][T15497] usb 2-1: Using ep0 maxpacket: 32
[ 3237.508023][T15497] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 3237.508055][T15497] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[ 3237.508099][T15497] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 3237.508127][T15497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3237.650338][ T7482] netlink: 'syz.4.22193': attribute type 10 has an invalid length.
[ 3237.650379][ T7482] __nla_validate_parse: 1 callbacks suppressed
[ 3237.650393][ T7482] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.22193'.
[ 3237.650413][ T7482] net_ratelimit: 622 callbacks suppressed
[ 3237.650425][ T7482] openvswitch: netlink: Flow key attr not present in new flow.
[ 3237.974785][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 3237.979353][T15535] usb 1-1: USB disconnect, device number 69
[ 3237.981828][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 3238.019082][T15535] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 3238.220755][ T7503] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.22200'.
[ 3238.241174][ T7503] netlink: zone id is out of range
[ 3238.251459][ T7503] netlink: zone id is out of range
[ 3238.262157][ T7503] netlink: zone id is out of range
[ 3238.293430][ T7503] netlink: zone id is out of range
[ 3238.304541][ T7503] netlink: zone id is out of range
[ 3238.314806][ T7503] netlink: zone id is out of range
[ 3238.330250][ T7503] netlink: zone id is out of range
[ 3238.333191][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22200'.
[ 3238.335771][ T7503] netlink: zone id is out of range
[ 3238.363096][ T7503] netlink: zone id is out of range
[ 3238.366043][T15497] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 3238.599399][T15497] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 3238.625798][T15497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3238.654356][T15497] usb 4-1: Product: syz
[ 3238.666167][T15497] usb 4-1: Manufacturer: syz
[ 3238.670847][T15497] usb 4-1: SerialNumber: syz
[ 3238.693547][T15497] usb 4-1: config 0 descriptor??
[ 3238.711602][T15497] ch341 4-1:0.0: ch341-uart converter detected
[ 3238.931624][T15497] usb 4-1: failed to receive control message: -32
[ 3238.945800][T15497] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32
[ 3239.120605][  T965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3239.253957][  T965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3239.500048][  T965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3239.624104][  T965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3239.972099][  T965] bridge_slave_1: left allmulticast mode
[ 3239.997065][  T965] bridge_slave_1: left promiscuous mode
[ 3240.010656][  T965] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3240.027548][T15497] usb 2-1: USB disconnect, device number 119
[ 3240.042981][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 3240.063989][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 3240.074371][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 3240.082886][  T965] bridge_slave_0: left allmulticast mode
[ 3240.091417][  T965] bridge_slave_0: left promiscuous mode
[ 3240.098960][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 3240.119888][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 3240.128512][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 3240.136233][  T965] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3240.411218][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22224'.
[ 3240.986071][T19820] usb 4-1: USB disconnect, device number 94
[ 3240.993367][T19820] ch341 4-1:0.0: device disconnected
[ 3241.067381][  T965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3241.084556][  T965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3241.100083][  T965] bond0 (unregistering): Released all slaves
[ 3241.123476][  T965] bond1 (unregistering): Released all slaves
[ 3241.150880][ T7561] netlink: 'syz.2.22225': attribute type 1 has an invalid length.
[ 3241.283068][ T7561] 8021q: adding VLAN 0 to HW filter on device bond1
[ 3241.425450][ T7562] bond1: (slave veth3): Enslaving as an active interface with a down link
[ 3241.614952][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22226'.
[ 3242.186864][T23569] Bluetooth: hci4: command tx timeout
[ 3242.336618][ T9722] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 3242.364812][  T965] hsr_slave_0: left promiscuous mode
[ 3242.384692][  T965] hsr_slave_1: left promiscuous mode
[ 3242.402725][  T965] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3242.415810][  T965] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3242.436941][  T965] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3242.458445][  T965] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3242.529565][  T965] veth1_macvtap: left promiscuous mode
[ 3242.538659][  T965] veth0_macvtap: left promiscuous mode
[ 3242.547868][  T965] veth1_vlan: left promiscuous mode
[ 3242.550684][ T9722] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 3242.556722][  T965] veth0_vlan: left promiscuous mode
[ 3242.574982][ T9722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3242.595991][ T9722] usb 1-1: Product: syz
[ 3242.603780][ T9722] usb 1-1: Manufacturer: syz
[ 3242.616614][ T9722] usb 1-1: SerialNumber: syz
[ 3242.645130][ T9722] usb 1-1: config 0 descriptor??
[ 3242.662906][ T9722] ch341 1-1:0.0: ch341-uart converter detected
[ 3242.895926][ T9722] usb 1-1: failed to receive control message: -32
[ 3242.902514][ T9722] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32
[ 3243.867673][  T965] team0 (unregistering): Port device team_slave_1 removed
[ 3243.925977][ T5149] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 3243.953527][  T965] team0 (unregistering): Port device team_slave_0 removed
[ 3244.129780][ T5149] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 3244.154249][ T5149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3244.189267][ T5149] usb 3-1: config 0 descriptor??
[ 3244.265981][T23569] Bluetooth: hci4: command tx timeout
[ 3244.561286][ T5149] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 3244.584461][ T5149] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 3244.604919][ T5149] [drm:udl_init] *ERROR* Selecting channel failed
[ 3244.621403][ T5149] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 3244.632805][ T5149] [drm] Initialized udl on minor 2
[ 3244.639529][ T5149] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3244.653173][ T5149] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 3244.691649][ T5149] usb 3-1: USB disconnect, device number 71
[ 3244.697991][T15535] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3244.707677][T15535] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 3245.007803][ T5149] usb 1-1: USB disconnect, device number 70
[ 3245.015051][ T5149] ch341 1-1:0.0: device disconnected
[ 3245.191624][ T7605] netlink: 'syz.1.22239': attribute type 1 has an invalid length.
[ 3245.728166][ T7552] chnl_net:caif_netlink_parms(): no params data found
[ 3245.817649][ T7644] tipc: Enabling of bearer <eth:tea> rejected, failed to enable media
[ 3246.198309][   T29] audit: type=1326 audit(1719277694.383:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.1.22257" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73f2579 code=0x0
[ 3246.232543][ T7650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22251'.
[ 3246.252458][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3246.271113][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3246.288905][ T7552] bridge_slave_0: entered allmulticast mode
[ 3246.309128][ T7552] bridge_slave_0: entered promiscuous mode
[ 3246.334202][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3246.349328][T23569] Bluetooth: hci4: command tx timeout
[ 3246.368247][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3246.379910][ T7552] bridge_slave_1: entered allmulticast mode
[ 3246.397503][ T7552] bridge_slave_1: entered promiscuous mode
[ 3246.537501][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3246.572013][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3246.777294][ T7552] team0: Port device team_slave_0 added
[ 3246.814414][ T7552] team0: Port device team_slave_1 added
[ 3246.933494][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3246.959389][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3247.042263][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3247.084178][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3247.091574][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3247.180043][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3247.451941][ T7552] hsr_slave_0: entered promiscuous mode
[ 3247.469614][ T7552] hsr_slave_1: entered promiscuous mode
[ 3247.488937][ T7552] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3247.501641][ T7552] Cannot create hsr debugfs directory
[ 3247.516836][T19820] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 3247.568369][ T7716] tipc: Enabling of bearer <eth:team> rejected, failed to enable media
[ 3247.725807][T19820] usb 1-1: Using ep0 maxpacket: 16
[ 3247.734382][T19820] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 3247.759074][T19820] usb 1-1: config 0 has no interface number 0
[ 3247.794959][T19820] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3247.871270][T19820] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 3247.894036][T19820] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3247.944437][T19820] usb 1-1: Product: syz
[ 3247.955907][T19820] usb 1-1: SerialNumber: syz
[ 3247.988622][T19820] usb 1-1: config 0 descriptor??
[ 3248.004200][T19820] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[ 3248.259589][ T7737] netlink: 628 bytes leftover after parsing attributes in process `syz.1.22282'.
[ 3248.274158][ T9722] usb 1-1: USB disconnect, device number 71
[ 3248.293868][ T7742] net_ratelimit: 117 callbacks suppressed
[ 3248.293895][ T7742] openvswitch: netlink: ct_state flags 00000300 unsupported
[ 3248.426020][T23569] Bluetooth: hci4: command tx timeout
[ 3249.322544][ T7780] openvswitch: netlink: ct_state flags 00000300 unsupported
[ 3249.542439][ T7788] openvswitch: netlink: Duplicate key (type 0).
[ 3249.605290][ T7552] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 3249.681898][ T7552] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 3249.746874][ T7552] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 3249.770057][ T7798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22305'.
[ 3249.816059][ T7552] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 3250.092061][ T7808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22309'.
[ 3250.234533][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3250.309875][ T7552] 8021q: adding VLAN 0 to HW filter on device team0
[ 3250.346146][T15666] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3250.353421][T15666] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3250.403102][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3250.410743][ T9722] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3250.432344][ T7828] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22314'.
[ 3250.482839][ T7828] netlink: zone id is out of range
[ 3250.499951][ T7828] netlink: zone id is out of range
[ 3250.505220][ T7828] netlink: zone id is out of range
[ 3250.538662][ T7828] netlink: zone id is out of range
[ 3250.553422][ T7552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 3250.556917][ T7828] netlink: zone id is out of range
[ 3250.596678][ T7552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3250.668456][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22314'.
[ 3250.713807][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3250.725780][ T7828] netlink: zone id is out of range
[ 3250.730970][ T7828] netlink: zone id is out of range
[ 3250.808748][ T7844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22319'.
[ 3250.839762][ T7843] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.22320'.
[ 3250.916870][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22320'.
[ 3250.956059][ T7851] netlink: 'syz.3.22322': attribute type 2 has an invalid length.
[ 3250.989888][ T7552] veth0_vlan: entered promiscuous mode
[ 3251.042702][ T7856] netlink: 'syz.2.22323': attribute type 4 has an invalid length.
[ 3251.126686][ T7552] veth1_vlan: entered promiscuous mode
[ 3251.258304][ T7552] veth0_macvtap: entered promiscuous mode
[ 3251.323790][ T7552] veth1_macvtap: entered promiscuous mode
[ 3251.418833][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3251.437097][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3251.465765][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3251.469848][ T7875] netlink: 214 bytes leftover after parsing attributes in process `syz.2.22331'.
[ 3251.511928][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3251.535840][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3251.567816][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3251.605887][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3251.626454][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3251.640940][ T7881] netlink: 'syz.0.22333': attribute type 72 has an invalid length.
[ 3251.649196][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3251.662122][ T7881] netlink: 'syz.0.22333': attribute type 8 has an invalid length.
[ 3251.670864][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3251.706793][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3251.789421][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3251.835868][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3251.859638][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3251.896060][ T7893] netlink: 'syz.0.22336': attribute type 3 has an invalid length.
[ 3251.903970][ T7893] netlink: 'syz.0.22336': attribute type 3 has an invalid length.
[ 3251.915732][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3251.936642][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3251.936684][ T7895] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22335'.
[ 3251.975701][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3252.011203][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3252.022865][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22335'.
[ 3252.056754][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3252.086068][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3252.110004][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3252.126555][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3252.162578][ T7552] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3252.187528][ T7552] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3252.208374][ T7552] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3252.232675][ T7552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3252.275140][ T7903] netlink: 'syz.1.22338': attribute type 4 has an invalid length.
[ 3252.671359][T12558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3252.733654][T12558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3252.839331][ T2810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3252.871969][ T2810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3253.357364][ T7957] netlink: 'syz.4.22356': attribute type 4 has an invalid length.
[ 3253.365258][ T7957] netlink: 'syz.4.22356': attribute type 3 has an invalid length.
[ 3254.115214][ T7994] netlink: 892 bytes leftover after parsing attributes in process `syz.0.22371'.
[ 3254.282044][ T8003] vlan2: entered promiscuous mode
[ 3254.297570][ T8003] syz_tun: entered promiscuous mode
[ 3254.359700][ T8010] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.22377'.
[ 3254.389964][ T8012] netlink: 'syz.3.22378': attribute type 1 has an invalid length.
[ 3254.394685][ T8010] net_ratelimit: 371 callbacks suppressed
[ 3254.394708][ T8010] netlink: zone id is out of range
[ 3254.449422][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22377'.
[ 3254.449616][ T8010] netlink: zone id is out of range
[ 3254.515830][ T8010] netlink: zone id is out of range
[ 3254.526927][ T8010] netlink: zone id is out of range
[ 3254.532128][ T8010] netlink: zone id is out of range
[ 3254.576794][ T8010] netlink: zone id is out of range
[ 3254.608794][ T8010] netlink: zone id is out of range
[ 3254.647080][ T8010] netlink: zone id is out of range
[ 3254.675439][ T8010] netlink: zone id is out of range
[ 3254.703294][ T8010] netlink: zone id is out of range
[ 3256.087017][T17078] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 3256.240605][ T8113] validate_nla: 1 callbacks suppressed
[ 3256.240629][ T8113] netlink: 'syz.0.22417': attribute type 4 has an invalid length.
[ 3256.285843][T17078] usb 5-1: Using ep0 maxpacket: 32
[ 3256.301173][T17078] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 3256.355743][T17078] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3256.390471][T17078] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 3256.436552][T17078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3256.469346][T17078] hub 5-1:4.0: bad descriptor, ignoring hub
[ 3256.493385][T17078] hub 5-1:4.0: probe with driver hub failed with error -5
[ 3256.520418][T17078] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[ 3256.542054][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22422'.
[ 3256.961971][ T8142] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.22429'.
[ 3257.004686][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22429'.
[ 3257.112812][   T29] audit: type=1326 audit(1719277705.303:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.22435" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7481579 code=0x0
[ 3257.196455][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22437'.
[ 3257.610264][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22447'.
[ 3257.637981][ T8182] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22448'.
[ 3257.668756][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22448'.
[ 3257.779281][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22451'.
[ 3258.438621][ T8178] syz.0.22446 (8178): drop_caches: 2
[ 3258.814717][ T8214] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.22462'.
[ 3258.833535][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22462'.
[ 3258.917800][T15535] usb 5-1: USB disconnect, device number 84
[ 3259.402223][ T8246] netlink: 'syz.0.22476': attribute type 4 has an invalid length.
[ 3259.779286][ T8268] IPv6: Can't replace route, no match found
[ 3260.160249][ T8283] net_ratelimit: 495 callbacks suppressed
[ 3260.160274][ T8283] netlink: zone id is out of range
[ 3260.201102][ T8283] netlink: zone id is out of range
[ 3260.211201][ T8283] netlink: zone id is out of range
[ 3260.229441][ T8283] netlink: zone id is out of range
[ 3260.237076][ T8283] netlink: zone id is out of range
[ 3260.266011][ T8283] netlink: zone id is out of range
[ 3260.271275][ T8283] netlink: zone id is out of range
[ 3260.285233][ T8283] netlink: zone id is out of range
[ 3260.302785][ T8283] netlink: zone id is out of range
[ 3260.318984][ T8283] netlink: zone id is out of range
[ 3261.465923][T23569] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 3261.475527][T23569] Bluetooth: hci2: Injecting HCI hardware error event
[ 3261.486785][ T5098] Bluetooth: hci2: hardware error 0x00
[ 3261.591417][ T8349] __nla_validate_parse: 10 callbacks suppressed
[ 3261.591441][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22524'.
[ 3261.820644][ T8361] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.22532'.
[ 3261.887348][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22532'.
[ 3262.083812][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22540'.
[ 3262.312989][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22545'.
[ 3262.689527][ T8415] netlink: 'syz.3.22556': attribute type 4 has an invalid length.
[ 3262.875776][T15535] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 3263.038586][T15535] usb 1-1: device descriptor read/64, error -71
[ 3263.306010][T15535] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 3263.458223][T15535] usb 1-1: device descriptor read/64, error -71
[ 3263.547053][ T5098] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 3263.601694][T15535] usb usb1-port1: attempt power cycle
[ 3263.718372][T23569] Bluetooth: hci5: command 0x0406 tx timeout
[ 3264.035740][T15535] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 3264.082851][T15535] usb 1-1: device descriptor read/8, error -71
[ 3264.348698][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 3264.364187][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 3264.371471][T15535] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 3264.381833][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 3264.398492][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 3264.416762][T15535] usb 1-1: device descriptor read/8, error -71
[ 3264.423267][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 3264.434318][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 3264.541989][T15535] usb usb1-port1: unable to enumerate USB device
[ 3264.653256][ T8488] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.22592'.
[ 3264.697692][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22592'.
[ 3264.741993][T28288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3265.005946][T28288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3265.234175][T28288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3265.412647][T28288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3265.893651][ T8490] chnl_net:caif_netlink_parms(): no params data found
[ 3266.213173][T28288] bridge_slave_1: left allmulticast mode
[ 3266.225750][T28288] bridge_slave_1: left promiscuous mode
[ 3266.233986][T28288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3266.273596][ T8494] syz.2.22594 (8494): drop_caches: 2
[ 3266.395802][T28288] bridge_slave_0: left allmulticast mode
[ 3266.401647][T28288] bridge_slave_0: left promiscuous mode
[ 3266.452036][T28288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3266.511604][T23569] Bluetooth: hci2: command tx timeout
[ 3266.752845][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 3266.759693][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[ 3268.013981][T28288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3268.030747][T28288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3268.060191][T28288] bond0 (unregistering): Released all slaves
[ 3268.587419][T23569] Bluetooth: hci2: command tx timeout
[ 3268.695453][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3268.719439][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3268.746504][ T8490] bridge_slave_0: entered allmulticast mode
[ 3268.755017][ T8490] bridge_slave_0: entered promiscuous mode
[ 3268.804871][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3268.827592][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3268.835190][ T8490] bridge_slave_1: entered allmulticast mode
[ 3268.857895][ T8490] bridge_slave_1: entered promiscuous mode
[ 3269.257164][ T8604] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.22626'.
[ 3269.285770][ T8604] net_ratelimit: 368 callbacks suppressed
[ 3269.285793][ T8604] netlink: zone id is out of range
[ 3269.328066][ T8604] netlink: zone id is out of range
[ 3269.351812][ T8604] netlink: zone id is out of range
[ 3269.372290][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22626'.
[ 3269.385957][ T8604] netlink: zone id is out of range
[ 3269.399852][ T8604] netlink: zone id is out of range
[ 3269.445777][ T8604] netlink: zone id is out of range
[ 3269.451048][ T8604] netlink: zone id is out of range
[ 3269.461718][T28288] hsr_slave_0: left promiscuous mode
[ 3269.502133][ T8604] netlink: zone id is out of range
[ 3269.511519][T28288] hsr_slave_1: left promiscuous mode
[ 3269.528702][ T8604] netlink: zone id is out of range
[ 3269.539478][T28288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3269.544180][ T8604] netlink: zone id is out of range
[ 3269.575851][T28288] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3269.599319][T28288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3269.620305][T28288] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3269.725102][T28288] veth1_macvtap: left promiscuous mode
[ 3269.731805][T28288] veth0_macvtap: left promiscuous mode
[ 3269.742506][T28288] veth1_vlan: left promiscuous mode
[ 3269.751664][T28288] veth0_vlan: left promiscuous mode
[ 3270.670730][T23569] Bluetooth: hci2: command tx timeout
[ 3270.748728][T28288] team0 (unregistering): Port device team_slave_1 removed
[ 3270.831077][T28288] team0 (unregistering): Port device team_slave_0 removed
[ 3271.778212][ T8490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3271.791880][ T8613] netlink: 'syz.1.22632': attribute type 4 has an invalid length.
[ 3271.817377][ T8614] netlink: 'syz.1.22632': attribute type 4 has an invalid length.
[ 3271.912817][ T8490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3272.196956][ T8490] team0: Port device team_slave_0 added
[ 3272.295983][T15520] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 3272.344368][ T8490] team0: Port device team_slave_1 added
[ 3272.450957][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3272.493858][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3272.526374][T15520] usb 3-1: Using ep0 maxpacket: 16
[ 3272.538617][T15520] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 3272.550546][T15520] usb 3-1: config 0 has no interface number 0
[ 3272.567937][T15520] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3272.575043][ T8490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3272.628073][T15520] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 3272.657105][T15520] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 3272.665271][T15520] usb 3-1: Product: syz
[ 3272.678972][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3272.705810][T15520] usb 3-1: SerialNumber: syz
[ 3272.711845][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3272.744728][T15520] usb 3-1: config 0 descriptor??
[ 3272.747068][T23569] Bluetooth: hci2: command tx timeout
[ 3272.768673][T15520] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[ 3272.802593][ T8490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3272.994697][ T8490] hsr_slave_0: entered promiscuous mode
[ 3273.030373][ T8490] hsr_slave_1: entered promiscuous mode
[ 3273.055509][ T8490] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3273.055542][ T8490] Cannot create hsr debugfs directory
[ 3273.086823][T15520] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 3273.267933][T15520] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 3273.317138][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3273.355239][T15520] usb 2-1: config 0 descriptor??
[ 3273.360444][T19820] usb 3-1: USB disconnect, device number 72
[ 3273.674280][T15520] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 3273.697330][T15520] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 3273.745984][T15520] [drm:udl_init] *ERROR* Selecting channel failed
[ 3273.763946][ T8668] netlink: 'syz.4.22645': attribute type 4 has an invalid length.
[ 3273.781064][T15520] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[ 3273.834437][ T8674] netlink: 'syz.4.22645': attribute type 4 has an invalid length.
[ 3273.835687][T15520] [drm] Initialized udl on minor 2
[ 3273.898201][T15520] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3273.932089][T15520] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 3273.949317][T19820] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3274.006173][T15520] usb 2-1: USB disconnect, device number 120
[ 3274.020390][T19820] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[ 3274.039279][T19820] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 3274.510629][ T8699] net_ratelimit: 117 callbacks suppressed
[ 3274.510655][ T8699] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 3274.595953][ T5149] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 3274.757321][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22659'.
[ 3274.769825][ T5149] usb 5-1: device descriptor read/64, error -71
[ 3274.940834][ T8490] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3274.962543][ T8490] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3275.008874][ T8490] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3275.045949][ T5149] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 3275.061718][ T8490] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3275.085866][ T6129] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 3275.184886][ T8721] macvlan2: entered promiscuous mode
[ 3275.191207][ T8721] macvlan2: entered allmulticast mode
[ 3275.198071][ T8721] bridge0: entered promiscuous mode
[ 3275.204307][ T8721] bridge0: entered allmulticast mode
[ 3275.229755][ T8721] team0: Port device macvlan2 added
[ 3275.245761][ T5149] usb 5-1: device descriptor read/64, error -71
[ 3275.291689][ T6129] usb 2-1: Using ep0 maxpacket: 32
[ 3275.304838][ T6129] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3275.334269][ T6129] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 3275.358140][ T6129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3275.370842][ T5149] usb usb5-port1: attempt power cycle
[ 3275.402992][ T6129] hub 2-1:4.0: bad descriptor, ignoring hub
[ 3275.415732][ T6129] hub 2-1:4.0: probe with driver hub failed with error -5
[ 3275.424959][ T6129] usbhid 2-1:4.0: couldn't find an input interrupt endpoint
[ 3275.513010][ T8490] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3275.563297][ T8490] 8021q: adding VLAN 0 to HW filter on device team0
[ 3275.591064][T15504] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3275.598340][T15504] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3275.629866][T17078] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3275.637215][T17078] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3275.756266][ T6129] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 3275.815922][ T5149] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 3275.857147][ T5149] usb 5-1: device descriptor read/8, error -71
[ 3275.866027][ T8490] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3275.988118][ T6129] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 3276.010065][ T8490] veth0_vlan: entered promiscuous mode
[ 3276.016858][ T6129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3276.043212][ T6129] usb 1-1: config 0 descriptor??
[ 3276.070826][ T8490] veth1_vlan: entered promiscuous mode
[ 3276.146422][ T5149] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 3276.169061][ T8490] veth0_macvtap: entered promiscuous mode
[ 3276.187041][ T8490] veth1_macvtap: entered promiscuous mode
[ 3276.196934][ T5149] usb 5-1: device descriptor read/8, error -71
[ 3276.241907][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3276.274638][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.295727][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3276.317838][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.329174][ T5149] usb usb5-port1: unable to enumerate USB device
[ 3276.347740][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3276.370616][ T6129] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 3276.385999][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.397012][ T6129] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 3276.415690][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3276.426878][ T6129] [drm:udl_init] *ERROR* Selecting channel failed
[ 3276.449924][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.478539][ T6129] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[ 3276.495204][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3276.507025][ T6129] [drm] Initialized udl on minor 2
[ 3276.517002][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.535788][ T6129] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3276.544773][ T6129] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 3276.554195][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3276.574326][T17078] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3276.585019][ T6129] usb 1-1: USB disconnect, device number 76
[ 3276.595564][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3276.595889][T17078] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 3276.613641][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.642171][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3276.689126][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.711651][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3276.734480][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.770066][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3276.801807][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.824483][ T8490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3276.836163][ T8490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3276.855021][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3276.911679][ T8490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3276.940269][ T8490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3276.958758][ T8490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3276.973117][ T8490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3277.226945][ T2810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3277.234842][ T2810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3277.342704][  T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3277.388238][  T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3277.530485][ T8774] vlan3: entered promiscuous mode
[ 3277.549257][ T8774] vlan3: entered allmulticast mode
[ 3277.899830][T15666] usb 2-1: USB disconnect, device number 121
[ 3277.928497][ T8795] dccp_invalid_packet: P.Data Offset(0) too small
[ 3277.945410][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22678'.
[ 3278.385885][ T5149] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 3278.401324][ T8814] macvlan3: entered promiscuous mode
[ 3278.423432][ T8814] macvlan3: entered allmulticast mode
[ 3278.612948][ T5149] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 3278.650706][ T5149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3278.691063][ T5149] usb 5-1: config 0 descriptor??
[ 3279.051989][ T5149] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 3279.076444][ T5149] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 3279.090895][ T5149] [drm:udl_init] *ERROR* Selecting channel failed
[ 3279.177122][ T5149] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[ 3279.227502][ T5149] [drm] Initialized udl on minor 2
[ 3279.265952][ T5149] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3279.277140][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22693'.
[ 3279.295293][ T5149] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 3279.303005][ T6129] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3279.339134][ T6129] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3279.350242][ T5149] usb 5-1: USB disconnect, device number 89
[ 3279.371796][ T6129] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 3279.916366][ T8860] macvlan2: entered promiscuous mode
[ 3279.925769][ T8860] macvlan2: entered allmulticast mode
[ 3280.023326][ T8867] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22700'.
[ 3280.047685][ T8867] netlink: zone id is out of range
[ 3280.080008][ T8867] netlink: zone id is out of range
[ 3280.149381][ T8867] netlink: zone id is out of range
[ 3280.154579][ T8867] netlink: zone id is out of range
[ 3280.177666][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22700'.
[ 3280.265984][ T8867] netlink: zone id is out of range
[ 3280.271610][ T8867] netlink: zone id is out of range
[ 3280.336834][ T8867] netlink: zone id is out of range
[ 3280.384949][ T8867] netlink: zone id is out of range
[ 3280.424013][ T8867] netlink: zone id is out of range
[ 3280.478914][ T8867] netlink: zone id is out of range
[ 3281.533507][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22718'.
[ 3282.056066][ T8933] macvlan2: entered promiscuous mode
[ 3282.075676][ T8933] macvlan2: entered allmulticast mode
[ 3282.694002][ T8955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22735'.
[ 3282.784400][T23569] Bluetooth: hci1: Received unexpected HCI Event 0x00
[ 3282.941094][ T8965] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.22738'.
[ 3282.975079][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22738'.
[ 3283.207472][ T8972] macvlan3: entered promiscuous mode
[ 3283.212923][ T8972] macvlan3: entered allmulticast mode
[ 3283.253922][ T8972] team0: Port device macvlan3 added
[ 3283.817869][T23569] Bluetooth: hci4: Received unexpected HCI Event 0x00
[ 3284.044588][ T9005] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22752'.
[ 3284.096188][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22752'.
[ 3284.406003][ T8986] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22748'.
[ 3284.446298][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22760'.
[ 3285.135848][ T9042] macvlan2: entered promiscuous mode
[ 3285.141446][ T9042] macvlan2: entered allmulticast mode
[ 3285.168708][ T9042] bridge0: entered promiscuous mode
[ 3285.178906][ T9042] bridge0: entered allmulticast mode
[ 3285.212272][ T9042] team0: Port device macvlan2 added
[ 3285.364631][ T9051] __nla_validate_parse: 1 callbacks suppressed
[ 3285.364654][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22773'.
[ 3285.489828][ T9060] net_ratelimit: 371 callbacks suppressed
[ 3285.489853][ T9060] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 3285.646394][T15520] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 3285.763548][ T9073] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 3285.849578][T15520] usb 1-1: too many configurations: 9, using maximum allowed: 8
[ 3285.870428][T15520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3285.892629][T15520] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3285.915823][T15520] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3285.924218][T15520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3285.934123][T15520] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3285.965418][T15520] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3285.986604][T15520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3286.004793][T15520] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3286.015860][ T5149] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 3286.025243][T15520] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3286.034474][T15520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3286.044522][T15520] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3286.063053][T15520] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3286.082920][T15520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3286.120995][ T9085] syz_tun: left promiscuous mode
[ 3286.126961][T15520] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3286.153100][T15520] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3286.199243][T15520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3286.209778][ T5149] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 3286.217940][T15520] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3286.245813][ T5149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3286.252905][T15520] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3286.263154][T15520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3286.274357][ T5149] usb 4-1: Product: syz
[ 3286.285440][T15520] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3286.288103][ T5149] usb 4-1: Manufacturer: syz
[ 3286.301735][T15520] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3286.303202][T15520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3286.333823][ T9089] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 3286.343160][T15520] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3286.365400][ T5149] usb 4-1: SerialNumber: syz
[ 3286.366151][T15520] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3286.400910][ T5149] usb 4-1: config 0 descriptor??
[ 3286.429568][ T5149] ch341 4-1:0.0: ch341-uart converter detected
[ 3286.462326][T15520] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3286.483415][T15520] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3286.493025][T15520] usb 1-1: Product: syz
[ 3286.507614][T15520] usb 1-1: Manufacturer: syz
[ 3286.512327][T15520] usb 1-1: SerialNumber: syz
[ 3286.547161][T15520] usb 1-1: config 0 descriptor??
[ 3286.570204][T15520] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[ 3286.655925][ T5149] usb 4-1: failed to receive control message: -32
[ 3286.666496][ T5149] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32
[ 3286.713148][ T9101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.22795'.
[ 3287.062948][ T9117] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[ 3287.096025][ T5149] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 3287.121059][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3287.143007][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3287.325855][ T5149] usb 3-1: Using ep0 maxpacket: 16
[ 3287.335295][ T5149] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3287.348217][ T5149] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3287.360199][ T5149] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 3287.372862][ T5149] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3287.392359][ T5149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3287.410283][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3287.418937][ T5149] usb 3-1: Product: syz
[ 3287.423143][ T5149] usb 3-1: Manufacturer: syz
[ 3287.433314][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3287.446837][ T5149] usb 3-1: SerialNumber: syz
[ 3287.502447][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3287.522933][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3287.586685][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3287.606843][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3287.692227][ T9137] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.22812'.
[ 3287.707126][ T9137] netlink: zone id is out of range
[ 3287.712216][ T5149] usb 3-1: 0:2 : does not exist
[ 3287.718060][ T9722] usb 1-1: USB disconnect, device number 77
[ 3287.736369][ T9137] netlink: zone id is out of range
[ 3287.751818][ T9137] netlink: zone id is out of range
[ 3287.768219][ T9137] netlink: zone id is out of range
[ 3287.784504][ T9137] netlink: zone id is out of range
[ 3287.788700][ T5149] usb 3-1: USB disconnect, device number 73
[ 3287.821954][ T9137] netlink: zone id is out of range
[ 3287.851584][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22812'.
[ 3288.068733][ T9055] udevd[9055]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3288.261544][ T9147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.22815'.
[ 3288.316708][T19820] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 3288.525324][T19820] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 3288.535821][T19820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3288.555477][T19820] usb 5-1: config 0 descriptor??
[ 3288.771181][T15520] usb 4-1: USB disconnect, device number 95
[ 3288.793495][T15520] ch341 4-1:0.0: device disconnected
[ 3288.827230][ T9722] yurex 1-1:0.0: USB YUREX #0 now disconnected
[ 3288.910640][ T9170] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22824'.
[ 3288.929191][T19820] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 3288.955175][T19820] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 3288.988591][T19820] [drm:udl_init] *ERROR* Selecting channel failed
[ 3289.002672][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22824'.
[ 3289.016895][T19820] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[ 3289.024760][T19820] [drm] Initialized udl on minor 2
[ 3289.033482][ T9178] 
[ 3289.036047][ T9178] =====================================================
[ 3289.043200][ T9178] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[ 3289.050727][ T9178] 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 Not tainted
[ 3289.057883][ T9178] -----------------------------------------------------
[ 3289.064853][ T9178] syz.3.22825/9178 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 3289.072789][ T9178] ffffffff8e00a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xfc/0x360
[ 3289.081508][ T9178] 
[ 3289.081508][ T9178] and this task is already holding:
[ 3289.089102][ T9178] ffff88802550e118 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x33/0x360
[ 3289.098053][ T9178] which would create a new lock dependency:
[ 3289.104002][ T9178]  (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2}
[ 3289.112260][ T9178] 
[ 3289.112260][ T9178] but this new dependency connects a HARDIRQ-irq-safe lock:
[ 3289.121744][ T9178]  (&client->buffer_lock){-.-.}-{2:2}
[ 3289.121780][ T9178] 
[ 3289.121780][ T9178] ... which became HARDIRQ-irq-safe at:
[ 3289.134972][ T9178]   lock_acquire+0x1ed/0x550
[ 3289.139583][ T9178]   _raw_spin_lock+0x2e/0x40
[ 3289.144209][ T9178]   evdev_pass_values+0xf2/0xad0
[ 3289.149178][ T9178]   evdev_events+0x1c2/0x300
[ 3289.153786][ T9178]   input_pass_values+0x84d/0x1200
[ 3289.159005][ T9178]   input_event_dispose+0x402/0x650
[ 3289.164227][ T9178]   input_handle_event+0xa71/0xbe0
[ 3289.169363][ T9178]   input_event+0xa4/0xd0
[ 3289.173801][ T9178]   hidinput_hid_event+0x138c/0x1ca0
[ 3289.179123][ T9178]   hid_process_event+0x439/0x590
[ 3289.184276][ T9178]   hid_report_raw_event+0x1002/0x18a0
[ 3289.189757][ T9178]   hid_input_report+0x416/0x500
[ 3289.194798][ T9178]   hid_irq_in+0x4a0/0x6d0
[ 3289.199232][ T9178]   __usb_hcd_giveback_urb+0x42c/0x6e0
[ 3289.204705][ T9178]   dummy_timer+0x830/0x45d0
[ 3289.209405][ T9178]   __hrtimer_run_queues+0x59b/0xd50
[ 3289.214895][ T9178]   hrtimer_interrupt+0x396/0x990
[ 3289.219957][ T9178]   __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 3289.226069][ T9178]   sysvec_apic_timer_interrupt+0xa1/0xc0
[ 3289.231898][ T9178]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3289.237985][ T9178]   lock_acquire+0x264/0x550
[ 3289.242596][ T9178]   _raw_spin_lock+0x2e/0x40
[ 3289.247220][ T9178]   wg_ratelimiter_gc_entries+0x60/0x470
[ 3289.252953][ T9178]   process_scheduled_works+0xa2c/0x1830
[ 3289.258595][ T9178]   worker_thread+0x86d/0xd70
[ 3289.263279][ T9178]   kthread+0x2f0/0x390
[ 3289.267445][ T9178]   ret_from_fork+0x4b/0x80
[ 3289.271962][ T9178]   ret_from_fork_asm+0x1a/0x30
[ 3289.276832][ T9178] 
[ 3289.276832][ T9178] to a HARDIRQ-irq-unsafe lock:
[ 3289.283866][ T9178]  (tasklist_lock){.+.+}-{2:2}
[ 3289.283899][ T9178] 
[ 3289.283899][ T9178] ... which became HARDIRQ-irq-unsafe at:
[ 3289.296551][ T9178] ...
[ 3289.296561][ T9178]   lock_acquire+0x1ed/0x550
[ 3289.303748][ T9178]   _raw_read_lock+0x36/0x50
[ 3289.308353][ T9178]   __do_wait+0x12d/0x850
[ 3289.312719][ T9178]   do_wait+0x1e9/0x560
[ 3289.316905][ T9178]   kernel_wait+0xe9/0x240
[ 3289.321361][ T9178]   call_usermodehelper_exec_work+0xbd/0x230
[ 3289.327350][ T9178]   process_scheduled_works+0xa2c/0x1830
[ 3289.332993][ T9178]   worker_thread+0x86d/0xd70
[ 3289.337853][ T9178]   kthread+0x2f0/0x390
[ 3289.342029][ T9178]   ret_from_fork+0x4b/0x80
[ 3289.346741][ T9178]   ret_from_fork_asm+0x1a/0x30
[ 3289.351613][ T9178] 
[ 3289.351613][ T9178] other info that might help us debug this:
[ 3289.351613][ T9178] 
[ 3289.361869][ T9178] Chain exists of:
[ 3289.361869][ T9178]   &client->buffer_lock --> &f->f_owner.lock --> tasklist_lock
[ 3289.361869][ T9178] 
[ 3289.375278][ T9178]  Possible interrupt unsafe locking scenario:
[ 3289.375278][ T9178] 
[ 3289.383706][ T9178]        CPU0                    CPU1
[ 3289.389082][ T9178]        ----                    ----
[ 3289.394473][ T9178]   lock(tasklist_lock);
[ 3289.398841][ T9178]                                local_irq_disable();
[ 3289.405603][ T9178]                                lock(&client->buffer_lock);
[ 3289.413085][ T9178]                                lock(&f->f_owner.lock);
[ 3289.420122][ T9178]   <Interrupt>
[ 3289.423593][ T9178]     lock(&client->buffer_lock);
[ 3289.428637][ T9178] 
[ 3289.428637][ T9178]  *** DEADLOCK ***
[ 3289.428637][ T9178] 
[ 3289.436904][ T9178] 5 locks held by syz.3.22825/9178:
[ 3289.442107][ T9178]  #0: ffff888051a0c420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[ 3289.451288][ T9178]  #1: ffff88801f80deb0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: do_truncate+0x20c/0x310
[ 3289.461853][ T9178]  #2: ffffffff94810e50 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: fsnotify+0x53d/0x1f70
[ 3289.471980][ T9178]  #3: ffff88807c7ae1c8 (&mark->lock){+.+.}-{2:2}, at: dnotify_handle_event+0x61/0x440
[ 3289.481847][ T9178]  #4: ffff88802550e118 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x33/0x360
[ 3289.491538][ T9178] 
[ 3289.491538][ T9178] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[ 3289.501948][ T9178]   -> (&client->buffer_lock){-.-.}-{2:2} {
[ 3289.507886][ T9178]      IN-HARDIRQ-W at:
[ 3289.512045][ T9178]                         lock_acquire+0x1ed/0x550
[ 3289.518554][ T9178]                         _raw_spin_lock+0x2e/0x40
[ 3289.525157][ T9178]                         evdev_pass_values+0xf2/0xad0
[ 3289.532060][ T9178]                         evdev_events+0x1c2/0x300
[ 3289.538568][ T9178]                         input_pass_values+0x84d/0x1200
[ 3289.545602][ T9178]                         input_event_dispose+0x402/0x650
[ 3289.552749][ T9178]                         input_handle_event+0xa71/0xbe0
[ 3289.559901][ T9178]                         input_event+0xa4/0xd0
[ 3289.566240][ T9178]                         hidinput_hid_event+0x138c/0x1ca0
[ 3289.573456][ T9178]                         hid_process_event+0x439/0x590
[ 3289.580406][ T9178]                         hid_report_raw_event+0x1002/0x18a0
[ 3289.587796][ T9178]                         hid_input_report+0x416/0x500
[ 3289.594657][ T9178]                         hid_irq_in+0x4a0/0x6d0
[ 3289.600998][ T9178]                         __usb_hcd_giveback_urb+0x42c/0x6e0
[ 3289.608378][ T9178]                         dummy_timer+0x830/0x45d0
[ 3289.614895][ T9178]                         __hrtimer_run_queues+0x59b/0xd50
[ 3289.622197][ T9178]                         hrtimer_interrupt+0x396/0x990
[ 3289.629677][ T9178]                         __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 3289.638030][ T9178]                         sysvec_apic_timer_interrupt+0xa1/0xc0
[ 3289.645702][ T9178]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3289.653907][ T9178]                         lock_acquire+0x264/0x550
[ 3289.661035][ T9178]                         _raw_spin_lock+0x2e/0x40
[ 3289.667578][ T9178]                         wg_ratelimiter_gc_entries+0x60/0x470
[ 3289.675138][ T9178]                         process_scheduled_works+0xa2c/0x1830
[ 3289.682703][ T9178]                         worker_thread+0x86d/0xd70
[ 3289.689349][ T9178]                         kthread+0x2f0/0x390
[ 3289.695439][ T9178]                         ret_from_fork+0x4b/0x80
[ 3289.702052][ T9178]                         ret_from_fork_asm+0x1a/0x30
[ 3289.709561][ T9178]      IN-SOFTIRQ-W at:
[ 3289.714732][ T9178]                         lock_acquire+0x1ed/0x550
[ 3289.721474][ T9178]                         _raw_spin_lock+0x2e/0x40
[ 3289.728445][ T9178]                         evdev_pass_values+0xf2/0xad0
[ 3289.735332][ T9178]                         evdev_events+0x1c2/0x300
[ 3289.741845][ T9178]                         input_pass_values+0x84d/0x1200
[ 3289.748910][ T9178]                         input_event_dispose+0x402/0x650
[ 3289.756037][ T9178]                         input_handle_event+0xa71/0xbe0
[ 3289.763264][ T9178]                         input_event+0xa4/0xd0
[ 3289.769529][ T9178]                         hidinput_hid_event+0x138c/0x1ca0
[ 3289.776749][ T9178]                         hid_process_event+0x439/0x590
[ 3289.784404][ T9178]                         hid_report_raw_event+0x1002/0x18a0
[ 3289.791887][ T9178]                         hid_input_report+0x416/0x500
[ 3289.798770][ T9178]                         hid_irq_in+0x4a0/0x6d0
[ 3289.805149][ T9178]                         __usb_hcd_giveback_urb+0x42c/0x6e0
[ 3289.812565][ T9178]                         dummy_timer+0x830/0x45d0
[ 3289.819105][ T9178]                         __hrtimer_run_queues+0x59b/0xd50
[ 3289.826445][ T9178]                         hrtimer_interrupt+0x396/0x990
[ 3289.833417][ T9178]                         __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 3289.841618][ T9178]                         sysvec_apic_timer_interrupt+0x52/0xc0
[ 3289.849499][ T9178]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3289.857852][ T9178]                         _raw_spin_unlock_irq+0x29/0x50
[ 3289.866018][ T9178]                         __run_timer_base+0x1c0/0x8e0
[ 3289.873012][ T9178]                         run_timer_softirq+0xb7/0x170
[ 3289.880164][ T9178]                         handle_softirqs+0x2c4/0x970
[ 3289.887291][ T9178]                         __irq_exit_rcu+0xf4/0x1c0
[ 3289.894084][ T9178]                         irq_exit_rcu+0x9/0x30
[ 3289.900518][ T9178]                         sysvec_apic_timer_interrupt+0xa6/0xc0
[ 3289.908256][ T9178]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3289.916455][ T9178]                         lock_acquire+0x264/0x550
[ 3289.923080][ T9178]                         _raw_spin_lock+0x2e/0x40
[ 3289.929707][ T9178]                         wg_ratelimiter_gc_entries+0x60/0x470
[ 3289.937273][ T9178]                         process_scheduled_works+0xa2c/0x1830
[ 3289.944940][ T9178]                         worker_thread+0x86d/0xd70
[ 3289.951570][ T9178]                         kthread+0x2f0/0x390
[ 3289.957667][ T9178]                         ret_from_fork+0x4b/0x80
[ 3289.964109][ T9178]                         ret_from_fork_asm+0x1a/0x30
[ 3289.970887][ T9178]      INITIAL USE at:
[ 3289.974963][ T9178]                        lock_acquire+0x1ed/0x550
[ 3289.981472][ T9178]                        _raw_spin_lock+0x2e/0x40
[ 3289.987906][ T9178]                        evdev_pass_values+0xf2/0xad0
[ 3289.994768][ T9178]                        evdev_events+0x1c2/0x300
[ 3290.001218][ T9178]                        input_pass_values+0x84d/0x1200
[ 3290.008177][ T9178]                        input_event_dispose+0x36c/0x650
[ 3290.015318][ T9178]                        input_handle_event+0xa71/0xbe0
[ 3290.022284][ T9178]                        input_event+0xa4/0xd0
[ 3290.028476][ T9178]                        uinput_write+0x61e/0x12a0
[ 3290.035032][ T9178]                        vfs_write+0x2a2/0xc90
[ 3290.041241][ T9178]                        ksys_write+0x1a0/0x2c0
[ 3290.047517][ T9178]                        __do_fast_syscall_32+0xb4/0x120
[ 3290.054810][ T9178]                        do_fast_syscall_32+0x34/0x80
[ 3290.061797][ T9178]                        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3290.070075][ T9178]    }
[ 3290.072754][ T9178]    ... key      at: [<ffffffff94b07380>] evdev_open.__key.24+0x0/0x20
[ 3290.081188][ T9178]  -> (&new->fa_lock){...-}-{2:2} {
[ 3290.086514][ T9178]     IN-SOFTIRQ-R at:
[ 3290.090586][ T9178]                       lock_acquire+0x1ed/0x550
[ 3290.096955][ T9178]                       _raw_read_lock_irqsave+0xdd/0x130
[ 3290.104195][ T9178]                       kill_fasync+0x19e/0x4d0
[ 3290.110478][ T9178]                       sock_wake_async+0x147/0x170
[ 3290.117091][ T9178]                       sock_def_readable+0x3df/0x5b0
[ 3290.123984][ T9178]                       tcp_data_queue+0x20fa/0x76c0
[ 3290.130724][ T9178]                       tcp_rcv_established+0xfb7/0x2020
[ 3290.137787][ T9178]                       tcp_v6_do_rcv+0xabb/0x13b0
[ 3290.144488][ T9178]                       tcp_v6_rcv+0x2555/0x2fc0
[ 3290.150827][ T9178]                       ip6_protocol_deliver_rcu+0xc76/0x1570
[ 3290.158833][ T9178]                       ip6_input_finish+0x186/0x2d0
[ 3290.165713][ T9178]                       NF_HOOK+0x3a4/0x450
[ 3290.171803][ T9178]                       NF_HOOK+0x3a4/0x450
[ 3290.177726][ T9178]                       __netif_receive_skb+0x1ea/0x650
[ 3290.184679][ T9178]                       process_backlog+0x391/0x7d0
[ 3290.191290][ T9178]                       __napi_poll+0xcb/0x490
[ 3290.199387][ T9178]                       net_rx_action+0x7bb/0x10a0
[ 3290.205935][ T9178]                       handle_softirqs+0x2c4/0x970
[ 3290.212539][ T9178]                       run_ksoftirqd+0xca/0x130
[ 3290.218893][ T9178]                       smpboot_thread_fn+0x544/0xa30
[ 3290.225846][ T9178]                       kthread+0x2f0/0x390
[ 3290.231757][ T9178]                       ret_from_fork+0x4b/0x80
[ 3290.238031][ T9178]                       ret_from_fork_asm+0x1a/0x30
[ 3290.244828][ T9178]     INITIAL USE at:
[ 3290.248936][ T9178]                      lock_acquire+0x1ed/0x550
[ 3290.255213][ T9178]                      _raw_write_lock_irq+0xd3/0x120
[ 3290.261993][ T9178]                      fasync_remove_entry+0xff/0x1d0
[ 3290.268792][ T9178]                      pipe_fasync+0xb5/0x1f0
[ 3290.275160][ T9178]                      __fput+0x745/0x8b0
[ 3290.281012][ T9178]                      task_work_run+0x24f/0x310
[ 3290.287377][ T9178]                      syscall_exit_to_user_mode+0x168/0x370
[ 3290.294764][ T9178]                      __do_fast_syscall_32+0xc4/0x120
[ 3290.301725][ T9178]                      do_fast_syscall_32+0x34/0x80
[ 3290.308361][ T9178]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3290.316462][ T9178]     INITIAL READ USE at:
[ 3290.320907][ T9178]                           lock_acquire+0x1ed/0x550
[ 3290.327611][ T9178]                           _raw_read_lock_irqsave+0xdd/0x130
[ 3290.335080][ T9178]                           kill_fasync+0x19e/0x4d0
[ 3290.341677][ T9178]                           splice_file_to_pipe+0x363/0x500
[ 3290.349009][ T9178]                           do_sendfile+0x515/0xe10
[ 3290.355624][ T9178]                           __se_compat_sys_sendfile+0x194/0x1f0
[ 3290.363376][ T9178]                           __do_fast_syscall_32+0xb4/0x120
[ 3290.370682][ T9178]                           do_fast_syscall_32+0x34/0x80
[ 3290.377724][ T9178]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3290.386874][ T9178]   }
[ 3290.389487][ T9178]   ... key      at: [<ffffffff9480dfc0>] fasync_insert_entry.__key+0x0/0x20
[ 3290.398398][ T9178]   ... acquired at:
[ 3290.402359][ T9178]    lock_acquire+0x1ed/0x550
[ 3290.407066][ T9178]    _raw_read_lock_irqsave+0xdd/0x130
[ 3290.412716][ T9178]    kill_fasync+0x19e/0x4d0
[ 3290.417329][ T9178]    evdev_pass_values+0x58a/0xad0
[ 3290.422731][ T9178]    evdev_events+0x1c2/0x300
[ 3290.427440][ T9178]    input_pass_values+0x84d/0x1200
[ 3290.432652][ T9178]    input_event_dispose+0x36c/0x650
[ 3290.437975][ T9178]    input_handle_event+0xa71/0xbe0
[ 3290.443222][ T9178]    input_inject_event+0x22f/0x340
[ 3290.448701][ T9178]    evdev_write+0x672/0x7c0
[ 3290.453307][ T9178]    vfs_write+0x2a2/0xc90
[ 3290.457756][ T9178]    ksys_write+0x1a0/0x2c0
[ 3290.462362][ T9178]    __do_fast_syscall_32+0xb4/0x120
[ 3290.467671][ T9178]    do_fast_syscall_32+0x34/0x80
[ 3290.472715][ T9178]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3290.479237][ T9178] 
[ 3290.481564][ T9178] -> (&f->f_owner.lock){...-}-{2:2} {
[ 3290.486972][ T9178]    IN-SOFTIRQ-R at:
[ 3290.490969][ T9178]                     lock_acquire+0x1ed/0x550
[ 3290.497140][ T9178]                     _raw_read_lock_irqsave+0xdd/0x130
[ 3290.504101][ T9178]                     send_sigurg+0x29/0x3c0
[ 3290.510099][ T9178]                     sk_send_sigurg+0x75/0x2f0
[ 3290.516369][ T9178]                     tcp_check_urg+0x207/0x740
[ 3290.522650][ T9178]                     tcp_urg+0x15c/0x450
[ 3290.528381][ T9178]                     tcp_rcv_established+0xfac/0x2020
[ 3290.535243][ T9178]                     tcp_v4_do_rcv+0x965/0xc60
[ 3290.541590][ T9178]                     tcp_v4_rcv+0x2d90/0x37b0
[ 3290.547847][ T9178]                     ip_protocol_deliver_rcu+0x225/0x430
[ 3290.555153][ T9178]                     ip_local_deliver_finish+0x33f/0x5f0
[ 3290.562806][ T9178]                     NF_HOOK+0x3a4/0x450
[ 3290.568543][ T9178]                     NF_HOOK+0x3a4/0x450
[ 3290.574370][ T9178]                     __netif_receive_skb+0x2bf/0x650
[ 3290.581173][ T9178]                     process_backlog+0x391/0x7d0
[ 3290.587887][ T9178]                     __napi_poll+0xcb/0x490
[ 3290.593911][ T9178]                     net_rx_action+0x7bb/0x10a0
[ 3290.600295][ T9178]                     handle_softirqs+0x2c4/0x970
[ 3290.606968][ T9178]                     __irq_exit_rcu+0xf4/0x1c0
[ 3290.613491][ T9178]                     irq_exit_rcu+0x9/0x30
[ 3290.619576][ T9178]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[ 3290.626883][ T9178]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3290.634551][ T9178]                     _raw_spin_unlock_irqrestore+0xd8/0x140
[ 3290.641958][ T9178]                     __wake_up_common_lock+0x18c/0x1e0
[ 3290.649605][ T9178]                     sock_def_readable+0x20f/0x5b0
[ 3290.656214][ T9178]                     unix_dgram_sendmsg+0x148e/0x1f80
[ 3290.663080][ T9178]                     __sock_sendmsg+0x221/0x270
[ 3290.669433][ T9178]                     __sys_sendto+0x3a4/0x4f0
[ 3290.675603][ T9178]                     __x64_sys_sendto+0xde/0x100
[ 3290.682739][ T9178]                     do_syscall_64+0xf3/0x230
[ 3290.688931][ T9178]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3290.696508][ T9178]    INITIAL USE at:
[ 3290.700411][ T9178]                    lock_acquire+0x1ed/0x550
[ 3290.706533][ T9178]                    _raw_write_lock_irq+0xd3/0x120
[ 3290.713143][ T9178]                    f_modown+0x38/0x340
[ 3290.718883][ T9178]                    f_setown+0x14f/0x200
[ 3290.724630][ T9178]                    do_fcntl+0x67d/0x1730
[ 3290.730446][ T9178]                    do_compat_fcntl64+0x572/0x1050
[ 3290.737047][ T9178]                    __do_fast_syscall_32+0xb4/0x120
[ 3290.743741][ T9178]                    do_fast_syscall_32+0x34/0x80
[ 3290.750177][ T9178]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3290.758107][ T9178]    INITIAL READ USE at:
[ 3290.762446][ T9178]                         lock_acquire+0x1ed/0x550
[ 3290.768994][ T9178]                         _raw_read_lock_irq+0xda/0x120
[ 3290.775947][ T9178]                         do_fcntl+0x400/0x1730
[ 3290.782199][ T9178]                         do_compat_fcntl64+0x572/0x1050
[ 3290.789230][ T9178]                         __do_fast_syscall_32+0xb4/0x120
[ 3290.796357][ T9178]                         do_fast_syscall_32+0x34/0x80
[ 3290.803223][ T9178]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3290.811674][ T9178]  }
[ 3290.814189][ T9178]  ... key      at: [<ffffffff9480d360>] init_file.__key+0x0/0x20
[ 3290.822014][ T9178]  ... acquired at:
[ 3290.825817][ T9178]    lock_acquire+0x1ed/0x550
[ 3290.830502][ T9178]    _raw_read_lock_irqsave+0xdd/0x130
[ 3290.835967][ T9178]    send_sigio+0x33/0x360
[ 3290.840390][ T9178]    kill_fasync+0x23a/0x4d0
[ 3290.844987][ T9178]    splice_file_to_pipe+0x363/0x500
[ 3290.850306][ T9178]    do_sendfile+0x515/0xe10
[ 3290.854922][ T9178]    __se_compat_sys_sendfile+0x194/0x1f0
[ 3290.860660][ T9178]    __do_fast_syscall_32+0xb4/0x120
[ 3290.865978][ T9178]    do_fast_syscall_32+0x34/0x80
[ 3290.871032][ T9178]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3290.877662][ T9178] 
[ 3290.879993][ T9178] 
[ 3290.879993][ T9178] the dependencies between the lock to be acquired
[ 3290.880005][ T9178]  and HARDIRQ-irq-unsafe lock:
[ 3290.893538][ T9178] -> (tasklist_lock){.+.+}-{2:2} {
[ 3290.898685][ T9178]    HARDIRQ-ON-R at:
[ 3290.902673][ T9178]                     lock_acquire+0x1ed/0x550
[ 3290.908854][ T9178]                     _raw_read_lock+0x36/0x50
[ 3290.915025][ T9178]                     __do_wait+0x12d/0x850
[ 3290.920961][ T9178]                     do_wait+0x1e9/0x560
[ 3290.926703][ T9178]                     kernel_wait+0xe9/0x240
[ 3290.932701][ T9178]                     call_usermodehelper_exec_work+0xbd/0x230
[ 3290.940274][ T9178]                     process_scheduled_works+0xa2c/0x1830
[ 3290.947485][ T9178]                     worker_thread+0x86d/0xd70
[ 3290.953759][ T9178]                     kthread+0x2f0/0x390
[ 3290.959547][ T9178]                     ret_from_fork+0x4b/0x80
[ 3290.965654][ T9178]                     ret_from_fork_asm+0x1a/0x30
[ 3290.972154][ T9178]    SOFTIRQ-ON-R at:
[ 3290.976152][ T9178]                     lock_acquire+0x1ed/0x550
[ 3290.982312][ T9178]                     _raw_read_lock+0x36/0x50
[ 3290.988491][ T9178]                     __do_wait+0x12d/0x850
[ 3290.994399][ T9178]                     do_wait+0x1e9/0x560
[ 3291.000140][ T9178]                     kernel_wait+0xe9/0x240
[ 3291.006136][ T9178]                     call_usermodehelper_exec_work+0xbd/0x230
[ 3291.013690][ T9178]                     process_scheduled_works+0xa2c/0x1830
[ 3291.020901][ T9178]                     worker_thread+0x86d/0xd70
[ 3291.027153][ T9178]                     kthread+0x2f0/0x390
[ 3291.032899][ T9178]                     ret_from_fork+0x4b/0x80
[ 3291.038982][ T9178]                     ret_from_fork_asm+0x1a/0x30
[ 3291.045433][ T9178]    INITIAL USE at:
[ 3291.049338][ T9178]                    lock_acquire+0x1ed/0x550
[ 3291.055418][ T9178]                    _raw_write_lock_irq+0xd3/0x120
[ 3291.062115][ T9178]                    copy_process+0x228b/0x3dc0
[ 3291.068374][ T9178]                    kernel_clone+0x226/0x8f0
[ 3291.074467][ T9178]                    user_mode_thread+0x132/0x1a0
[ 3291.080900][ T9178]                    rest_init+0x23/0x300
[ 3291.086663][ T9178]                    start_kernel+0x47a/0x500
[ 3291.092804][ T9178]                    x86_64_start_reservations+0x2a/0x30
[ 3291.099912][ T9178]                    x86_64_start_kernel+0x99/0xa0
[ 3291.106439][ T9178]                    common_startup_64+0x13e/0x147
[ 3291.112969][ T9178]    INITIAL READ USE at:
[ 3291.117310][ T9178]                         lock_acquire+0x1ed/0x550
[ 3291.123908][ T9178]                         _raw_read_lock+0x36/0x50
[ 3291.130442][ T9178]                         __do_wait+0x12d/0x850
[ 3291.136716][ T9178]                         do_wait+0x1e9/0x560
[ 3291.142799][ T9178]                         kernel_wait+0xe9/0x240
[ 3291.149141][ T9178]                         call_usermodehelper_exec_work+0xbd/0x230
[ 3291.157081][ T9178]                         process_scheduled_works+0xa2c/0x1830
[ 3291.164658][ T9178]                         worker_thread+0x86d/0xd70
[ 3291.171272][ T9178]                         kthread+0x2f0/0x390
[ 3291.177350][ T9178]                         ret_from_fork+0x4b/0x80
[ 3291.183794][ T9178]                         ret_from_fork_asm+0x1a/0x30
[ 3291.190574][ T9178]  }
[ 3291.193088][ T9178]  ... key      at: [<ffffffff8e00a058>] tasklist_lock+0x18/0x40
[ 3291.201001][ T9178]  ... acquired at:
[ 3291.204940][ T9178]    lock_acquire+0x1ed/0x550
[ 3291.209631][ T9178]    _raw_read_lock+0x36/0x50
[ 3291.214331][ T9178]    send_sigio+0xfc/0x360
[ 3291.218771][ T9178]    dnotify_handle_event+0x13c/0x440
[ 3291.224249][ T9178]    fsnotify+0x1738/0x1f70
[ 3291.228779][ T9178]    __fsnotify_parent+0x4f5/0x5e0
[ 3291.233911][ T9178]    notify_change+0xbdf/0xe70
[ 3291.238693][ T9178]    do_truncate+0x220/0x310
[ 3291.243301][ T9178]    path_openat+0x2a3d/0x3280
[ 3291.248075][ T9178]    do_filp_open+0x235/0x490
[ 3291.252769][ T9178]    do_sys_openat2+0x13e/0x1d0
[ 3291.257639][ T9178]    __ia32_sys_creat+0x123/0x170
[ 3291.262671][ T9178]    __do_fast_syscall_32+0xb4/0x120
[ 3291.267970][ T9178]    do_fast_syscall_32+0x34/0x80
[ 3291.273006][ T9178]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3291.279552][ T9178] 
[ 3291.281972][ T9178] 
[ 3291.281972][ T9178] stack backtrace:
[ 3291.287877][ T9178] CPU: 1 PID: 9178 Comm: syz.3.22825 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0
[ 3291.298035][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 3291.308096][ T9178] Call Trace:
[ 3291.311382][ T9178]  <TASK>
[ 3291.314320][ T9178]  dump_stack_lvl+0x241/0x360
[ 3291.319029][ T9178]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3291.324248][ T9178]  ? __pfx__printk+0x10/0x10
[ 3291.328867][ T9178]  ? print_shortest_lock_dependencies+0xf2/0x160
[ 3291.335215][ T9178]  validate_chain+0x4de0/0x5900
[ 3291.340093][ T9178]  ? __pfx_validate_chain+0x10/0x10
[ 3291.345322][ T9178]  ? __lock_acquire+0x1346/0x1fd0
[ 3291.350358][ T9178]  ? mark_lock+0x9a/0x350
[ 3291.354705][ T9178]  __lock_acquire+0x1346/0x1fd0
[ 3291.359576][ T9178]  lock_acquire+0x1ed/0x550
[ 3291.364127][ T9178]  ? send_sigio+0xfc/0x360
[ 3291.368562][ T9178]  ? __pfx_lock_acquire+0x10/0x10
[ 3291.373622][ T9178]  ? do_raw_read_lock+0x3c/0x90
[ 3291.378970][ T9178]  ? _raw_read_lock_irqsave+0xe9/0x130
[ 3291.384535][ T9178]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[ 3291.390618][ T9178]  _raw_read_lock+0x36/0x50
[ 3291.395144][ T9178]  ? send_sigio+0xfc/0x360
[ 3291.399578][ T9178]  send_sigio+0xfc/0x360
[ 3291.403831][ T9178]  dnotify_handle_event+0x13c/0x440
[ 3291.409223][ T9178]  fsnotify+0x1738/0x1f70
[ 3291.413588][ T9178]  ? fsnotify+0x53d/0x1f70
[ 3291.418028][ T9178]  ? __pfx_fsnotify+0x10/0x10
[ 3291.423124][ T9178]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 3291.428471][ T9178]  ? __asan_memcpy+0x40/0x70
[ 3291.433092][ T9178]  __fsnotify_parent+0x4f5/0x5e0
[ 3291.438147][ T9178]  ? __pfx___fsnotify_parent+0x10/0x10
[ 3291.443636][ T9178]  ? setattr_copy+0x415/0x600
[ 3291.448334][ T9178]  ? shmem_setattr+0x90b/0xec0
[ 3291.453405][ T9178]  ? fsnotify_change+0x213/0x2a0
[ 3291.458469][ T9178]  notify_change+0xbdf/0xe70
[ 3291.463119][ T9178]  do_truncate+0x220/0x310
[ 3291.467566][ T9178]  ? __pfx_do_truncate+0x10/0x10
[ 3291.472525][ T9178]  ? apparmor_file_truncate+0x297/0x350
[ 3291.478309][ T9178]  path_openat+0x2a3d/0x3280
[ 3291.482937][ T9178]  ? __pfx_path_openat+0x10/0x10
[ 3291.487916][ T9178]  do_filp_open+0x235/0x490
[ 3291.492441][ T9178]  ? __pfx_do_filp_open+0x10/0x10
[ 3291.497580][ T9178]  ? _raw_spin_unlock+0x28/0x50
[ 3291.502456][ T9178]  ? alloc_fd+0x5a1/0x640
[ 3291.506812][ T9178]  do_sys_openat2+0x13e/0x1d0
[ 3291.511569][ T9178]  ? __pfx_do_futex+0x10/0x10
[ 3291.516282][ T9178]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3291.521524][ T9178]  ? __sys_connect+0xde/0x310
[ 3291.526271][ T9178]  __ia32_sys_creat+0x123/0x170
[ 3291.531177][ T9178]  ? __pfx___ia32_sys_creat+0x10/0x10
[ 3291.536743][ T9178]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 3291.543354][ T9178]  ? lockdep_hardirqs_on+0x99/0x150
[ 3291.548700][ T9178]  __do_fast_syscall_32+0xb4/0x120
[ 3291.553941][ T9178]  ? ret_from_fork_asm+0x1a/0x30
[ 3291.558921][ T9178]  ? lockdep_hardirqs_on+0x99/0x150
[ 3291.564153][ T9178]  do_fast_syscall_32+0x34/0x80
[ 3291.569029][ T9178]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3291.575392][ T9178] RIP: 0023:0xf748b579
[ 3291.579482][ T9178] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3291.599103][ T9178] RSP: 002b:00000000f5d8357c EFLAGS: 00000206 ORIG_RAX: 0000000000000008
[ 3291.607743][ T9178] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000000000
[ 3291.615735][ T9178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 3291.623722][ T9178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3291.631727][ T9178] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3291.639726][ T9178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3291.647819][ T9178]  </TASK>
[ 3291.678742][T19820] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3291.688391][T19820] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 3291.695922][ T7483] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3291.707907][ T7483] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3291.716749][T19820] usb 5-1: USB disconnect, device number 90
[ 3291.723633][ T7483] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 3291.965824][ T6129] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 3292.145798][ T6129] usb 2-1: Using ep0 maxpacket: 16
[ 3292.153167][ T6129] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 3292.163907][ T6129] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3292.175150][ T6129] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 3292.189622][ T6129] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3292.198940][ T6129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3292.207212][ T6129] usb 2-1: Product: syz
[ 3292.211395][ T6129] usb 2-1: Manufacturer: syz
[ 3292.216082][ T6129] usb 2-1: SerialNumber: syz
[ 3292.433916][ T6129] usb 2-1: 0:2 : does not exist
[ 3292.456994][ T6129] usb 2-1: USB disconnect, device number 122
[ 3292.471368][ T9174] udevd[9174]: setting owner of /dev/bus/usb/002/122 to uid=0, gid=0 failed: No such file or directory
[ 3292.670998][ T9174] udevd[9174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory