last executing test programs: 1m1.729122571s ago: executing program 1 (id=3941): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114a0000000000c400000000001c00950000007e8b1f64"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="c61548026675e14e4803294421ed7bc2963b", 0x12}], 0x1}, 0x8010) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/212, 0xd4}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x4c}}, 0x0) 26.933563046s ago: executing program 1 (id=3949): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = io_uring_setup(0x3f00, &(0x7f0000000640)={0x0, 0x6a23, 0x1000, 0x0, 0x17e}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1e, &(0x7f0000001940)=[{0x0, 0x700}], 0x1) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f0000000000)) 26.771547064s ago: executing program 1 (id=3963): r0 = socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x8695c3813a9bd78d}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, {0x1, 0xfffffffffffffffc, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, r5, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000080)='./file0\x00', 0x1de) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x19, 0x0, 0x0) bind$inet(r8, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x4, 0x9, 0x27b, @vifc_lcl_ifindex=r7, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r8, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, 0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES8=r9, @ANYRES64], 0x100000530) sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="e03f0300a17c06df93f748e17148e0d0", 0x33fe0}], 0x1, &(0x7f0000002240)=ANY=[@ANYBLOB="bf9e080070cc1000"/22], 0x10}}], 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file2', './file2'}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 25.808691635s ago: executing program 1 (id=3971): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={&(0x7f0000000040), 0x0, r3, r4, 0x9, 0x4110, 0x9, 0xd, {0x5, 0x7, 0x1, 0x5, 0xa000, 0xb, 0x5, 0xfff5, 0xc5, 0x1, 0x400, 0x9, 0xef, 0xfffffc00, "b083886057df392ebed1fa7a013d6f0089f0af30ef1997ccb9a98dd35c86b928"}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0602, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001002fe70009046b00016a93f000090588aeff"], 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME\nSYNTH \'Synth Capture\' 004'], 0x32) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r8, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb71b0}) 25.495300885s ago: executing program 1 (id=3973): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.451861716s ago: executing program 0 (id=3976): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r2, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x0, 0x1d45}}, 0x50) (async) close(r2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000040), 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x20}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000000020104000000000000000002000000240002801400018008000100e00000df07000200ac1414000c0002800500010000000000180003801400018008000200ac1414aa0800020000000000040001"], 0x54}}, 0x0) (async) splice(r0, 0x0, r4, 0x0, 0x4ffe2, 0x0) 24.099290234s ago: executing program 0 (id=3978): getpgrp(0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe4) (async) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)) (async) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000003c0), 0x10) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) (async) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) connect$inet(r0, &(0x7f0000000080), 0x10) (async) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$evdev(&(0x7f0000009700), 0x7fffffffffffffff, 0x725083) (async) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@private0}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x200, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000006000000080003002e557d443e14003bb4ef5459ce5d0f6d811e750bd0d472de57b686774dce5f0217d34cd38e3aff5075948e0b1b31ae5635f81f4df408e8756f0a28279854d0a5e79ff92906586c6dcbe855a889b3b1996644678f90233df5e7494141ad1a550bfc40d07e221f2f51b6fbab0123749fef8aeec5d09043348178a88e167c", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xa8}}, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000002c0), 0x0, 0x2400) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x5f24af6a}, 0x8) (async) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000380)={0x0, 0xb, 0x0, 0xfffa, 0x0, 0x40c60f50, 0x0}) (async) r7 = socket(0xf, 0x80000, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24a04440f31c0000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)) r9 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 22.702031745s ago: executing program 0 (id=3981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x7fff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0xb, 0x13, 0x0, 'queue0\x00', 0x40}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x40}}, 0x0) 8.004497286s ago: executing program 2 (id=4002): r0 = open(&(0x7f0000000040)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='user.R', @ANYRESDEC=r0], 0x0, 0x0, 0x0) 7.835552357s ago: executing program 2 (id=4004): add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="2668175d129aa950c7f2b7b17aef8eec871bb6271f8a18f953860f34d2ee771c50c2b2298d85f7ffca6695033d81a3de9e68768a695edcd341f5dfd5a3c3ded92d51dea92713cc3638e7258a64aba1a80b22d37215c0fbb28dee21cd4219d922a7d95133aa0f6a549327c08fb6b788a828d74b6c6cf9008d929fcafefa3763a8e109f9d98d11bcffaec3415eba76895546926112578b564d45de4a23371dbd97ed24c39221aab29f2805a750ea43b75be0e9b5952e8375a433f2", 0xba, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) syz_usb_control_io(r1, &(0x7f0000000400)={0x18, &(0x7f0000000140)={0x0, 0x0, 0x20, {0x20, 0x0, "9d7a38c01cb3114e651980e9d85a07d5632d60b58fabde2cfa3c76ec3803"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0x5015, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r0, 0x0) keyctl$unlink(0x9, r0, r0) r4 = openat$uhid(0xffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000019640)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e90009003900000003000000ec0000000300000050c9187c4d1f38314cc01ea5b0ad267786b4d281b8c36f8b382b47b7bf62ef156adbfca3ceb05511a24a92d4abd18726c86da53624730e945636b4f9cd0ce39a7ee2386af4c4c46ddbc4b29fe0bebfa52a476a30ab5da39f15b53ba1d245db948b14f50834e8dd903c94532a4f28a6c63811f6975945f190d59f8d81929bc504d5ffb691da4a5359ee18b3208ba09c59a711d5ca2f35e2df8c8374e121ff32603ee11c9ff52186f10b68018daab2ac9b8af11c4c1f134c5e5b6f8d03d4c8c506e9c90d38c225eea6429d3ef97cea6e5a54443f5b443035008fa9becf3a33424397441012fa70b8b30ae15d7d68a3452c45c1f0a03e945a96debd8c736687096a36b1476c6db285538b54b3d50fd690e7775b5a736b723a9105b023f5c6b5ca3ec8c90dc1c9a254d29697e27aa4eed5ccb2f022057ab8dad3e96fb2d7ac38ee55539e78207a6998dc130b9e0d11a2512fb519cb00818e982dc0484246443f9bfa87eba788909cc6"], 0x201) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100600}], 0x3a, 0x1400, 0x0, 0x3) r8 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 7.678269206s ago: executing program 4 (id=4006): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x700, 0x3, 0x8, {{0x31, 0x4, 0x3, 0x9, 0xc4, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @multicast1, {[@cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x1, 0x11, "ef15b560b370966ad40a0b39880992"}, {0x1, 0x10, "3cc7214cb8d5cee4289f436cb792"}, {0x5, 0xe, "c2d88117b3a3b40738d75da9"}, {0x5, 0x9, "7ab87358fef6b0"}]}, @timestamp_addr={0x44, 0x24, 0x6, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@multicast1, 0x4}, {@loopback, 0x2}, {@loopback, 0x800}]}, @timestamp={0x44, 0x10, 0xce, 0x0, 0x5, [0x3, 0x1, 0x1000]}, @lsrr={0x83, 0x1f, 0x5d, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xb4, 0x3, 0x3, [{@private=0xa010100, 0x7}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xf}]}]}}}}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1, 0x0, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bfa100050000000007010000f8ffffffbfa400000000000007040000f0ff03ffb70200000500000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000000c00000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.563499156s ago: executing program 4 (id=4007): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x47) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x100}, 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e000100"], 0x52) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f00000038c0)=""/102372, 0x18fe4}], 0x1, 0x0, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001500f1ffffff00f5ffffff000a000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x10001, 0x401, {{0x41, 0x4, 0x1, 0x3, 0x104, 0x67, 0x0, 0x10, 0x2b, 0x0, @multicast2, @local, {[@generic={0x82, 0x10, "d16bd4927cda5f8e9f9013919234"}, @cipso={0x86, 0x52, 0x0, [{0x6, 0x4, "0dc9"}, {0x0, 0xe, "8f099669ea8f45d7cca6e059"}, {0x1, 0xe, "9279c87a06c607ee54d20bc9"}, {0x5, 0x3, "df"}, {0x0, 0x2}, {0x2, 0x8, "599dce9b0d44"}, {0x2, 0x7, "399d8f9b68"}, {0x1, 0xb, "4a887038d3bbedc645"}, {0x7, 0x6, "6b50a768"}, {0x5, 0x7, "7316b348d1"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0xa, "0e8ff79bdb5c76a3"}, @timestamp_prespec={0x44, 0x44, 0xd9, 0x3, 0x5, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2e}}, {@broadcast, 0x8}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4}, {@rand_addr=0x64010102, 0x502}, {@loopback, 0xbe87}, {@local, 0x10}]}, @timestamp_prespec={0x44, 0x3c, 0x3f, 0x3, 0x3, [{@multicast1, 0x10000}, {@rand_addr=0x64010102, 0xa39f}, {@local, 0xb722}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010100, 0x6}, {@local, 0x200400}]}]}}}}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="d126ca64150000", @ANYBLOB], 0x1564}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000100001000900000000000000000000008903ffd40e71564aa3357177ca9fd926ff0fe5b541706be2cbe2a9562bdbf2c1526ad272cb0c7fff5ff872a08ed1802b96861ba6856ce289beb46ab8886cc9644230bb966bacfa9e6f37638ec7c3c07c8a6f07c5e322f111c60ad7e6023393a246515f82f4fd4a71dc988f294fef86f03f4099471f063d819ba49098bba02eb455c4afbe09c5d749d64608470600808efdd95c996d0a896ead4eb180154ca7c2b81fc3b23b7c54c56073701f98d7e257535625cc02ca39e1", @ANYRES32=r7, @ANYBLOB="002401000000000054001a8018000a801400070000000000000000000000000000000000380002803400018008001c0001800000080007000800000008000300ffffffff08000a000100000008000e00040000000800030001000000"], 0x74}}, 0x0) (async) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000240)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) 7.311514586s ago: executing program 4 (id=4008): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d0000ecff000109022400010000300009040000010300020009210700b90122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000002c0)={0x0, 0xb, 0x7, {0x7, 0x0, '\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="8878054bd275df0230ea000010ff0000016278ae9f6976"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfd0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000014000305000000000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000000f0"], 0x20}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x1c, 0x20, 0x300}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_usb_connect(0x0, 0x107, &(0x7f0000000280)=ANY=[@ANYRES64], 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000180)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="00214000717152d9fa42266a193902d2c9b0996ee18d", 0x16}], 0x1, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, 0x0, 0x0) dup(r7) 6.565864824s ago: executing program 3 (id=4009): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240), &(0x7f0000000000)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x80000, 0x9, 0x0, 0x0, 0x55}, 0x9c) 6.319462723s ago: executing program 3 (id=4010): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r3, &(0x7f0000000600)={&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/187, 0xbb}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000440)=""/58, 0x3a}, {&(0x7f00000004c0)=""/155, 0x9b}], 0x5}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x42, r2}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000580)=0xf1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00'}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000180)="ad85fa", 0x3}) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x2) r6 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_PHYS(r6, 0x4004556c, &(0x7f0000000100)='syz0\x00') 5.491019137s ago: executing program 2 (id=4011): r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f4000040da092b02000000000001090224000100000000090400000103000000092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x18, &(0x7f00000001c0)={0x0, 0x9, 0x7, {0x7, 0xa, "ffff61fef1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) r4 = fcntl$dupfd(r1, 0x406, r0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x3ec, 0x2c0, 0x5002004a, 0xb, 0x0, 0xea13, 0x358, 0x3c8, 0x3c8, 0x358, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x20, 0x0, [{}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x9}, {0x0, 0xc}, {}, {0x7}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {0x9, 0x20}, {}, {}, {0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}], {0xffffffff}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x448) 5.31727315s ago: executing program 3 (id=4012): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x4010, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x13, 0x0, 0xffffffffffffffff, @void, @value}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x22, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000240)) close(r1) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000280)="fa8e", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "e2afedd137ad1577", "e7b5508ada282958bc2344342c2b3ecf", "1dd641d9", "2d0777761a028ab0"}, 0x28) 4.891908917s ago: executing program 3 (id=4013): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x370}}, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x200000000000001f, 0xa, 0x4) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001c00)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r6, 0x8927, &(0x7f0000000040)={'\x00', @ifru_flags}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x8848, &(0x7f0000000480)={&(0x7f0000001c40)=@newqdisc={0x73, 0x24, 0xf07, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x2}}}]}, 0x40}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2901dfb4d98f068eab3e49a80dcd04", @ANYRES16=r7, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r10, @ANYBLOB="0800c300741300000800c40001000000"], 0x2c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x3c}}, 0x0) r15 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r15, 0xc0405602, &(0x7f0000000200)={0x2e, 0x2, 0x1, "bc4f098e0000f4ba89591da86b97000000002b00038400000200000000000900", 0xb5315241}) symlink(&(0x7f0000000000)='./bus/file0/file0\x00', &(0x7f0000000340)='./bus\x00') rmdir(&(0x7f00000003c0)='./bus/file0/file0\x00') r16 = open(&(0x7f0000000040)='./file0\x00', 0x230002, 0x0) fcntl$setlease(r16, 0x400, 0x0) 4.676154981s ago: executing program 3 (id=4014): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000540)={0x0, 0x1ff, 0x1000000, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x8, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 4.224933481s ago: executing program 4 (id=4015): syz_open_dev$sg(&(0x7f00000000c0), 0x66, 0x400200) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x5, 0x745, 0x101}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {0x6, 0x0, 0x0, 0x5e6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x24b2, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0xd1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3], [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0xca8], [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4a, 0x0, 0x0, 0x6]}, 0x45c) (async) r3 = openat$tun(0xffffff9c, &(0x7f0000000140), 0x141, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'bond0\x00', 0x400}) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000200)) (async) r5 = syz_open_dev$evdev(&(0x7f0000000700), 0x86, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000040)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.391995673s ago: executing program 2 (id=4016): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0xff66, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x4800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x58, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0x58}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000014"], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000004000028"]) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 3.176151294s ago: executing program 4 (id=4017): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00N\x00 \x00N']) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x14}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="27010000000105000300002986dd", 0xe}], 0x1}, 0x0) close(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x10020f58, 0x0, [{0x0, 0x0, 0x4}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x8}, {0x0, 0xb}, {}, {0x0, 0x80, 0x5}, {}, {0x0, 0x0, 0x8f, '\x00', 0xfc}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {}, {}, {0x0, 0xfe, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0x20}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x7}, {0x0, 0x0, 0x0, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x20}, {0x0, 0x0, 0x2}]}}) listen(r3, 0x81) openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x800) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000000c0)={0x8, 0x80}) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 2.616692768s ago: executing program 1 (id=3974): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_LIMIT={0x8}]}}]}, 0x44}}, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="400d01"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000180)={0x20, 0x7, 0x1, "82"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 2.534891249s ago: executing program 3 (id=4018): set_mempolicy(0x3, &(0x7f0000000080)=0xd, 0x81) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000200), 0x4) (async, rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) (async) r5 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x68, 0x5ac, 0x220, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfd, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x1, 0x3, 0xb, {0x9, 0x21, 0x7918, 0x5, 0x1, {0x22, 0x8cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x8, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x6, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x6, 0x8, 0x4, 0x20, 0x5}, 0x94, &(0x7f0000000300)={0x5, 0xf, 0x94, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x6, 0xf, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "7265b0d354ba6778650b42bd7b752843"}, @generic={0x52, 0x10, 0x0, "63460e30770ba61f51cb447ef683917252c71f8819bb292280be4c344f94c37e5260254f57d5d67d83881f8fdc63ed47e53185eb6856573078801ea75a0e1831613cf370479717fe164143e52b9c0c"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "1046a1f6fe9034a002a50e03d38a6900"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x7d, 0x4, 0x10, 0x0, 0xb2}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44d}}, {0x74, &(0x7f00000003c0)=@string={0x74, 0x3, "78da5e3406d96725637417f69bcc55e17f06e1e63d6b1df01219ce2a1b21dba13b5faeefc9bbdbbe2ad8608b3907f3fc6c93886b71474dba4fa702283073f46a50f836ddfa8f89f4c156d3765a76993ab4d964287f9f5bd3910b2681792d30035d2d9e37b256270f14f0ad97740d892761ea"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000580)={0x14, &(0x7f0000000440)={0x40, 0x1, 0x6d, {0x6d, 0x23, "3928910e26701c086393ad4c95c8fc6c9a4694fef166ce37beda711d5b8b30856517fdd32e69e700d9f5f5816caf4a2a4d68651a2a14428c45049105d5cef86ec6b8f9171ca5ebbcfe8cba4c5ddc04743aa9b0fd64fa420597a954c4f4c72e6f42b22889ef73cee4bb00c1"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "edc89949"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x1, 0x1, {0x22, 0xcd2}}}}, &(0x7f0000000740)={0x18, &(0x7f00000005c0)={0x40, 0x3, 0x6f, "ba0792082b4c64dd2c3f43da62a749e19686b145608c94861dd62e238c97217fc8a83928b6e8c05d5c1bca203095ee9d3c243b6a7218a1a72f3b2b403cf035feb44424ea68c237f83e8178c179f51d9aee0d83b0b5f22df637fc089b3645fa10f941aceb82b0355af514c476b3037d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0x20, 0x1, 0x31, "fb79cfc055ae0c63fda98bb33303b5f5a1d6e29e93d2f33675781778e49c15d338f4c821d1fad86cf234cba6002db38593"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x80}}) (async) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r4}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x63}}}}]}, 0x48}}, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) 2.389925574s ago: executing program 0 (id=3983): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004240)={0x2020, 0x0, 0x0}, 0xfffffffffffffeb4) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2055) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x13) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x440}, {0xffffffffffffffff, 0x1000}], 0x45, 0x0, 0x0, 0x0) 2.231982758s ago: executing program 0 (id=4019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f0000004240)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000004300)='a,lor', &(0x7f0000000280)="f0", 0xfffffcd8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x80041272, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x2, 0x0, 0xe, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec"}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x71, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x24004091) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lseek(r4, 0x0, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/230, 0xe6}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000940)=""/175, 0xaf}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000004680)=""/4094, 0xffe}, {&(0x7f0000000140)=""/96, 0x60}], 0xb}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}}, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff5000000000040"]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x8b5}, 0x18, 0x0) r10 = socket(0xa, 0x6, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r11, 0xc0d05604, &(0x7f0000000400)={0x8, @sliced={0x5, [0x0, 0x0, 0x0, 0x401, 0x802, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x101], 0xffffffff}}) getsockopt$inet6_mreq(r10, 0x10d, 0xff, 0x0, &(0x7f0000000000)) 1.591206681s ago: executing program 0 (id=4020): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000003000008500000008000000bc0910000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0xa0, 0x0) fanotify_init(0x200, 0x0) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r3], 0x40}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[], 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 822.143658ms ago: executing program 2 (id=4021): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300000000000000000000000000000000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 662.875239ms ago: executing program 2 (id=4022): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902"], 0x0) r0 = fanotify_init(0x8, 0x800) fanotify_mark(r0, 0x20, 0x40000008, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x85}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=4023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000006000000030200004000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x8002, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000014c0), 0x0, 0x6, r0}, 0x38) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000abd1a0407b0726228bca000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r8, 0x0, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r12, @ANYRESHEX=r7, @ANYBLOB="00000000000000001c001a801800058014000680080001001200000008000200000000d9"], 0x3c}}, 0x0) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000040)={r12, @loopback, @loopback}, 0xc) kernel console output (not intermixed with test programs): : The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.963747][T23700] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1417.965410][T26800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.984224][T26800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.994232][T26800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.002955][T26800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.011775][T26800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.020635][T26800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.105617][T26996] team0: Port device team_slave_0 added [ 1418.162889][T26900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1418.212373][T26900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1418.244714][T26996] team0: Port device team_slave_1 added [ 1418.297457][T26900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1418.317371][T23700] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1418.326787][T23700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.334994][T23700] usb 4-1: Product: syz [ 1418.339706][T23700] usb 4-1: Manufacturer: syz [ 1418.345010][T23700] usb 4-1: SerialNumber: syz [ 1418.351146][T26996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.360069][T26996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.379004][T23700] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1418.394840][T26996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.416634][T26996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.423829][T26996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.496943][T26996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.514306][T18526] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1418.529438][T26900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1418.599470][T26825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.616613][T26825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.664258][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.671405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.681031][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.688214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.889800][T26825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1418.900265][T26825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1418.929139][T26825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.025475][T26996] hsr_slave_0: entered promiscuous mode [ 1419.049681][T26996] hsr_slave_1: entered promiscuous mode [ 1419.065827][T26996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1419.073444][T26996] Cannot create hsr debugfs directory [ 1419.135758][T26900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.157643][T26900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.193292][T26900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1419.203871][T26900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1419.242960][ T722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.262087][ T722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.293990][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.301150][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.310702][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.317881][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.396556][ T722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.401660][T26900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.418845][ T722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.552816][T26825] veth0_vlan: entered promiscuous mode [ 1419.592824][T18526] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1419.603865][T18526] ath9k_htc: Failed to initialize the device [ 1419.653331][T27074] fuse: Unknown parameter '0x0000000000000003' [ 1419.653761][T18526] usb 4-1: ath9k_htc: USB layer deinitialized [ 1419.754309][ T5811] IPVS: stop unused estimator thread 0... [ 1419.770705][T26825] veth1_vlan: entered promiscuous mode [ 1419.812578][T26900] veth0_vlan: entered promiscuous mode [ 1419.953088][T26900] veth1_vlan: entered promiscuous mode [ 1420.109458][T27083] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 1420.135261][T27083] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 1420.142334][T27083] ALSA: mixer_oss: invalid OSS volume '' [ 1420.214978][T26996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.267920][T27083] hsr0: entered promiscuous mode [ 1420.394614][T26825] veth0_macvtap: entered promiscuous mode [ 1420.531768][T26996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.763795][ T9] usb 4-1: USB disconnect, device number 17 [ 1420.774165][T26996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.837071][T26900] veth0_macvtap: entered promiscuous mode [ 1420.856127][T26825] veth1_macvtap: entered promiscuous mode [ 1420.870878][T26900] veth1_macvtap: entered promiscuous mode [ 1420.966671][T26996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.018652][T26825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.030163][T26825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.052550][T26825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.070908][T26825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.110855][T26825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.133555][T26825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.155316][T26825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.175938][T26825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.193968][T26825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.212301][T26825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.231100][T26825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.243296][T26825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.262645][T26825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.291514][T26825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.316426][T26825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.325829][T26825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.335206][T26825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.346467][T26825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.355366][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1421.374416][T26900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.385305][T26900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.395708][T26900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.410682][T26900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.421120][T26900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.434299][T26900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.444674][T26900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.458626][T26900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.470618][T26900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.528969][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1421.538457][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.548621][ T9] usb 4-1: Product: syz [ 1421.554713][T26900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.569044][ T9] usb 4-1: Manufacturer: syz [ 1421.580057][T26900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.591550][ T9] usb 4-1: SerialNumber: syz [ 1421.598498][ T9] usb 4-1: config 0 descriptor?? [ 1421.632656][T26900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.643900][T26900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.654093][T26900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.665842][T26900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.678194][T26900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.689019][T26900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.702796][T26900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.811378][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 1421.842289][T26900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.852243][T26900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.862370][T26900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.871976][T26900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.059407][T26996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1422.085384][T26996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1422.116047][T26996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1422.123696][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1422.145408][T26996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1422.191844][T21521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.192053][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.207970][T21521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.212962][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.263424][T16073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.277421][T16073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.313880][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1422.322047][ T5547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.325264][ T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1422.355329][ T9] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1422.358032][ T5547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.371731][ T9] usb 3-1: config 0 has no interface number 0 [ 1422.394298][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 1422.413010][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 1422.413026][ T29] audit: type=1326 audit(1727875622.468:8306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.0.3843" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x0 [ 1422.440787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1422.470306][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 1422.494742][ T9] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1422.526351][T26996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.530235][ T9] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1422.569868][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1422.578012][T26996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.579471][ T9] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1422.602258][ T9] usb 3-1: Product: syz [ 1422.608667][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.611272][ T9] usb 3-1: Manufacturer: syz [ 1422.615819][ T5547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.647956][ T9] usb 3-1: SerialNumber: syz [ 1422.651626][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.659766][ T5547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.661286][ T9] usb 3-1: config 0 descriptor?? [ 1422.805982][T26996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.914978][T27113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3887'. [ 1422.933055][T26996] veth0_vlan: entered promiscuous mode [ 1422.954405][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input142 [ 1422.962699][T26996] veth1_vlan: entered promiscuous mode [ 1423.040413][T26996] veth0_macvtap: entered promiscuous mode [ 1423.098585][T26996] veth1_macvtap: entered promiscuous mode [ 1423.188376][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.194978][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.261713][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.331142][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.374966][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.417952][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.436315][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.452442][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.472373][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.472419][T27104] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1423.482962][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.489307][T27104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1423.532590][T27117] fuse: Unknown parameter 'fd0x0000000000000003' [ 1423.534979][T27104] vhci_hcd vhci_hcd.0: Device attached [ 1423.542264][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.571385][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.622397][T26996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.709113][ T5289] usb 3-1: USB disconnect, device number 92 [ 1423.715162][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1423.715294][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.724344][ T9] vhci_hcd: vhci_device speed not set [ 1423.741947][T27114] vhci_hcd: connection closed [ 1423.771799][ T5811] vhci_hcd: stop threads [ 1423.798834][ T5811] vhci_hcd: release socket [ 1423.801652][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.814006][ T5811] vhci_hcd: disconnect device [ 1423.833732][ T9] usb 13-1: new full-speed USB device number 4 using vhci_hcd [ 1423.851575][ T9] usb 13-1: enqueue for inactive port 0 [ 1423.854103][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.862570][T23700] usb 4-1: USB disconnect, device number 18 [ 1423.893541][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.903412][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.934463][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.951862][ T9] vhci_hcd: vhci_device speed not set [ 1423.960517][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.973200][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.984741][T26996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.999024][T26996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.037429][T26996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.088329][T26996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.105263][T26996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.123311][T26996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.132597][T26996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.264746][ T5547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.284659][ T5547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.320705][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.330572][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.353666][ T5279] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1424.517063][ T5279] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1424.534767][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.562568][ T5279] usb 4-1: Product: syz [ 1424.577173][ T5279] usb 4-1: Manufacturer: syz [ 1424.590580][ T5279] usb 4-1: SerialNumber: syz [ 1424.609351][ T5279] usb 4-1: config 0 descriptor?? [ 1424.789088][T27141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3894'. [ 1424.896423][ T5279] hso 4-1:0.0: Failed to find INT IN ep [ 1424.916978][ T5279] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1424.973791][T27149] netlink: 'syz.2.3897': attribute type 10 has an invalid length. [ 1425.067997][T27149] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1425.113175][T18526] usb 4-1: USB disconnect, device number 19 [ 1425.213165][T27152] fuse: Unknown parameter 'fd0x0000000000000003' [ 1425.803739][T24602] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1425.893663][ T5283] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1425.984186][T24602] usb 3-1: Using ep0 maxpacket: 32 [ 1425.990972][T24602] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1426.003611][T24602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.024814][T24602] usb 3-1: config 0 descriptor?? [ 1426.046269][T24602] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1426.053743][ T5283] usb 2-1: Using ep0 maxpacket: 32 [ 1426.060774][ T5283] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1426.083706][ T5283] usb 2-1: config 0 has no interface number 0 [ 1426.092293][ T5283] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1426.113720][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.133720][ T5283] usb 2-1: Product: syz [ 1426.137956][ T5283] usb 2-1: Manufacturer: syz [ 1426.142557][ T5283] usb 2-1: SerialNumber: syz [ 1426.152224][ T5283] usb 2-1: config 0 descriptor?? [ 1426.175690][ T5283] smsc95xx v2.0.0 [ 1426.263824][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1426.396083][ T5283] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1426.413641][ T5283] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1426.413683][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1426.417032][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1426.444610][ T9] usb 4-1: config 11 has an invalid interface number: 244 but max is 0 [ 1426.452948][ T9] usb 4-1: config 11 has no interface number 0 [ 1426.461166][ T9] usb 4-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1426.479084][ T9] usb 4-1: config 11 interface 244 has no altsetting 0 [ 1426.488897][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1426.498394][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.506769][ T9] usb 4-1: Product: syz [ 1426.511063][ T9] usb 4-1: Manufacturer: syz [ 1426.516110][ T9] usb 4-1: SerialNumber: syz [ 1426.563805][T24602] gspca_sq930x: reg_r 001f failed -110 [ 1426.569433][T24602] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 1426.632752][ T5283] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1426.653933][ T5283] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 1426.743414][ T9] usb 4-1: USB disconnect, device number 20 [ 1426.787314][T18526] usb 3-1: USB disconnect, device number 93 [ 1427.349813][T27189] fuse: Unknown parameter 'fd0x0000000000000003' [ 1427.380920][T18526] usb 2-1: USB disconnect, device number 121 [ 1427.403660][T24602] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1427.570240][T24602] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1427.589584][T24602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.623549][T24602] usb 1-1: Product: syz [ 1427.627752][T24602] usb 1-1: Manufacturer: syz [ 1427.632336][T24602] usb 1-1: SerialNumber: syz [ 1427.684226][T24602] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1427.708628][ T5283] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1427.892781][T27202] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3915'. [ 1428.088424][T27206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1428.120551][T27206] net_ratelimit: 94 callbacks suppressed [ 1428.120570][T27206] openvswitch: netlink: Actions may not be safe on all matching packets [ 1428.413643][T12941] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1428.587271][T12941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.606784][T12941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1428.645396][T12941] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1428.664579][T12941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.693058][T12941] usb 3-1: Product: syz [ 1428.702934][T12941] usb 3-1: Manufacturer: syz [ 1428.713691][T12941] usb 3-1: SerialNumber: syz [ 1428.784154][ T5283] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1428.791466][ T5283] ath9k_htc: Failed to initialize the device [ 1428.830934][ T5283] usb 1-1: ath9k_htc: USB layer deinitialized [ 1428.937415][T27206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1428.960308][T12941] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1429.005228][T12941] usb 3-1: USB disconnect, device number 94 [ 1429.073593][T24602] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1429.265685][T24602] usb 2-1: Using ep0 maxpacket: 32 [ 1429.277357][T24602] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 1429.313445][T24602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.331126][T24602] usb 2-1: Product: syz [ 1429.337561][T24602] usb 2-1: Manufacturer: syz [ 1429.342272][T24602] usb 2-1: SerialNumber: syz [ 1429.363226][T24602] usb 2-1: config 0 descriptor?? [ 1429.378385][T24602] usb 2-1: bad CDC descriptors [ 1429.617660][T18526] usb 2-1: USB disconnect, device number 122 [ 1429.651021][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.852024][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.977380][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.101549][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.141440][T20553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1430.163653][T20553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1430.174081][T20553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1430.183337][T20553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1430.193275][T20553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1430.201892][T20553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1430.245737][ T9] usb 1-1: USB disconnect, device number 79 [ 1430.311458][ T29] audit: type=1326 audit(1727875630.368:8307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27227 comm="syz.2.3925" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x0 [ 1430.434882][T27231] fuse: Unknown parameter 'group_id00000000000000000000' [ 1430.581321][ T35] bridge_slave_1: left allmulticast mode [ 1430.590853][ T35] bridge_slave_1: left promiscuous mode [ 1430.597321][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.607050][ T35] bridge_slave_0: left allmulticast mode [ 1430.613444][ T35] bridge_slave_0: left promiscuous mode [ 1430.620265][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.628729][T27239] fuse: Invalid rootmode [ 1431.070153][ T5283] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1431.234442][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 1431.262927][ T5283] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1431.271808][ T5283] usb 1-1: config 179 has no interface number 0 [ 1431.285220][ T5283] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1431.303609][ T5283] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1431.323266][ T5283] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1431.343126][ T5283] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1431.362103][ T5283] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1431.375879][ T5283] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1431.382985][ T5283] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1431.399625][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.420505][T27244] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1431.510742][ T5283] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input143 [ 1431.709680][ T29] audit: type=1326 audit(1727875631.768:8308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 1431.770048][ T29] audit: type=1326 audit(1727875631.768:8309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 1431.831901][ T29] audit: type=1326 audit(1727875631.768:8310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 1431.888613][ T29] audit: type=1326 audit(1727875631.768:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 1432.004058][ T29] audit: type=1326 audit(1727875631.768:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 1432.042220][ T29] audit: type=1326 audit(1727875631.768:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 1432.113610][ T29] audit: type=1326 audit(1727875631.768:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 1432.135991][ T29] audit: type=1326 audit(1727875631.768:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 1432.160670][ T29] audit: type=1326 audit(1727875631.768:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 1432.323671][ T5239] Bluetooth: hci0: command tx timeout [ 1432.796187][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.812045][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.827778][ T35] bond0 (unregistering): Released all slaves [ 1433.568507][T27226] chnl_net:caif_netlink_parms(): no params data found [ 1433.811806][ T35] hsr_slave_0: left promiscuous mode [ 1433.838511][ T35] hsr_slave_1: left promiscuous mode [ 1433.855072][T18526] usb 1-1: USB disconnect, device number 80 [ 1433.855114][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1433.870089][T18526] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1433.967667][ T35] veth1_macvtap: left promiscuous mode [ 1433.973355][ T35] veth0_macvtap: left promiscuous mode [ 1433.986955][ T5239] Bluetooth: hci4: unexpected subevent 0x1a length: 10 > 6 [ 1434.031863][ T35] veth1_vlan: left promiscuous mode [ 1434.067747][ T35] veth0_vlan: left promiscuous mode [ 1434.122538][T20553] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1434.135844][T20553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1434.151779][T20553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1434.165187][T20553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1434.175146][T20553] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1434.182605][T20553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1434.391838][T20553] Bluetooth: hci0: command tx timeout [ 1434.399305][T20553] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1434.414702][T20553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1434.424939][T20553] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1434.435438][T20553] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1434.445824][T20553] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1434.453211][T20553] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1434.743707][T18526] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1434.922061][T18526] usb 1-1: Using ep0 maxpacket: 8 [ 1434.934830][T18526] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1434.943141][T18526] usb 1-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 1434.975964][T18526] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 1435.008349][T18526] usb 1-1: config 0 has no interface number 0 [ 1435.014578][T18526] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1435.031884][T18526] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1435.054648][T18526] usb 1-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 1435.063038][T18526] usb 1-1: Product: syz [ 1435.067471][T18526] usb 1-1: Manufacturer: syz [ 1435.079409][T18526] usb 1-1: config 0 descriptor?? [ 1435.771105][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1435.891297][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1436.076805][ T5239] Bluetooth: hci4: command tx timeout [ 1436.080313][T27293] netlink: 'syz.0.3940': attribute type 11 has an invalid length. [ 1436.223617][ T5239] Bluetooth: hci1: command tx timeout [ 1436.473597][ T5239] Bluetooth: hci0: command tx timeout [ 1436.579137][ T5239] Bluetooth: hci3: command tx timeout [ 1436.712542][T27295] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1437.928049][ T5283] usb 1-1: USB disconnect, device number 81 [ 1438.292114][T27226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.305096][ T5239] Bluetooth: hci1: command tx timeout [ 1438.316389][T27226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.331248][T27226] bridge_slave_0: entered allmulticast mode [ 1438.348878][T27226] bridge_slave_0: entered promiscuous mode [ 1438.473868][T27226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.481285][T27226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.500155][T27226] bridge_slave_1: entered allmulticast mode [ 1438.515948][T27226] bridge_slave_1: entered promiscuous mode [ 1438.548177][ T5239] Bluetooth: hci0: command tx timeout [ 1438.624091][ T5239] Bluetooth: hci3: command tx timeout [ 1438.759957][T27226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.789826][T20553] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1438.798367][T27226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.833650][T20553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1438.850479][T20553] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1438.884944][T20553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1438.914468][T20553] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1438.922963][T20553] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1439.062448][T27226] team0: Port device team_slave_0 added [ 1439.096500][T27226] team0: Port device team_slave_1 added [ 1439.695313][T27226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.702332][T27226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.805501][T27226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.873835][T27226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.880822][T27226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.014969][T27226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.349676][T27226] hsr_slave_0: entered promiscuous mode [ 1440.382154][T27226] hsr_slave_1: entered promiscuous mode [ 1440.389032][ T5239] Bluetooth: hci1: command tx timeout [ 1440.704601][ T5239] Bluetooth: hci3: command tx timeout [ 1440.772319][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.847584][T27279] chnl_net:caif_netlink_parms(): no params data found [ 1440.883817][T27289] chnl_net:caif_netlink_parms(): no params data found [ 1440.914347][T27310] chnl_net:caif_netlink_parms(): no params data found [ 1441.024083][ T5239] Bluetooth: hci5: command tx timeout [ 1441.245997][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.272960][T20553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1441.287762][T20553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1441.297950][T20553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1441.307208][T20553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1441.317236][T20553] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1441.325057][T20553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1441.727303][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.065789][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.155581][T27279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.162761][T27279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.171268][T27279] bridge_slave_0: entered allmulticast mode [ 1442.178655][T27279] bridge_slave_0: entered promiscuous mode [ 1442.365912][T27279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.373065][T27279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.396401][T27279] bridge_slave_1: entered allmulticast mode [ 1442.409882][T27279] bridge_slave_1: entered promiscuous mode [ 1442.474307][T20553] Bluetooth: hci1: command tx timeout [ 1442.784798][T20553] Bluetooth: hci3: command tx timeout [ 1442.876744][T27279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.893358][T27279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.105401][T20553] Bluetooth: hci5: command tx timeout [ 1443.246801][T27310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.254400][T27310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.261653][T27310] bridge_slave_0: entered allmulticast mode [ 1443.284451][T27310] bridge_slave_0: entered promiscuous mode [ 1443.351423][T27279] team0: Port device team_slave_0 added [ 1443.375545][T27289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.382847][T27289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.424417][T20553] Bluetooth: hci4: command tx timeout [ 1443.452932][T27289] bridge_slave_0: entered allmulticast mode [ 1443.464784][T27289] bridge_slave_0: entered promiscuous mode [ 1443.475591][T27310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.482710][T27310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.490974][T27310] bridge_slave_1: entered allmulticast mode [ 1443.498788][T27310] bridge_slave_1: entered promiscuous mode [ 1443.531267][T27279] team0: Port device team_slave_1 added [ 1443.553224][T27289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.704921][T27289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.712213][T27289] bridge_slave_1: entered allmulticast mode [ 1443.725169][T27289] bridge_slave_1: entered promiscuous mode [ 1443.935611][T27289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.121526][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.197604][T27310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.229210][T27279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.245441][T27279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.285818][T27279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.310346][T27289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.477507][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.508682][T27310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.539747][T27279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.575095][T27279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.630093][T27279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1444.690136][T27226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1444.788041][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.859101][T27344] chnl_net:caif_netlink_parms(): no params data found [ 1444.920724][T27289] team0: Port device team_slave_0 added [ 1444.940768][T27289] team0: Port device team_slave_1 added [ 1444.971006][T27226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1444.989038][T27226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1445.048826][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.075005][T27310] team0: Port device team_slave_0 added [ 1445.096166][T27310] team0: Port device team_slave_1 added [ 1445.173178][T27226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1445.184042][T20553] Bluetooth: hci5: command tx timeout [ 1445.201483][T27310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.209246][T27310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.235908][T27310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.322048][T27279] hsr_slave_0: entered promiscuous mode [ 1445.335079][T27279] hsr_slave_1: entered promiscuous mode [ 1445.341391][T27279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.349286][T27279] Cannot create hsr debugfs directory [ 1445.356456][T27289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.363430][T27289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.404404][T27289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.417139][T27289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.424230][T27289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.450238][T27289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.504564][T27310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.511548][T27310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.535626][T20553] Bluetooth: hci4: command tx timeout [ 1445.538249][T27310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.679260][T27310] hsr_slave_0: entered promiscuous mode [ 1445.697064][T27310] hsr_slave_1: entered promiscuous mode [ 1445.705398][T27310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.712987][T27310] Cannot create hsr debugfs directory [ 1445.729795][T27344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.737238][T27344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.745423][T27344] bridge_slave_0: entered allmulticast mode [ 1445.752720][T27344] bridge_slave_0: entered promiscuous mode [ 1445.765559][T27289] hsr_slave_0: entered promiscuous mode [ 1445.771999][T27289] hsr_slave_1: entered promiscuous mode [ 1445.794495][T27289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.802077][T27289] Cannot create hsr debugfs directory [ 1445.867348][T27344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.889196][T27344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.904021][T27344] bridge_slave_1: entered allmulticast mode [ 1445.911178][T27344] bridge_slave_1: entered promiscuous mode [ 1445.996568][T27344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.107822][T27344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.251723][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.412018][T27344] team0: Port device team_slave_0 added [ 1446.435067][T27344] team0: Port device team_slave_1 added [ 1446.489187][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.523043][T27226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.668986][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.713018][T27344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.721836][T27344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.752515][T27344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.847391][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.884487][T27344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.891482][T27344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.918405][T27344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.964614][T27226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.099383][T27279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.126019][T27344] hsr_slave_0: entered promiscuous mode [ 1447.145853][T27344] hsr_slave_1: entered promiscuous mode [ 1447.152229][T27344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1447.160143][T27344] Cannot create hsr debugfs directory [ 1447.192018][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.199190][ T5811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.263663][T20553] Bluetooth: hci5: command tx timeout [ 1447.310685][T27279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.350753][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.357966][ T5811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.424439][T27279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.548775][T27279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.595976][T27226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1447.606501][T27226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1447.623976][T20553] Bluetooth: hci4: command tx timeout [ 1447.638345][T27226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1447.672340][T27226] veth0_vlan: entered promiscuous mode [ 1447.686083][T27226] veth1_vlan: entered promiscuous mode [ 1447.799939][T27226] veth0_macvtap: entered promiscuous mode [ 1447.810643][T27226] veth1_macvtap: entered promiscuous mode [ 1447.829534][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.840328][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.850353][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.860997][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.870968][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.881456][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.891426][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.901950][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.912765][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.923340][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.934008][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.945393][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.956913][T27226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.044725][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.065049][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.093379][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.108697][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.118645][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.129183][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.139850][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.152581][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.162698][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.173239][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.183117][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.193658][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.204951][T27226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.244809][T27226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.254818][T27226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.275979][T27226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.299845][T27226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.338321][ T35] bridge_slave_1: left allmulticast mode [ 1448.345398][ T35] bridge_slave_1: left promiscuous mode [ 1448.351139][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.395214][ T35] bridge_slave_0: left allmulticast mode [ 1448.400902][ T35] bridge_slave_0: left promiscuous mode [ 1448.416889][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.448766][ T35] bridge_slave_1: left allmulticast mode [ 1448.463865][ T35] bridge_slave_1: left promiscuous mode [ 1448.469595][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.496043][ T35] bridge_slave_0: left allmulticast mode [ 1448.501864][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.529757][ T35] bridge_slave_1: left allmulticast mode [ 1448.545580][ T35] bridge_slave_1: left promiscuous mode [ 1448.551373][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.574629][ T35] bridge_slave_0: left allmulticast mode [ 1448.580339][ T35] bridge_slave_0: left promiscuous mode [ 1448.586431][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.596628][ T35] bridge_slave_1: left allmulticast mode [ 1448.602317][ T35] bridge_slave_1: left promiscuous mode [ 1448.608763][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.617948][ T35] bridge_slave_0: left allmulticast mode [ 1448.624592][ T35] bridge_slave_0: left promiscuous mode [ 1448.630301][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.671297][T20553] Bluetooth: hci4: command tx timeout [ 1450.968497][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.980552][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.992982][ T35] bond0 (unregistering): Released all slaves [ 1451.373917][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.388145][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.402477][ T35] bond0 (unregistering): Released all slaves [ 1451.727809][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.747641][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.767019][ T35] bond0 (unregistering): Released all slaves [ 1452.153687][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.177116][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.189722][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1452.204533][ T35] bond0 (unregistering): Released all slaves [ 1452.953754][T16073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.961603][T16073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.124756][ T722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.157894][ T722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.619110][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 1454.082096][ T35] hsr_slave_0: left promiscuous mode [ 1454.095601][ T35] hsr_slave_1: left promiscuous mode [ 1454.109161][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1454.125199][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.137440][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1454.149306][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.172715][ T35] hsr_slave_0: left promiscuous mode [ 1454.185287][ T35] hsr_slave_1: left promiscuous mode [ 1454.198871][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1454.213914][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.236862][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1454.253387][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.300530][ T35] hsr_slave_0: left promiscuous mode [ 1454.313009][ T35] hsr_slave_1: left promiscuous mode [ 1454.326256][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1454.342156][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.360929][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1454.375113][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.407619][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1454.422850][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.482002][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1454.514508][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.777057][ T35] veth1_macvtap: left promiscuous mode [ 1454.782653][ T35] veth0_macvtap: left promiscuous mode [ 1454.796508][ T35] veth1_vlan: left promiscuous mode [ 1454.811699][ T35] veth0_vlan: left promiscuous mode [ 1454.832358][ T35] veth1_macvtap: left promiscuous mode [ 1454.853691][ T35] veth0_macvtap: left promiscuous mode [ 1454.859362][ T35] veth1_vlan: left promiscuous mode [ 1454.873717][ T35] veth0_vlan: left promiscuous mode [ 1454.885416][ T35] veth1_macvtap: left promiscuous mode [ 1454.891006][ T35] veth0_macvtap: left promiscuous mode [ 1454.913757][ T35] veth1_vlan: left promiscuous mode [ 1454.919127][ T35] veth0_vlan: left promiscuous mode [ 1454.938311][ T35] veth1_macvtap: left promiscuous mode [ 1454.949243][ T35] veth0_macvtap: left promiscuous mode [ 1454.963698][ T35] veth1_vlan: left promiscuous mode [ 1454.969092][ T35] veth0_vlan: left promiscuous mode [ 1455.983686][ T5279] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1456.133668][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 1456.142264][ T5279] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1456.173765][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.181810][ T5279] usb 4-1: Product: syz [ 1456.194903][ T5279] usb 4-1: Manufacturer: syz [ 1456.199783][ T5279] usb 4-1: SerialNumber: syz [ 1456.225905][ T5279] usb 4-1: config 0 descriptor?? [ 1456.446488][ T5279] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1456.925496][ T5279] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1456.966190][ T5279] usb 4-1: USB disconnect, device number 21 [ 1457.305572][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1457.433377][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1458.042243][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1458.042260][ T29] audit: type=1326 audit(1727875658.098:8352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1458.103695][ T29] audit: type=1326 audit(1727875658.138:8353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1458.138497][ T29] audit: type=1326 audit(1727875658.138:8354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1458.177050][ T29] audit: type=1326 audit(1727875658.138:8355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1458.213258][ T29] audit: type=1326 audit(1727875658.138:8356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1458.249732][ T29] audit: type=1326 audit(1727875658.148:8357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1458.285786][ T29] audit: type=1326 audit(1727875658.148:8358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1458.373599][ T29] audit: type=1326 audit(1727875658.148:8359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1458.443591][ T29] audit: type=1326 audit(1727875658.148:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1458.499016][ T29] audit: type=1326 audit(1727875658.148:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27491 comm="syz.3.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1459.816115][ T938] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1459.985470][ T938] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1459.993883][ T938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.004152][ T938] usb 4-1: config 0 has no interface number 0 [ 1460.010260][ T938] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1460.020756][ T938] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1460.045311][ T938] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1460.063617][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.071661][ T938] usb 4-1: Product: syz [ 1460.092583][ T938] usb 4-1: Manufacturer: syz [ 1460.103691][ T938] usb 4-1: SerialNumber: syz [ 1460.114502][ T938] usb 4-1: config 0 descriptor?? [ 1460.538005][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1460.668913][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1462.598459][ T9] usb 4-1: USB disconnect, device number 22 [ 1462.903332][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1462.964979][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1462.973588][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1463.165335][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.183439][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1463.204218][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.224664][ T9] usb 4-1: config 0 descriptor?? [ 1463.245293][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1463.450467][ T9] pwc: send_video_command error -71 [ 1463.457687][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1463.486071][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1463.506204][ T9] usb 4-1: USB disconnect, device number 23 [ 1464.077248][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1464.223699][ T9] usb 4-1: device descriptor read/64, error -71 [ 1464.463992][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1464.677743][ T9] usb 4-1: device descriptor read/64, error -71 [ 1464.823124][ T9] usb usb4-port1: attempt power cycle [ 1465.075350][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1465.203299][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1465.326049][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1465.396009][ T9] usb 4-1: device descriptor read/8, error -71 [ 1465.693769][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1465.735548][ T9] usb 4-1: device descriptor read/8, error -71 [ 1465.843800][ T9] usb usb4-port1: unable to enumerate USB device [ 1466.378695][T27279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1466.407886][T27279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1466.473909][T27279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1466.502956][T27279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1466.997784][T27520] binder: 27519:27520 ioctl c0306201 20000380 returned -14 [ 1467.210099][T27279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.324794][T27279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.356148][T21521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.363304][T21521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.409485][T21521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.416674][T21521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.643559][ T5283] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1467.669907][T27344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1467.699466][T27344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1467.720266][T27344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1467.772600][T27344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1467.824324][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 1467.861616][ T5283] usb 4-1: config 3 has an invalid interface number: 154 but max is 3 [ 1467.875312][ T5283] usb 4-1: config 3 has an invalid interface number: 8 but max is 3 [ 1467.882853][T27279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.911152][ T5283] usb 4-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 1467.933539][ T5283] usb 4-1: config 3 has an invalid interface number: 70 but max is 3 [ 1467.941964][ T5283] usb 4-1: config 3 has an invalid interface number: 219 but max is 3 [ 1467.968199][ T5283] usb 4-1: config 3 has an invalid interface number: 130 but max is 3 [ 1467.988407][ T5283] usb 4-1: config 3 has an invalid interface number: 130 but max is 3 [ 1468.014278][ T5283] usb 4-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 1468.023295][ T5283] usb 4-1: config 3 has no interface number 0 [ 1468.048099][T27310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1468.078744][ T5283] usb 4-1: config 3 has no interface number 1 [ 1468.103261][ T5283] usb 4-1: config 3 has no interface number 2 [ 1468.133823][ T5283] usb 4-1: config 3 has no interface number 3 [ 1468.135617][T27310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1468.139932][ T5283] usb 4-1: config 3 has no interface number 4 [ 1468.172176][ T5283] usb 4-1: config 3 interface 154 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 1468.194368][T27310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1468.205487][ T5283] usb 4-1: config 3 interface 154 altsetting 1 bulk endpoint 0xA has invalid maxpacket 64 [ 1468.231173][ T5283] usb 4-1: config 3 interface 154 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1468.236968][T27310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1468.253638][ T5283] usb 4-1: config 3 interface 154 altsetting 1 has an endpoint descriptor with address 0x7A, changing to 0xA [ 1468.293886][ T5283] usb 4-1: config 3 interface 154 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 1468.333712][ T5283] usb 4-1: config 3 interface 8 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1468.366503][ T5283] usb 4-1: config 3 interface 8 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 1468.397277][ T5283] usb 4-1: config 3 interface 8 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1468.446174][ T5283] usb 4-1: config 3 interface 8 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 1468.494155][ T5283] usb 4-1: config 3 interface 8 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 1468.509457][ T5283] usb 4-1: config 3 interface 8 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 1468.522944][ T5283] usb 4-1: config 3 interface 8 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1468.541044][ T5283] usb 4-1: config 3 interface 8 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 13 [ 1468.564264][T27289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1468.571477][ T5283] usb 4-1: too many endpoints for config 3 interface 70 altsetting 1: 83, using maximum allowed: 30 [ 1468.575474][T27289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1468.617697][T27279] veth0_vlan: entered promiscuous mode [ 1468.622365][ T5283] usb 4-1: config 3 interface 70 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 1468.648851][ T5283] usb 4-1: config 3 interface 70 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 1468.665661][T27289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1468.680334][ T5283] usb 4-1: config 3 interface 70 altsetting 1 endpoint 0x5 has an invalid bInterval 71, changing to 7 [ 1468.686600][T27289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1468.713841][ T5283] usb 4-1: config 3 interface 70 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 83 [ 1468.736086][ T5283] usb 4-1: config 3 interface 219 altsetting 124 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1468.749765][ T5283] usb 4-1: config 3 interface 219 altsetting 124 has an invalid descriptor for endpoint zero, skipping [ 1468.766306][T27279] veth1_vlan: entered promiscuous mode [ 1468.767278][ T5283] usb 4-1: config 3 interface 219 altsetting 124 has a duplicate endpoint with address 0x1, skipping [ 1468.786171][ T5283] usb 4-1: config 3 interface 219 altsetting 124 has a duplicate endpoint with address 0xD, skipping [ 1468.810749][T27344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.816683][ T5283] usb 4-1: config 3 interface 219 altsetting 124 has an invalid descriptor for endpoint zero, skipping [ 1468.858647][ T5283] usb 4-1: config 3 interface 219 altsetting 124 has a duplicate endpoint with address 0xB, skipping [ 1468.882741][ T5283] usb 4-1: config 3 interface 219 altsetting 124 has a duplicate endpoint with address 0x8, skipping [ 1468.913699][ T5283] usb 4-1: config 3 interface 130 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1468.940340][T27344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.962797][ T5283] usb 4-1: config 3 interface 130 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1469.003512][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.010667][ T5811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.027415][ T5283] usb 4-1: too many endpoints for config 3 interface 130 altsetting 65: 175, using maximum allowed: 30 [ 1469.059525][ T5283] usb 4-1: config 3 interface 130 altsetting 65 has a duplicate endpoint with address 0x1, skipping [ 1469.080635][ T5283] usb 4-1: config 3 interface 130 altsetting 65 has a duplicate endpoint with address 0xC, skipping [ 1469.119570][ T5283] usb 4-1: config 3 interface 130 altsetting 65 has a duplicate endpoint with address 0x1, skipping [ 1469.161425][ T5283] usb 4-1: config 3 interface 130 altsetting 65 has a duplicate endpoint with address 0x5, skipping [ 1469.171843][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.179433][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.179981][ T5283] usb 4-1: config 3 interface 130 altsetting 65 has an invalid descriptor for endpoint zero, skipping [ 1469.222670][T27279] veth0_macvtap: entered promiscuous mode [ 1469.248955][ T5283] usb 4-1: config 3 interface 130 altsetting 65 has 5 endpoint descriptors, different from the interface descriptor's value: 175 [ 1469.258131][T27310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.285167][ T5283] usb 4-1: config 3 interface 154 has no altsetting 0 [ 1469.292001][ T5283] usb 4-1: config 3 interface 8 has no altsetting 0 [ 1469.300418][ T5283] usb 4-1: config 3 interface 70 has no altsetting 0 [ 1469.320907][ T5283] usb 4-1: config 3 interface 219 has no altsetting 0 [ 1469.331396][T27279] veth1_macvtap: entered promiscuous mode [ 1469.351310][ T5283] usb 4-1: config 3 interface 130 has no altsetting 1 [ 1469.389865][ T5283] usb 4-1: New USB device found, idVendor=0c26, idProduct=0009, bcdDevice=92.ca [ 1469.408528][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.420634][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.450335][ T5283] usb 4-1: Product: æ«ï¥¯éœ¿â€žëº¶à¿§ì˜Šå‡­çé“惟↷郰痪鹮é›ë œï¯’蕘皤ⴃ핻ì†í„Œì¿ç­’켂窱謙㩙á·ã–™éŽ´ç‡Ší‹·à³¿ì­ å£µçœè§ƒä€¤â•¸æ˜‹ë­Žæ­‰éƒ²á¹¥å¦¦ì¸¦æ¾™ì°†â’ä’‹è®°ë‹‹ã’µá¢áŽ¿Ú«å± é£â‘†ï€©á¡¦å³¤î­ºç¾³ [ 1469.463616][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.493679][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.503505][ T5283] usb 4-1: Manufacturer: з [ 1469.510845][ T5283] usb 4-1: SerialNumber: ã° [ 1469.518125][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.529159][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.541299][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.561782][T27529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1469.571847][T27279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.612860][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.625273][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.635580][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.647177][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.657588][T27279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.679666][T27279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.692520][T27279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.711599][T27310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.735029][T27279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.748571][T27279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.762197][T27279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.779947][T27279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.782593][ T5283] ftdi_sio 4-1:3.154: FTDI USB Serial Device converter detected [ 1469.827328][ T5283] ftdi_sio ttyUSB0: unknown device type: 0x92ca [ 1469.841278][T27289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.876112][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.883234][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.899039][ T5283] ftdi_sio 4-1:3.8: FTDI USB Serial Device converter detected [ 1469.911267][ T5283] ftdi_sio ttyUSB1: unknown device type: 0x92ca [ 1469.934738][ T5283] ftdi_sio 4-1:3.70: FTDI USB Serial Device converter detected [ 1469.943055][ T5283] ftdi_sio ttyUSB2: unknown device type: 0x92ca [ 1469.965077][ T5283] ftdi_sio 4-1:3.219: FTDI USB Serial Device converter detected [ 1469.974396][ T5283] ftdi_sio ttyUSB3: unknown device type: 0x92ca [ 1469.976547][T27289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.992463][ T5283] ftdi_sio 4-1:3.130: FTDI USB Serial Device converter detected [ 1470.002636][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.009795][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.018110][ T5283] ftdi_sio ttyUSB4: unknown device type: 0x92ca [ 1470.035239][ T5283] usb 4-1: USB disconnect, device number 28 [ 1470.045684][ T5283] ftdi_sio 4-1:3.154: device disconnected [ 1470.053790][ T5283] ftdi_sio 4-1:3.8: device disconnected [ 1470.062373][ T5283] ftdi_sio 4-1:3.70: device disconnected [ 1470.095577][ T2587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.102713][ T2587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.115587][ T5283] ftdi_sio 4-1:3.219: device disconnected [ 1470.139017][ T2587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.146214][ T2587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.162490][ T5283] ftdi_sio 4-1:3.130: device disconnected [ 1470.210916][T27310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1470.221624][T27310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1470.250610][T27310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.304765][T27344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.352084][ T5547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.371885][ T5547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.515631][T27344] veth0_vlan: entered promiscuous mode [ 1470.529074][T27344] veth1_vlan: entered promiscuous mode [ 1470.549927][T27551] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1470.561179][ T5811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.583636][ T5811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.585930][T27310] veth0_vlan: entered promiscuous mode [ 1470.621994][T27289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1470.632634][T27289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1470.665801][T27289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.679262][T27344] veth0_macvtap: entered promiscuous mode [ 1470.707756][T27310] veth1_vlan: entered promiscuous mode [ 1470.735930][T27310] veth0_macvtap: entered promiscuous mode [ 1470.765332][T27289] veth0_vlan: entered promiscuous mode [ 1470.811479][T27344] veth1_macvtap: entered promiscuous mode [ 1470.838131][T27310] veth1_macvtap: entered promiscuous mode [ 1470.858439][T27344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.870167][T27344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.890341][T27344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.914877][T27344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.925297][T27344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.936032][T27344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.948234][T27344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.959400][T27344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.972929][T27344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.988286][T27289] veth1_vlan: entered promiscuous mode [ 1471.006802][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.019696][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.039564][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.052973][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.071531][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.091899][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.103052][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.118613][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.130203][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.145411][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.156047][ T5276] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1471.175919][T27310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.190433][T27344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.212874][T27344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.230615][T27344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.241516][T27344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.251801][T27344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.283215][T27344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.301828][T27344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.303128][ T5276] usb 3-1: device descriptor read/64, error -71 [ 1471.312777][T27344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.338001][T27344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.446738][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3962'. [ 1471.461301][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.472105][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.482873][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.494375][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.504719][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.515303][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.525195][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.535743][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.545620][T27310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.556183][T27310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.567693][T27310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.589455][T27289] veth0_macvtap: entered promiscuous mode [ 1471.610539][T27310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.623685][T27310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.641795][T27310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.650942][T27310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.675515][T27344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.685334][T27344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.696569][T27344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.703633][ T5276] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1471.706274][T27344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.723906][ T5314] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1471.737797][T27289] veth1_macvtap: entered promiscuous mode [ 1471.812319][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.822881][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.833075][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.843676][ T5276] usb 3-1: device descriptor read/64, error -71 [ 1471.849956][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.859855][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.870532][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.880593][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.891925][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.902458][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.913277][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.923559][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.934036][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.945509][T27289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.954158][ T5276] usb usb3-port1: attempt power cycle [ 1471.987676][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.999458][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.010729][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.023752][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.034101][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.044828][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.055078][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.069392][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.088166][ T5314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1472.098293][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.109035][ T5314] usb 4-1: not running at top speed; connect to a high speed hub [ 1472.117507][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.127709][T27289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.138501][ T5314] usb 4-1: config 1 interface 0 altsetting 194 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1472.149973][ T5314] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1472.156923][T27289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.168967][ T5314] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1472.183727][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.191757][ T5314] usb 4-1: Product: syz [ 1472.196957][T27289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1472.211049][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.223250][ T5314] usb 4-1: Manufacturer: syz [ 1472.227309][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.230154][ T5314] usb 4-1: SerialNumber: syz [ 1472.244468][T27556] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1472.270653][T27289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.290328][T27289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.302215][ T5276] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1472.321498][T27289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.331909][T27289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.351776][ T5276] usb 3-1: device descriptor read/8, error -71 [ 1472.478399][ T5314] usb 4-1: bad CDC descriptors [ 1472.496615][ T2587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.519765][ T5314] usb 4-1: USB disconnect, device number 29 [ 1472.531574][ T2587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.607422][T21521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.612054][ T2587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.617611][T21521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.632866][ T5276] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1472.663577][ T2587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.664117][ T5276] usb 3-1: device descriptor read/8, error -71 [ 1472.731327][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.739296][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.806035][ T5811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.819353][ T5811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.853143][ T5276] usb usb3-port1: unable to enumerate USB device [ 1473.340997][T27583] netlink: 'syz.3.3969': attribute type 5 has an invalid length. [ 1473.383377][T27583] fuse: Unknown parameter '‚ÿ' [ 1473.653784][ T5276] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1473.829458][ T5276] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1473.864486][ T5276] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1473.913884][ T5276] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1473.925837][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.958667][T27585] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1473.982405][ T5276] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1474.335683][T12941] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1474.461871][ T5276] usb 1-1: USB disconnect, device number 82 [ 1474.506070][ T5283] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1474.527545][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.547044][T12941] usb 3-1: Using ep0 maxpacket: 8 [ 1474.570501][T12941] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1474.597753][T12941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.634558][T12941] usb 3-1: config 0 descriptor?? [ 1474.715711][ T5283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1474.733676][ T5283] usb 4-1: config 1 has no interface number 0 [ 1474.743629][ T5283] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.764454][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.823555][ T5283] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1474.842895][ T5283] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1474.883599][ T5283] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 23 [ 1474.920149][ T5283] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1474.937142][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.939634][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.978343][ T5283] usb 4-1: Product: syz [ 1474.982596][ T5283] usb 4-1: Manufacturer: syz [ 1475.007086][ T5283] usb 4-1: SerialNumber: syz [ 1475.108301][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.206564][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1475.218646][T27596] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1475.226153][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1475.237769][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1475.245816][T27597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.257314][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1475.268771][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1475.278840][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1475.314829][T27597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.524772][ T12] bridge_slave_1: left allmulticast mode [ 1475.551022][ T12] bridge_slave_1: left promiscuous mode [ 1475.579508][ T5283] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 1475.579785][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.585611][ T5283] cdc_ncm 4-1:1.1: bind() failure [ 1475.609621][ T5283] usb 4-1: USB disconnect, device number 30 [ 1475.698550][ T12] bridge_slave_0: left allmulticast mode [ 1475.717975][ T12] bridge_slave_0: left promiscuous mode [ 1475.738486][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.698410][T12941] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1476.723766][T12941] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1476.737369][T12941] usb 3-1: USB disconnect, device number 99 [ 1476.780507][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.816135][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.839281][ T12] bond0 (unregistering): Released all slaves [ 1476.914144][T27612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3977'. [ 1476.923080][T27612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3977'. [ 1477.345163][ T5239] Bluetooth: hci5: command tx timeout [ 1477.424193][ T5289] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1477.634445][ T5289] usb 4-1: Using ep0 maxpacket: 32 [ 1477.641433][ T12] hsr_slave_0: left promiscuous mode [ 1477.687061][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.712034][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.729771][ T12] hsr_slave_1: left promiscuous mode [ 1477.748039][T20553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1477.755023][ T5289] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1477.764934][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.772590][T20553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1477.783871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.788084][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.791227][T20553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1477.810999][ T5289] usb 4-1: config 0 descriptor?? [ 1477.822631][T20553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1477.824004][ T5289] hub 4-1:0.0: USB hub found [ 1477.835385][T20553] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1477.842862][T20553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1477.897519][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.924190][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.018910][ T12] veth1_macvtap: left promiscuous mode [ 1478.034684][ T5289] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1478.049425][ T12] veth0_macvtap: left promiscuous mode [ 1478.057244][ T12] veth1_vlan: left promiscuous mode [ 1478.062612][ T12] veth0_vlan: left promiscuous mode [ 1478.299162][ T5289] usbhid 4-1:0.0: can't add hid device: -71 [ 1478.307494][ T5289] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1478.351359][ T5289] usb 4-1: USB disconnect, device number 31 [ 1479.164861][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1479.235462][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1479.423853][T20553] Bluetooth: hci5: command tx timeout [ 1479.914057][T20553] Bluetooth: hci4: command tx timeout [ 1480.627667][T27600] chnl_net:caif_netlink_parms(): no params data found [ 1480.897334][T27643] chnl_net:caif_netlink_parms(): no params data found [ 1480.989330][T27600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.014454][T27600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.052588][T27600] bridge_slave_0: entered allmulticast mode [ 1481.054176][ T5289] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1481.062606][T27600] bridge_slave_0: entered promiscuous mode [ 1481.199398][T27600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.233695][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 1481.234296][T27600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.255169][ T5289] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1481.317464][ T5289] usb 3-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 1481.327226][T27600] bridge_slave_1: entered allmulticast mode [ 1481.337581][T27600] bridge_slave_1: entered promiscuous mode [ 1481.344104][ T5289] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 1481.353230][ T5289] usb 3-1: config 0 has no interface number 0 [ 1481.361884][ T5289] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.389575][ T5289] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1481.415823][ T5289] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1481.468520][ T5289] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1481.513621][ T5289] usb 3-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 1481.523162][ T5289] usb 3-1: Product: syz [ 1481.527659][ T5289] usb 3-1: Manufacturer: syz [ 1481.545295][T20553] Bluetooth: hci5: command tx timeout [ 1481.557516][ T5289] usb 3-1: config 0 descriptor?? [ 1481.575800][T27664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1481.862094][T27643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.900516][T27643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.921084][T27643] bridge_slave_0: entered allmulticast mode [ 1481.955094][T27643] bridge_slave_0: entered promiscuous mode [ 1481.989932][T27600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.036439][T20553] Bluetooth: hci4: command tx timeout [ 1482.064960][ T47] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1482.129348][T27643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.154344][T27643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.161900][T27643] bridge_slave_1: entered allmulticast mode [ 1482.178466][T27643] bridge_slave_1: entered promiscuous mode [ 1482.252350][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 1482.267119][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.291007][ T47] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 1482.327475][T27600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.363940][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.440628][ T47] usb 4-1: Product: syz [ 1482.460311][ T47] usb 4-1: Manufacturer: syz [ 1482.481438][ T47] usb 4-1: SerialNumber: syz [ 1482.515443][ T47] usb 4-1: config 0 descriptor?? [ 1482.637771][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.683251][T27643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.712135][T27643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.730100][ T47] usb 4-1: USB disconnect, device number 32 [ 1482.904202][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.998451][T27600] team0: Port device team_slave_0 added [ 1483.040671][T27643] team0: Port device team_slave_0 added [ 1483.109169][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.130738][T27600] team0: Port device team_slave_1 added [ 1483.163833][T27643] team0: Port device team_slave_1 added [ 1483.376511][T27643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.411703][T27643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.496442][T27643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.603971][T20553] Bluetooth: hci5: command tx timeout [ 1483.653122][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.695516][T27600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.706138][T27600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.746083][T27600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.765923][T27643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.784386][T27643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.828116][T27643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.860661][T27600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.886516][T27600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.960845][T27600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.063851][T20553] Bluetooth: hci4: command tx timeout [ 1484.132218][T27643] hsr_slave_0: entered promiscuous mode [ 1484.200879][T27643] hsr_slave_1: entered promiscuous mode [ 1484.207394][T27643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1484.223709][T27643] Cannot create hsr debugfs directory [ 1484.426868][T27600] hsr_slave_0: entered promiscuous mode [ 1484.494199][T27600] hsr_slave_1: entered promiscuous mode [ 1484.563180][T27600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1484.595849][T27600] Cannot create hsr debugfs directory [ 1484.684472][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.692102][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.827747][ T12] bridge_slave_1: left allmulticast mode [ 1484.837720][ T12] bridge_slave_1: left promiscuous mode [ 1484.884405][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.925549][ T12] bridge_slave_0: left allmulticast mode [ 1484.931253][ T12] bridge_slave_0: left promiscuous mode [ 1484.958544][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.170378][T20553] Bluetooth: hci4: command tx timeout [ 1486.298326][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.327279][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.349414][ T12] bond0 (unregistering): Released all slaves [ 1486.926843][ T12] hsr_slave_0: left promiscuous mode [ 1486.963182][ T12] hsr_slave_1: left promiscuous mode [ 1486.995235][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.002950][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.049149][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.078241][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.214090][ T12] veth1_macvtap: left promiscuous mode [ 1487.219909][ T12] veth0_macvtap: left promiscuous mode [ 1487.253969][ T12] veth1_vlan: left promiscuous mode [ 1487.273973][ T12] veth0_vlan: left promiscuous mode [ 1490.152882][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1490.246256][ T5289] usb 3-1: USB disconnect, device number 100 [ 1490.260592][ T47] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1490.353265][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1490.441010][ T47] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1490.451393][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.491190][ T47] usb 4-1: Product: syz [ 1490.495966][ T47] usb 4-1: Manufacturer: syz [ 1490.500586][ T47] usb 4-1: SerialNumber: syz [ 1490.526604][ T47] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1490.560541][ T5283] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1491.593546][ T5283] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1491.600786][ T5283] ath9k_htc: Failed to initialize the device [ 1491.785052][ T5283] usb 4-1: ath9k_htc: USB layer deinitialized [ 1492.345939][T20553] Bluetooth: hci3: unexpected subevent 0x01 length: 78 > 18 [ 1492.373670][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1492.577061][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1492.603086][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.622947][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.664250][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1492.703416][ T9] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 1492.746928][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.780130][ T9] usb 3-1: config 0 descriptor?? [ 1493.163796][T12941] usb 4-1: USB disconnect, device number 33 [ 1493.219793][ T9] shield 0003:0955:7214.0079: unknown main item tag 0x2 [ 1493.254001][ T9] shield 0003:0955:7214.0079: unknown main item tag 0x0 [ 1493.276231][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input147 [ 1493.330047][ T9] shield 0003:0955:7214.0079: Registered Thunderstrike controller [ 1493.368655][T27600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1493.382825][ T9] shield 0003:0955:7214.0079: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1493.400241][T27600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1493.424212][T27600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1493.426939][ T5276] hid (null): invalid report_size -2116897658 [ 1493.454195][ T5276] hid (null): unknown global tag 0xd [ 1493.459554][ T5276] hid (null): unknown global tag 0xc [ 1493.476136][T27600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1493.509953][ T5276] hid (null): unknown global tag 0xc [ 1493.534402][ T5276] hid (null): global environment stack underflow [ 1493.540873][ T5276] hid (null): unknown global tag 0xc [ 1493.590213][ T5276] hid-generic 0009:0039:0003.007A: unknown main item tag 0x5 [ 1493.617522][ T5276] hid-generic 0009:0039:0003.007A: unknown main item tag 0x3 [ 1493.650651][ T5276] hid-generic 0009:0039:0003.007A: collection stack underflow [ 1493.669071][ T5276] hid-generic 0009:0039:0003.007A: item 0 0 0 12 parsing failed [ 1493.689281][ T5276] hid-generic 0009:0039:0003.007A: probe with driver hid-generic failed with error -22 [ 1493.708017][ T5289] shield 0003:0955:7214.0079: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1493.732811][ T5276] usb 3-1: USB disconnect, device number 101 [ 1493.739319][ T5289] shield 0003:0955:7214.0079: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1493.761674][T27643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1493.781065][ T5289] shield 0003:0955:7214.0079: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1493.793915][ T5289] shield 0003:0955:7214.0079: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1493.831130][T27643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1493.842896][T27643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1493.867316][T27643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1493.997102][T27600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.074383][T27600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.098481][ T2587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.105693][ T2587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.133151][T27643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.157178][ T2587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.164410][ T2587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.191341][T27643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.245315][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.252548][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.285168][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.292323][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.517697][T27600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1494.553012][T27600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1494.604606][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1494.615276][T27804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4012'. [ 1494.635785][T27600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.687375][T27643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.810563][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.843767][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.869416][T27600] veth0_vlan: entered promiscuous mode [ 1494.875101][ T9] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1494.903867][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.912095][T27643] veth0_vlan: entered promiscuous mode [ 1494.933115][T27600] veth1_vlan: entered promiscuous mode [ 1494.934638][T27813] netlink: 308 bytes leftover after parsing attributes in process `syz.3.4013'. [ 1494.957843][ T9] usb 3-1: config 0 descriptor?? [ 1494.991006][T27643] veth1_vlan: entered promiscuous mode [ 1495.112445][T27600] veth0_macvtap: entered promiscuous mode [ 1495.147964][T27643] veth0_macvtap: entered promiscuous mode [ 1495.172429][T27600] veth1_macvtap: entered promiscuous mode [ 1495.200048][T27643] veth1_macvtap: entered promiscuous mode [ 1495.252837][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.275024][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.293363][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.312685][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.323111][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.345153][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.365640][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.382234][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.386390][ T9] a4tech 0003:09DA:022B.007B: item fetching failed at offset 5/7 [ 1495.394631][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.420816][ T9] a4tech 0003:09DA:022B.007B: parse failed [ 1495.433112][ T9] a4tech 0003:09DA:022B.007B: probe with driver a4tech failed with error -22 [ 1495.453192][ T5276] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1495.455271][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.519809][T27600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.598518][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.625911][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1495.638351][ T9] usb 3-1: USB disconnect, device number 102 [ 1495.639874][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.656596][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.670006][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.679991][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.690536][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.698459][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1495.700449][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.722380][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.722400][T27600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.722417][T27600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.723871][T27600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.774103][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.785999][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1495.792093][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.808074][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1495.820947][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1495.823539][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.859951][ T5276] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1495.869513][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.883535][ T5276] usb 4-1: Product: syz [ 1495.887753][ T5276] usb 4-1: Manufacturer: syz [ 1495.888844][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.909199][ T5276] usb 4-1: SerialNumber: syz [ 1495.930238][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.938094][ T5276] usb 4-1: config 0 descriptor?? [ 1495.964711][ T5276] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1495.971945][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.978771][ T5276] imon 4-1:0.0: unable to initialize intf0, err -90 [ 1495.988697][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.988724][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.988737][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.988750][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.988774][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.988788][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.990291][T27643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.030050][ T5276] imon:imon_probe: failed to initialize context! [ 1496.106696][ T5276] imon 4-1:0.0: unable to register, err -19 [ 1496.121606][T27600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.133312][T27600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.183507][T27600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.192272][T27600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.268462][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.293527][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.303403][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.343876][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.363499][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.384031][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.412137][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.428146][T27851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4016'. [ 1496.436945][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.463763][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.490910][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.512427][T27643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.533073][T27643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.561265][T27643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.601237][T12941] usb 4-1: USB disconnect, device number 34 [ 1496.673153][T27643] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.690563][T27643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.702437][T27643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.726513][T27643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.824434][ T5276] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1496.880517][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.924014][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.940295][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.971525][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.013693][ T5276] usb 3-1: Using ep0 maxpacket: 16 [ 1497.044831][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.073893][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.103246][ T5276] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1497.112716][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.133623][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.148307][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.189839][ T5276] usb 3-1: config 0 descriptor?? [ 1497.233369][ T722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.274027][ T722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.429882][T27876] fuse: Unknown parameter '0x0000000000000003' [ 1497.563819][ T5279] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1497.573545][T12941] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 1497.612388][T27880] netlink: 'syz.0.4019': attribute type 29 has an invalid length. [ 1497.647923][T27880] netlink: 'syz.0.4019': attribute type 29 has an invalid length. [ 1497.707880][T12941] usb 4-1: device descriptor read/64, error -71 [ 1497.973938][T12941] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 1498.023356][T27851] program syz.2.4016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1498.048911][ T5279] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1498.058814][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.071376][ T5279] usb 2-1: config 0 descriptor?? [ 1498.131762][ T5279] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1498.153813][T12941] usb 4-1: device descriptor read/64, error -71 [ 1498.264208][T12941] usb usb4-port1: attempt power cycle [ 1498.304498][ T5276] usbhid 3-1:0.0: can't add hid device: -71 [ 1498.311629][ T5276] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1498.352497][ T5279] gp8psk: usb in 128 operation failed. [ 1498.396779][ T5276] usb 3-1: USB disconnect, device number 103 [ 1498.629974][ T5279] gp8psk: usb in 137 operation failed. [ 1498.635650][ T5279] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1498.646227][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1498.656460][ T5279] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1498.684798][T12941] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 1498.714230][T12941] usb 4-1: device descriptor read/8, error -71 [ 1498.814751][ T9] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1498.854890][ T9] usb 1-1: config 0 has no interfaces? [ 1498.862526][ T9] usb 1-1: config 0 has no interfaces? [ 1498.937717][ T9] usb 1-1: config 0 has no interfaces? [ 1498.946225][ T9] usb 1-1: config 0 has no interfaces? [ 1498.963301][T12941] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 1498.971415][ T9] usb 1-1: config 0 has no interfaces? [ 1498.981333][ T9] usb 1-1: config 0 has no interfaces? [ 1498.998697][ T9] usb 1-1: config 0 has no interfaces? [ 1499.007234][ T9] usb 1-1: config 0 has no interfaces? [ 1499.012945][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1499.049410][T12941] usb 4-1: device descriptor read/8, error -71 [ 1499.065422][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.065651][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1499.099337][ T9] usb 1-1: config 0 descriptor?? [ 1499.127578][T27919] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1499.138123][T27919] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1499.147912][T27919] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1499.156743][T27919] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1499.165832][T12941] usb usb4-port1: unable to enumerate USB device [ 1499.208325][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1499.208345][ T29] audit: type=1326 audit(1727875699.268:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.263710][ T29] audit: type=1326 audit(1727875699.268:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.300709][T27919] vxlan0: entered promiscuous mode [ 1499.308200][ T29] audit: type=1326 audit(1727875699.308:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.362643][T27892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.363660][ T29] audit: type=1326 audit(1727875699.308:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.396390][T27892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.439467][ T5289] usb 1-1: USB disconnect, device number 83 [ 1499.484155][T12941] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1499.484238][ T29] audit: type=1326 audit(1727875699.308:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.580035][ T29] audit: type=1326 audit(1727875699.308:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.611580][ T29] audit: type=1326 audit(1727875699.308:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.653703][ T29] audit: type=1326 audit(1727875699.308:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.701310][T12941] usb 3-1: config 0 has no interfaces? [ 1499.707141][T12941] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1499.728988][ T29] audit: type=1326 audit(1727875699.308:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.764200][T12941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.783397][T12941] usb 3-1: config 0 descriptor?? [ 1499.792653][ T29] audit: type=1326 audit(1727875699.308:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27921 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1499.913538][ C0] ------------[ cut here ]------------ [ 1499.919882][ C0] WARNING: CPU: 0 PID: 27939 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1499.931009][ C0] Modules linked in: [ 1499.935022][ C0] CPU: 0 UID: 0 PID: 27939 Comm: syz.4.4023 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 1499.945883][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1499.956043][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1499.963129][ C0] Code: 0f b6 dc 31 ff 89 de e8 a5 ec e7 f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 88 e9 e7 f5 90 <0f> 0b 90 e9 47 ff ff ff e8 7a e9 e7 f5 90 0f 0b 90 e9 99 e0 ff ff [ 1499.982873][ C0] RSP: 0018:ffffc90000006db8 EFLAGS: 00010246 [ 1499.989030][ C0] RAX: ffffffff8bacf228 RBX: 00000000000055f0 RCX: ffff888027185a00 [ 1499.997122][ C0] RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0 [ 1500.005163][ C0] RBP: 1ffff1100c0bd65e R08: ffffffff8bace222 R09: 1ffff1100c0bd668 [ 1500.013170][ C0] R10: dffffc0000000000 R11: ffffed100c0bd669 R12: 0000000000000000 [ 1500.021232][ C0] R13: dffffc0000000000 R14: 000000000f614d1a R15: 00000000000081e5 [ 1500.029286][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f5696b40 [ 1500.038315][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1500.044962][ C0] CR2: 0000000020287000 CR3: 0000000056ab4000 CR4: 00000000003526f0 [ 1500.052969][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1500.061029][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1500.069068][ C0] Call Trace: [ 1500.072370][ C0] [ 1500.075287][ C0] ? __warn+0x168/0x4e0 [ 1500.079476][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1500.081379][T27922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.085974][ C0] ? report_bug+0x2b3/0x500 [ 1500.098991][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1500.105512][ C0] ? handle_bug+0x60/0x90 [ 1500.109876][ C0] ? exc_invalid_op+0x1a/0x50 [ 1500.114634][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 1500.119701][ C0] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 1500.126211][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 1500.132662][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1500.139173][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 1500.145697][ C0] mptcp_data_ready+0x29c/0xa90 [ 1500.150579][ C0] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 1500.156483][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 1500.161901][ C0] subflow_data_ready+0x34a/0x920 [ 1500.167019][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 1500.172612][ C0] ? tcp_grow_window+0x1a1/0xb00 [ 1500.177627][ C0] ? tcp_data_ready+0x15b/0x4e0 [ 1500.182522][ C0] tcp_data_queue+0x20fd/0x76c0 [ 1500.187560][ C0] ? tcp_urg+0x100/0x450 [ 1500.191837][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 1500.197134][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 1500.201763][ C0] ? ktime_get+0x9b/0xb0 [ 1500.206104][ C0] tcp_rcv_established+0xfba/0x2020 [ 1500.211356][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1500.217088][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1500.222159][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 1500.226842][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 1500.231431][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1500.236387][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1500.241275][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1500.246213][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 1500.251713][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 1500.257453][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 1500.262997][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1500.269068][ C0] NF_HOOK+0x3a4/0x450 [ 1500.273186][ C0] ? NF_HOOK+0x9a/0x450 [ 1500.277435][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1500.282076][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1500.288139][ C0] ? ip_rcv_finish+0x406/0x560 [ 1500.292944][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1500.298149][ C0] NF_HOOK+0x3a4/0x450 [ 1500.302255][ C0] ? __lock_acquire+0x1384/0x2050 [ 1500.307375][ C0] ? NF_HOOK+0x9a/0x450 [ 1500.311565][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1500.315485][T27948] netlink: 'syz.4.4023': attribute type 4 has an invalid length. [ 1500.316219][ C0] ? ip_rcv_core+0x801/0xd10 [ 1500.328554][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1500.333780][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1500.338329][ C0] __netif_receive_skb+0x2bf/0x650 [ 1500.343527][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1500.348593][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 1500.354307][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1500.360337][ C0] ? __pfx_lock_release+0x10/0x10 [ 1500.365458][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1500.368102][T27950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4023'. [ 1500.370604][ C0] process_backlog+0x662/0x15b0 [ 1500.384809][ C0] ? process_backlog+0x33b/0x15b0 [ 1500.389890][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1500.395255][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1500.396947][T27950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4023'. [ 1500.401268][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1500.401313][ C0] __napi_poll+0xcb/0x490 [ 1500.401347][ C0] net_rx_action+0x89b/0x1240 [ 1500.425789][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1500.426000][T27950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4023'. [ 1500.430926][ C0] ? sched_clock+0x4a/0x70 [ 1500.430974][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1500.450761][ C0] handle_softirqs+0x2c5/0x980 [ 1500.455621][ C0] ? do_softirq+0x11b/0x1e0 [ 1500.460173][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1500.465574][ C0] do_softirq+0x11b/0x1e0 [ 1500.469954][ C0] [ 1500.472914][ C0] [ 1500.475942][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1500.480845][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1500.485220][T27950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4023'. [ 1500.486550][ C0] ? rcu_is_watching+0x15/0xb0 [ 1500.500312][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 1500.505615][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1500.510950][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 1500.516171][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1500.521969][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 1500.527181][ C0] __dev_queue_xmit+0x1764/0x3e80 [ 1500.532276][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 1500.537490][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1500.542940][ C0] ? mark_lock+0x9a/0x360 [ 1500.547374][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1500.553488][ C0] ? ip_finish_output2+0xa14/0x1390 [ 1500.558751][ C0] ? ip_finish_output2+0x45f/0x1390 [ 1500.564056][ C0] ip_finish_output2+0xd41/0x1390 [ 1500.569152][ C0] ? ip_finish_output2+0x45f/0x1390 [ 1500.574468][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 1500.579991][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 1500.584959][ C0] ? __ip_finish_output+0x349/0x400 [ 1500.590308][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 1500.595340][ C0] ? __pfx_mptcp_write_options+0x10/0x10 [ 1500.601018][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 1500.606312][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1500.611473][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 1500.616823][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1500.622433][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1500.628539][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1500.634998][ C0] ? tcp_init_tso_segs+0xde/0x1a0 [ 1500.640082][ C0] tcp_write_xmit+0x641d/0x6bf0 [ 1500.645096][ C0] ? ipv4_mtu+0x2bc/0x3d0 [ 1500.649478][ C0] ? tcp_current_mss+0x29b/0x4d0 [ 1500.654517][ C0] ? __pfx_tcp_current_mss+0x10/0x10 [ 1500.659904][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 1500.665207][ C0] __tcp_push_pending_frames+0x9b/0x360 [ 1500.670811][ C0] ? ktime_get+0x9b/0xb0 [ 1500.675175][ C0] tcp_rcv_established+0x1026/0x2020 [ 1500.680530][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1500.686993][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1500.692703][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 1500.697413][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 1500.702570][ C0] __release_sock+0x214/0x350 [ 1500.704601][ T5283] usb 2-1: USB disconnect, device number 123 [ 1500.707349][ C0] release_sock+0x61/0x1f0 [ 1500.717772][ C0] __mptcp_push_pending+0x6b5/0x9f0 [ 1500.723044][ C0] ? __mptcp_push_pending+0x3d1/0x9f0 [ 1500.728583][ C0] ? __pfx___mptcp_push_pending+0x10/0x10 [ 1500.734417][ C0] ? __virt_addr_valid+0x183/0x530 [ 1500.739574][ C0] ? __virt_addr_valid+0x183/0x530 [ 1500.745101][ C0] ? __virt_addr_valid+0x45f/0x530 [ 1500.750257][ C0] ? __check_object_size+0x48e/0x900 [ 1500.755682][ C0] mptcp_sendmsg+0x10bb/0x1b10 [ 1500.760554][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1500.765756][ C0] ? sock_rps_record_flow+0x1a/0x400 [ 1500.771100][ C0] ? inet_sendmsg+0x330/0x390 [ 1500.773573][T12941] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1500.775853][ C0] __sock_sendmsg+0x1a6/0x270 [ 1500.788176][ C0] __sys_sendto+0x39b/0x4f0 [ 1500.792723][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1500.798279][ C0] ? do_futex+0x33b/0x560 [ 1500.802668][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1500.809163][ C0] __ia32_sys_sendto+0xdd/0x100 [ 1500.814130][ C0] __do_fast_syscall_32+0xb4/0x110 [ 1500.819291][ C0] ? exc_page_fault+0x590/0x8c0 [ 1500.824234][ C0] do_fast_syscall_32+0x34/0x80 [ 1500.829129][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1500.835550][ C0] RIP: 0023:0xf7f13579 [ 1500.839651][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1500.859360][ C0] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1500.867877][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000040 [ 1500.875995][ C0] RDX: 00000000ffffff4c RSI: 0000000000000000 RDI: 0000000000000000 [ 1500.884061][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1500.892092][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1500.900199][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.908315][ C0] [ 1500.911413][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1500.918730][ C0] CPU: 0 UID: 0 PID: 27939 Comm: syz.4.4023 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 1500.929525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1500.939611][ C0] Call Trace: [ 1500.942912][ C0] [ 1500.945780][ C0] dump_stack_lvl+0x241/0x360 [ 1500.950495][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1500.955721][ C0] ? __pfx__printk+0x10/0x10 [ 1500.960344][ C0] ? _printk+0xd5/0x120 [ 1500.964541][ C0] ? __init_begin+0x41000/0x41000 [ 1500.969599][ C0] ? vscnprintf+0x5d/0x90 [ 1500.974060][ C0] panic+0x349/0x880 [ 1500.977999][ C0] ? __warn+0x177/0x4e0 [ 1500.982209][ C0] ? __pfx_panic+0x10/0x10 [ 1500.986679][ C0] ? show_trace_log_lvl+0x3b2/0x410 [ 1500.992014][ C0] __warn+0x34b/0x4e0 [ 1500.996025][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1501.002475][ C0] report_bug+0x2b3/0x500 [ 1501.006837][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1501.013288][ C0] handle_bug+0x60/0x90 [ 1501.017482][ C0] exc_invalid_op+0x1a/0x50 [ 1501.022027][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1501.026928][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1501.034000][ C0] Code: 0f b6 dc 31 ff 89 de e8 a5 ec e7 f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 88 e9 e7 f5 90 <0f> 0b 90 e9 47 ff ff ff e8 7a e9 e7 f5 90 0f 0b 90 e9 99 e0 ff ff [ 1501.053640][ C0] RSP: 0018:ffffc90000006db8 EFLAGS: 00010246 [ 1501.059738][ C0] RAX: ffffffff8bacf228 RBX: 00000000000055f0 RCX: ffff888027185a00 [ 1501.067758][ C0] RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0 [ 1501.075756][ C0] RBP: 1ffff1100c0bd65e R08: ffffffff8bace222 R09: 1ffff1100c0bd668 [ 1501.083767][ C0] R10: dffffc0000000000 R11: ffffed100c0bd669 R12: 0000000000000000 [ 1501.091853][ C0] R13: dffffc0000000000 R14: 000000000f614d1a R15: 00000000000081e5 [ 1501.099862][ C0] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 1501.106314][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 1501.112767][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 1501.119264][ C0] mptcp_data_ready+0x29c/0xa90 [ 1501.124147][ C0] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 1501.129990][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 1501.135400][ C0] subflow_data_ready+0x34a/0x920 [ 1501.140455][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 1501.146025][ C0] ? tcp_grow_window+0x1a1/0xb00 [ 1501.150993][ C0] ? tcp_data_ready+0x15b/0x4e0 [ 1501.155880][ C0] tcp_data_queue+0x20fd/0x76c0 [ 1501.160776][ C0] ? tcp_urg+0x100/0x450 [ 1501.165047][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 1501.170279][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 1501.174894][ C0] ? ktime_get+0x9b/0xb0 [ 1501.179173][ C0] tcp_rcv_established+0xfba/0x2020 [ 1501.184434][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1501.190099][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1501.195162][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 1501.199807][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 1501.204389][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1501.209274][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1501.214155][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1501.219040][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 1501.224539][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 1501.230218][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 1501.235719][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1501.241726][ C0] NF_HOOK+0x3a4/0x450 [ 1501.245842][ C0] ? NF_HOOK+0x9a/0x450 [ 1501.250030][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1501.254647][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1501.260743][ C0] ? ip_rcv_finish+0x406/0x560 [ 1501.265542][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1501.270861][ C0] NF_HOOK+0x3a4/0x450 [ 1501.274964][ C0] ? __lock_acquire+0x1384/0x2050 [ 1501.280028][ C0] ? NF_HOOK+0x9a/0x450 [ 1501.284213][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1501.288826][ C0] ? ip_rcv_core+0x801/0xd10 [ 1501.293432][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1501.298574][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1501.303098][ C0] __netif_receive_skb+0x2bf/0x650 [ 1501.308240][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1501.313294][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 1501.318956][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1501.324972][ C0] ? __pfx_lock_release+0x10/0x10 [ 1501.330029][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1501.335191][ C0] process_backlog+0x662/0x15b0 [ 1501.340094][ C0] ? process_backlog+0x33b/0x15b0 [ 1501.345166][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1501.350477][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1501.356490][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1501.362854][ C0] __napi_poll+0xcb/0x490 [ 1501.367227][ C0] net_rx_action+0x89b/0x1240 [ 1501.371959][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1501.377102][ C0] ? sched_clock+0x4a/0x70 [ 1501.381559][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1501.387946][ C0] handle_softirqs+0x2c5/0x980 [ 1501.392745][ C0] ? do_softirq+0x11b/0x1e0 [ 1501.397281][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1501.402606][ C0] do_softirq+0x11b/0x1e0 [ 1501.406963][ C0] [ 1501.409911][ C0] [ 1501.412855][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1501.417741][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1501.423413][ C0] ? rcu_is_watching+0x15/0xb0 [ 1501.428203][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 1501.433426][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1501.438733][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 1501.443870][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1501.449630][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 1501.454765][ C0] __dev_queue_xmit+0x1764/0x3e80 [ 1501.459828][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 1501.464972][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1501.470393][ C0] ? mark_lock+0x9a/0x360 [ 1501.474748][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1501.480761][ C0] ? ip_finish_output2+0xa14/0x1390 [ 1501.485994][ C0] ? ip_finish_output2+0x45f/0x1390 [ 1501.491225][ C0] ip_finish_output2+0xd41/0x1390 [ 1501.496283][ C0] ? ip_finish_output2+0x45f/0x1390 [ 1501.501513][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 1501.506997][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 1501.511876][ C0] ? __ip_finish_output+0x349/0x400 [ 1501.517112][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 1501.522080][ C0] ? __pfx_mptcp_write_options+0x10/0x10 [ 1501.527741][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 1501.532707][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1501.537855][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 1501.543126][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1501.548703][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1501.554716][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1501.561093][ C0] ? tcp_init_tso_segs+0xde/0x1a0 [ 1501.566152][ C0] tcp_write_xmit+0x641d/0x6bf0 [ 1501.571051][ C0] ? ipv4_mtu+0x2bc/0x3d0 [ 1501.575406][ C0] ? tcp_current_mss+0x29b/0x4d0 [ 1501.580371][ C0] ? __pfx_tcp_current_mss+0x10/0x10 [ 1501.585693][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 1501.590920][ C0] __tcp_push_pending_frames+0x9b/0x360 [ 1501.596494][ C0] ? ktime_get+0x9b/0xb0 [ 1501.600761][ C0] tcp_rcv_established+0x1026/0x2020 [ 1501.606084][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1501.612448][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1501.618129][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 1501.622755][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 1501.627889][ C0] __release_sock+0x214/0x350 [ 1501.632598][ C0] release_sock+0x61/0x1f0 [ 1501.637046][ C0] __mptcp_push_pending+0x6b5/0x9f0 [ 1501.642272][ C0] ? __mptcp_push_pending+0x3d1/0x9f0 [ 1501.647667][ C0] ? __pfx___mptcp_push_pending+0x10/0x10 [ 1501.653411][ C0] ? __virt_addr_valid+0x183/0x530 [ 1501.658539][ C0] ? __virt_addr_valid+0x183/0x530 [ 1501.663669][ C0] ? __virt_addr_valid+0x45f/0x530 [ 1501.668800][ C0] ? __check_object_size+0x48e/0x900 [ 1501.674119][ C0] mptcp_sendmsg+0x10bb/0x1b10 [ 1501.679025][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1501.684165][ C0] ? sock_rps_record_flow+0x1a/0x400 [ 1501.689481][ C0] ? inet_sendmsg+0x330/0x390 [ 1501.694195][ C0] __sock_sendmsg+0x1a6/0x270 [ 1501.698905][ C0] __sys_sendto+0x39b/0x4f0 [ 1501.703431][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1501.708473][ C0] ? do_futex+0x33b/0x560 [ 1501.712857][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1501.719220][ C0] __ia32_sys_sendto+0xdd/0x100 [ 1501.724100][ C0] __do_fast_syscall_32+0xb4/0x110 [ 1501.729242][ C0] ? exc_page_fault+0x590/0x8c0 [ 1501.734136][ C0] do_fast_syscall_32+0x34/0x80 [ 1501.739009][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1501.745362][ C0] RIP: 0023:0xf7f13579 [ 1501.749447][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1501.769079][ C0] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1501.777532][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000040 [ 1501.785526][ C0] RDX: 00000000ffffff4c RSI: 0000000000000000 RDI: 0000000000000000 [ 1501.793519][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1501.801510][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1501.809498][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1501.817511][ C0] [ 1501.820803][ C0] Kernel Offset: disabled [ 1501.825287][ C0] Rebooting in 86400 seconds..