last executing test programs: 10.830880193s ago: executing program 2 (id=8261): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000007c0)=[{0x0, 0x0, 0x8}, {0x0, 0x4, 0x0, 0x2}, {0x0, 0x1000000, 0x0, 0xc}, {0x3, 0x2, 0xf, 0x4}], 0x10, 0x4}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xd20a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup3(r0, r4, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timerfd_create(0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000100012800800010067726500040002800c001a"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000700b70300000000008385000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='f2fs_gc_begin\x00', r8}, 0x10) 6.935244604s ago: executing program 2 (id=8283): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5421, 0x0) 5.980090371s ago: executing program 3 (id=8293): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 5.836797254s ago: executing program 2 (id=8295): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.311063934s ago: executing program 3 (id=8299): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @private}, 0x10) r2 = semget$private(0x0, 0x5, 0x0) rt_sigreturn() semtimedop(r2, &(0x7f0000000140)=[{0x0, 0xfff9}], 0x1, 0x0) 3.978478445s ago: executing program 4 (id=8305): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x1ae) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x4, 0x7]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x24, @none={0x0, 0xffff}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x34, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80010) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x15, 0x0, '.\x00'}}) 3.883958035s ago: executing program 4 (id=8306): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r3 = dup3(r2, r1, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001640)=ANY=[], 0x10}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ff6000/0x3000)=nil, 0x0) 3.815305388s ago: executing program 4 (id=8308): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5450, 0x0) 3.573050816s ago: executing program 2 (id=8309): r0 = socket$inet(0x2, 0x3, 0x6) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 3.475850579s ago: executing program 2 (id=8311): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.357647025s ago: executing program 3 (id=8312): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x7, 0x0, &(0x7f0000000080)) 3.147903672s ago: executing program 3 (id=8314): unshare(0x20000400) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000020850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.953089452s ago: executing program 3 (id=8315): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7807, 0x700, 0x1f, 0x0, {{0x1a, 0x4, 0x3, 0x4, 0x68, 0x68, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x13, 0x86, [@loopback, @rand_addr=0x64010100, @empty, @private]}, @timestamp_addr={0x44, 0x1c, 0xb1, 0x1, 0x0, [{@empty, 0x80}, {@multicast1, 0x1ff}, {@local}]}, @noop, @rr={0x7, 0x23, 0x2a, [@remote, @multicast2, @broadcast, @loopback, @empty, @local, @multicast1, @rand_addr=0x64010101]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4080}, 0x64000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0xc0800) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f0000000480)=@delchain={0x1410, 0x65, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0xa}, {0xe, 0x10}, {0x6}}, [@f_rsvp={{0x9}, {0x85c, 0x2, [@TCA_RSVP_POLICE={0x828, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x1108, 0x401, 0x0, 0xfff, 0x3, 0x4, 0x4, 0x1, 0x80000000, 0x6, 0x80000000, 0x7d, 0x80000000, 0x7, 0x6, 0x80000000, 0x1, 0x0, 0x5, 0x6, 0xfffffff7, 0x8001, 0x3, 0x8, 0x6, 0x4, 0x7, 0x0, 0x3, 0x9, 0x2bf02216, 0x1, 0x26, 0x0, 0xd, 0x80000001, 0x7fffffff, 0x9f5f, 0x40, 0x2d, 0xba2, 0x6, 0x1, 0x5, 0xdc, 0x7fffffff, 0x5b2, 0x3376, 0x6, 0x3, 0xff, 0x7, 0x9, 0x8001, 0x6, 0x4, 0x8ea, 0xd7, 0x2, 0x0, 0x8, 0x3, 0xff, 0x4, 0x3, 0x1ff, 0x6, 0x3, 0x1ff, 0x8000, 0x5, 0x3ff, 0x0, 0x3f, 0x200, 0x4, 0xef, 0xb6, 0x1, 0x8, 0x40, 0x26, 0x6, 0xf1dc, 0x40, 0x2, 0xffffffff, 0x7ff, 0xfffffff9, 0x1, 0x3, 0x7, 0x7, 0x9, 0x7, 0xb10, 0x0, 0x800, 0x3f, 0x80, 0xf39f, 0xa7f1, 0xfff, 0x200, 0x0, 0x9, 0xfa, 0x7, 0x9, 0x3, 0xffff, 0x98f, 0x8, 0x10000, 0x0, 0x90, 0x7fffffff, 0x0, 0x8000, 0x7, 0x3, 0x9, 0x9, 0x3, 0xfff, 0x548, 0x7, 0x6, 0x1, 0x5, 0x1ff, 0x1, 0x7, 0x2, 0xfa2, 0xffffff14, 0xfffffffe, 0x4, 0x4, 0x3ff, 0x2, 0x100, 0xffff, 0x7, 0x4, 0x0, 0x4320, 0x9c9f, 0x6, 0x5, 0x7, 0x5, 0x40, 0xc, 0xffffffff, 0x8000, 0xa599, 0x7, 0x100, 0x0, 0x6, 0x5, 0x7, 0x9, 0x4, 0x2, 0x7, 0x84c, 0x1, 0x6, 0x9, 0x9, 0x9, 0x8001, 0xa957, 0x5, 0x94f, 0x6, 0x0, 0xfffffffe, 0x97, 0x1, 0x7fff, 0xaa, 0x6, 0x2a, 0x1, 0x9, 0x0, 0x8, 0x5, 0xe409, 0xfff, 0x7f, 0xffffffc0, 0x80000000, 0x3, 0x9, 0x8, 0x7ff, 0x3f, 0x2, 0x4, 0x3, 0x2, 0x80000000, 0xb07f, 0x5, 0x7fffffff, 0x1000, 0x1, 0x0, 0x81, 0x4, 0x96, 0x7, 0x2, 0x6, 0x2777, 0x3f, 0x2, 0xc8a, 0xffffff81, 0x7ac, 0xfffffeff, 0x9, 0x1ff, 0x0, 0x85, 0x0, 0x2, 0x7, 0x8, 0x1, 0x6, 0x80000000, 0x81, 0x5, 0x0, 0x9a, 0x1, 0x1000, 0x100, 0x80000000, 0x10000, 0x2, 0x7f, 0x1, 0x8000, 0xa, 0x6, 0x7, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xf872, 0x48a, 0x80000000, 0xe2, 0x0, 0x6, 0x1, 0x80, 0x8, 0x0, 0x5c8, 0x6dd, 0x7f, 0x7ff, 0x3, 0xd923, 0x8, 0x6, 0x0, 0x7, 0x80, 0x8, 0x10000, 0x80, 0x9, 0x9, 0x1ff, 0xd102, 0xc8eb, 0x8001, 0x0, 0x3ff, 0x5, 0x2, 0x1000, 0x3, 0x1ff, 0x4, 0x4d0, 0x5, 0x2, 0x0, 0xe1, 0x4, 0x0, 0xffff8001, 0x2, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x5, 0x1, 0x3, 0xffffffff, 0xff, 0x7fff, 0x0, 0x7ff, 0x2, 0xffffffff, 0xffffffff, 0x401, 0x80000000, 0x1fc8, 0x46665f6, 0x7, 0x8605, 0x100, 0x7, 0x2, 0x5, 0x1c232494, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0xd91e, 0x9, 0x3f, 0x5, 0x6, 0x1, 0x9, 0x100, 0x6, 0xef, 0xffffff58, 0xfffff7b4, 0x2, 0x9, 0x8, 0xfe, 0x3ff, 0x80000001, 0x800, 0xde28, 0xfffff000, 0x5, 0x3, 0x8860, 0x4, 0xffffffff, 0x0, 0x3, 0x2, 0x3, 0x2, 0x3, 0xdfe, 0x14, 0x4, 0x3, 0x3, 0x8, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x71, 0x1, 0x8, 0xfffffffe, 0x5, 0x9, 0x9, 0x7, 0x4, 0x655c3c5a, 0x200, 0x9, 0x6, 0x6, 0x6, 0x3ce, 0x77e, 0x3, 0x2, 0x2, 0x8, 0x7f, 0x200, 0x0, 0xc46, 0xaa3, 0x0, 0xed2, 0x7, 0x3, 0x0, 0x5, 0x401, 0x6, 0x65fd79da, 0x2983, 0x0, 0x100, 0xfffffffd, 0x81, 0x99e, 0xffffffff, 0x3, 0x7f, 0x3d, 0x9, 0x9, 0x4, 0x1ff, 0x1, 0x3, 0x7, 0x9f8, 0x8000, 0x6, 0x2, 0x4, 0x400, 0x0, 0x7f, 0xd55, 0xffff, 0xffffffc0, 0xc000, 0x1, 0x0, 0xffff, 0x3, 0x5, 0x3f, 0x7fffffff, 0x8001, 0x5, 0x8, 0x10001, 0x1, 0xeb, 0x2, 0x0, 0x8000, 0xc48c, 0x5, 0x80000001, 0xc449739, 0x5, 0xfffff1e6, 0x2, 0x401, 0xfffffff8, 0x5, 0x10001, 0xffffffe1, 0x4, 0x9, 0x16d, 0x7fe0, 0x9, 0x40, 0x6, 0x9, 0x5, 0xfffffff8, 0x0, 0x81, 0x5, 0x100, 0x8, 0x0, 0x4, 0x5, 0x6, 0xcc94, 0x800, 0xfff, 0xa3ca, 0x2, 0x3, 0x80000000, 0x3ff, 0x101, 0x4f9, 0x1000, 0x3, 0x2, 0x2, 0x9, 0x1ff, 0x6, 0x1, 0x5]}]}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x0, 0x9ef843}, {0x1, 0x8, 0xc03}, 0x7321584fa27139c6, 0x1, 0x3f}}, @TCA_RSVP_DST={0x8, 0x2, @multicast2}]}}, @f_rsvp={{0x9}, {0x6a0, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xc}}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010102}, @TCA_RSVP_SRC={0x8, 0x3, @local}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_ACT={0x674, 0x6, [@m_gact={0xf4, 0xa, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0xfffffffa, 0x81}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xca9, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x222, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x630, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x311, 0x0, 0x4, 0x80000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xe98, 0x2}}]}, {0x67, 0x6, "f3b8a8268989679974f9b35373b3ea073b91a7477d142c1d6488cd0219f3d9616e039ebb9ea93baed6a048a8ccbda2df6158ec67eda14a939a9008f69780676547debe7f08129cfa43fd9e900e1889b28c727f9c7d6713672d4671b9f2c1a5c2740b3c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x1a4, 0x0, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x6, 0x7, 0x0, 0x9}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x8001, 0x10000000, 0xffff, 0xff}, 0x8}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x7, 0x5, 0x2, 0xfffffff9}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x718d}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x67fc}]}, {0xe8, 0x6, "e20ae41727321d74b752b62ff3138a9c03e3775a85846bf7f8903476d2d3ab136cd80c2d38ddab2eb60263a183bf0d1c3a365bd4623abb8e8b4c8df4f0259ea81bdd38085e0c14b3b071ad63d765e3c74c16c94e0a911241accf55c34572b3b947c0ffb22627bf01b26604713e4e1c4b64fc038eab2b1a77c7d98f6b9fb7c552650da45f3e535898b2bd4ef6cb6f5585d9aaf8dca689da2a5b126707e462b903725452b3d1a0ff34aac9b1881868c14e9be07d12d644e97618d85c7df6347dc1db1b2e00a6871d282828bdcd1887f2e6b47816a5168afe232e8fbd7118525d16404e94a2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xd8, 0x1c, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffbb45}, @TCA_IPT_INDEX={0x8}]}, {0x7b, 0x6, "77b643c3bfc26ed6346fe2ff0078fb2bb746ef98f26426c395e2b6c96487c546688183eabf05fde1315bea788cf8a3a7cb9f2134614945c0b7c7f74ae76bd7862cdacb6c0ea088ef29b908d6f1181e2b2a44eee274b7c76c9aca51a47ef4b8407b927471abdeec023f5cbe941084525fd66567edaae47a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x1a4, 0x4, 0x0, 0x0, {{0xf}, {0x74, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffff5b, 0x5, 0x20000000, 0xfffff425, 0x9d2f}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x4afa2589856c5aab, 0x1}}}}, @m_skbedit={0x15c, 0xc, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x9, 0x8, 0x8, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0xff, 0x2, 0x8, 0xfffffeff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x24e5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffe}]}, {0xc6, 0x6, "8384cae136a785de8dcdf83427b6b5c5dc4ce5ae2dd39912bf3ab8fad6f620d6b5781f20a692aec653fa57beb21ce046b4be9f84ce5114a3c0ea8f74d5a8499cd14864b2892569e86bc82d7ec650e22a9b84839bbb7f8b9a8e02f2b3e9508aa2b4b385e67ee33649d936c26bd7328496a4f6846c2799672c3839d7c9b4005f64830adf4de55fbe9f1a23fb8a0a6251918bb3564f006b5fbb7bb1add6e9f562e4ef38526c20212a9557e3b8c47fc577c1077c5058a3a0e7554664fc4bac104226d83e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @f_rsvp={{0x9}, {0x4cc, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x541, 0x9, 0x5}, {0xe14d, 0x8, 0xff}, 0x6c, 0x9, 0x88}}, @TCA_RSVP_ACT={0x4a8, 0x6, [@m_connmark={0x12c, 0xd, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x6, 0x3c, 0x4}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x44, 0x0, 0x3, 0x3, 0x10000}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x3, 0x1, 0x2}, 0x7cd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x364, 0x2, 0x4, 0x2}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x8, 0x80000001, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x5, 0x8, 0x600000, 0x80000000}, 0xa30}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x181, 0x3, 0x9, 0x7ff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x6e75, 0x8, 0x8, 0x8001}, 0x1}}]}, {0x19, 0x6, "fcaf2672468251829e01dcbb9af118243f4d9b6118"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x160, 0x20, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x570, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x22f1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x3, 0x3, 0x8302, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1e, 0x3, 0xff, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x1, 0x5, 0x0, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffff01, 0x10000, 0x2, 0xffc6, 0x10001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0xffffffffdfffffff, 0xffffffff, 0x57}}]}, {0xa3, 0x6, "c830f0cea2f698bbc4c0032592305ee513b50da7625d577a95f0ccfd1b17e5fac630ebda86abbd0f4c7aa341807f0941c6dd25a777490885c7976e1c08502e80734677209c54e38e1775524964442bf353f289553a6d979821d03827a5a2b867c73f364ffee97c3fc23e967b21d3f1b552b441acd039e6d90e270e4c90ced1b103ccaabb37f22355ac746751fd842e00a3fcd0393273e6b9262972f3420c9b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x120, 0x1b, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x0, 0x1, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbd27, 0x1, 0x0, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x7, 0x5, 0x52aad692}, 0x7}}]}, {0x99, 0x6, "8e4ed37f03124853dc3646fbb256c2eeaa7d1bc0ad3047cada6303ba12e3b26d412b7b9e42a75f0cac4c3b38a7bfda5d6a8ef064ea2bdf7a760e2ad507256502bebfd4af0feb53d767d872d1eb218ecd1c5db1820d4f598e5c7ea56fcff483f2c0a5ebdc2b031371663ead9199d2d4a32da711a68cf2f6396f593c45f560f667d30d70a397b9053095895baf2bb048f83977f8a96c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xf8, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'nl80211\x00'}, @TCA_DEF_DATA={0xe, 0x3, '/dev/vcsu\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x7f, 0x7, 0x10000, 0x8}}, @TCA_DEF_DATA={0xc, 0x3, 'nl80211\x00'}]}, {0x8a, 0x6, "72e4a1ae307e35b17c7fe04b92886b125e5d7998cb0dc7a6c20077e66f1fe39e0de87631ee9bb0f3e0eb4974f20bbcb67c541e08632e75bbd8aa2831dd98aadee1cd85262542cf2d81e5b76a5b87b34b005adc74cfb74110d257c47f93f26d76416d53ed4047f6860bef2c4b6789463e6af3114751047597a594fcf317c63f081b2895790db3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x56b10228fc23aa0}}}}]}]}}]}, 0x1410}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000001980)={0x0, 'dummy0\x00', {}, 0x5}) 2.815997895s ago: executing program 4 (id=8317): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "c5003f00"}) 2.707033963s ago: executing program 3 (id=8319): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) listen(0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x4}, 0x15, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 2.508008286s ago: executing program 2 (id=8320): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0xc018480d, &(0x7f0000000080)={0x2}) 2.507783632s ago: executing program 4 (id=8321): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.507667024s ago: executing program 1 (id=8322): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000140)=0x4, 0x4) 2.291016844s ago: executing program 1 (id=8323): unshare(0x42000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8, @ANYBLOB="0100f9cd0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300d000000008021100000008021100000150505050505000000f020000010001007206030303030303"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000180)={r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}], 0x1c) pwritev(r9, &(0x7f0000000380)=[{&(0x7f0000000280)='\v', 0x1}, {0x0}], 0x2, 0x0, 0x7f) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="310700000000000000002e000000080001007063690011000200303030303a30303a31302e30000000"], 0x38}, 0x1, 0x2}, 0x0) 1.411958073s ago: executing program 1 (id=8328): socket$unix(0x1, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r0, &(0x7f0000000100)=@abs, 0x6e) 1.247954132s ago: executing program 1 (id=8332): r0 = socket$kcm(0x10, 0x3, 0x10) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) 1.220135796s ago: executing program 1 (id=8333): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x0, 0x1}}, 0x7f, 0x0, &(0x7f00000001c0)="55594465e9e41aaad285ba0777897ff1d93b7891aa825e355aa0169885e1defdf8284bf96561605ad4b783af16f75ebea83384742ce8a997b7632bd8eed284c2a86258a8c5dc3e9906c542c1e54bc08c2f94228ebc8b38e95c303b856937a188fa7b6ce249de231d954d7e2a0a465975ded19dbcc5b52a9efe86cdaea49f1c"}) 970.535464ms ago: executing program 1 (id=8334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) 652.019926ms ago: executing program 0 (id=8335): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x7, 0x0, &(0x7f0000000080)) 572.385111ms ago: executing program 0 (id=8336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x209}]}, 0x2c}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r6, &(0x7f0000000240)="2788d23fabf2379a80db7b95137829a54c00c86991ae403e4013ae40f490e35ec02fe91b46d7501dbbbe1d051fc5c888dc3e1afb7c6e2693e8faa713e91693a1071192cde6f37bc37c4cc7b72048a84948d40f5888675505cb", 0x59, 0x4000c080, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001640)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x5}, 0x7}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="25090679f175bcc1557e83e9b135037effb88888d0f27682fc474c8c053322110967aba86d06a3b41d27334bf907dc71b46258a439e65f735477a162eb787e0367f30f95d2a72792761546120105fc41ee0e91b347eb9b20218f167b39514ff528fa718882aa47a00d3788f7da74d869c9de150b6d1533d1abe5203dc12bdf9a822a4c72b4434c4fa81f91b93c3b744f117455103e889e246977133fe700dcc909821b7dfd8186032543ea262b41acfe9c0ddd76da6b9497dba43eb1f17396a58e33e1"], 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00', 0x0, 0x20}}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=r8], &(0x7f0000000140)='GPL\x00', 0x0, 0xa2, &(0x7f00000004c0)=""/162, 0x41100, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r11, 0xff) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @fastopen={0x22, 0x6, "c213e99d"}]}}}}}}}}, 0x0) 371.456708ms ago: executing program 0 (id=8337): unshare(0x20000400) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 354.98115ms ago: executing program 4 (id=8338): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgsnd(0x0, 0x0, 0x5, 0x0) 244.398604ms ago: executing program 0 (id=8339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) fgetxattr(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) 80.009346ms ago: executing program 0 (id=8340): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x96, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=8341): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8000400000002005b"], 0x9) kernel console output (not intermixed with test programs): 9] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.249963][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.262582][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.273715][T23300] Bluetooth: MGMT ver 1.23 [ 780.279117][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.294102][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.327763][T23129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.360770][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.373560][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.383740][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.396169][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.407290][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.422548][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.452453][T23129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.500784][T23096] veth0_macvtap: entered promiscuous mode [ 780.623078][T23129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.653528][T23129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.662369][T23129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.678904][T23129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.698728][T23096] veth1_macvtap: entered promiscuous mode [ 780.719180][T23224] veth0_vlan: entered promiscuous mode [ 780.905575][T23224] veth1_vlan: entered promiscuous mode [ 780.934099][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.960733][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.986722][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.002817][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.013455][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.028254][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.038827][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.053821][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.066225][T23096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.085531][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.106566][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.122706][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.137171][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.145095][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.157568][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.174004][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.194831][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.206857][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.227442][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.252623][T23096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.333376][T23096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.347268][T23096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.373405][T23096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.386789][T23096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.419892][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.483436][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.533779][T23224] veth0_macvtap: entered promiscuous mode [ 781.733430][T23224] veth1_macvtap: entered promiscuous mode [ 781.742954][T23308] fuse: Unknown parameter 'us1ãrÈNö^Éer_id' [ 781.778425][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.806692][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.820868][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.864514][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.908097][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.958734][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.972337][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.983952][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.995330][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.012881][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.024411][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.039158][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.058540][T23224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.102501][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.120620][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.134134][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.152393][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.165822][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.182955][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.203667][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.221246][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.234664][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.250683][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.282495][T23224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.338048][T23224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.367508][T23224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.382064][T23224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.400902][T23224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.443133][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.547348][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.821314][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.880777][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.071818][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.096558][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.313557][T23319] syz.4.7332: attempt to access beyond end of device [ 783.313557][T23319] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 783.391107][T23319] SQUASHFS error: Failed to read block 0x0: -5 [ 783.418738][T23319] unable to read squashfs_super_block [ 785.971622][T23399] syz.1.7366: attempt to access beyond end of device [ 785.971622][T23399] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 786.011918][T23399] SQUASHFS error: Failed to read block 0x0: -5 [ 786.036136][T23399] unable to read squashfs_super_block [ 786.239254][T13634] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 786.289506][T17994] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 786.429559][T13634] usb 4-1: Using ep0 maxpacket: 8 [ 786.460892][T13634] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 786.472386][T13634] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 786.482930][T13634] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 786.498195][T13634] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.515834][T17994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.528010][T17994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.538210][T13634] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 786.547945][T17994] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 786.557264][T13634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.567540][T17994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.609601][T17994] usb 1-1: config 0 descriptor?? [ 786.844575][T12214] Bluetooth: hci6: unexpected event 0x06 length: 23 > 3 [ 786.864418][T23427] input: syz0 as /devices/virtual/input/input22 [ 787.064634][T17994] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 787.107105][T17994] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 787.134149][T17994] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0026/input/input23 [ 787.202584][T17994] cm6533_jd 0003:0D8C:0022.0026: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 787.279232][T17994] usb 1-1: USB disconnect, device number 76 [ 787.402896][T13634] usb 4-1: usb_control_msg returned -71 [ 787.408580][T13634] usbtmc 4-1:16.0: can't read capabilities [ 787.497906][T13634] usb 4-1: USB disconnect, device number 67 [ 788.221636][T23449] fuse: Unknown parameter 'us1ãrÈNö^Éer_id' [ 789.058904][T23464] syz.1.7388: attempt to access beyond end of device [ 789.058904][T23464] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 789.073224][T23464] SQUASHFS error: Failed to read block 0x0: -5 [ 789.120025][T23464] unable to read squashfs_super_block [ 789.249198][T17999] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 789.446219][T17999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.468799][T17999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.511044][T17999] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 789.553359][T17999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.594411][T17999] usb 4-1: config 0 descriptor?? [ 790.067335][T17999] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 790.077849][T17999] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 790.104325][T17999] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0027/input/input24 [ 790.184686][T17999] cm6533_jd 0003:0D8C:0022.0027: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 790.273495][T17994] usb 4-1: USB disconnect, device number 68 [ 791.637969][T23521] syz.2.7409: attempt to access beyond end of device [ 791.637969][T23521] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 791.664591][T23521] SQUASHFS error: Failed to read block 0x0: -5 [ 791.672518][T23521] unable to read squashfs_super_block [ 791.890272][ T8] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 792.112283][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.158799][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.200331][ T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 792.239847][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.312236][ T8] usb 2-1: config 0 descriptor?? [ 792.762375][ T8] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 792.794793][ T8] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 792.808175][ T8] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0028/input/input25 [ 792.877920][ T8] cm6533_jd 0003:0D8C:0022.0028: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 792.956974][ T8] usb 2-1: USB disconnect, device number 73 [ 794.063299][T23593] syz.1.7438: attempt to access beyond end of device [ 794.063299][T23593] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 794.076992][T23593] SQUASHFS error: Failed to read block 0x0: -5 [ 794.085598][T23593] unable to read squashfs_super_block [ 794.229343][ T8] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 794.450798][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.482110][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.531737][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 794.565775][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.618011][ T8] usb 4-1: config 0 descriptor?? [ 795.052201][ T8] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 795.082492][ T8] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 795.129711][ T8] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0029/input/input26 [ 795.200833][ T8] cm6533_jd 0003:0D8C:0022.0029: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 795.278342][ T8] usb 4-1: USB disconnect, device number 69 [ 796.431514][T23653] syz.1.7465: attempt to access beyond end of device [ 796.431514][T23653] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 796.467600][T23653] SQUASHFS error: Failed to read block 0x0: -5 [ 796.497823][T23653] unable to read squashfs_super_block [ 796.567678][ C1] net_ratelimit: 4 callbacks suppressed [ 796.567699][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 796.789217][ T5141] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 797.013407][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.038015][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.058045][ T5141] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 797.083123][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.110809][ T5141] usb 3-1: config 0 descriptor?? [ 797.555558][ T5141] cm6533_jd 0003:0D8C:0022.002A: unknown main item tag 0x0 [ 797.607098][ T5141] cm6533_jd 0003:0D8C:0022.002A: unknown main item tag 0x0 [ 797.667390][ T5141] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.002A/input/input27 [ 797.692046][ T5141] cm6533_jd 0003:0D8C:0022.002A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 797.802288][ T5116] usb 3-1: USB disconnect, device number 77 [ 799.046759][T23749] syz.2.7503: attempt to access beyond end of device [ 799.046759][T23749] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 799.073722][T23749] SQUASHFS error: Failed to read block 0x0: -5 [ 799.110085][T23749] unable to read squashfs_super_block [ 801.961175][T23822] syz.0.7533: attempt to access beyond end of device [ 801.961175][T23822] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 802.002535][T23822] SQUASHFS error: Failed to read block 0x0: -5 [ 802.058408][T23822] unable to read squashfs_super_block [ 802.291644][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 804.126533][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 804.473378][T23884] syz.0.7557: attempt to access beyond end of device [ 804.473378][T23884] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 804.574921][T23884] SQUASHFS error: Failed to read block 0x0: -5 [ 804.587869][T23884] unable to read squashfs_super_block [ 806.725941][T23957] syz.2.7587: attempt to access beyond end of device [ 806.725941][T23957] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 806.758282][T23957] SQUASHFS error: Failed to read block 0x0: -5 [ 806.765839][T23957] unable to read squashfs_super_block [ 809.065707][T24019] syz.1.7611: attempt to access beyond end of device [ 809.065707][T24019] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 809.095762][T24019] SQUASHFS error: Failed to read block 0x0: -5 [ 809.144301][T24019] unable to read squashfs_super_block [ 809.162378][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.176598][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.270492][T24081] syz.4.7634: attempt to access beyond end of device [ 812.270492][T24081] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 812.313547][T24081] SQUASHFS error: Failed to read block 0x0: -5 [ 812.328960][T24081] unable to read squashfs_super_block [ 814.198468][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 814.208868][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 814.219456][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 814.231260][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 814.249644][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 814.257100][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 814.487251][T24170] syz.3.7667: attempt to access beyond end of device [ 814.487251][T24170] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 814.508616][T24170] SQUASHFS error: Failed to read block 0x0: -5 [ 814.531389][T24170] unable to read squashfs_super_block [ 814.623540][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.793534][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.966465][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.126121][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.209170][T13634] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 815.427027][T13634] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 815.480964][T13634] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 815.530366][T13634] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 815.591510][T13634] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 815.615699][T13634] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 815.629438][T13634] usb 1-1: Product: syz [ 815.633795][T13634] usb 1-1: Manufacturer: syz [ 815.660153][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 815.665396][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 815.706633][T13634] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 815.868666][T13634] usb 1-1: USB disconnect, device number 77 [ 815.881412][ T65] bridge_slave_1: left allmulticast mode [ 815.890094][ T65] bridge_slave_1: left promiscuous mode [ 815.914855][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.968032][ T65] bridge_slave_0: left allmulticast mode [ 815.998378][ T65] bridge_slave_0: left promiscuous mode [ 816.008259][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.354516][ T5104] Bluetooth: hci4: command tx timeout [ 816.493273][T13634] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 816.695474][T13634] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 816.704462][T13634] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 816.729222][T13634] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.771186][T13634] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 816.789049][T13634] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 816.807405][T13634] usb 1-1: Product: syz [ 816.811999][T13634] usb 1-1: Manufacturer: syz [ 816.834535][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 816.845518][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 816.856592][T13634] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 816.896487][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.934834][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.978917][ T65] bond0 (unregistering): Released all slaves [ 817.123924][T24160] chnl_net:caif_netlink_parms(): no params data found [ 817.623325][T24160] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.642372][T24160] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.662948][T24160] bridge_slave_0: entered allmulticast mode [ 817.682303][T24160] bridge_slave_0: entered promiscuous mode [ 817.759210][ T65] hsr_slave_0: left promiscuous mode [ 817.778949][ T65] hsr_slave_1: left promiscuous mode [ 817.793294][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.803836][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.812913][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.820879][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.870333][ T65] veth1_macvtap: left promiscuous mode [ 817.876090][ T65] veth0_macvtap: left promiscuous mode [ 817.893903][ T65] veth1_vlan: left promiscuous mode [ 817.909295][ T65] veth0_vlan: left promiscuous mode [ 818.063061][T24216] syz.3.7684: attempt to access beyond end of device [ 818.063061][T24216] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 818.080406][T24216] SQUASHFS error: Failed to read block 0x0: -5 [ 818.141875][T24216] unable to read squashfs_super_block [ 818.430418][ T5104] Bluetooth: hci4: command tx timeout [ 818.607244][T13634] usb 1-1: USB disconnect, device number 78 [ 819.341423][ T65] team0 (unregistering): Port device team_slave_1 removed [ 819.415278][ T65] team0 (unregistering): Port device team_slave_0 removed [ 820.059154][T13634] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 820.182237][T24160] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.196769][T24160] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.206115][T24160] bridge_slave_1: entered allmulticast mode [ 820.213676][T24160] bridge_slave_1: entered promiscuous mode [ 820.268756][T13634] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 820.290890][T13634] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 820.302612][T13634] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 820.346398][T13634] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 820.358629][T24160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.376479][T13634] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 820.392396][T24160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.407811][T13634] usb 1-1: Product: syz [ 820.412313][T13634] usb 1-1: Manufacturer: syz [ 820.422790][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 820.428046][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 820.443690][T13634] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 820.509245][ T5104] Bluetooth: hci4: command tx timeout [ 820.584237][T24160] team0: Port device team_slave_0 added [ 820.613852][T24160] team0: Port device team_slave_1 added [ 820.650731][T13634] usb 1-1: USB disconnect, device number 79 [ 820.747762][T24160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.765039][T24160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.803899][T24160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.850166][T24160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.867505][T24160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.955033][T24160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.006647][T24285] syz.2.7711: attempt to access beyond end of device [ 821.006647][T24285] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 821.032620][T24285] SQUASHFS error: Failed to read block 0x0: -5 [ 821.042795][T24285] unable to read squashfs_super_block [ 821.239223][T13634] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 821.294427][T24160] hsr_slave_0: entered promiscuous mode [ 821.319425][T24160] hsr_slave_1: entered promiscuous mode [ 821.349363][T24160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 821.389063][T24160] Cannot create hsr debugfs directory [ 821.451023][T13634] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 821.489646][T13634] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 821.527644][T13634] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 821.577814][T13634] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 821.588104][T13634] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 821.615602][T13634] usb 1-1: Product: syz [ 821.631630][T13634] usb 1-1: Manufacturer: syz [ 821.673621][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 821.687625][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 821.710189][T13634] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 822.501467][T24160] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 822.554846][T24160] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 822.587036][T24160] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 822.594530][ T5104] Bluetooth: hci4: command tx timeout [ 822.710508][T24160] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 822.933820][T24160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.976908][T24160] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.005695][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.012937][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.052154][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.059363][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.070940][T13634] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 823.144144][T24160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 823.286054][T13634] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 823.321266][T13634] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 823.344951][T13634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.377103][T13634] usb 5-1: config 0 descriptor?? [ 823.452370][T13634] usb 1-1: USB disconnect, device number 80 [ 823.542676][T24160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.691138][T24160] veth0_vlan: entered promiscuous mode [ 823.747503][T24160] veth1_vlan: entered promiscuous mode [ 823.823268][T24160] veth0_macvtap: entered promiscuous mode [ 823.835614][T24160] veth1_macvtap: entered promiscuous mode [ 823.891341][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.912860][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.939340][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.956603][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.983006][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.995573][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.006051][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.017288][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.028150][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.040590][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.057977][T24160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.066304][T24305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7717'. [ 824.091255][T24305] syz_tun: entered promiscuous mode [ 824.098495][T24305] macvtap1: entered promiscuous mode [ 824.108314][T24305] macvtap1: entered allmulticast mode [ 824.119064][T24305] syz_tun: entered allmulticast mode [ 824.126414][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7717'. [ 824.157431][ T29] audit: type=1326 audit(1721847477.508:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24306 comm="syz.2.7718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd367775f19 code=0x0 [ 824.159714][T24308] syz_tun: left allmulticast mode [ 824.219792][T24308] syz_tun: left promiscuous mode [ 824.227821][T24308] macvtap1: left promiscuous mode [ 824.235223][T24308] macvtap1: left allmulticast mode [ 824.271753][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.292614][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.325888][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.348333][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.369301][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.398846][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.438010][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.468737][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.496520][T24160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.537969][T24160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.559915][T24160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.600385][T24160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.618503][T24160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.637657][T24160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.655772][T24160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.734305][T24324] syz.0.7722: attempt to access beyond end of device [ 824.734305][T24324] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 824.851272][T24324] SQUASHFS error: Failed to read block 0x0: -5 [ 824.871943][T24324] unable to read squashfs_super_block [ 824.875464][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.925539][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.022407][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.059163][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.160217][ T25] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 825.361634][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 825.383033][ T25] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 825.406011][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 825.451439][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 825.522843][T17999] usb 5-1: USB disconnect, device number 76 [ 825.536741][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 825.582754][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 825.630046][ T25] usb 4-1: Product: syz [ 825.648754][ T25] usb 4-1: Manufacturer: syz [ 825.695240][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 825.712887][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 825.726439][ T25] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 825.902111][ T25] usb 4-1: USB disconnect, device number 70 [ 826.349680][ T5104] Bluetooth: hci2: command tx timeout [ 826.469115][ T25] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 826.671355][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 826.698172][ T25] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 826.725925][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 826.752642][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 826.811396][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 826.838001][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 826.867392][ T25] usb 4-1: Product: syz [ 826.877197][ T25] usb 4-1: Manufacturer: syz [ 826.908224][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 826.927893][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 826.943578][ T25] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 828.696102][T17994] usb 4-1: USB disconnect, device number 71 [ 829.070253][ T25] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 829.279187][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 829.286511][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 829.307295][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 829.323214][T24371] syz.1.7739: attempt to access beyond end of device [ 829.323214][T24371] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 829.339167][T17979] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 829.346518][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 829.359594][T24371] SQUASHFS error: Failed to read block 0x0: -5 [ 829.366007][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 829.379748][T24371] unable to read squashfs_super_block [ 829.391861][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 829.421347][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.551370][T17979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 829.579651][T17979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 829.593022][T17979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 829.604601][T17979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 829.617875][T17979] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 829.632608][T17979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.678361][T17979] usb 4-1: config 0 descriptor?? [ 829.685974][T24366] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 829.702563][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 829.733473][ T25] usbtmc 1-1:16.0: can't read capabilities [ 829.923516][T24375] x_tables: ip6_tables: NFQUEUE.3 target: invalid size 8 (kernel) != (user) 0 [ 829.996028][ T25] usb 1-1: USB disconnect, device number 81 [ 830.114198][T17979] plantronics 0003:047F:FFFF.002B: unknown main item tag 0xd [ 830.135697][T17979] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 830.151294][T17979] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 830.476040][T13634] usb 4-1: USB disconnect, device number 72 [ 831.374571][ T25] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 831.584906][ T25] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 831.594181][ T25] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 831.604662][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 831.614353][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.649005][ T25] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 831.658406][ T25] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 831.668789][ T25] usb 1-1: Product: syz [ 831.676660][ T25] usb 1-1: Manufacturer: syz [ 831.687706][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 831.698783][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 831.706217][ T25] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 831.908206][ T5147] usb 1-1: USB disconnect, device number 82 [ 832.514436][ T5147] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 832.711695][ T5147] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 832.733046][ T5147] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 832.743517][ T5147] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 832.752732][ T5147] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.783475][ T5147] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 832.801837][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 832.818907][ T5147] usb 1-1: Product: syz [ 832.832066][ T5147] usb 1-1: Manufacturer: syz [ 832.844895][ T5147] cdc_wdm 1-1:1.0: skipping garbage [ 832.861415][ T5147] cdc_wdm 1-1:1.0: skipping garbage [ 832.866690][ T5147] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 832.885083][T24414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7756'. [ 833.359252][T17979] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 833.420182][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7761'. [ 833.573447][T17979] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 833.592690][T17979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 833.605802][T17979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 833.623390][T17979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 833.643360][T17979] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 833.662362][T17979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.675789][T17979] usb 2-1: config 0 descriptor?? [ 833.681660][T24418] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 833.715942][T24435] syz.3.7763: attempt to access beyond end of device [ 833.715942][T24435] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 833.734590][T24435] SQUASHFS error: Failed to read block 0x0: -5 [ 833.744561][T24435] unable to read squashfs_super_block [ 834.097760][T17979] plantronics 0003:047F:FFFF.002C: unknown main item tag 0xd [ 834.129458][T17979] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 834.164377][T17979] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 834.325774][T17979] usb 2-1: USB disconnect, device number 74 [ 834.534617][T24452] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7770'. [ 834.613974][T13634] usb 1-1: USB disconnect, device number 83 [ 834.782156][ C1] eth0: bad gso: type: 1, size: 1408 [ 835.619102][T13634] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 835.788881][T24500] syz.1.7792: attempt to access beyond end of device [ 835.788881][T24500] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 835.803359][T24500] SQUASHFS error: Failed to read block 0x0: -5 [ 835.814067][T24500] unable to read squashfs_super_block [ 835.819158][ T5147] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 835.843461][T13634] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 835.853615][T13634] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 835.873720][T13634] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 835.883411][T13634] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.902985][T13634] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 835.912240][T13634] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 835.920258][T13634] usb 1-1: Product: syz [ 835.924464][T13634] usb 1-1: Manufacturer: syz [ 835.933138][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 835.941613][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 835.960338][T13634] cdc_wdm 1-1:1.0: skipping garbage [ 835.982494][T13634] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 836.049063][ T5147] usb 4-1: Using ep0 maxpacket: 8 [ 836.059957][ T5147] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 836.076788][ T5147] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 836.088264][ T5147] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 836.107381][ T5147] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.127483][ T5147] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 836.137722][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.161508][T17994] usb 1-1: USB disconnect, device number 84 [ 836.459683][ T5147] usb 4-1: GET_CAPABILITIES returned 0 [ 836.471047][ T5147] usbtmc 4-1:16.0: can't read capabilities [ 836.681853][T17979] usb 4-1: USB disconnect, device number 73 [ 836.759452][T17994] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 836.981019][T17994] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 837.028942][T17994] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 837.063993][T17994] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 837.089104][T17994] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.139145][T17994] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 837.162853][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 837.176507][T17994] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 837.207009][T17994] usb 1-1: Product: syz [ 837.241605][T17994] usb 1-1: Manufacturer: syz [ 837.305021][T17994] cdc_wdm 1-1:1.0: skipping garbage [ 837.333357][T17994] cdc_wdm 1-1:1.0: skipping garbage [ 837.354225][T17994] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 838.551779][T24554] syz.3.7812: attempt to access beyond end of device [ 838.551779][T24554] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 838.566248][T24554] SQUASHFS error: Failed to read block 0x0: -5 [ 838.572817][T24554] unable to read squashfs_super_block [ 838.689107][T17979] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 838.879892][T17979] usb 2-1: Using ep0 maxpacket: 8 [ 838.910805][T17979] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 838.924093][T17979] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 838.945585][T17979] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 838.970179][T17979] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.036970][T17979] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 839.066383][T17979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.071771][T17994] usb 1-1: USB disconnect, device number 85 [ 839.325987][T17979] usb 2-1: GET_CAPABILITIES returned 0 [ 839.386941][T17979] usbtmc 2-1:16.0: can't read capabilities [ 839.540133][T17979] usb 2-1: USB disconnect, device number 75 [ 840.349805][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.729903][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.856154][T12214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 840.875688][T12214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 840.884646][T12214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 840.896412][T12214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 840.914356][ T25] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 840.926122][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.943781][T12214] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 840.954289][T12214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 841.126020][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.142460][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 841.172830][ T25] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 841.219191][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 841.229884][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 841.265145][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 841.310582][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 841.331860][ T25] usb 4-1: Product: syz [ 841.336074][ T25] usb 4-1: Manufacturer: syz [ 841.390876][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 841.413630][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 841.423968][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 841.433237][ T25] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 841.594234][ T65] bridge_slave_1: left allmulticast mode [ 841.617428][ T65] bridge_slave_1: left promiscuous mode [ 841.618123][ T5143] usb 4-1: USB disconnect, device number 74 [ 841.639769][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.678203][T24614] syz.1.7835: attempt to access beyond end of device [ 841.678203][T24614] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 841.678753][ T65] bridge_slave_0: left allmulticast mode [ 841.692361][T24614] SQUASHFS error: Failed to read block 0x0: -5 [ 841.714155][T24614] unable to read squashfs_super_block [ 841.714658][ T65] bridge_slave_0: left promiscuous mode [ 841.720175][ T8] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 841.728900][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.929255][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 841.949176][T12214] Bluetooth: hci0: command 0x0406 tx timeout [ 841.975123][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 841.996243][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 842.023362][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 842.034103][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.047765][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 842.057231][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.215155][ T5143] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 842.295615][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 842.301392][ T8] usbtmc 5-1:16.0: can't read capabilities [ 842.417633][ T5143] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 842.438007][ T5143] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 842.449201][ T5143] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 842.460233][ T5143] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 842.486679][ T5143] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 842.504373][T17979] usb 5-1: USB disconnect, device number 77 [ 842.538318][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 842.555546][ T5143] usb 4-1: Product: syz [ 842.561399][ T5143] usb 4-1: Manufacturer: syz [ 842.573306][ T5143] cdc_wdm 4-1:1.0: skipping garbage [ 842.578537][ T5143] cdc_wdm 4-1:1.0: skipping garbage [ 842.584908][ T5143] cdc_wdm 4-1:1.0: skipping garbage [ 842.590690][ T5143] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 842.635128][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.648878][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.673218][ T65] bond0 (unregistering): Released all slaves [ 842.783701][T24589] chnl_net:caif_netlink_parms(): no params data found [ 842.989478][ T5104] Bluetooth: hci3: command tx timeout [ 843.049109][T24589] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.079156][T24589] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.089437][T24589] bridge_slave_0: entered allmulticast mode [ 843.104349][T24589] bridge_slave_0: entered promiscuous mode [ 843.135285][T24589] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.144480][T24589] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.170680][T24589] bridge_slave_1: entered allmulticast mode [ 843.192916][T24589] bridge_slave_1: entered promiscuous mode [ 843.413195][T24589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.438473][ T65] hsr_slave_0: left promiscuous mode [ 843.480704][ T65] hsr_slave_1: left promiscuous mode [ 843.487901][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.496171][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.507081][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.515025][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.542432][ T65] veth1_macvtap: left promiscuous mode [ 843.549819][ T65] veth0_macvtap: left promiscuous mode [ 843.555564][ T65] veth1_vlan: left promiscuous mode [ 843.561556][ T65] veth0_vlan: left promiscuous mode [ 844.189145][ T25] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 844.355290][ T65] team0 (unregistering): Port device team_slave_1 removed [ 844.367092][T17994] usb 4-1: USB disconnect, device number 75 [ 844.381740][T24659] syz.0.7853: attempt to access beyond end of device [ 844.381740][T24659] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 844.403510][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 844.420124][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 844.448858][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 844.466821][T24659] SQUASHFS error: Failed to read block 0x0: -5 [ 844.494807][ T65] team0 (unregistering): Port device team_slave_0 removed [ 844.512594][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 844.524782][T24659] unable to read squashfs_super_block [ 844.550574][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.575839][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 844.585844][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.823516][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 844.867613][ T25] usbtmc 2-1:16.0: can't read capabilities [ 845.035670][ T8] usb 2-1: USB disconnect, device number 76 [ 845.070710][T12214] Bluetooth: hci3: command tx timeout [ 845.508041][T24589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.656620][T24589] team0: Port device team_slave_0 added [ 845.714392][T24589] team0: Port device team_slave_1 added [ 845.832929][T24589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.870839][T24589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.927339][T24589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.957922][T24589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.966126][T24589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.054563][T24589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.225966][T24589] hsr_slave_0: entered promiscuous mode [ 846.254683][T24589] hsr_slave_1: entered promiscuous mode [ 846.268757][T24589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.286285][T24589] Cannot create hsr debugfs directory [ 846.430745][ T5143] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 846.624122][ T5143] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 846.639324][ T5143] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 846.657706][ T5143] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 846.667963][ T5143] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 846.706894][ T5143] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 846.726930][ T5143] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 846.746805][ T5143] usb 5-1: Product: syz [ 846.754212][ T5143] usb 5-1: Manufacturer: syz [ 846.799601][ T8] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 846.807997][ T5143] cdc_wdm 5-1:1.0: skipping garbage [ 846.818660][ T5143] cdc_wdm 5-1:1.0: skipping garbage [ 846.824620][ T5143] cdc_wdm 5-1:1.0: skipping garbage [ 846.838550][ T5143] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 846.988468][T24589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 847.003454][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 847.006152][T13634] usb 5-1: USB disconnect, device number 78 [ 847.010090][T24589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 847.037341][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 847.052826][T24589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 847.061475][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 847.071969][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 847.079326][T24589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 847.082678][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.101919][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 847.116228][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.149232][T12214] Bluetooth: hci3: command 0x040f tx timeout [ 847.213079][T24589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.247316][T24589] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.263204][T17994] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.270424][T17994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.291298][T17994] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.298463][T17994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.351913][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 847.357488][ T8] usbtmc 2-1:16.0: can't read capabilities [ 847.508769][T24589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.565312][T24589] veth0_vlan: entered promiscuous mode [ 847.566899][ T5143] usb 2-1: USB disconnect, device number 77 [ 847.593422][T24589] veth1_vlan: entered promiscuous mode [ 847.599255][T13634] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 847.637987][T24589] veth0_macvtap: entered promiscuous mode [ 847.661710][T24589] veth1_macvtap: entered promiscuous mode [ 847.711336][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.735229][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.752011][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.762798][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.774042][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.784714][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.794764][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.805350][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.816647][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.818132][T13634] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 847.830496][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.848235][T24589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.866211][T13634] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 847.886820][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.906684][T24723] syz.0.7878: attempt to access beyond end of device [ 847.906684][T24723] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 847.910352][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.920472][T13634] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 847.936514][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.956144][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.956431][T24723] SQUASHFS error: Failed to read block 0x0: -5 [ 847.966792][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.976660][T13634] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 847.990763][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.011067][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.023967][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.047096][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.065441][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.066560][T24723] unable to read squashfs_super_block [ 848.085546][T13634] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 848.090015][T24589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.095290][T13634] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 848.136767][T13634] usb 5-1: Product: syz [ 848.143217][T13634] usb 5-1: Manufacturer: syz [ 848.180456][T13634] cdc_wdm 5-1:1.0: skipping garbage [ 848.187134][T13634] cdc_wdm 5-1:1.0: skipping garbage [ 848.188827][T24589] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.205649][T13634] cdc_wdm 5-1:1.0: skipping garbage [ 848.212656][T13634] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 848.243252][T24589] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.267403][T24589] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.285727][T24589] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.421558][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.460928][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.507704][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.516951][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.229135][ T5104] Bluetooth: hci3: command 0x040f tx timeout [ 849.973114][ T8] usb 5-1: USB disconnect, device number 79 [ 851.309631][ T5104] Bluetooth: hci3: command 0x040f tx timeout [ 851.462333][T24795] syz.3.7905: attempt to access beyond end of device [ 851.462333][T24795] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 851.514905][T24795] SQUASHFS error: Failed to read block 0x0: -5 [ 851.528456][T24795] unable to read squashfs_super_block [ 851.879177][ T5116] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 852.091173][ T5116] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 852.116445][ T5116] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 852.145173][ T5116] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 852.175382][ T5116] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 852.212590][ T5116] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 852.235352][ T5116] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 852.258746][ T5116] usb 3-1: Product: syz [ 852.276534][ T5116] usb 3-1: Manufacturer: syz [ 852.302560][ T5116] cdc_wdm 3-1:1.0: skipping garbage [ 852.307811][ T5116] cdc_wdm 3-1:1.0: skipping garbage [ 852.345987][ T5116] cdc_wdm 3-1:1.0: skipping garbage [ 852.365837][ T5116] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 852.512653][ T5116] usb 3-1: USB disconnect, device number 78 [ 853.139218][ T5116] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 853.361286][ T5116] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 853.374696][ T5116] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 853.394673][ T5116] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 853.406087][ T5116] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 853.422829][ T5116] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 853.432432][ T5116] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 853.443176][ T5116] usb 3-1: Product: syz [ 853.447532][ T5116] usb 3-1: Manufacturer: syz [ 853.498101][ T5116] cdc_wdm 3-1:1.0: skipping garbage [ 853.513860][ T5116] cdc_wdm 3-1:1.0: skipping garbage [ 853.530492][ T5116] cdc_wdm 3-1:1.0: skipping garbage [ 853.547734][ T5116] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 853.991903][T24860] syz.0.7930: attempt to access beyond end of device [ 853.991903][T24860] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 854.007670][T24860] SQUASHFS error: Failed to read block 0x0: -5 [ 854.027095][T24860] unable to read squashfs_super_block [ 855.079100][T17999] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 855.271946][T17999] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 855.297604][T17979] usb 3-1: USB disconnect, device number 79 [ 855.323397][T17999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 855.347167][T17999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 855.395474][T17999] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 855.426008][T17999] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 855.464805][T17999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.498723][T17999] usb 4-1: config 0 descriptor?? [ 855.528237][T24890] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 855.952426][T17999] usbhid 4-1:0.0: can't add hid device: -71 [ 855.986223][T17999] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 856.018144][T17999] usb 4-1: USB disconnect, device number 76 [ 856.272353][T24928] syz.2.7957: attempt to access beyond end of device [ 856.272353][T24928] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 856.301093][T24928] SQUASHFS error: Failed to read block 0x0: -5 [ 856.319544][T24928] unable to read squashfs_super_block [ 856.629113][ T5116] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 856.842915][ T5116] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 856.871885][ T5116] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 856.899520][ T5116] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.939673][ T5116] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 856.980408][ T5116] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 857.025211][ T5116] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 857.040569][ T5116] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 857.048713][ T5116] usb 5-1: Product: syz [ 857.054075][ T5116] usb 5-1: Manufacturer: syz [ 857.127212][ T5116] cdc_wdm 5-1:1.0: skipping garbage [ 857.146552][ T5116] cdc_wdm 5-1:1.0: skipping garbage [ 857.162757][ T5116] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 857.370746][T17994] usb 5-1: USB disconnect, device number 80 [ 857.598043][T12214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 857.623614][T12214] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 857.634274][T12214] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 857.644376][T12214] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 857.660338][T12214] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 857.669229][T12214] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 857.979204][T17994] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 858.078020][T24961] chnl_net:caif_netlink_parms(): no params data found [ 858.182337][T17994] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 858.194522][T17994] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 858.215499][T17994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 858.226014][T17994] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 858.237875][T17994] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 858.252416][T17994] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 858.261879][T17994] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 858.270276][T17994] usb 5-1: Product: syz [ 858.274733][T17994] usb 5-1: Manufacturer: syz [ 858.276514][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.304382][T17994] cdc_wdm 5-1:1.0: skipping garbage [ 858.325491][T17994] cdc_wdm 5-1:1.0: skipping garbage [ 858.345050][T17994] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 858.357803][T24961] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.381191][T24961] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.388694][T24961] bridge_slave_0: entered allmulticast mode [ 858.404263][T24961] bridge_slave_0: entered promiscuous mode [ 858.503917][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.536473][T24961] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.559439][T24961] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.568212][T24961] bridge_slave_1: entered allmulticast mode [ 858.600235][T24961] bridge_slave_1: entered promiscuous mode [ 858.619336][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 858.751945][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.843280][T24961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.862037][T24961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.897213][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.002728][T24961] team0: Port device team_slave_0 added [ 859.027593][T24961] team0: Port device team_slave_1 added [ 859.084338][T24961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.096733][T24961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.125398][T24961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.167516][T24961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.177850][T24961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.204538][T24961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.344764][T24961] hsr_slave_0: entered promiscuous mode [ 859.355096][T24961] hsr_slave_1: entered promiscuous mode [ 859.368877][T24961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 859.381092][T24961] Cannot create hsr debugfs directory [ 859.389467][ T65] bridge_slave_1: left allmulticast mode [ 859.416483][ T65] bridge_slave_1: left promiscuous mode [ 859.434665][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.450205][ T65] bridge_slave_0: left allmulticast mode [ 859.456697][ T65] bridge_slave_0: left promiscuous mode [ 859.463446][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.709662][ T5104] Bluetooth: hci5: command tx timeout [ 859.927131][T24995] syz.1.7982: attempt to access beyond end of device [ 859.927131][T24995] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 859.942407][T24995] SQUASHFS error: Failed to read block 0x0: -5 [ 859.948831][T24995] unable to read squashfs_super_block [ 860.083143][T17994] usb 5-1: USB disconnect, device number 81 [ 860.141617][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.171668][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.208623][ T65] bond0 (unregistering): Released all slaves [ 861.040181][ T65] hsr_slave_0: left promiscuous mode [ 861.079886][ T65] hsr_slave_1: left promiscuous mode [ 861.116027][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.134032][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.176374][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.199882][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.282141][ T65] veth1_macvtap: left promiscuous mode [ 861.295468][ T65] veth0_macvtap: left promiscuous mode [ 861.301764][ T65] veth1_vlan: left promiscuous mode [ 861.307895][ T65] veth0_vlan: left promiscuous mode [ 861.419229][T17979] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 861.623067][T17979] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 861.650362][T17979] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 861.668297][T17979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 861.687413][T17979] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 861.706598][T17979] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 861.738139][T17979] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 861.752070][T17979] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 861.765157][T17979] usb 5-1: Product: syz [ 861.778222][T17979] usb 5-1: Manufacturer: syz [ 861.797029][ T5104] Bluetooth: hci5: command tx timeout [ 861.808654][T17979] cdc_wdm 5-1:1.0: skipping garbage [ 861.822406][T17979] cdc_wdm 5-1:1.0: skipping garbage [ 861.827892][T17979] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 862.011291][ T5147] usb 5-1: USB disconnect, device number 82 [ 862.049099][T17999] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 862.189564][ T65] team0 (unregistering): Port device team_slave_1 removed [ 862.251149][T17999] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 862.263149][T17999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 862.266610][ T65] team0 (unregistering): Port device team_slave_0 removed [ 862.275586][T17999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 862.275621][T17999] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 862.275666][T17999] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 862.275692][T17999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.278667][T17999] usb 2-1: config 0 descriptor?? [ 862.334057][T25037] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 862.584576][ T5147] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 862.770481][T17999] plantronics 0003:047F:FFFF.002D: unknown main item tag 0xd [ 862.788451][T17999] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 862.808613][T17999] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 862.809742][ T5147] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 862.865426][ T5147] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 862.875960][ T5147] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 862.892327][ T5147] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 862.919771][ T5147] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 862.940916][ T5147] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 862.953142][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 862.961305][ T5147] usb 5-1: Product: syz [ 862.965613][ T5147] usb 5-1: Manufacturer: syz [ 862.984377][ T5147] cdc_wdm 5-1:1.0: skipping garbage [ 862.990182][ T5147] cdc_wdm 5-1:1.0: skipping garbage [ 862.995543][ T5147] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 863.062654][ T5147] usb 2-1: USB disconnect, device number 78 [ 863.398582][T25055] syz.2.8007: attempt to access beyond end of device [ 863.398582][T25055] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 863.433234][T25055] SQUASHFS error: Failed to read block 0x0: -5 [ 863.448000][T25055] unable to read squashfs_super_block [ 863.816561][T24961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 863.838264][T24961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 863.867010][T24961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 863.879496][ T5104] Bluetooth: hci5: command tx timeout [ 863.907322][T24961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 864.224041][T24961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.253961][T24961] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.294502][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.301749][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.352288][T17999] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.359447][T17999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.779867][T17994] usb 5-1: USB disconnect, device number 83 [ 864.901391][T24961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.074638][T24961] veth0_vlan: entered promiscuous mode [ 865.140113][T24961] veth1_vlan: entered promiscuous mode [ 865.268103][T24961] veth0_macvtap: entered promiscuous mode [ 865.281534][T24961] veth1_macvtap: entered promiscuous mode [ 865.302252][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.314381][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.343464][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.355165][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.367059][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.377794][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.389181][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.409391][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.436517][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.458997][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.485568][T24961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.499685][T17999] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 865.507540][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.535081][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.545829][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.569208][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.593022][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.609832][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.625481][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.636589][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.655560][T24961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.668908][T24961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.687206][T24961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.712012][T17999] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 865.719828][T24961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.733847][T24961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.744438][T17999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 865.750638][T24961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.765683][T24961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.772013][T17999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 865.793768][T17999] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 865.808602][T17999] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 865.822239][T17999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.834527][T17999] usb 2-1: config 0 descriptor?? [ 865.880562][T25097] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 865.945968][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.959744][ T5104] Bluetooth: hci5: command tx timeout [ 865.964126][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.014981][T23282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.023691][T23282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.267287][T25127] syz.3.8032: attempt to access beyond end of device [ 866.267287][T25127] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 866.288842][T25127] SQUASHFS error: Failed to read block 0x0: -5 [ 866.303042][T25127] unable to read squashfs_super_block [ 866.327573][T17999] plantronics 0003:047F:FFFF.002E: unknown main item tag 0xd [ 866.372861][T17999] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 866.417783][T17999] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 866.603590][ T5143] usb 2-1: USB disconnect, device number 79 [ 868.752774][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 868.760755][T17999] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 868.971633][T17999] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 868.999057][T17999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 869.025466][T17999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 869.038365][T17999] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 869.067337][T17999] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 869.104217][T17999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.136344][T17999] usb 2-1: config 0 descriptor?? [ 869.141745][T25186] syz.0.8053: attempt to access beyond end of device [ 869.141745][T25186] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 869.167887][T25175] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 869.214685][T25186] SQUASHFS error: Failed to read block 0x0: -5 [ 869.252518][T25186] unable to read squashfs_super_block [ 869.592417][T17999] plantronics 0003:047F:FFFF.002F: unknown main item tag 0xd [ 869.626790][T17999] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 869.690970][T17999] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 869.874401][T17999] usb 2-1: USB disconnect, device number 80 [ 870.599700][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.606297][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.476817][ T5116] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 871.701635][ T5116] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 871.823418][ T5116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 871.904030][T25262] syz.0.8084: attempt to access beyond end of device [ 871.904030][T25262] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 871.918386][ T5116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 871.981291][ T5116] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 872.063800][T25262] SQUASHFS error: Failed to read block 0x0: -5 [ 872.074112][ T5116] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 872.096299][T25262] unable to read squashfs_super_block [ 872.160424][ T5116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.239888][ T5116] usb 4-1: config 0 descriptor?? [ 872.267361][T25244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 872.755675][ T5116] plantronics 0003:047F:FFFF.0030: unknown main item tag 0xd [ 872.829651][ T5116] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 872.880926][ T5116] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 873.053951][T17994] usb 4-1: USB disconnect, device number 77 [ 874.727189][T25325] syz.4.8107: attempt to access beyond end of device [ 874.727189][T25325] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 874.770525][T25325] SQUASHFS error: Failed to read block 0x0: -5 [ 874.783031][ T5147] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 874.805189][T25325] unable to read squashfs_super_block [ 874.981022][ T5147] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 875.066978][T12214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 875.082610][T12214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 875.083184][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 875.120063][T12214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 875.132479][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 875.151382][T12214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 875.161941][T12214] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 875.172770][T12214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 875.276031][ T5147] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 875.354477][ T5147] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 875.377328][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.426874][ T5147] usb 2-1: config 0 descriptor?? [ 875.436296][ T2915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.442961][T25322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 875.681267][ T2915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.873919][ T2915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.975278][ T5147] plantronics 0003:047F:FFFF.0031: unknown main item tag 0xd [ 876.006871][ T5147] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 876.067018][ T5147] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 876.084073][ T2915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.296214][ T5147] usb 2-1: USB disconnect, device number 81 [ 876.564627][T25355] overlayfs: missing 'lowerdir' [ 876.575635][T25332] chnl_net:caif_netlink_parms(): no params data found [ 876.605138][ T2915] bridge_slave_1: left allmulticast mode [ 876.621101][ T2915] bridge_slave_1: left promiscuous mode [ 876.643711][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.703188][ T2915] bridge_slave_0: left allmulticast mode [ 876.708887][ T2915] bridge_slave_0: left promiscuous mode [ 876.739304][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.229216][T12214] Bluetooth: hci0: command tx timeout [ 878.114896][ T2915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.130525][ T2915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.144938][ T2915] bond0 (unregistering): Released all slaves [ 878.289604][T17999] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 878.503535][T17999] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 878.525626][T25332] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.528191][T17999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 878.566881][T17999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 878.599195][T17999] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 878.621247][T25332] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.623093][T25393] syz.1.8130: attempt to access beyond end of device [ 878.623093][T25393] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 878.642126][T25393] SQUASHFS error: Failed to read block 0x0: -5 [ 878.659757][T17999] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 878.679138][T17999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.687371][T25393] unable to read squashfs_super_block [ 878.707795][T25332] bridge_slave_0: entered allmulticast mode [ 878.719928][T17999] usb 3-1: config 0 descriptor?? [ 878.736793][T25387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 878.765041][T25332] bridge_slave_0: entered promiscuous mode [ 878.902814][T25399] No control pipe specified [ 879.042064][T25332] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.066934][T25332] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.085882][T25332] bridge_slave_1: entered allmulticast mode [ 879.101872][T25332] bridge_slave_1: entered promiscuous mode [ 879.142818][ T2915] hsr_slave_0: left promiscuous mode [ 879.154275][T17999] plantronics 0003:047F:FFFF.0032: unknown main item tag 0xd [ 879.164776][ T2915] hsr_slave_1: left promiscuous mode [ 879.177380][T17999] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 879.195123][T17999] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 879.216604][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.228155][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.245049][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.259067][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.309114][T12214] Bluetooth: hci0: command tx timeout [ 879.337775][ T2915] veth1_macvtap: left promiscuous mode [ 879.343430][ T2915] veth0_macvtap: left promiscuous mode [ 879.357790][ T2915] veth1_vlan: left promiscuous mode [ 879.365776][ T2915] veth0_vlan: left promiscuous mode [ 879.433799][T17999] usb 3-1: USB disconnect, device number 80 [ 879.686668][T25407] input: syz1 as /devices/virtual/input/input37 [ 880.973480][ T2915] team0 (unregistering): Port device team_slave_1 removed [ 881.036236][ T2915] team0 (unregistering): Port device team_slave_0 removed [ 881.169129][T17999] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 881.361377][T17999] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 881.383476][T17999] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 881.394142][T12214] Bluetooth: hci0: command tx timeout [ 881.409384][T17999] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 881.433476][T17999] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 881.446627][T17999] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 881.468286][T17999] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 881.478107][T17999] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 881.494234][T17999] usb 5-1: Product: syz [ 881.499843][T17999] usb 5-1: Manufacturer: syz [ 881.524117][T17999] cdc_wdm 5-1:1.0: skipping garbage [ 881.545454][T17999] cdc_wdm 5-1:1.0: skipping garbage [ 881.563469][T17999] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 881.572093][T17999] cdc_wdm 5-1:1.0: Unknown control protocol [ 881.731763][ T5143] usb 5-1: USB disconnect, device number 84 [ 881.837725][T25429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8146'. [ 881.897849][T25332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.934092][T25332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.021826][T25332] team0: Port device team_slave_0 added [ 882.047810][T25332] team0: Port device team_slave_1 added [ 882.246276][T25332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.254260][T25332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.286812][T25332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.304798][T25332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.312284][T25332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.356275][T25332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.406756][T25332] hsr_slave_0: entered promiscuous mode [ 882.433152][T25332] hsr_slave_1: entered promiscuous mode [ 883.120685][T25332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 883.256730][T25332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 883.300221][T25332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 883.356021][T25332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 883.469136][T12214] Bluetooth: hci0: command tx timeout [ 883.726995][T25332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.776295][T25332] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.821785][T17998] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.828879][T17998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.860250][T17998] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.867346][T17998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.112924][T25332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 884.138134][T25332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 884.447116][T25332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.518886][T25332] veth0_vlan: entered promiscuous mode [ 884.547171][T25332] veth1_vlan: entered promiscuous mode [ 884.605438][T25332] veth0_macvtap: entered promiscuous mode [ 884.631675][T25332] veth1_macvtap: entered promiscuous mode [ 884.667522][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.680303][T17979] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 884.706085][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.728480][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.749667][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.774305][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.805236][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.836945][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.858281][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.883179][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.894541][T17979] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 884.912792][T17979] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 884.937424][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.950362][T17979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 884.961206][T25332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.974636][T17979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 884.994400][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.006041][T17979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 885.027427][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.049456][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.070068][T17979] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 885.079673][T17979] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 885.087670][T17979] usb 2-1: Product: syz [ 885.099568][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.109949][T17979] usb 2-1: Manufacturer: syz [ 885.124443][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.138106][T17979] cdc_wdm 2-1:1.0: skipping garbage [ 885.151216][T17979] cdc_wdm 2-1:1.0: skipping garbage [ 885.167346][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.191758][T17979] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 885.197675][T17979] cdc_wdm 2-1:1.0: Unknown control protocol [ 885.204280][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.229622][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.252305][T25332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.289113][T25332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.311225][T25332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.343450][T17998] usb 2-1: USB disconnect, device number 82 [ 885.475683][T25332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.496212][T25332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.601874][T25332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.629496][T25332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.916683][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.939150][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.370274][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.385221][T25484] syzkaller0: entered promiscuous mode [ 886.391083][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.403202][T25484] syzkaller0: entered allmulticast mode [ 887.334282][T25499] syz.3.8170: attempt to access beyond end of device [ 887.334282][T25499] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 887.352718][T25499] SQUASHFS error: Failed to read block 0x0: -5 [ 887.362882][T25499] unable to read squashfs_super_block [ 887.449245][ T5143] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 887.681538][ T5143] usb 3-1: Using ep0 maxpacket: 16 [ 887.706579][ T5143] usb 3-1: New USB device found, idVendor=2040, idProduct=f5a0, bcdDevice=3c.1c [ 887.721484][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.732731][ T5143] usb 3-1: Product: syz [ 887.742046][ T5143] usb 3-1: Manufacturer: syz [ 887.746935][ T5143] usb 3-1: SerialNumber: syz [ 887.761035][ T5143] usb 3-1: config 0 descriptor?? [ 887.773315][ T5143] smsusb:smsusb_probe: board id=8, interface number 0 [ 887.782052][ T5143] smsusb:smsusb_probe: Device initialized with return code -19 [ 887.993285][T25498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.039282][T12214] Bluetooth: hci2: command 0x0406 tx timeout [ 888.180154][T25498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.215641][T25498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.259518][T25498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.271856][ T5143] usb 3-1: USB disconnect, device number 81 [ 888.678493][ T5104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 888.687654][ T5104] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 888.698388][ T5104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 888.711307][ T5104] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 888.721001][ T5104] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 888.728547][ T5104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 889.139743][T17999] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 889.340966][T17999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.365998][T17999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.388262][T17999] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 889.413936][T17999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.443280][T17999] usb 3-1: config 0 descriptor?? [ 890.087988][T25507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.098875][T25507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.119177][T17999] usb 3-1: language id specifier not provided by device, defaulting to English [ 890.532629][T17999] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #100: -71 [ 890.548107][T17999] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 890.578903][T17999] uclogic 0003:256C:006D.0033: failed probing pen v1 parameters: -71 [ 890.588883][T17999] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 890.605116][T17999] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 890.629268][T17999] usb 3-1: USB disconnect, device number 82 [ 890.749389][T12214] Bluetooth: hci6: command tx timeout [ 891.150614][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.179074][ T5147] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 891.326093][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.401725][ T5147] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 891.431024][ T5147] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 891.436765][T25530] syz.2.8183: attempt to access beyond end of device [ 891.436765][T25530] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 891.454877][T25530] SQUASHFS error: Failed to read block 0x0: -5 [ 891.461691][T25530] unable to read squashfs_super_block [ 891.500466][ T5147] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 891.525496][ T5147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 891.552958][ T5147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 891.608012][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.621063][ T5147] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 891.645608][ T5147] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 891.678865][ T5147] usb 2-1: Product: syz [ 891.692933][ T5147] usb 2-1: Manufacturer: syz [ 891.697741][T25504] chnl_net:caif_netlink_parms(): no params data found [ 891.720519][ T5147] cdc_wdm 2-1:1.0: skipping garbage [ 891.739705][ T5147] cdc_wdm 2-1:1.0: skipping garbage [ 891.761942][ T5147] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 891.796293][ T5147] cdc_wdm 2-1:1.0: Unknown control protocol [ 891.909280][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.950434][ T5147] usb 2-1: USB disconnect, device number 83 [ 892.450275][T25504] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.487178][T25504] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.504417][T25504] bridge_slave_0: entered allmulticast mode [ 892.539608][T25504] bridge_slave_0: entered promiscuous mode [ 892.602750][T25504] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.617209][T25504] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.626098][T25504] bridge_slave_1: entered allmulticast mode [ 892.645614][T25504] bridge_slave_1: entered promiscuous mode [ 892.829131][T12214] Bluetooth: hci6: command tx timeout [ 892.837672][T25504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.910874][T25504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.926849][ T62] bridge_slave_1: left allmulticast mode [ 892.949156][ T62] bridge_slave_1: left promiscuous mode [ 892.954963][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.002547][ T62] bridge_slave_0: left allmulticast mode [ 893.013149][ T62] bridge_slave_0: left promiscuous mode [ 893.019016][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.078355][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.096715][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.112416][ T62] bond0 (unregistering): Released all slaves [ 894.131267][T25584] sock: sock_set_timeout: `syz.1.8202' (pid 25584) tries to set negative timeout [ 894.295890][T25504] team0: Port device team_slave_0 added [ 894.329474][ T5116] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 894.491530][T25504] team0: Port device team_slave_1 added [ 894.520223][ T5116] usb 3-1: Using ep0 maxpacket: 16 [ 894.532750][ T5116] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.569188][ T5116] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.585057][ T5116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 894.605296][T25504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.632866][ T5116] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=fc.db [ 894.639218][T25504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.676022][ T5116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.684627][T25504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.695046][ T5116] usb 3-1: Product: syz [ 894.702099][ T5116] usb 3-1: Manufacturer: syz [ 894.704091][T25504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.716155][T25504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.735568][ T5116] usb 3-1: SerialNumber: syz [ 894.751548][T17979] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 894.774078][T25504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.777511][ T5116] usb 3-1: config 0 descriptor?? [ 894.839076][ T5116] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 894.883259][ T5116] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 894.892610][ T5116] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 894.914167][T12214] Bluetooth: hci6: command tx timeout [ 894.949465][T17979] usb 5-1: Using ep0 maxpacket: 8 [ 894.964681][T17979] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 894.974078][ T62] hsr_slave_0: left promiscuous mode [ 894.990457][ T62] hsr_slave_1: left promiscuous mode [ 895.014123][T17979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.036550][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.052535][T17979] usb 5-1: Product: syz [ 895.054820][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.065871][T17979] usb 5-1: Manufacturer: syz [ 895.109087][T17979] usb 5-1: SerialNumber: syz [ 895.119687][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.130149][T17979] usb 5-1: config 0 descriptor?? [ 895.137376][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.146063][T17998] usb 3-1: USB disconnect, device number 83 [ 895.161470][T17998] garmin_gps 3-1:0.0: device disconnected [ 895.228249][ T62] veth1_macvtap: left promiscuous mode [ 895.243152][ T62] veth0_macvtap: left promiscuous mode [ 895.255771][ T62] veth1_vlan: left promiscuous mode [ 895.263310][ T62] veth0_vlan: left promiscuous mode [ 895.358389][T17979] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 895.605876][ C1] eth0: bad gso: type: 1, size: 1408 [ 895.685616][T25614] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8216'. [ 895.696284][T25614] openvswitch: netlink: Key type 4112 is out of range max 32 [ 896.355789][ T62] team0 (unregistering): Port device team_slave_1 removed [ 896.441806][ T62] team0 (unregistering): Port device team_slave_0 removed [ 896.794295][T17979] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 896.817776][T17979] usb 5-1: USB disconnect, device number 85 [ 896.989835][T12214] Bluetooth: hci6: command tx timeout [ 897.125778][T25504] hsr_slave_0: entered promiscuous mode [ 897.157954][T25504] hsr_slave_1: entered promiscuous mode [ 897.183993][T25504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.194560][T25504] Cannot create hsr debugfs directory [ 898.227255][T25650] dccp_invalid_packet: P.Data Offset(0) too small [ 898.279525][ T5116] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 898.281290][T25504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 898.378323][T25504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 898.402315][T25504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 898.436880][T25504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 898.482596][ T5116] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 898.511125][ T5116] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 898.525642][ T5116] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 898.536668][ T5116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.565358][ T5116] usb 4-1: config 0 descriptor?? [ 898.588048][ T5116] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 898.716249][T25504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.760257][T25504] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.790244][ T5143] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 898.801615][T17979] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.808788][T17979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.819378][T17979] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.826531][T17979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.979079][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 898.994050][ T5143] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 899.003689][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.013078][ T5143] usb 3-1: Product: syz [ 899.017361][ T5143] usb 3-1: Manufacturer: syz [ 899.023222][ T5143] usb 3-1: SerialNumber: syz [ 899.041390][ T5143] usb 3-1: config 0 descriptor?? [ 899.135577][T25504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.236462][T25504] veth0_vlan: entered promiscuous mode [ 899.259196][ T5143] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 899.266816][T25504] veth1_vlan: entered promiscuous mode [ 899.334143][T25504] veth0_macvtap: entered promiscuous mode [ 899.355499][T25504] veth1_macvtap: entered promiscuous mode [ 899.398436][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.416388][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.427092][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.449356][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.470801][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.490437][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.508033][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.520104][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.530323][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.541163][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.553435][T25504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.583983][T25681] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8243'. [ 899.607213][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.620066][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.631608][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.642575][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.655883][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.680445][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.691506][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.702690][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.713260][T25504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.724178][T25504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.745957][T25504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.808701][T25504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.818852][T25504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.827761][T25504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.837856][T25504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.986090][T25686] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 900.076120][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.104707][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.200948][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.213583][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.513064][ T5143] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 900.554787][ T5143] usb 3-1: USB disconnect, device number 84 [ 900.649137][ T25] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 900.839037][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 900.857966][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 900.868827][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.878464][ T25] usb 1-1: Product: syz [ 900.883382][ T25] usb 1-1: Manufacturer: syz [ 900.889184][ T25] usb 1-1: SerialNumber: syz [ 900.916424][ T25] usb 1-1: config 0 descriptor?? [ 900.997814][T17994] usb 4-1: USB disconnect, device number 78 [ 901.137606][ T25] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 901.165950][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8246'. [ 902.571295][ T25] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 902.606265][ T25] usb 1-1: USB disconnect, device number 86 [ 902.620564][T25711] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8253'. [ 903.152220][ T5141] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 903.361042][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 903.371017][ T5141] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 903.387086][ T5141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 903.406765][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.549205][ T5143] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 903.719194][ T5143] usb 5-1: device descriptor read/64, error -71 [ 904.001161][ T5143] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 904.171653][ T5143] usb 5-1: device descriptor read/64, error -71 [ 904.301869][ T5143] usb usb5-port1: attempt power cycle [ 904.729060][ T5143] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 904.779705][ T5143] usb 5-1: device descriptor read/8, error -71 [ 905.059126][ T5143] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 905.120514][ T5143] usb 5-1: device descriptor read/8, error -71 [ 905.261112][ T5143] usb usb5-port1: unable to enumerate USB device [ 905.559221][ T5147] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 905.755017][ T5147] usb 1-1: Using ep0 maxpacket: 8 [ 905.779817][ T5147] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 905.799540][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.819434][ T5147] usb 1-1: Product: syz [ 905.823650][ T5147] usb 1-1: Manufacturer: syz [ 905.828274][ T5147] usb 1-1: SerialNumber: syz [ 905.845647][ T5147] usb 1-1: config 0 descriptor?? [ 905.913019][ T5143] usb 2-1: USB disconnect, device number 84 [ 906.080943][ T5147] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 907.342846][T25789] fuse: Unknown parameter '1844674407370955161500000000000000000000' [ 907.528470][ T5147] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 907.576398][ T5147] usb 1-1: USB disconnect, device number 87 [ 908.509383][ T25] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 908.700016][ T25] usb 1-1: device descriptor read/64, error -71 [ 909.009057][ T25] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 909.179400][ T25] usb 1-1: device descriptor read/64, error -71 [ 909.299189][ T5147] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 909.313773][ T25] usb usb1-port1: attempt power cycle [ 909.521508][ T5147] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 909.559464][ T5147] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 909.587967][ T5147] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 909.648435][ T5147] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 909.677923][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 909.706743][ T5147] usb 3-1: SerialNumber: syz [ 909.732205][T25827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 909.759367][T25827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 909.809083][ T25] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 909.861244][ T25] usb 1-1: device descriptor read/8, error -71 [ 909.984557][T25827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 910.002001][T25827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 910.149127][ T25] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 910.191456][ T25] usb 1-1: device descriptor read/8, error -71 [ 910.329551][ T25] usb usb1-port1: unable to enumerate USB device [ 910.504047][ T5147] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 910.673176][ T5147] usb 3-1: USB disconnect, device number 85 [ 910.697677][ T5147] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 912.619201][ T5147] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 912.659050][ T25] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 912.821201][ T5147] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 912.839060][ T25] usb 3-1: device descriptor read/64, error -71 [ 912.849327][ T5147] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 912.875965][ T5147] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 912.908107][ T5147] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.919965][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 912.937519][ T5147] usb 5-1: SerialNumber: syz [ 912.951475][T25892] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 912.967478][T25892] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 913.119108][ T25] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 913.197023][T25892] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 913.215112][T25892] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 913.285267][ T25] usb 3-1: device descriptor read/64, error -71 [ 913.430309][ T25] usb usb3-port1: attempt power cycle [ 913.598669][T25922] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 913.635989][ T5147] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 913.836208][ T5143] usb 5-1: USB disconnect, device number 90 [ 913.856733][ T5143] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 913.869587][ T25] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 913.910648][ T25] usb 3-1: device descriptor read/8, error -71 [ 914.190085][T12214] Bluetooth: hci6: command tx timeout [ 914.197037][ T25] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 914.261132][ T25] usb 3-1: device descriptor read/8, error -71 [ 914.392115][ T25] usb usb3-port1: unable to enumerate USB device [ 914.877181][T12214] BUG: workqueue leaked atomic, lock or RCU: kworker/u9:0[12214] [ 914.877181][T12214] preempt=0x00000000 lock=0->1 RCU=0->0 workfn=hci_rx_work [ 914.892951][T12214] 1 lock held by kworker/u9:0/12214: [ 914.898231][T12214] #0: ffff88805f933518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x7ce/0x10840 [ 914.908409][T12214] CPU: 0 UID: 0 PID: 12214 Comm: kworker/u9:0 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 914.919044][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 914.929117][T12214] Workqueue: hci6 hci_rx_work [ 914.933809][T12214] Call Trace: [ 914.937084][T12214] [ 914.940003][T12214] dump_stack_lvl+0x241/0x360 [ 914.944676][T12214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.949863][T12214] ? skb_dequeue+0x113/0x150 [ 914.954452][T12214] process_scheduled_works+0x1121/0x1830 [ 914.960117][T12214] ? __pfx_process_scheduled_works+0x10/0x10 [ 914.966113][T12214] ? assign_work+0x364/0x3d0 [ 914.970719][T12214] worker_thread+0x86d/0xd40 [ 914.975318][T12214] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 914.981221][T12214] ? __kthread_parkme+0x169/0x1d0 [ 914.986253][T12214] ? __pfx_worker_thread+0x10/0x10 [ 914.991367][T12214] kthread+0x2f0/0x390 [ 914.995437][T12214] ? __pfx_worker_thread+0x10/0x10 [ 915.000548][T12214] ? __pfx_kthread+0x10/0x10 [ 915.005139][T12214] ret_from_fork+0x4b/0x80 [ 915.009557][T12214] ? __pfx_kthread+0x10/0x10 [ 915.014151][T12214] ret_from_fork_asm+0x1a/0x30 [ 915.018932][T12214]