[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts. 2020/10/08 16:59:30 fuzzer started 2020/10/08 16:59:31 dialing manager at 10.128.0.26:38013 2020/10/08 16:59:31 syscalls: 3450 2020/10/08 16:59:31 code coverage: enabled 2020/10/08 16:59:31 comparison tracing: enabled 2020/10/08 16:59:31 extra coverage: enabled 2020/10/08 16:59:31 setuid sandbox: enabled 2020/10/08 16:59:31 namespace sandbox: enabled 2020/10/08 16:59:31 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/08 16:59:31 fault injection: enabled 2020/10/08 16:59:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/08 16:59:31 net packet injection: enabled 2020/10/08 16:59:31 net device setup: enabled 2020/10/08 16:59:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/08 16:59:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/08 16:59:31 USB emulation: enabled 2020/10/08 16:59:31 hci packet injection: enabled 2020/10/08 16:59:31 wifi device emulation: enabled 17:02:24 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d40)={0x2020}, 0x2020) 17:02:25 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mbim_extended={0x8}, @mdlm={0x15}]}}}]}}]}}, 0x0) 17:02:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff81, 0x7]}}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x7, 0x2, {0x1, @sliced}}) 17:02:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202003200055bd25a80648c63940d0924fc601000324002000000051a82c137153e670800038014004761d1bd", 0x33fe0}], 0x1}, 0x0) 17:02:25 executing program 4: timer_create(0x0, 0x0, &(0x7f0000001240)) timer_getoverrun(0x0) 17:02:26 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x0, 0x2, 0x0, 0x4, 0x1, [{}], 'N'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "61e6cb"}]}, {0x0, [0x0]}}, 0xffffffffffffffff, 0x43, 0x9e, 0x2}, 0x20) syzkaller login: [ 235.570429][ T6912] IPVS: ftp: loaded support on port[0] = 21 [ 235.689634][ T6914] IPVS: ftp: loaded support on port[0] = 21 [ 235.794027][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 235.975391][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.983524][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.993351][ T6912] device bridge_slave_0 entered promiscuous mode [ 236.015692][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.023198][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.032272][ T6912] device bridge_slave_1 entered promiscuous mode [ 236.051675][ T6916] IPVS: ftp: loaded support on port[0] = 21 [ 236.057703][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.073738][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.219690][ T6912] team0: Port device team_slave_0 added [ 236.235238][ T6918] IPVS: ftp: loaded support on port[0] = 21 [ 236.259974][ T6912] team0: Port device team_slave_1 added [ 236.281564][ T6914] chnl_net:caif_netlink_parms(): no params data found [ 236.322010][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.333601][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.366791][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.411386][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.421262][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.490237][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.580879][ T6920] IPVS: ftp: loaded support on port[0] = 21 [ 236.609554][ T6912] device hsr_slave_0 entered promiscuous mode [ 236.626183][ T6912] device hsr_slave_1 entered promiscuous mode [ 236.723972][ T6922] IPVS: ftp: loaded support on port[0] = 21 [ 236.753018][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.762674][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.770877][ T6914] device bridge_slave_0 entered promiscuous mode [ 236.781067][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.788923][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.796730][ T6914] device bridge_slave_1 entered promiscuous mode [ 236.916992][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.935197][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.971395][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 237.036974][ T6914] team0: Port device team_slave_0 added [ 237.092864][ T6914] team0: Port device team_slave_1 added [ 237.149661][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 237.172650][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.181672][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.207812][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.241532][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.250315][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.280200][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.427319][ T6912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.462329][ T6914] device hsr_slave_0 entered promiscuous mode [ 237.474921][ T6914] device hsr_slave_1 entered promiscuous mode [ 237.482690][ T6914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.491147][ T6914] Cannot create hsr debugfs directory [ 237.496761][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.504089][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.513063][ T6916] device bridge_slave_0 entered promiscuous mode [ 237.523504][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.530654][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.539065][ T6916] device bridge_slave_1 entered promiscuous mode [ 237.548024][ T7702] Bluetooth: hci0: command 0x0409 tx timeout [ 237.566309][ T6912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.576771][ T6912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.635003][ T6912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.644292][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.654731][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.664505][ T6918] device bridge_slave_0 entered promiscuous mode [ 237.673497][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.681105][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.689227][ T6918] device bridge_slave_1 entered promiscuous mode [ 237.705698][ T6920] chnl_net:caif_netlink_parms(): no params data found [ 237.717974][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 237.721206][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.793804][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.866399][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.903142][ T6922] chnl_net:caif_netlink_parms(): no params data found [ 237.921925][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.934076][ T6916] team0: Port device team_slave_0 added [ 237.947789][ T7334] Bluetooth: hci2: command 0x0409 tx timeout [ 237.996042][ T6916] team0: Port device team_slave_1 added [ 238.056193][ T6918] team0: Port device team_slave_0 added [ 238.093675][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.103095][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.137683][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.151611][ T6918] team0: Port device team_slave_1 added [ 238.186881][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.187524][ T7702] Bluetooth: hci3: command 0x0409 tx timeout [ 238.198638][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.226149][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.254119][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.261837][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.270417][ T6920] device bridge_slave_0 entered promiscuous mode [ 238.304221][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.312089][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.320566][ T6920] device bridge_slave_1 entered promiscuous mode [ 238.349172][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.356145][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.385911][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.421328][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.428458][ T7702] Bluetooth: hci4: command 0x0409 tx timeout [ 238.440148][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.466539][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.481117][ T6916] device hsr_slave_0 entered promiscuous mode [ 238.494129][ T6916] device hsr_slave_1 entered promiscuous mode [ 238.500655][ T6916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.508760][ T6916] Cannot create hsr debugfs directory [ 238.534791][ T6914] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.578034][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.585191][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.594403][ T7702] Bluetooth: hci5: command 0x0409 tx timeout [ 238.602914][ T6922] device bridge_slave_0 entered promiscuous mode [ 238.612439][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.619922][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.628204][ T6922] device bridge_slave_1 entered promiscuous mode [ 238.635223][ T6914] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.648900][ T6920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.688985][ T6914] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.700407][ T6920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.731866][ T6918] device hsr_slave_0 entered promiscuous mode [ 238.739093][ T6918] device hsr_slave_1 entered promiscuous mode [ 238.745599][ T6918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.754930][ T6918] Cannot create hsr debugfs directory [ 238.772173][ T6914] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.784332][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.853882][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.869481][ T6920] team0: Port device team_slave_0 added [ 238.876964][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.918864][ T6922] team0: Port device team_slave_0 added [ 238.928981][ T6920] team0: Port device team_slave_1 added [ 238.959098][ T6922] team0: Port device team_slave_1 added [ 239.020195][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.029854][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.040860][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.094094][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.101845][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.128827][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.140827][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.147960][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.174167][ T6920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.195431][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.203384][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.234788][ T6920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.246535][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.256112][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.266239][ T2597] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.273691][ T2597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.288089][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.295088][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.321190][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.345399][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.354310][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.364215][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.372979][ T2597] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.380140][ T2597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.481249][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.498241][ T6922] device hsr_slave_0 entered promiscuous mode [ 239.505055][ T6922] device hsr_slave_1 entered promiscuous mode [ 239.512386][ T6922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.520849][ T6922] Cannot create hsr debugfs directory [ 239.533674][ T6920] device hsr_slave_0 entered promiscuous mode [ 239.544272][ T6920] device hsr_slave_1 entered promiscuous mode [ 239.552658][ T6920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.560632][ T6920] Cannot create hsr debugfs directory [ 239.593061][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.618368][ T6916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.627929][ T2597] Bluetooth: hci0: command 0x041b tx timeout [ 239.669335][ T6916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.694723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.706071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.716619][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.740969][ T6916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.779914][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.787918][ T2597] Bluetooth: hci1: command 0x041b tx timeout [ 239.798166][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.814299][ T6912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.825210][ T6912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.844461][ T6916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.880468][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.892688][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.901986][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.910659][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.924209][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.948083][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.979483][ T6918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.021239][ T6918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.028564][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 240.040753][ T6918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.062936][ T6918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.076424][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.086529][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.107782][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.130187][ T6914] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.143648][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.151940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.256890][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.265764][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.274542][ T2597] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.281697][ T2597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.308923][ T2597] Bluetooth: hci3: command 0x041b tx timeout [ 240.369258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.377311][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.392021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.401798][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.408958][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.416519][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.426014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.434983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.443938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.475294][ T6912] device veth0_vlan entered promiscuous mode [ 240.483859][ T6920] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.502657][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.514230][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.522282][ T7702] Bluetooth: hci4: command 0x041b tx timeout [ 240.524817][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.542205][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.551397][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.566262][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.583228][ T6914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.595013][ T6914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.618911][ T6920] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.645950][ T6920] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.663379][ T6920] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.667634][ T7702] Bluetooth: hci5: command 0x041b tx timeout [ 240.679368][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.687369][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.696650][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.704849][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.713707][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.722939][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.731742][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.743776][ T6912] device veth1_vlan entered promiscuous mode [ 240.760001][ T6922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.786032][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.794536][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.803030][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.818144][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.825575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.842206][ T6922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 240.870988][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.886801][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.897868][ T6922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 240.949855][ T6922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.979158][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.989358][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.999046][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.006790][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.018711][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.058050][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.066508][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.090080][ T6916] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.109877][ T6912] device veth0_macvtap entered promiscuous mode [ 241.140198][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.147441][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.156520][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.166789][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.184344][ T6912] device veth1_macvtap entered promiscuous mode [ 241.213258][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.221745][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.232434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.241350][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.248476][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.259467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.268313][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.276612][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.283711][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.292043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.301043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.310509][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.317642][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.325180][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.334230][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.343937][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.351065][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.358818][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.366978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.378176][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.386126][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.395153][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.404470][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.418503][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.450398][ T6914] device veth0_vlan entered promiscuous mode [ 241.478098][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.494920][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.508224][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.516873][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.525987][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.535532][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.544460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.555275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.564744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.573738][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.582863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.592216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.601309][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.618655][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.626493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.635188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.645023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.676602][ T6914] device veth1_vlan entered promiscuous mode [ 241.700207][ T6912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.729511][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 241.734269][ T6912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.757622][ T6912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.766341][ T6912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.797065][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.805238][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.815419][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.825246][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.833987][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.868175][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 241.870110][ T6920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.894130][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.902560][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.917193][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.925920][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.935043][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.945468][ T6918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.980835][ T6916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.994799][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.004125][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.018158][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.031500][ T6922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.107828][ T8205] Bluetooth: hci2: command 0x040f tx timeout [ 242.129172][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.136602][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.146336][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.160381][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.171062][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.186352][ T6914] device veth0_macvtap entered promiscuous mode [ 242.199350][ T6920] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.227232][ T6914] device veth1_macvtap entered promiscuous mode [ 242.242283][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.252123][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.264807][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.281445][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.302213][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.322816][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.354100][ T7702] Bluetooth: hci3: command 0x040f tx timeout [ 242.380779][ T6922] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.392665][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.408343][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.416857][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.423998][ T8205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.436521][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.449908][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.457309][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.471486][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.480503][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.487652][ T8205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.495660][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.505154][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.532003][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.568385][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.576402][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.587914][ T8221] Bluetooth: hci4: command 0x040f tx timeout [ 242.606007][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 242.630865][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.649538][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.658662][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.667347][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.677852][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.686176][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.695811][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.704867][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.711998][ T7334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.720147][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.729105][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.737466][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.744603][ T7334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.747846][ T8205] Bluetooth: hci5: command 0x040f tx timeout [ 242.752508][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.765782][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.775120][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.784299][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.794828][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.814427][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.822911][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.831651][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.841370][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.852433][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.891380][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.902255][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.915347][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.924874][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.934269][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.943548][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.952447][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.961819][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.970830][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.979860][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.989634][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.998430][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.007400][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.034608][ T6914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.037883][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.045205][ T6914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.061043][ T6914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.072988][ T6914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.081796][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.110743][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.120226][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.133195][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.142855][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.155946][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.178370][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.186744][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 17:02:34 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)) fchdir(r0) exit(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) [ 243.275843][ T6918] device veth0_vlan entered promiscuous mode [ 243.297971][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.309567][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.345934][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.378656][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.390010][ T6922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.431433][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.449676][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.466462][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.479750][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.487255][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.496368][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.505838][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.520653][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.541119][ T6916] device veth0_vlan entered promiscuous mode [ 243.572237][ T6920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.589888][ T6918] device veth1_vlan entered promiscuous mode [ 243.614432][ T6916] device veth1_vlan entered promiscuous mode [ 243.690730][ T6922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.719336][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.728068][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.736198][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.745354][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.755283][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.763332][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.780382][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.791415][ T7702] Bluetooth: hci0: command 0x0419 tx timeout [ 243.826834][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.849083][ T6918] device veth0_macvtap entered promiscuous mode [ 243.863368][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.880978][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.891191][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.905651][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.930770][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.939604][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.948168][ T7702] Bluetooth: hci1: command 0x0419 tx timeout [ 243.949549][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.965818][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.988540][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.999694][ T6916] device veth0_macvtap entered promiscuous mode [ 244.013361][ T6916] device veth1_macvtap entered promiscuous mode [ 244.021590][ T6918] device veth1_macvtap entered promiscuous mode [ 244.045865][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.065318][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.082425][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.147282][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.167215][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.190646][ T7702] Bluetooth: hci2: command 0x0419 tx timeout 17:02:34 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)) fchdir(r0) exit(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) [ 244.207680][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.277301][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.305003][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.322997][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.336293][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.360276][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.374643][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.391818][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.402465][ T2478] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 244.410346][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.422759][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.428445][ T7702] Bluetooth: hci3: command 0x0419 tx timeout [ 244.443715][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.453521][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.464586][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.474062][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.484422][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.497252][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.506439][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.516534][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.530648][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.546634][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.558278][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.569628][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.582486][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.600644][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.611244][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.621564][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.638083][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.652842][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.663740][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.669167][ T8221] Bluetooth: hci4: command 0x0419 tx timeout [ 244.682564][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.692391][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.704683][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.715598][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.725186][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.740397][ T6916] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.751953][ T6916] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.763477][ T6916] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.773023][ T6916] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.790146][ T6918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.800040][ T6918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.809470][ T2478] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 244.823480][ T6918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.828319][ T8221] Bluetooth: hci5: command 0x0419 tx timeout [ 244.833853][ T6918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.850379][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.863113][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.874376][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.883436][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.901049][ T6920] device veth0_vlan entered promiscuous mode [ 244.943056][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.953366][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.966547][ T6922] device veth0_vlan entered promiscuous mode [ 244.986278][ T6920] device veth1_vlan entered promiscuous mode [ 245.004781][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.012938][ T2478] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.022984][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.031485][ T2478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.041210][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.049597][ T2478] usb 2-1: Product: syz [ 245.053792][ T2478] usb 2-1: Manufacturer: syz [ 245.060787][ T2478] usb 2-1: SerialNumber: syz 17:02:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)) fchdir(r0) exit(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) [ 245.131167][ T2478] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 245.175450][ T6922] device veth1_vlan entered promiscuous mode [ 245.236250][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.252736][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.281618][ T6920] device veth0_macvtap entered promiscuous mode [ 245.323590][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.338922][ T6920] device veth1_macvtap entered promiscuous mode [ 245.384437][ T7702] usb 2-1: USB disconnect, device number 2 [ 245.395426][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.505210][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.521757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.533325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.541759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.551085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.566351][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.583905][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.594120][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.605478][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.615977][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.626506][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.637101][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.648432][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.660788][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.672361][ T6922] device veth0_macvtap entered promiscuous mode [ 245.687525][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.696498][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.705487][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.714260][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.722597][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.731243][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.742672][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.758071][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.765889][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.778320][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.790803][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.801801][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.812729][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.823262][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.834379][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.844462][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.854930][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.866193][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.884754][ T6922] device veth1_macvtap entered promiscuous mode [ 245.902313][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.934586][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.944585][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.966087][ T6920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.975220][ T6920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.989446][ T6920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.001528][ T6920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 17:02:36 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)) fchdir(r0) exit(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) [ 246.056680][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.104868][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.133063][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 17:02:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff81, 0x7]}}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x7, 0x2, {0x1, @sliced}}) [ 246.158007][ T12] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 246.188681][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:02:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff81, 0x7]}}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x7, 0x2, {0x1, @sliced}}) [ 246.211109][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.234108][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.266161][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.287972][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:02:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff81, 0x7]}}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x7, 0x2, {0x1, @sliced}}) [ 246.312148][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.341347][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.373083][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.403039][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.416545][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.501924][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.525477][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.527844][ T12] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 246.538648][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.559377][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.571110][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.581637][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.592788][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.603726][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.613654][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.624123][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.635979][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.652709][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.663631][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.672873][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.682485][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.695870][ T6922] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.708096][ T12] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.711562][ T6922] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.721741][ T12] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.731304][ T6922] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.746828][ T6922] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.746949][ T12] usb 2-1: Product: syz [ 246.774732][ T12] usb 2-1: Manufacturer: syz [ 246.777985][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.781679][ T12] usb 2-1: SerialNumber: syz [ 246.849837][ T12] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 246.901533][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.925706][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.999615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.061283][ T8221] usb 2-1: USB disconnect, device number 3 [ 247.082013][ T320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.097189][ T320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:02:37 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mbim_extended={0x8}, @mdlm={0x15}]}}}]}}]}}, 0x0) 17:02:37 executing program 2: syz_mount_image$adfs(&(0x7f0000000000)='adfs\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000002c0)) [ 247.116829][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.132446][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:02:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202003200055bd25a80648c63940d0924fc601000324002000000051a82c137153e670800038014004761d1bd", 0x33fe0}], 0x1}, 0x0) [ 247.216935][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.227507][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.250582][ T8409] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 247.289289][ T320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.306485][ T320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.331475][ T8409] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 247.345599][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:02:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 17:02:38 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x0, 0x2, 0x0, 0x4, 0x1, [{}], 'N'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "61e6cb"}]}, {0x0, [0x0]}}, 0xffffffffffffffff, 0x43, 0x9e, 0x2}, 0x20) 17:02:38 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x24, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001340)=[&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="35e20722af3f2c1eb7c120ee19fea9c51dc24c3f09d21f9a0d63a0b92cf2e907004c3617f44d288c", 0x28}]) 17:02:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202003200055bd25a80648c63940d0924fc601000324002000000051a82c137153e670800038014004761d1bd", 0x33fe0}], 0x1}, 0x0) 17:02:38 executing program 2: syz_mount_image$adfs(&(0x7f0000000000)='adfs\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000002c0)) 17:02:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202003200055bd25a80648c63940d0924fc601000324002000000051a82c137153e670800038014004761d1bd", 0x33fe0}], 0x1}, 0x0) 17:02:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) [ 247.596861][ T8431] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 247.608159][ T8221] usb 2-1: new high-speed USB device number 4 using dummy_hcd 17:02:38 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x0, 0x2, 0x0, 0x4, 0x1, [{}], 'N'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "61e6cb"}]}, {0x0, [0x0]}}, 0xffffffffffffffff, 0x43, 0x9e, 0x2}, 0x20) 17:02:38 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x24, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001340)=[&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="35e20722af3f2c1eb7c120ee19fea9c51dc24c3f09d21f9a0d63a0b92cf2e907004c3617f44d288c", 0x28}]) [ 247.988105][ T8221] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 248.177896][ T8221] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.186953][ T8221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.208106][ T8221] usb 2-1: Product: syz [ 248.212299][ T8221] usb 2-1: Manufacturer: syz [ 248.216932][ T8221] usb 2-1: SerialNumber: syz [ 248.278889][ T8221] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 248.540493][ T8221] usb 2-1: USB disconnect, device number 4 17:02:39 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mbim_extended={0x8}, @mdlm={0x15}]}}}]}}]}}, 0x0) 17:02:39 executing program 2: syz_mount_image$adfs(&(0x7f0000000000)='adfs\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000002c0)) 17:02:39 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x0, 0x2, 0x0, 0x4, 0x1, [{}], 'N'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "61e6cb"}]}, {0x0, [0x0]}}, 0xffffffffffffffff, 0x43, 0x9e, 0x2}, 0x20) 17:02:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 17:02:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 17:02:39 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x24, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001340)=[&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="35e20722af3f2c1eb7c120ee19fea9c51dc24c3f09d21f9a0d63a0b92cf2e907004c3617f44d288c", 0x28}]) 17:02:39 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x0, 0x8000, 0xffffffff, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr, @remote, @broadcast]}, @noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @local, @broadcast, @rand_addr=0x64010102]}]}}}}}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) r1 = memfd_create(&(0x7f00000002c0)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd99Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b$\x14\xa47\r1J\xb1\x19g_\xa8V\'\xd2n/\xf4\x8a\x00x\x15\xb6w8\x19~\xff*h\x16nb\xfdna\xed\xaf\x95\xe7+s\xb2\xe7\xebP9\x19\x02\x11h`6\xfaA5\xf8Eyc\xb4m\xe2\x94CK\xf6\x14\xd7Q<\x87 \x89\x98\xcf/\xa5;d\xe8 \xb3-]\xb0k\x87T\xc7q\x86`%?R\xb4\r;F\xef\xd9\xeej$\x99\xe4hR N\xbbi\x90\rn\x83\x13\xd6\xea\x06+\xc8x\b\x14\xe2\x0e\xab\'V\xdbm\x8e\xd7\x8eKu\xbbv\x03$\xc7\x86;\xac\'\xc0\xa8\xab\xe3:\xce\xb2x7G\xa6?\xce1-M\xd2\xe2J\xa7\xe6\xf9\x95;\xab\xcfn\x14\xef\x03\xee\xbb\x15\xe3@\xea\xaeZ\xb2\n\xef\x0f\xce?\xcal\x16\x9d\xa4\xe8x\x15\x8eZ\xaceTA\xde\x93\xd9<\xc9\xdfY9nZv5C9\xf8\x00'/366, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2cdab05b591201ac59b700000000000002"], 0x72) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000009, 0x11, r1, 0x0) write$evdev(r0, &(0x7f0000000040), 0xfd18) [ 249.170686][ T8483] ADFS-fs (loop2): error: unable to read block 3, try 0 17:02:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 17:02:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 17:02:40 executing program 2: syz_mount_image$adfs(&(0x7f0000000000)='adfs\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000002c0)) 17:02:40 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x24, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001340)=[&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="35e20722af3f2c1eb7c120ee19fea9c51dc24c3f09d21f9a0d63a0b92cf2e907004c3617f44d288c", 0x28}]) 17:02:40 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x0, 0x8000, 0xffffffff, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr, @remote, @broadcast]}, @noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @local, @broadcast, @rand_addr=0x64010102]}]}}}}}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) r1 = memfd_create(&(0x7f00000002c0)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd99Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b$\x14\xa47\r1J\xb1\x19g_\xa8V\'\xd2n/\xf4\x8a\x00x\x15\xb6w8\x19~\xff*h\x16nb\xfdna\xed\xaf\x95\xe7+s\xb2\xe7\xebP9\x19\x02\x11h`6\xfaA5\xf8Eyc\xb4m\xe2\x94CK\xf6\x14\xd7Q<\x87 \x89\x98\xcf/\xa5;d\xe8 \xb3-]\xb0k\x87T\xc7q\x86`%?R\xb4\r;F\xef\xd9\xeej$\x99\xe4hR N\xbbi\x90\rn\x83\x13\xd6\xea\x06+\xc8x\b\x14\xe2\x0e\xab\'V\xdbm\x8e\xd7\x8eKu\xbbv\x03$\xc7\x86;\xac\'\xc0\xa8\xab\xe3:\xce\xb2x7G\xa6?\xce1-M\xd2\xe2J\xa7\xe6\xf9\x95;\xab\xcfn\x14\xef\x03\xee\xbb\x15\xe3@\xea\xaeZ\xb2\n\xef\x0f\xce?\xcal\x16\x9d\xa4\xe8x\x15\x8eZ\xaceTA\xde\x93\xd9<\xc9\xdfY9nZv5C9\xf8\x00'/366, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2cdab05b591201ac59b700000000000002"], 0x72) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000009, 0x11, r1, 0x0) write$evdev(r0, &(0x7f0000000040), 0xfd18) [ 249.434197][ T8502] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 249.441499][ T8221] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 249.828117][ T8221] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 250.037707][ T8221] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.051525][ T8221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.061333][ T8221] usb 2-1: Product: syz [ 250.066107][ T8221] usb 2-1: Manufacturer: syz [ 250.072271][ T8221] usb 2-1: SerialNumber: syz [ 250.119275][ T8221] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 250.335395][ T7334] usb 2-1: USB disconnect, device number 5 17:02:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 17:02:41 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x0, 0x8000, 0xffffffff, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr, @remote, @broadcast]}, @noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @local, @broadcast, @rand_addr=0x64010102]}]}}}}}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) r1 = memfd_create(&(0x7f00000002c0)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd99Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b$\x14\xa47\r1J\xb1\x19g_\xa8V\'\xd2n/\xf4\x8a\x00x\x15\xb6w8\x19~\xff*h\x16nb\xfdna\xed\xaf\x95\xe7+s\xb2\xe7\xebP9\x19\x02\x11h`6\xfaA5\xf8Eyc\xb4m\xe2\x94CK\xf6\x14\xd7Q<\x87 \x89\x98\xcf/\xa5;d\xe8 \xb3-]\xb0k\x87T\xc7q\x86`%?R\xb4\r;F\xef\xd9\xeej$\x99\xe4hR N\xbbi\x90\rn\x83\x13\xd6\xea\x06+\xc8x\b\x14\xe2\x0e\xab\'V\xdbm\x8e\xd7\x8eKu\xbbv\x03$\xc7\x86;\xac\'\xc0\xa8\xab\xe3:\xce\xb2x7G\xa6?\xce1-M\xd2\xe2J\xa7\xe6\xf9\x95;\xab\xcfn\x14\xef\x03\xee\xbb\x15\xe3@\xea\xaeZ\xb2\n\xef\x0f\xce?\xcal\x16\x9d\xa4\xe8x\x15\x8eZ\xaceTA\xde\x93\xd9<\xc9\xdfY9nZv5C9\xf8\x00'/366, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2cdab05b591201ac59b700000000000002"], 0x72) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000009, 0x11, r1, 0x0) write$evdev(r0, &(0x7f0000000040), 0xfd18) 17:02:41 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mbim_extended={0x8}, @mdlm={0x15}]}}}]}}]}}, 0x0) 17:02:41 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) waitid(0x0, 0x0, 0x0, 0x4100000e, 0x0) 17:02:41 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x0, 0x8000, 0xffffffff, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr, @remote, @broadcast]}, @noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @local, @broadcast, @rand_addr=0x64010102]}]}}}}}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) r1 = memfd_create(&(0x7f00000002c0)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd99Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b$\x14\xa47\r1J\xb1\x19g_\xa8V\'\xd2n/\xf4\x8a\x00x\x15\xb6w8\x19~\xff*h\x16nb\xfdna\xed\xaf\x95\xe7+s\xb2\xe7\xebP9\x19\x02\x11h`6\xfaA5\xf8Eyc\xb4m\xe2\x94CK\xf6\x14\xd7Q<\x87 \x89\x98\xcf/\xa5;d\xe8 \xb3-]\xb0k\x87T\xc7q\x86`%?R\xb4\r;F\xef\xd9\xeej$\x99\xe4hR N\xbbi\x90\rn\x83\x13\xd6\xea\x06+\xc8x\b\x14\xe2\x0e\xab\'V\xdbm\x8e\xd7\x8eKu\xbbv\x03$\xc7\x86;\xac\'\xc0\xa8\xab\xe3:\xce\xb2x7G\xa6?\xce1-M\xd2\xe2J\xa7\xe6\xf9\x95;\xab\xcfn\x14\xef\x03\xee\xbb\x15\xe3@\xea\xaeZ\xb2\n\xef\x0f\xce?\xcal\x16\x9d\xa4\xe8x\x15\x8eZ\xaceTA\xde\x93\xd9<\xc9\xdfY9nZv5C9\xf8\x00'/366, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2cdab05b591201ac59b700000000000002"], 0x72) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000009, 0x11, r1, 0x0) write$evdev(r0, &(0x7f0000000040), 0xfd18) 17:02:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) [ 250.937995][ C0] hrtimer: interrupt took 50187 ns 17:02:41 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) waitid(0x0, 0x0, 0x0, 0x4100000e, 0x0) 17:02:41 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) [ 251.248147][ T7334] usb 2-1: new high-speed USB device number 6 using dummy_hcd 17:02:42 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x0, 0x8000, 0xffffffff, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr, @remote, @broadcast]}, @noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @local, @broadcast, @rand_addr=0x64010102]}]}}}}}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) r1 = memfd_create(&(0x7f00000002c0)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd99Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b$\x14\xa47\r1J\xb1\x19g_\xa8V\'\xd2n/\xf4\x8a\x00x\x15\xb6w8\x19~\xff*h\x16nb\xfdna\xed\xaf\x95\xe7+s\xb2\xe7\xebP9\x19\x02\x11h`6\xfaA5\xf8Eyc\xb4m\xe2\x94CK\xf6\x14\xd7Q<\x87 \x89\x98\xcf/\xa5;d\xe8 \xb3-]\xb0k\x87T\xc7q\x86`%?R\xb4\r;F\xef\xd9\xeej$\x99\xe4hR N\xbbi\x90\rn\x83\x13\xd6\xea\x06+\xc8x\b\x14\xe2\x0e\xab\'V\xdbm\x8e\xd7\x8eKu\xbbv\x03$\xc7\x86;\xac\'\xc0\xa8\xab\xe3:\xce\xb2x7G\xa6?\xce1-M\xd2\xe2J\xa7\xe6\xf9\x95;\xab\xcfn\x14\xef\x03\xee\xbb\x15\xe3@\xea\xaeZ\xb2\n\xef\x0f\xce?\xcal\x16\x9d\xa4\xe8x\x15\x8eZ\xaceTA\xde\x93\xd9<\xc9\xdfY9nZv5C9\xf8\x00'/366, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2cdab05b591201ac59b700000000000002"], 0x72) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000009, 0x11, r1, 0x0) write$evdev(r0, &(0x7f0000000040), 0xfd18) 17:02:42 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) waitid(0x0, 0x0, 0x0, 0x4100000e, 0x0) 17:02:42 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x0, 0x8000, 0xffffffff, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr, @remote, @broadcast]}, @noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @local, @broadcast, @rand_addr=0x64010102]}]}}}}}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) r1 = memfd_create(&(0x7f00000002c0)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd99Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b$\x14\xa47\r1J\xb1\x19g_\xa8V\'\xd2n/\xf4\x8a\x00x\x15\xb6w8\x19~\xff*h\x16nb\xfdna\xed\xaf\x95\xe7+s\xb2\xe7\xebP9\x19\x02\x11h`6\xfaA5\xf8Eyc\xb4m\xe2\x94CK\xf6\x14\xd7Q<\x87 \x89\x98\xcf/\xa5;d\xe8 \xb3-]\xb0k\x87T\xc7q\x86`%?R\xb4\r;F\xef\xd9\xeej$\x99\xe4hR N\xbbi\x90\rn\x83\x13\xd6\xea\x06+\xc8x\b\x14\xe2\x0e\xab\'V\xdbm\x8e\xd7\x8eKu\xbbv\x03$\xc7\x86;\xac\'\xc0\xa8\xab\xe3:\xce\xb2x7G\xa6?\xce1-M\xd2\xe2J\xa7\xe6\xf9\x95;\xab\xcfn\x14\xef\x03\xee\xbb\x15\xe3@\xea\xaeZ\xb2\n\xef\x0f\xce?\xcal\x16\x9d\xa4\xe8x\x15\x8eZ\xaceTA\xde\x93\xd9<\xc9\xdfY9nZv5C9\xf8\x00'/366, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2cdab05b591201ac59b700000000000002"], 0x72) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000009, 0x11, r1, 0x0) write$evdev(r0, &(0x7f0000000040), 0xfd18) 17:02:42 executing program 3: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x9, 0x20000000001, '\v'}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000100)=""/236, 0x18) 17:02:42 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) waitid(0x0, 0x0, 0x0, 0x4100000e, 0x0) 17:02:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) [ 251.658350][ T7334] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 251.878815][ T7334] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.898193][ T7334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.898207][ T7334] usb 2-1: Product: syz [ 251.899178][ T7334] usb 2-1: Manufacturer: syz [ 251.956086][ T7334] usb 2-1: SerialNumber: syz [ 252.029782][ T7334] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 252.274038][ T7334] usb 2-1: USB disconnect, device number 6 17:02:43 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x0, 0x8000, 0xffffffff, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr, @remote, @broadcast]}, @noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @local, @broadcast, @rand_addr=0x64010102]}]}}}}}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) r1 = memfd_create(&(0x7f00000002c0)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd99Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b$\x14\xa47\r1J\xb1\x19g_\xa8V\'\xd2n/\xf4\x8a\x00x\x15\xb6w8\x19~\xff*h\x16nb\xfdna\xed\xaf\x95\xe7+s\xb2\xe7\xebP9\x19\x02\x11h`6\xfaA5\xf8Eyc\xb4m\xe2\x94CK\xf6\x14\xd7Q<\x87 \x89\x98\xcf/\xa5;d\xe8 \xb3-]\xb0k\x87T\xc7q\x86`%?R\xb4\r;F\xef\xd9\xeej$\x99\xe4hR N\xbbi\x90\rn\x83\x13\xd6\xea\x06+\xc8x\b\x14\xe2\x0e\xab\'V\xdbm\x8e\xd7\x8eKu\xbbv\x03$\xc7\x86;\xac\'\xc0\xa8\xab\xe3:\xce\xb2x7G\xa6?\xce1-M\xd2\xe2J\xa7\xe6\xf9\x95;\xab\xcfn\x14\xef\x03\xee\xbb\x15\xe3@\xea\xaeZ\xb2\n\xef\x0f\xce?\xcal\x16\x9d\xa4\xe8x\x15\x8eZ\xaceTA\xde\x93\xd9<\xc9\xdfY9nZv5C9\xf8\x00'/366, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2cdab05b591201ac59b700000000000002"], 0x72) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000009, 0x11, r1, 0x0) write$evdev(r0, &(0x7f0000000040), 0xfd18) 17:02:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 17:02:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 17:02:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 17:02:43 executing program 3: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x9, 0x20000000001, '\v'}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000100)=""/236, 0x18) 17:02:43 executing program 1: r0 = syz_io_uring_setup(0x61f1, &(0x7f0000000080), &(0x7f0000ee6000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) io_uring_enter(r0, 0x3823, 0x0, 0x0, 0x0, 0x0) 17:02:43 executing program 3: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x9, 0x20000000001, '\v'}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000100)=""/236, 0x18) 17:02:43 executing program 4: r0 = memfd_create(&(0x7f0000000380)='\xf3e\t\xa9\xff\vtyux\x00\xfeL\x1f\xcc[\xaf\xf8\xa6\xc3\xda\xc0qw\xadG\x00\x10\x00\x00\xde\xce-w\x00\xc9\xa9%\x92\xf1J\xb7!\'D{!\x85\xb2V\x84\x16\x01s\xcfy*1\x85,\xcb\xa9\x1a\x85S\x0e%\xdb\x99\xc2\xe7\x1e1\x8bI+\x14U\xea\xb4\xa58\xe6\x80\x03\xdd\xbf\x95\xe0_\xe9e\xfb\xa7]\a\x81v\xa4\x85\x96 c\x1e\x13\xf6\x9e\x06Oh\xb4\xc3\x9a\a\x9b\x02\x00l\xc07[>#T\xde>\xdc\xb5\xdf\xe2\x82\xcd)\xb8ktR\x1a\v\xd9\xf6\x97\xd3`\xe5\x880\xb4\xf4\xe5\xfe\x9b\xed_w\xa8\x88 \xb5A\xf61H\xc9\x80\a- \xc7}\xdf\xa7\xec\x8f\xf8\xe0\xfb\x12\x9f\xae\xff\xf5\x8f\x94\xb3\x9d0\x1aq\xef\xdbg\xab\x00\x00\x00\x00I\x04\x17:\x1cV{\b\x19\xb59i\x9c\xb7E\x04+9\a\xa3\xba{v+\x93\xf8\xb3\xedp\x9e\x9e4\xbfr*\x10\x89e\x98\xea3(\xd8\x00\xc6\xcbX\xb8\xe4\x01/\xa2h\x17h\xb4\xd9\xc5Q\xe2p\x19\xec\xe0\xbe\x8f\x9c\xa5rv\x82\t\xb9(\r\xe51\x83\xc6\x02v{#[\x7f\xc2L\f;\xa2\xf7\x85\xbb\xdd\xbcC\xa7|s\xa6tM\xc8\xf6\xe9E\xb2m\x8b\xc2\xb4E\x84Nf\xb1\xa5\xfc\xc1jyl\xc4\xa1\x96\xb3\x9aM\x05\xed$\x83O2Y\x91\xe7\xe8\xfe\xccg\xa32\xa9\xc2\xe3\xe9\xf1\'ns\xd2\x92\x0e\xf9\xae\xfa\x8a\x06\xb6\"\xec\xbd_5\x84\xdd\xe9\xa4\xcc\x88\xf0\x02q2\b\xaa\xde\x13\x9a\x82\xf0\xad\xce\x1eQ\"\x12\xec\xdc,\x0e\xab\fn\xfe\x98*%\x00\x00lr!\x06\xf2\vB\x93\x17\xd9\xd8\xfa*@\x98C4gU\x95v&6\x93\x9eZU\xc7B\xec\x92\xd0,\xcf\xaf\x94\xb0\xba\xe2\xc7\xba\xf5\x86\xe8\xf5\x925\xc5\x8b\xefy\x84\xea\xa0\x0e\x83\n3\xd8\xea<\x92;G\xcb\x9b5\xc8v\xcd\xb10\x1d.\xf1DM\x15I\xefW\xa8/e\x00\xe1\x87\xd4Z\xb9\x15\x83\tUZ\x8c\x9d\xb6aN\xa8@_\ak}1J.\xd0\x86n@\xdb\x19^k\x92\x91\'7\x8e\x8b\xe3\xcf~\x9b\xbd\xf0\x9d\x9aP \xa6^\x04H\x7f\xfd\xf4\xf6\xd9\x1c|\xe4\x18\xf7\xa8,\xe8\xd56}_W\xc1\xa1\x7f\xc9\x8e?\x98\xe9\xce1N\x93\x04\x85\xb2\x15\x14\xec\'\xdch\xd5\xe3\x99\xec\x87\tZ\x16\xcf3\\\xee\xb04~\x92\xb7\xbb\x00b)\x9b\xf5\xc0&\xf8\x90\xd6O\xde\x95\xf6\xb2a\xba2J\x98[\x12C1\x8b\xad\x9d5\\\xdd\xc0\xe7\xcb\xf4\x99m\xdb\x89)\xfe?\xdc\xc5]\x17\xed\xca\xbc*\xbe\xbdt\xda8\x8b\x99 \x95\x83r-\xb8V\x16^\'\xb5\xbdD4\xb6\x8a\xa3\xca\xcb/d\xcc\"\xdc\xac\xc2\x9fM=W\x9d\x14=', 0x4) lseek(r0, 0x8, 0x1) [ 253.138639][ C1] [ 253.141003][ C1] ================================ [ 253.146103][ C1] WARNING: inconsistent lock state [ 253.151628][ C1] 5.9.0-rc8-next-20201008-syzkaller #0 Not tainted [ 253.158117][ C1] -------------------------------- [ 253.163203][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 253.170043][ C1] syz-executor.0/8599 [HC0[0]:SC1[1]:HE0:SE0] takes: [ 253.176690][ C1] ffff88801ea14018 (&xa->xa_lock#8){+.?.}-{2:2}, at: xa_destroy+0xaa/0x350 [ 253.185409][ C1] {SOFTIRQ-ON-W} state was registered at: [ 253.191113][ C1] lock_acquire+0x1f2/0xaa0 [ 253.195740][ C1] _raw_spin_lock+0x2a/0x40 [ 253.200376][ C1] io_uring_add_task_file+0x207/0x430 [ 253.205814][ C1] io_uring_setup+0x2727/0x3660 [ 253.210743][ C1] do_syscall_64+0x2d/0x70 [ 253.215239][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 253.221190][ C1] irq event stamp: 4817 [ 253.225328][ C1] hardirqs last enabled at (4816): [] _raw_spin_unlock_irqrestore+0x6f/0x90 [ 253.235636][ C1] hardirqs last disabled at (4817): [] _raw_spin_lock_irqsave+0xa9/0xd0 [ 253.245558][ C1] softirqs last enabled at (3194): [] sk_common_release+0x138/0x390 [ 253.255254][ C1] softirqs last disabled at (4633): [] asm_call_irq_on_stack+0xf/0x20 [ 253.264953][ C1] [ 253.264953][ C1] other info that might help us debug this: [ 253.273002][ C1] Possible unsafe locking scenario: [ 253.273002][ C1] [ 253.280431][ C1] CPU0 [ 253.283691][ C1] ---- [ 253.286947][ C1] lock(&xa->xa_lock#8); [ 253.291276][ C1] [ 253.294709][ C1] lock(&xa->xa_lock#8); [ 253.299209][ C1] [ 253.299209][ C1] *** DEADLOCK *** [ 253.299209][ C1] [ 253.307331][ C1] 2 locks held by syz-executor.0/8599: [ 253.312761][ C1] #0: ffff888010470918 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: unmap_page_range+0xabe/0x2b50 [ 253.323017][ C1] #1: ffffffff8a554c80 (rcu_callback){....}-{0:0}, at: rcu_core+0x5d8/0x1240 [ 253.331878][ C1] [ 253.331878][ C1] stack backtrace: [ 253.337771][ C1] CPU: 1 PID: 8599 Comm: syz-executor.0 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 253.347546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.357581][ C1] Call Trace: [ 253.360866][ C1] [ 253.363757][ C1] dump_stack+0x198/0x1fb [ 253.368184][ C1] mark_lock.cold+0x32/0x74 [ 253.372677][ C1] ? lock_chain_count+0x20/0x20 [ 253.377507][ C1] ? mark_lock+0xf7/0x2420 [ 253.381921][ C1] ? lock_chain_count+0x20/0x20 [ 253.386840][ C1] ? kernel_text_address+0xbd/0xf0 [ 253.391929][ C1] ? __kernel_text_address+0x9/0x30 [ 253.397105][ C1] ? unwind_get_return_address+0x51/0x90 [ 253.402733][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 253.407910][ C1] __lock_acquire+0x118a/0x56d0 [ 253.412739][ C1] ? lock_chain_count+0x20/0x20 [ 253.417569][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 253.423548][ C1] lock_acquire+0x1f2/0xaa0 [ 253.428042][ C1] ? xa_destroy+0xaa/0x350 [ 253.432443][ C1] ? lock_release+0x890/0x890 [ 253.437117][ C1] ? _raw_spin_lock_irqsave+0xa9/0xd0 [ 253.442508][ C1] _raw_spin_lock_irqsave+0x94/0xd0 [ 253.447694][ C1] ? xa_destroy+0xaa/0x350 [ 253.452191][ C1] xa_destroy+0xaa/0x350 [ 253.456508][ C1] ? xas_pause+0x3b0/0x3b0 [ 253.460911][ C1] ? lock_acquire+0x1f2/0xaa0 [ 253.465585][ C1] ? lock_release+0x890/0x890 [ 253.470459][ C1] ? free_obj_work+0x5b0/0x5b0 [ 253.475543][ C1] __io_uring_free+0x60/0xc0 [ 253.481232][ C1] __put_task_struct+0xff/0x3f0 [ 253.486581][ C1] delayed_put_task_struct+0x1f6/0x340 [ 253.497235][ C1] rcu_core+0x645/0x1240 [ 253.501603][ C1] ? rcu_gp_kthread+0x1ca0/0x1ca0 [ 253.506917][ C1] ? mark_held_locks+0x9f/0xe0 [ 253.511846][ C1] ? hrtimer_interrupt+0x6f4/0x940 [ 253.517664][ C1] ? lock_is_held_type+0xbb/0xf0 [ 253.522845][ C1] __do_softirq+0x203/0xab6 [ 253.527332][ C1] asm_call_irq_on_stack+0xf/0x20 [ 253.532381][ C1] [ 253.535513][ C1] do_softirq_own_stack+0x9b/0xd0 [ 253.540514][ C1] irq_exit_rcu+0x235/0x280 [ 253.544997][ C1] sysvec_apic_timer_interrupt+0x51/0xf0 [ 253.550606][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 253.556585][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x60 [ 253.562716][ C1] Code: fe 01 00 65 8b 05 90 a3 8c 7e a9 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 35 8b 82 5c 14 00 00 85 c0 74 2b 8b 82 38 14 00 00 <83> f8 02 75 20 48 8b 8a 40 14 00 00 8b 92 3c 14 00 00 48 8b 01 48 [ 253.582300][ C1] RSP: 0018:ffffc90016b57930 EFLAGS: 00000246 [ 253.588345][ C1] RAX: 0000000000000000 RBX: 000000000052b700 RCX: ffffffff81a6ee51 [ 253.596307][ C1] RDX: ffff88806e0ea380 RSI: ffffffff81a6ed90 RDI: 0000000000000006 [ 253.604279][ C1] RBP: 1ffff92002d6af27 R08: 0000000000000000 R09: ffff88806e0ea387 [ 253.612250][ C1] R10: 000000000021ffff R11: 0000000000000000 R12: ffff888028267420 [ 253.620308][ C1] R13: 00007fb0b4350000 R14: ffffea0000000000 R15: 0000000000000000 [ 253.628278][ C1] ? vm_normal_page+0x201/0x380 [ 253.633127][ C1] ? vm_normal_page+0x140/0x380 [ 253.637974][ C1] vm_normal_page+0x140/0x380 [ 253.642630][ C1] ? __pte_alloc_kernel+0x200/0x200 [ 253.647808][ C1] unmap_page_range+0xbde/0x2b50 [ 253.652749][ C1] ? unmap_vmas+0x126/0x2e0 [ 253.657246][ C1] ? vm_normal_page_pmd+0x5b0/0x5b0 [ 253.662438][ C1] ? lock_downgrade+0x830/0x830 [ 253.667344][ C1] ? uprobe_munmap+0x1c/0x560 [ 253.672020][ C1] unmap_single_vma+0x198/0x300 [ 253.676848][ C1] unmap_vmas+0x168/0x2e0 [ 253.681156][ C1] ? zap_vma_ptes+0x100/0x100 [ 253.685811][ C1] exit_mmap+0x2b1/0x530 [ 253.690029][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 253.695986][ C1] ? check_preemption_disabled+0x50/0x130 [ 253.701744][ C1] ? kmem_cache_free.part.0+0x19f/0x1d0 [ 253.707308][ C1] ? __khugepaged_exit+0x2d9/0x3f0 [ 253.712414][ C1] __mmput+0x122/0x470 [ 253.716478][ C1] mmput+0x53/0x60 [ 253.720191][ C1] do_exit+0xa31/0x2930 [ 253.724437][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 253.729786][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 253.735138][ C1] ? preempt_schedule_common+0x59/0xc0 [ 253.740573][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 253.745922][ C1] do_group_exit+0x125/0x310 [ 253.750492][ C1] __x64_sys_exit_group+0x3a/0x50 [ 253.755497][ C1] do_syscall_64+0x2d/0x70 [ 253.759896][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 253.765781][ C1] RIP: 0033:0x45de29 [ 253.769651][ C1] Code: Unable to access opcode bytes at RIP 0x45ddff. [ 253.776471][ C1] RSP: 002b:00007ffe70653498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 253.784862][ C1] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045de29 [ 253.792812][ C1] RDX: 0000000000417781 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 253.800763][ C1] RBP: 0000000000000000 R08: 0000000097701de1 R09: 00007ffe706534f0 [ 253.808718][ C1] R10: ffffffff812b3c03 R11: 0000000000000246 R12: 0000000000000000 [ 253.816667][ C1] R13: 00007ffe706534f0 R14: 0000000000000000 R15: 00007ffe70653500 [ 253.824640][ C1] ? switch_fpu_return+0x2a3/0x390 17:02:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r0, r1, 0x0) 17:02:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 17:02:44 executing program 3: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x9, 0x20000000001, '\v'}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000100)=""/236, 0x18) 17:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000380)='\xf3e\t\xa9\xff\vtyux\x00\xfeL\x1f\xcc[\xaf\xf8\xa6\xc3\xda\xc0qw\xadG\x00\x10\x00\x00\xde\xce-w\x00\xc9\xa9%\x92\xf1J\xb7!\'D{!\x85\xb2V\x84\x16\x01s\xcfy*1\x85,\xcb\xa9\x1a\x85S\x0e%\xdb\x99\xc2\xe7\x1e1\x8bI+\x14U\xea\xb4\xa58\xe6\x80\x03\xdd\xbf\x95\xe0_\xe9e\xfb\xa7]\a\x81v\xa4\x85\x96 c\x1e\x13\xf6\x9e\x06Oh\xb4\xc3\x9a\a\x9b\x02\x00l\xc07[>#T\xde>\xdc\xb5\xdf\xe2\x82\xcd)\xb8ktR\x1a\v\xd9\xf6\x97\xd3`\xe5\x880\xb4\xf4\xe5\xfe\x9b\xed_w\xa8\x88 \xb5A\xf61H\xc9\x80\a- \xc7}\xdf\xa7\xec\x8f\xf8\xe0\xfb\x12\x9f\xae\xff\xf5\x8f\x94\xb3\x9d0\x1aq\xef\xdbg\xab\x00\x00\x00\x00I\x04\x17:\x1cV{\b\x19\xb59i\x9c\xb7E\x04+9\a\xa3\xba{v+\x93\xf8\xb3\xedp\x9e\x9e4\xbfr*\x10\x89e\x98\xea3(\xd8\x00\xc6\xcbX\xb8\xe4\x01/\xa2h\x17h\xb4\xd9\xc5Q\xe2p\x19\xec\xe0\xbe\x8f\x9c\xa5rv\x82\t\xb9(\r\xe51\x83\xc6\x02v{#[\x7f\xc2L\f;\xa2\xf7\x85\xbb\xdd\xbcC\xa7|s\xa6tM\xc8\xf6\xe9E\xb2m\x8b\xc2\xb4E\x84Nf\xb1\xa5\xfc\xc1jyl\xc4\xa1\x96\xb3\x9aM\x05\xed$\x83O2Y\x91\xe7\xe8\xfe\xccg\xa32\xa9\xc2\xe3\xe9\xf1\'ns\xd2\x92\x0e\xf9\xae\xfa\x8a\x06\xb6\"\xec\xbd_5\x84\xdd\xe9\xa4\xcc\x88\xf0\x02q2\b\xaa\xde\x13\x9a\x82\xf0\xad\xce\x1eQ\"\x12\xec\xdc,\x0e\xab\fn\xfe\x98*%\x00\x00lr!\x06\xf2\vB\x93\x17\xd9\xd8\xfa*@\x98C4gU\x95v&6\x93\x9eZU\xc7B\xec\x92\xd0,\xcf\xaf\x94\xb0\xba\xe2\xc7\xba\xf5\x86\xe8\xf5\x925\xc5\x8b\xefy\x84\xea\xa0\x0e\x83\n3\xd8\xea<\x92;G\xcb\x9b5\xc8v\xcd\xb10\x1d.\xf1DM\x15I\xefW\xa8/e\x00\xe1\x87\xd4Z\xb9\x15\x83\tUZ\x8c\x9d\xb6aN\xa8@_\ak}1J.\xd0\x86n@\xdb\x19^k\x92\x91\'7\x8e\x8b\xe3\xcf~\x9b\xbd\xf0\x9d\x9aP \xa6^\x04H\x7f\xfd\xf4\xf6\xd9\x1c|\xe4\x18\xf7\xa8,\xe8\xd56}_W\xc1\xa1\x7f\xc9\x8e?\x98\xe9\xce1N\x93\x04\x85\xb2\x15\x14\xec\'\xdch\xd5\xe3\x99\xec\x87\tZ\x16\xcf3\\\xee\xb04~\x92\xb7\xbb\x00b)\x9b\xf5\xc0&\xf8\x90\xd6O\xde\x95\xf6\xb2a\xba2J\x98[\x12C1\x8b\xad\x9d5\\\xdd\xc0\xe7\xcb\xf4\x99m\xdb\x89)\xfe?\xdc\xc5]\x17\xed\xca\xbc*\xbe\xbdt\xda8\x8b\x99 \x95\x83r-\xb8V\x16^\'\xb5\xbdD4\xb6\x8a\xa3\xca\xcb/d\xcc\"\xdc\xac\xc2\x9fM=W\x9d\x14=', 0x4) lseek(r0, 0x8, 0x1) 17:02:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 17:02:44 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @timestamp, @mss, @window, @mss, @sack_perm, @window, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x7fffffdf}, 0x14) shutdown(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 17:02:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r0, r1, 0x0) 17:02:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 17:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000380)='\xf3e\t\xa9\xff\vtyux\x00\xfeL\x1f\xcc[\xaf\xf8\xa6\xc3\xda\xc0qw\xadG\x00\x10\x00\x00\xde\xce-w\x00\xc9\xa9%\x92\xf1J\xb7!\'D{!\x85\xb2V\x84\x16\x01s\xcfy*1\x85,\xcb\xa9\x1a\x85S\x0e%\xdb\x99\xc2\xe7\x1e1\x8bI+\x14U\xea\xb4\xa58\xe6\x80\x03\xdd\xbf\x95\xe0_\xe9e\xfb\xa7]\a\x81v\xa4\x85\x96 c\x1e\x13\xf6\x9e\x06Oh\xb4\xc3\x9a\a\x9b\x02\x00l\xc07[>#T\xde>\xdc\xb5\xdf\xe2\x82\xcd)\xb8ktR\x1a\v\xd9\xf6\x97\xd3`\xe5\x880\xb4\xf4\xe5\xfe\x9b\xed_w\xa8\x88 \xb5A\xf61H\xc9\x80\a- \xc7}\xdf\xa7\xec\x8f\xf8\xe0\xfb\x12\x9f\xae\xff\xf5\x8f\x94\xb3\x9d0\x1aq\xef\xdbg\xab\x00\x00\x00\x00I\x04\x17:\x1cV{\b\x19\xb59i\x9c\xb7E\x04+9\a\xa3\xba{v+\x93\xf8\xb3\xedp\x9e\x9e4\xbfr*\x10\x89e\x98\xea3(\xd8\x00\xc6\xcbX\xb8\xe4\x01/\xa2h\x17h\xb4\xd9\xc5Q\xe2p\x19\xec\xe0\xbe\x8f\x9c\xa5rv\x82\t\xb9(\r\xe51\x83\xc6\x02v{#[\x7f\xc2L\f;\xa2\xf7\x85\xbb\xdd\xbcC\xa7|s\xa6tM\xc8\xf6\xe9E\xb2m\x8b\xc2\xb4E\x84Nf\xb1\xa5\xfc\xc1jyl\xc4\xa1\x96\xb3\x9aM\x05\xed$\x83O2Y\x91\xe7\xe8\xfe\xccg\xa32\xa9\xc2\xe3\xe9\xf1\'ns\xd2\x92\x0e\xf9\xae\xfa\x8a\x06\xb6\"\xec\xbd_5\x84\xdd\xe9\xa4\xcc\x88\xf0\x02q2\b\xaa\xde\x13\x9a\x82\xf0\xad\xce\x1eQ\"\x12\xec\xdc,\x0e\xab\fn\xfe\x98*%\x00\x00lr!\x06\xf2\vB\x93\x17\xd9\xd8\xfa*@\x98C4gU\x95v&6\x93\x9eZU\xc7B\xec\x92\xd0,\xcf\xaf\x94\xb0\xba\xe2\xc7\xba\xf5\x86\xe8\xf5\x925\xc5\x8b\xefy\x84\xea\xa0\x0e\x83\n3\xd8\xea<\x92;G\xcb\x9b5\xc8v\xcd\xb10\x1d.\xf1DM\x15I\xefW\xa8/e\x00\xe1\x87\xd4Z\xb9\x15\x83\tUZ\x8c\x9d\xb6aN\xa8@_\ak}1J.\xd0\x86n@\xdb\x19^k\x92\x91\'7\x8e\x8b\xe3\xcf~\x9b\xbd\xf0\x9d\x9aP \xa6^\x04H\x7f\xfd\xf4\xf6\xd9\x1c|\xe4\x18\xf7\xa8,\xe8\xd56}_W\xc1\xa1\x7f\xc9\x8e?\x98\xe9\xce1N\x93\x04\x85\xb2\x15\x14\xec\'\xdch\xd5\xe3\x99\xec\x87\tZ\x16\xcf3\\\xee\xb04~\x92\xb7\xbb\x00b)\x9b\xf5\xc0&\xf8\x90\xd6O\xde\x95\xf6\xb2a\xba2J\x98[\x12C1\x8b\xad\x9d5\\\xdd\xc0\xe7\xcb\xf4\x99m\xdb\x89)\xfe?\xdc\xc5]\x17\xed\xca\xbc*\xbe\xbdt\xda8\x8b\x99 \x95\x83r-\xb8V\x16^\'\xb5\xbdD4\xb6\x8a\xa3\xca\xcb/d\xcc\"\xdc\xac\xc2\x9fM=W\x9d\x14=', 0x4) lseek(r0, 0x8, 0x1) 17:02:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 17:02:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r0, r1, 0x0) 17:02:44 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @timestamp, @mss, @window, @mss, @sack_perm, @window, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x7fffffdf}, 0x14) shutdown(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 17:02:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r0, r1, 0x0) 17:02:45 executing program 4: r0 = memfd_create(&(0x7f0000000380)='\xf3e\t\xa9\xff\vtyux\x00\xfeL\x1f\xcc[\xaf\xf8\xa6\xc3\xda\xc0qw\xadG\x00\x10\x00\x00\xde\xce-w\x00\xc9\xa9%\x92\xf1J\xb7!\'D{!\x85\xb2V\x84\x16\x01s\xcfy*1\x85,\xcb\xa9\x1a\x85S\x0e%\xdb\x99\xc2\xe7\x1e1\x8bI+\x14U\xea\xb4\xa58\xe6\x80\x03\xdd\xbf\x95\xe0_\xe9e\xfb\xa7]\a\x81v\xa4\x85\x96 c\x1e\x13\xf6\x9e\x06Oh\xb4\xc3\x9a\a\x9b\x02\x00l\xc07[>#T\xde>\xdc\xb5\xdf\xe2\x82\xcd)\xb8ktR\x1a\v\xd9\xf6\x97\xd3`\xe5\x880\xb4\xf4\xe5\xfe\x9b\xed_w\xa8\x88 \xb5A\xf61H\xc9\x80\a- \xc7}\xdf\xa7\xec\x8f\xf8\xe0\xfb\x12\x9f\xae\xff\xf5\x8f\x94\xb3\x9d0\x1aq\xef\xdbg\xab\x00\x00\x00\x00I\x04\x17:\x1cV{\b\x19\xb59i\x9c\xb7E\x04+9\a\xa3\xba{v+\x93\xf8\xb3\xedp\x9e\x9e4\xbfr*\x10\x89e\x98\xea3(\xd8\x00\xc6\xcbX\xb8\xe4\x01/\xa2h\x17h\xb4\xd9\xc5Q\xe2p\x19\xec\xe0\xbe\x8f\x9c\xa5rv\x82\t\xb9(\r\xe51\x83\xc6\x02v{#[\x7f\xc2L\f;\xa2\xf7\x85\xbb\xdd\xbcC\xa7|s\xa6tM\xc8\xf6\xe9E\xb2m\x8b\xc2\xb4E\x84Nf\xb1\xa5\xfc\xc1jyl\xc4\xa1\x96\xb3\x9aM\x05\xed$\x83O2Y\x91\xe7\xe8\xfe\xccg\xa32\xa9\xc2\xe3\xe9\xf1\'ns\xd2\x92\x0e\xf9\xae\xfa\x8a\x06\xb6\"\xec\xbd_5\x84\xdd\xe9\xa4\xcc\x88\xf0\x02q2\b\xaa\xde\x13\x9a\x82\xf0\xad\xce\x1eQ\"\x12\xec\xdc,\x0e\xab\fn\xfe\x98*%\x00\x00lr!\x06\xf2\vB\x93\x17\xd9\xd8\xfa*@\x98C4gU\x95v&6\x93\x9eZU\xc7B\xec\x92\xd0,\xcf\xaf\x94\xb0\xba\xe2\xc7\xba\xf5\x86\xe8\xf5\x925\xc5\x8b\xefy\x84\xea\xa0\x0e\x83\n3\xd8\xea<\x92;G\xcb\x9b5\xc8v\xcd\xb10\x1d.\xf1DM\x15I\xefW\xa8/e\x00\xe1\x87\xd4Z\xb9\x15\x83\tUZ\x8c\x9d\xb6aN\xa8@_\ak}1J.\xd0\x86n@\xdb\x19^k\x92\x91\'7\x8e\x8b\xe3\xcf~\x9b\xbd\xf0\x9d\x9aP \xa6^\x04H\x7f\xfd\xf4\xf6\xd9\x1c|\xe4\x18\xf7\xa8,\xe8\xd56}_W\xc1\xa1\x7f\xc9\x8e?\x98\xe9\xce1N\x93\x04\x85\xb2\x15\x14\xec\'\xdch\xd5\xe3\x99\xec\x87\tZ\x16\xcf3\\\xee\xb04~\x92\xb7\xbb\x00b)\x9b\xf5\xc0&\xf8\x90\xd6O\xde\x95\xf6\xb2a\xba2J\x98[\x12C1\x8b\xad\x9d5\\\xdd\xc0\xe7\xcb\xf4\x99m\xdb\x89)\xfe?\xdc\xc5]\x17\xed\xca\xbc*\xbe\xbdt\xda8\x8b\x99 \x95\x83r-\xb8V\x16^\'\xb5\xbdD4\xb6\x8a\xa3\xca\xcb/d\xcc\"\xdc\xac\xc2\x9fM=W\x9d\x14=', 0x4) lseek(r0, 0x8, 0x1) 17:02:45 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @timestamp, @mss, @window, @mss, @sack_perm, @window, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x7fffffdf}, 0x14) shutdown(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 17:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 17:02:45 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @timestamp, @mss, @window, @mss, @sack_perm, @window, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x7fffffdf}, 0x14) shutdown(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 17:02:45 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 17:02:45 executing program 1: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) 17:02:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x25, &(0x7f0000000b00)={0x0, @local, @empty}, 0xc) 17:02:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 17:02:45 executing program 1: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) 17:02:45 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) inotify_init1(0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 17:02:45 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) 17:02:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x25, &(0x7f0000000b00)={0x0, @local, @empty}, 0xc) 17:02:45 executing program 1: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) [ 254.666462][ T8683] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 254.701140][ T8683] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 17:02:45 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) inotify_init1(0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 17:02:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x25, &(0x7f0000000b00)={0x0, @local, @empty}, 0xc) 17:02:45 executing program 1: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) [ 254.778041][ T8205] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 255.148139][ T8205] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 255.158120][ T8205] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 255.167825][ T8205] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 255.418289][ T8205] usb 5-1: string descriptor 0 read error: -22 [ 255.424575][ T8205] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.434518][ T8205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.458883][ T8669] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 255.478637][ T8205] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 255.682048][ T8205] usb 5-1: USB disconnect, device number 2 [ 256.458038][ T7334] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 256.818129][ T7334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 256.828173][ T7334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.837966][ T7334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 257.108098][ T7334] usb 5-1: string descriptor 0 read error: -22 [ 257.114363][ T7334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.124276][ T7334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.148963][ T8669] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 257.168655][ T7334] cdc_ether: probe of 5-1:1.0 failed with error -22 17:02:48 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) inotify_init1(0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 17:02:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 17:02:48 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) inotify_init1(0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 17:02:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x25, &(0x7f0000000b00)={0x0, @local, @empty}, 0xc) 17:02:48 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) 17:02:48 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 257.378309][ T7334] usb 5-1: USB disconnect, device number 3 17:02:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) [ 257.441682][ T8742] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 257.479419][ T8742] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 17:02:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 17:02:48 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) inotify_init1(0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 17:02:48 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) inotify_init1(0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 17:02:48 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) 17:02:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 257.595673][ T8760] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 257.622548][ T8760] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 17:02:48 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) inotify_init1(0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 17:02:48 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) [ 257.711805][ T8768] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 257.737904][ T8768] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 17:02:48 executing program 1: syz_emit_vhci(0x0, 0x0) [ 257.818130][ T7334] usb 5-1: new low-speed USB device number 4 using dummy_hcd 17:02:48 executing program 1: syz_emit_vhci(0x0, 0x0) 17:02:48 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) [ 258.178179][ T7334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 258.188271][ T7334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.200120][ T7334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 258.478346][ T7334] usb 5-1: string descriptor 0 read error: -22 [ 258.484642][ T7334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.502897][ T7334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.549155][ T8748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 258.569003][ T7334] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 258.790304][ T7334] usb 5-1: USB disconnect, device number 4 17:02:50 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 17:02:50 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) 17:02:50 executing program 1: syz_emit_vhci(0x0, 0x0) 17:02:50 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) 17:02:50 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) 17:02:50 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) 17:02:50 executing program 1: syz_emit_vhci(0x0, 0x0) 17:02:50 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) [ 259.648224][ T8221] usb 5-1: new low-speed USB device number 5 using dummy_hcd 17:02:50 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) 17:02:50 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) [ 260.029048][ T8221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 260.078324][ T8221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 17:02:50 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) [ 260.121529][ T8221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt 17:02:50 executing program 2: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) [ 260.448297][ T8221] usb 5-1: string descriptor 0 read error: -22 [ 260.454551][ T8221] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.501693][ T8221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.559530][ T8820] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 260.579262][ T8221] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 260.842436][ T8221] usb 5-1: USB disconnect, device number 5 17:02:52 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 17:02:52 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) 17:02:52 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) 17:02:52 executing program 2: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) 17:02:52 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) 17:02:52 executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) [ 261.738633][ T8221] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 262.124712][ T8221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 262.172024][ T8221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 17:02:53 executing program 0: perf_event_open(&(0x7f00000013c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000140)={{r0}, "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"}) setgroups(0x400000000000033d, &(0x7f0000000100)=[0x0]) [ 262.300948][ T8221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt 17:02:53 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x4}}]}}]}, 0x44}}, 0x0) 17:02:53 executing program 2: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) 17:02:53 executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xc00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x101d0) 17:02:53 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r1, 0x6, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x90}) 17:02:53 executing program 0: perf_event_open(&(0x7f00000013c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000140)={{r0}, "832f1bae9df4e65864daf91582fc3c656fc1752293a373b34ad334907c0e0257a0106eab684552792f72c1157b55ae677c4878c6c810d05e3c11d7d94313d15655682dcc5e0c40ca26304533669c9befa22e37f4ade7569c39c52f46923f3aae205c8d5b753c52226931afec9b29dfc1d3be5bd6287a067d82de8d4a7832e6100867d7cad9fabfb9021bf2e6bda4a7e0c626174bcd896783dbea7f03ffb17579e0553211ee56fd169ea6cdb67cc9dfc39a07ee75a6f20da9e53b7f78d71976f70b2b3f1543ad777bddaa46047f8e032e84a5b23d3381fea7546b2ce9d25c25688835a00c7d86ce39e615fe0641017be7e4eb06093a7c1a1ae0114768a6891227f4271902b3dd5d755301b911002793c94fde84ab5fd4df81517d1604300ebd9f403eadd21575cbaef43d02ef01c0c57d3dce195023c14810aca454591b21b45ccdc074c7bffd66d200f2dd818c3de5286e86909bdda36ff43333a023e7940b2837e5392d688875cd6c4b9732330e040e89c40098f8143eaa6bb5e61c8211ba679521a7be775d4e34af55fda5d9f099cd5761b684cc7d7f9dde301180146dc69c1e6d17a37fee1d17f4dce22dd247fa1cfaa7337f221df5366a8d491d38ba3db0234290e517eb8a570abd55854b9edac5989e88a19d679690001d8c22a36f7f6989eb9b197937c3ec64d7230b19c9b50ff050c68875e15bfc51f54d1215bb44cd602aecfa0e22e259853faba6069c95a85582b1604aef3ea06a8b629000449c02180258af4785d05ae3ec07350f8956d0ac34f586e39a62021bf4b87959ac2199c0858e99733989d34ea9d6a0585b1775ddfc557d633d3af51a1ce84285a173695789342d90c4fbd3ce2d49231f23fa7beaac07ccd0db3cbfa0a0db14403565a51ef76f69dd4a8d6e1d2dcb6171307837af0ee870cf48bc8b46872f41b8ab47ee36842e14910c47a6cd2363771cb05d69ca5662c48bd68a57dd2422756d0df51a788803a8bc75405e68197ae446187c106e7f18b9601e680c369707cdb831aee32d7068629c5d2198abf20349c74b4f4590a13668a2e1ba9ed7e3db22bd8f4395642261b4de72f7f9a21faccadbf57edfd44ea092ed1cccc79504b883bf7c94a0d39598f40ec26a1b4bb090e21f037321a8cb408b30452c25c510d6d99235f2de064d41730db2d3481719fbfa7bd4940684c68ec9158e546ae495117d2a6b830b9df6ff085ac1b38ef6d42ee86a196ac347dc34940170464d51e5317931ddc33bb9977f1d429c8a31fda38fdcd506b3a3743847932a265a39137186e782268d46f724d6a76e361bbd7d2309bb7f9ed3b575c6200cb800017ada6e474a0c28d9944f0483ca4d01a3f7a275575683711b7ede7921fbbcfb1fab144e36fcf5017f1132163e9017af521862333de1be52ff0545e3f434df1bfaffc9bd7318b78de86eb3a745b556c0f9af7bb911ae6ab7ab3e3d98a284d2d3a96187eb3de48419a5a2216434b77d7774d685ea8a042199412c3f5c36355ba5536b39d7d333519f6dfd0c43e5b9c2f43290fce91cefa34745e32eccd6b65568ae253e652b11b5bfa1f43170c09debf7e7d9aa8f3b1819bf13d88e4e574af899621e1a59652e2d061b83c69f8c7c19d2ca2a3a581b410387ae706faf1e62b8a49fa526b51ce889f69f732902d1bbccb4f9a8e3ea11df439a9c6b424ca139e5a92b35d966668e5df2072b3faaf4b1d0b4d4d0a82391676e06a3c34157d154a68ac144977d89988be9173a764ee2ff45496a3cd9dfb0a82d6e382f201a870ed9d33a99a09274f68c0641358a73f8864127c2c8232c348fc914f7b3c5166cd18be117d6d49d2e7ebb5fd224c740405ff91231117b01d084fd012a14213a1d95d5e684aa6e8db84335d07d6f9ca7bed2937d3eff5d3d219a7fa1e4fe9f42ac889a7d930974d80bd97ee7ddaa059081b4294d615145ea300706349e7642d103adb9b7bf7cde6313fb94ae60e76d2643660d62b4adceaa3b8532a128c44e062bbcc246f78f3a1032ad76f666b4bdb1222b158bedb7bf21b098bd1dfd2439b8cbe649211edd3ef5673c4ac6a639624255fbfb9937220a084ed0a7c8b64f07743ef621170226b5d99dc34432415d5bc07413f130bbbee726595e9e3e8d8b72bde10d25a0837dad60c733cebbb43053f6c2f544f491b8bda94ef3945fbcb6fcab80b08743a29c376a7740b8a3a946b749e0bad22fd8b94b2bf4b1f0d7deb19de93cfd5b18be465fb2fec6857d135c2b60ca354428ffe7ddab6e769534d6c25291dc9eee8e7c07bcd156d828671098a6e4f80348942d0ec28686759029261a42a7145388d2afe93d82cfb421acd6bfda778981252e8e446668673494d6db9f43a45c9f0b60cded84a1dd8d24a09e350733c0eeb1f4d6f47856ffd6f5bcd9958193687893c3b12b1ceb3266575f112e95fa55b7de30fac86d7a0d80fc5e9f3488b98c4d945db7517b70367cd7c34b7cef94f058c9eb413c7ed11aa04bf2a2b10c79232db790d6e173040fe3553eb2b68e4379aec11f486667bf3f0acd6a26f77df430a79f6f2a6b1e2338abe69c8bfb60f15c50645b134ac0c9d1e6475c66ea9d889e874493737037d5c37f9b071154ff80e88247c5559725105a2c34bead3377b26ea3087fc2a07952a2fb7cd66961364a171ec6b057a034f1611fed1f1ad5ae12b584e5606a01acf00442d5634eed5b83060e66bae32aea0d06ccb64bc0f8f9f80c5f68aad8fdd21eac9c05114578470277ef1c495f2b2ba63c5c2e099e3e78b4bb5b6b44fd4bcc84307ebdd266de25024891c5f515f6154cf2399af6d5540098a80f6f9eadd82b8075a12f5c450d5bcb2099b0490a85fcb6f5691d00879a831b50b29ec17a7b4cb07e9196b1a660632fa438b9a5479503249ccd005362ec6e5a2ac2cfdffc875bcefb8ad073a4883ad3f02b40d79134736df4df749deb926f9fe87d686681c9245d8c151889b9c1ab129c8fb8ff515a97913462be28938312e18d0e22ca4203f7ec4328e7e9ef002939a8b39899377f4ac746365b398d660cb6fb9f61684c8e0bac3219c39666d11e8fcd87b3bd1ab62da0a2f519b414ebd798816127250043dde8d38c4ac9a8ec59c42d50886891b6a8409541d0dbd4970923a1657d99511cfc817e65c43ea1452270b704ef9952bfd153fac1a8e4eca9863a56d16374de5278e40113e571b6b0cb8919ce3dfde3144192b50a780afc89b1b76a2bfa7d378f27d943190abc358fcd430902a775b5f3d24c86734d6f4727f4cba838fc6ad06480358af42c1181f7e6c41109f3caa76902684ff7e870a82c42c6218589f7290da5a9eacca3c01adb2660f7b168a9a3009a3efdd808ba3ac63bcf3f54208fe1c55ea67489a070df21c78b904e2d6b30aac237f711930ee16cf55ae04823c20456a282732dd3e634ed57680660fa74b30c57dd9279752981035abc16111a262e528bf0203dfd2b09136bbf1ac8277cbc26533714084bf7fc1f9ec86836cf4a080b084b3c12173a3d0ae221416815d439850d5ea16b85de144f58d8f59c64599affb0d695cf24f6d1482d8d48bd8b479fc9607eb1b75fa66ab0a9d7e9827815fab533ed2eba1cbd82438b28a7867559a8623564367222a8fbad43899e7546a4c0827702ca4445b44e6c2a3c5c6d2e1160e6b1736f25ea016682908ed380a7a1a2d3ea770a7e542d7d03f86260d1cf937d25c49a1307cc2a5a9df677139572e325efb118d09389ae1b9df6e008f9f96824e4e9fb7474dd035c4e7cf14e602e2af38c78bec1c88437971b40e685211fb5f778c39762e7cabf79a48d3fe56ec77c3dd769e4f2ab032feb2d16f64ccf116c81c5e3c053de6690ae1bf5f9ce3d92697fb413975ffcf23af82658477b00d007c953d24f81974ba4a049c0ddc0a3d0626345313f776402ebb032de255fa95a7f10c89f52cbae8438e2a9e1afef6fe28c8b7cb2330bfc810792c474d72871ea0acba3f5c82eff96f0558c662d8e2420c675a5e3b4c9fab1c4ee1d1efb8d8d0e996492d571c37328325ed4a6800ec0e20d64d9cbb3875497a0b2310caa5c107e8ab5e465a082828850b62fbb628e5a4e0623a5ff08b41dc402ba27e1007aba0a28d6f73b388c1e03d0d60f699e180563c9cda51a74efa0865efb43128dfa422ad694f5f5c7b6a9382d64dae2616b0e1948c29c22ad6406a7e59aa00484f14e186a7dd71667bcfa653ef526fc564b6d5ef231e06c584af44f45b276a78547fca9c31442eb0aa8f30ad3a7ee80398f9fc2d55d6cd5457c557e8092f8b1c73dbb17836ebb22c4b9ed8d84ef0beff5367ad088d19cb8bf90c8da8d4c4e68fb7716eb9fb2deb3c63c56f37d27318cdd0df8bbf215d4ee32db4639d3fa37ada895a3f95a4b8303851f4ed9c51346f51398f2e7a99914686a41e86afa7b8c61ef3d990882d6c4587d6be6fa02515b09f52cd526793fe8d2945b9f400b93425862e903b4f7695909367ad7c6bfaffeb18075c15ecbab4df9067cd1d3513d004cc50c4616c4b07e198999daa2ece18cd1e50ea2e3cda97e6dff460ad7b6305c3c42323ba2966d863735b5313001839118181a64313d592ef0e6fb46a980dceb07054f44d583d61adbe0cd27f8ac932e67f6e575269c4f8c01add22d2aa2efe7d4065aae54b94d2104382d4714f7241f3897360538555bd89f156fbc1c79b105023cc547e6514eb55c0c9ef65989a9414737390a806b54c57613c32e91eca47f7808dddeff8546e72370c926ebda1dbb156e4b66055d9f7dc27be922398af8f26b55bdf271f87138673319c5204ca35c3b515e202593ff88f86379ecee8cc6c633316616dff11d35b10093f18f9597fa70e68709c92a9c4d0dd2312c9bb4ddcef93e0e835ac25d81bfbd79a5043126e4805a86ef537b9d7b31a0de317a541eed362ef68d2c99b10e1eef82cf5b8de5ebbfcb9d8041c63b6c8feb537a33eb29649192d2258d073495667c04fe177f90458a1f0ab30ea329f18fcb805385f3efa5bc6238104cbb924454b7570b5a8f7cd148401473f717566fce683ed42cae9729a429e54e6fb52c713f5b10d5fa12a0ae5c4da9233a1732ba0da601ee3b0bff51c78f34e3ce94ae40d01e06cd0238db24b908a7a0b45cf11b2da0c547a67dd2cf82532963ea7418c1417c6877a62895e8e7a1d08d7b43942af8f7fcf3526d9b0c58b2674abfd872b34f34b96d6a15bd52a341292109f4c60b688c47cdc58acd45a3058a816315ada0d22d200af1aefbd3e29230f62df3d7c6ec00a5e49f80bd88d3bef48e712a3ff5f89c87d833ccb027e263041c066c8283a2798fc2daeed03e4ea8ce5177ab1f44a209c31a3ae3e9dae4065330f038552e9be34ed850547fdc0a96662177be21427a29a523406680c18bcb041cddf53aff449bc22ec18aecb9147a7cb70a649e8da584996fd6b040b041be8e168cc8e41d573ba1b956d6fea7b3ab917fa711320e9adacdf99ace3a6747ad055b7f1e21afeda24b3170f120b02a13b7fb5a017ef5545ae8da3fcb9d0a66b85862b8454db7d6b03884f0572e9724ace9b6dfc9f8f13697ee557dfcaee24492bde8b5139de8c612634a5a0e95365a811f29a74fdce97c31b332a7e346e2b3ee6c90de0392701bbc4f5a94eaa066299f85a2ee9e2c3efa06c6c63043dcf9d932de1a2170b2375872897665fa92e3584879e30e23a23384366b1e5772e94025d5b2987c14f82c17d3365ecf17b1e319f38aaef34eba14ec15885309763900369085ba9c153a53"}) setgroups(0x400000000000033d, &(0x7f0000000100)=[0x0]) [ 262.598483][ T8221] usb 5-1: string descriptor 0 read error: -22 [ 262.604963][ T8221] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.674870][ T8221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.738898][ T8876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 262.759247][ T8221] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 263.033285][ T23] usb 5-1: USB disconnect, device number 6