[ OK ] Reached target Basic System. [ OK ] Started Regular background program processing daemon. Starting OpenBSD Secure Shell server... Starting Permit User Sessions... Starting getty on tty2-tty6 if dbus and logind are not available... Starting System Logging Service... [ OK ] Started Permit User Sessions. [ OK ] Started System Logging Service. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. Starting Load/Save RF Kill Switch Status... [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. 2020/12/10 04:31:42 fuzzer started 2020/12/10 04:31:43 dialing manager at 10.128.0.26:36953 2020/12/10 04:31:43 syscalls: 3458 2020/12/10 04:31:43 code coverage: enabled 2020/12/10 04:31:43 comparison tracing: enabled 2020/12/10 04:31:43 extra coverage: enabled 2020/12/10 04:31:43 setuid sandbox: enabled 2020/12/10 04:31:43 namespace sandbox: enabled 2020/12/10 04:31:43 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/10 04:31:43 fault injection: enabled 2020/12/10 04:31:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/10 04:31:43 net packet injection: enabled 2020/12/10 04:31:43 net device setup: enabled 2020/12/10 04:31:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/10 04:31:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/10 04:31:43 USB emulation: enabled 2020/12/10 04:31:43 hci packet injection: enabled 2020/12/10 04:31:43 wifi device emulation: enabled 04:35:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001380)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 04:35:30 executing program 1: mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = openat$zero(0xffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x212800, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = gettid() sched_rr_get_interval(r1, &(0x7f00000013c0)) r2 = openat$zero(0xffffff9c, &(0x7f00000010c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) sched_rr_get_interval(r1, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) r5 = socket(0xb, 0x80000, 0x400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'rose0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xcc, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84}, 0x4048000) getsockname$packet(r2, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'tunl0\x00', 0x0}) r9 = socket(0xb, 0x80000, 0x400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'rose0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xcc, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84}, 0x4048000) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22101}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x118, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3ff}, @ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x401}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7e71}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 04:35:30 executing program 2: socketpair(0x10, 0x2, 0x2, &(0x7f0000000080)) 04:35:30 executing program 3: prctl$PR_SET_NAME(0x3a, 0x0) 04:35:31 executing program 4: prctl$PR_SET_NAME(0x1a, 0x0) syzkaller login: [ 301.704114][ T8523] IPVS: ftp: loaded support on port[0] = 21 [ 301.943163][ T8525] IPVS: ftp: loaded support on port[0] = 21 [ 302.068538][ T8523] chnl_net:caif_netlink_parms(): no params data found 04:35:31 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 302.288907][ T8527] IPVS: ftp: loaded support on port[0] = 21 [ 302.482138][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.491349][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.502582][ T8523] device bridge_slave_0 entered promiscuous mode [ 302.515135][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.522907][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.531495][ T8523] device bridge_slave_1 entered promiscuous mode [ 302.622708][ T8529] IPVS: ftp: loaded support on port[0] = 21 [ 302.677000][ T8523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.726654][ T8525] chnl_net:caif_netlink_parms(): no params data found [ 302.763900][ T8523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.779545][ T8531] IPVS: ftp: loaded support on port[0] = 21 [ 302.873051][ T8523] team0: Port device team_slave_0 added [ 302.885749][ T8523] team0: Port device team_slave_1 added [ 302.940583][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.947602][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.974754][ T8523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.021809][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.028816][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.055350][ T8523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.176540][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.184253][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.192622][ T8525] device bridge_slave_0 entered promiscuous mode [ 303.228708][ T8523] device hsr_slave_0 entered promiscuous mode [ 303.235575][ T8523] device hsr_slave_1 entered promiscuous mode [ 303.244735][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.253164][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.261507][ T8525] device bridge_slave_1 entered promiscuous mode [ 303.287091][ T8525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.306865][ T8525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.334656][ T8527] chnl_net:caif_netlink_parms(): no params data found [ 303.357405][ T8525] team0: Port device team_slave_0 added [ 303.431031][ T8525] team0: Port device team_slave_1 added [ 303.477675][ T8704] IPVS: ftp: loaded support on port[0] = 21 [ 303.643371][ T8525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.656870][ T8525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.683205][ T8525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.695249][ T56] Bluetooth: hci0: command 0x0409 tx timeout [ 303.763755][ T8525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.771509][ T8525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.798909][ T8525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.834452][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 303.898785][ T8531] chnl_net:caif_netlink_parms(): no params data found [ 303.930416][ T56] Bluetooth: hci1: command 0x0409 tx timeout [ 303.953612][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.960870][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.969147][ T8527] device bridge_slave_0 entered promiscuous mode [ 304.014587][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.021979][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.029844][ T8527] device bridge_slave_1 entered promiscuous mode [ 304.053648][ T8525] device hsr_slave_0 entered promiscuous mode [ 304.061752][ T8525] device hsr_slave_1 entered promiscuous mode [ 304.068548][ T8525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.076957][ T8525] Cannot create hsr debugfs directory [ 304.138103][ T8527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.188790][ T8527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.251340][ T3203] Bluetooth: hci2: command 0x0409 tx timeout [ 304.332265][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.339464][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.349054][ T8529] device bridge_slave_0 entered promiscuous mode [ 304.365312][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.372825][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.381752][ T8529] device bridge_slave_1 entered promiscuous mode [ 304.411907][ T8527] team0: Port device team_slave_0 added [ 304.421491][ T8527] team0: Port device team_slave_1 added [ 304.490613][ T3203] Bluetooth: hci3: command 0x0409 tx timeout [ 304.562433][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.569656][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.586127][ T8531] device bridge_slave_0 entered promiscuous mode [ 304.622309][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.649377][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.660875][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.669215][ T8531] device bridge_slave_1 entered promiscuous mode [ 304.684874][ T8523] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.697053][ T8704] chnl_net:caif_netlink_parms(): no params data found [ 304.709803][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.722562][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.729551][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.757355][ T3875] Bluetooth: hci4: command 0x0409 tx timeout [ 304.758738][ T8527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.799471][ T8523] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 304.822603][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.829606][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.857664][ T8527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.881428][ T8531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.895818][ T8523] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 304.923461][ T8531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.956827][ T8523] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.976454][ T8529] team0: Port device team_slave_0 added [ 305.009785][ T8529] team0: Port device team_slave_1 added [ 305.041601][ T8531] team0: Port device team_slave_0 added [ 305.062833][ T8525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.076964][ T8527] device hsr_slave_0 entered promiscuous mode [ 305.085380][ T8527] device hsr_slave_1 entered promiscuous mode [ 305.092313][ T8527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.100000][ T8527] Cannot create hsr debugfs directory [ 305.107427][ T8531] team0: Port device team_slave_1 added [ 305.144735][ T8525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.166697][ T8531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.173840][ T8531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.201317][ T8531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.233848][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.240993][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.267381][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.292749][ T8525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.309703][ T8525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.327191][ T8531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.334550][ T8531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.361032][ T8531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.389925][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.400310][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.427801][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.459458][ T3875] Bluetooth: hci5: command 0x0409 tx timeout [ 305.472517][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.479619][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.488620][ T8704] device bridge_slave_0 entered promiscuous mode [ 305.539794][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.548519][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.558588][ T8704] device bridge_slave_1 entered promiscuous mode [ 305.597439][ T8531] device hsr_slave_0 entered promiscuous mode [ 305.606855][ T8531] device hsr_slave_1 entered promiscuous mode [ 305.615496][ T8531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.623758][ T8531] Cannot create hsr debugfs directory [ 305.635304][ T8529] device hsr_slave_0 entered promiscuous mode [ 305.647744][ T8529] device hsr_slave_1 entered promiscuous mode [ 305.654690][ T8529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.662721][ T8529] Cannot create hsr debugfs directory [ 305.685884][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.700564][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.770852][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 305.823999][ T8704] team0: Port device team_slave_0 added [ 305.865461][ T8704] team0: Port device team_slave_1 added [ 305.948741][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.956786][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.983984][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.010629][ T3133] Bluetooth: hci1: command 0x041b tx timeout [ 306.033412][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.043342][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.070519][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.167677][ T8525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.260785][ T8704] device hsr_slave_0 entered promiscuous mode [ 306.271427][ T8704] device hsr_slave_1 entered promiscuous mode [ 306.278149][ T8704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.286433][ T8704] Cannot create hsr debugfs directory [ 306.312237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.323381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.330780][ T3133] Bluetooth: hci2: command 0x041b tx timeout [ 306.364741][ T8527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 306.389198][ T8527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 306.414760][ T8525] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.445601][ T8523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.453463][ T8527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 306.464252][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.474768][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.484257][ T3203] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.491724][ T3203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.501597][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.546372][ T8527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 306.559254][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.577736][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.586837][ T3203] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.594123][ T3203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.602720][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.621941][ T56] Bluetooth: hci3: command 0x041b tx timeout [ 306.666257][ T8523] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.678450][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.688444][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.698872][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.708042][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.716846][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.726969][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.784842][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.795867][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.806318][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.816156][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.825860][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.833103][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.850699][ T56] Bluetooth: hci4: command 0x041b tx timeout [ 306.885493][ T8525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.902535][ T8525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.919717][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.928558][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.937247][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.946621][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.956196][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.965197][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.974719][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.984795][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.991971][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.999703][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.009696][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.018960][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.028060][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.037417][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.045722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.077049][ T8531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.110731][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.119701][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.136382][ T8531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.174860][ T8531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.188356][ T8531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.210671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.218274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.227135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.236581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.268994][ T8523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.296792][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.309277][ T8525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.336807][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.347466][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.381909][ T8529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.422528][ T8529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.446127][ T8529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.479553][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.489119][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.504463][ T8704] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.520954][ T8529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.530965][ T3203] Bluetooth: hci5: command 0x041b tx timeout [ 307.547330][ T8523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.570695][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.579752][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.592940][ T8704] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 307.611988][ T8704] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 307.659384][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.671441][ T8704] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 307.725895][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.735759][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.790759][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.799295][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.814959][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.827110][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.839934][ T8525] device veth0_vlan entered promiscuous mode [ 307.851443][ T3133] Bluetooth: hci0: command 0x040f tx timeout [ 307.858371][ T8525] device veth1_vlan entered promiscuous mode [ 307.871604][ T8523] device veth0_vlan entered promiscuous mode [ 307.889327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.897961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.906465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.917975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.926366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.950061][ T8527] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.968117][ T8523] device veth1_vlan entered promiscuous mode [ 307.983080][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.993878][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.003317][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.011757][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.030165][ T8531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.100584][ T56] Bluetooth: hci1: command 0x040f tx timeout [ 308.110084][ T8531] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.118460][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 308.127319][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.138303][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.147532][ T3133] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.154721][ T3133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.162693][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.170454][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.179693][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.229492][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.241975][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.258409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.268070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.283712][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.290909][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.303034][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.314225][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.327337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.336629][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.343880][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.357372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.366263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.375938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.407328][ T8525] device veth0_macvtap entered promiscuous mode [ 308.414127][ T56] Bluetooth: hci2: command 0x040f tx timeout [ 308.428611][ T8523] device veth0_macvtap entered promiscuous mode [ 308.448789][ T8523] device veth1_macvtap entered promiscuous mode [ 308.457170][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.466044][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.478320][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.489128][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.499172][ T3203] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.506351][ T3203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.521206][ T8525] device veth1_macvtap entered promiscuous mode [ 308.561938][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.581258][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.601885][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.622242][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.640030][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.651313][ T56] Bluetooth: hci3: command 0x040f tx timeout [ 308.676792][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.712292][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.723454][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.732480][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.742473][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.751626][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.761741][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.771506][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.780062][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.789684][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.799632][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.809144][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.860071][ T8525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 308.877079][ T8525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.889295][ T8525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.899115][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.908678][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.917790][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.926667][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.935803][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.944690][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.958330][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.967209][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.975857][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.984234][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.993454][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.010769][ T3133] Bluetooth: hci4: command 0x040f tx timeout [ 309.021633][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.037337][ T8527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.048254][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.068683][ T8525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 309.079992][ T8525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.092127][ T8525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.099694][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.113638][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.125617][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.137494][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.151946][ T8523] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.162390][ T8523] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.172851][ T8523] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.188101][ T8523] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.205117][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.288624][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.298436][ T8525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.314525][ T8525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.323561][ T8525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.332693][ T8525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.368750][ T8531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.399808][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.409404][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.422731][ T3203] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.429855][ T3203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.438726][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.447084][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.480050][ T8527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.549173][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.566412][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.576695][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.585016][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.595139][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.604070][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.611216][ T9829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.619103][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.628816][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.637925][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.645935][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.656088][ T56] Bluetooth: hci5: command 0x040f tx timeout [ 309.684844][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.756055][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.786281][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.818628][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.828177][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.838088][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.848374][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.920474][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.942851][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.988305][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.997946][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.014151][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.023156][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.032670][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.042025][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.049144][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.057263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.066265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.075498][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.082702][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.101001][ T56] Bluetooth: hci0: command 0x0419 tx timeout [ 310.117002][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.161767][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.170145][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.183310][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.207250][ T3133] Bluetooth: hci1: command 0x0419 tx timeout [ 310.234592][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.269975][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.280920][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.283187][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.298999][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 310.309176][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.319590][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.329174][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.359746][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.374259][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.398874][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.408869][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.422806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.435789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.459396][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.470258][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.479947][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.489704][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.499412][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.513695][ T8527] device veth0_vlan entered promiscuous mode [ 310.528513][ T8704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.540691][ T9829] Bluetooth: hci2: command 0x0419 tx timeout [ 310.551725][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.568000][ T8531] device veth0_vlan entered promiscuous mode [ 310.593722][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.617973][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.627845][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.671443][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.679044][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.704945][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.723780][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.734695][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.745405][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.754775][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.764334][ T56] Bluetooth: hci3: command 0x0419 tx timeout [ 310.775712][ T22] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.799843][ T8527] device veth1_vlan entered promiscuous mode [ 310.811625][ T22] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.825011][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.837569][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.847772][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.876036][ T8531] device veth1_vlan entered promiscuous mode 04:35:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) [ 310.981579][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.994777][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 311.014580][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.027609][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 04:35:40 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000a00)) [ 311.052396][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.063613][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.095727][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.103152][ T3133] Bluetooth: hci4: command 0x0419 tx timeout [ 311.171685][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.180667][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.219597][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.242039][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 04:35:41 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000180)) [ 311.264773][ T8529] device veth0_vlan entered promiscuous mode [ 311.289579][ T8527] device veth0_macvtap entered promiscuous mode [ 311.321069][ T8531] device veth0_macvtap entered promiscuous mode [ 311.341874][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.358396][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.401790][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.421574][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.440627][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 04:35:41 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') getrusage(0x0, 0x0) [ 311.452003][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 311.463268][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.490601][ T8527] device veth1_macvtap entered promiscuous mode [ 311.509430][ T8531] device veth1_macvtap entered promiscuous mode [ 311.549988][ T8529] device veth1_vlan entered promiscuous mode 04:35:41 executing program 1: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x7f, 0x0, 0x4, 0x0, 0x4, {}, {0x2, 0x0, 0x0, 0x93, 0x0, 0x9, "664fb9df"}, 0xfe15, 0x0, @planes=&(0x7f0000000280)={0x0, 0x4, @userptr}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x80, 0xfd, 0x1, 0x5, "72f372df"}, 0x0, 0x0, @userptr}) [ 311.640244][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 311.675789][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.715850][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 311.728575][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.741161][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 311.752930][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.761046][ T8531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 311.771666][ T9832] Bluetooth: hci5: command 0x0419 tx timeout [ 311.798373][ T8531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 04:35:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) [ 311.809478][ T8531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 311.822877][ T8531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.853582][ T8531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 311.868305][ T8531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.883802][ T8531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.899415][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.911529][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.913944][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.934768][ T7] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.937480][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 04:35:41 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00'}) [ 311.961118][ T7] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 311.982629][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.012069][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 312.037900][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 312.066240][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.105571][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 04:35:41 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) [ 312.128991][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.163924][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.172153][ T7] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 312.190445][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.205437][ T8531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 312.217978][ T7] usb 1-1: Product: syz [ 312.223341][ T7] usb 1-1: Manufacturer: syz [ 312.228058][ T7] usb 1-1: SerialNumber: syz [ 312.247343][ T8531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.310978][ T8531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 312.334177][ T8531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.344623][ T8531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 312.356935][ T8531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.370001][ T8531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.403601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.413247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.437616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.456930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.474596][ T8527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.499197][ T8527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.513020][ T8527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.526616][ T8527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.551808][ T8531] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.577929][ T8531] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.589960][ T8531] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.599208][ T8531] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.637186][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.658434][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.722629][ T8] usb 1-1: USB disconnect, device number 2 [ 312.824444][ T8529] device veth0_macvtap entered promiscuous mode [ 312.880668][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.889584][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.911451][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.920073][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.965562][ T8704] device veth0_vlan entered promiscuous mode [ 312.974418][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 312.988350][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.997180][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.008438][ T8529] device veth1_macvtap entered promiscuous mode [ 313.082195][ T8704] device veth1_vlan entered promiscuous mode [ 313.119296][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 313.137981][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.151480][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 313.163695][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.176616][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 313.190017][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.200506][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 313.213152][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.226859][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.255229][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.268141][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 313.286023][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.296003][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.306149][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.317801][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.328758][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.339494][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.379049][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.408056][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.419014][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.430696][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.442387][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.455068][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.467433][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.480359][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.493883][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.507138][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.529041][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.568552][ T8529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.569509][ T9908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.589724][ T9908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.613515][ T8529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.627585][ T8529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.637783][ T8529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.684280][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.699716][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.709922][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.743936][ T8704] device veth0_macvtap entered promiscuous mode [ 313.784666][ T9908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.796177][ T9908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.810950][ T8704] device veth1_macvtap entered promiscuous mode [ 313.839312][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.849043][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.858223][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.877483][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.887373][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.966352][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 314.010293][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.061188][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 314.089324][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 04:35:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) [ 314.111205][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 314.134137][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.156258][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 314.199888][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.227356][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 314.261489][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.284336][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.314236][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.343018][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.373496][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 314.396742][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.421288][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 314.441114][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.451011][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 314.489330][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.511409][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 314.533554][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.546833][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 314.558239][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.571565][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.594706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.603503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.620523][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.625125][ T8704] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.652933][ T8704] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.669108][ T8704] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.669258][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.682968][ T8704] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.745235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.835282][ T9908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.859678][ T9908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.893789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 314.992443][ T9908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.000504][ T9908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.059956][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.071944][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.077463][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 04:35:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x3000000, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 04:35:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @empty}, 0x10) [ 315.115098][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.212223][T10039] xt_l2tp: invalid flags combination: 0 04:35:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000a00)) 04:35:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) 04:35:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) 04:35:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@enum={0x0, 0x3, 0x0, 0x6, 0x4, [{}, {}, {}]}, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x50}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:35:45 executing program 1: recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:35:45 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}}, 0x0) 04:35:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000580)={0x0, 0x0, 0x0}) 04:35:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000017c0)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e2", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:35:45 executing program 4: getresuid(&(0x7f0000000300), &(0x7f0000000340), 0x0) 04:35:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) 04:35:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="c32429381f8db5d3a0fbe448c8a91dea5be7fefea5f2e00abb59e4c924fd08d03bc571bcb243523015e3350b1c6e68a26447d4188e9c2aa29946861076a07fa4fd614b866b590f8e546e26b6e56de18c5ed746cc82b1ce641dfec335aac047470fa3381e85a85bd1f8cc22280a9c8415f643", 0x72}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:35:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000017c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:35:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) [ 315.671351][ T9832] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 315.921450][ T9832] usb 1-1: Using ep0 maxpacket: 8 [ 316.041990][ T9832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.059918][ T9832] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.075030][ T9832] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 316.090742][ T9832] usb 1-1: config 1 interface 0 has no altsetting 0 [ 316.259988][ T9832] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 316.291558][ T9832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.300568][ T9832] usb 1-1: Product: syz [ 316.313901][ T9832] usb 1-1: Manufacturer: syz [ 316.318568][ T9832] usb 1-1: SerialNumber: syz [ 316.848904][ T8] usb 1-1: USB disconnect, device number 3 04:35:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) 04:35:47 executing program 4: mq_unlink(&(0x7f0000000180)='/dev/video#\x00') [ 317.692024][ T3133] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 317.931672][ T3133] usb 1-1: Using ep0 maxpacket: 8 [ 318.052627][ T3133] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.062915][ T3133] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.076171][ T3133] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 318.091246][ T3133] usb 1-1: config 1 interface 0 has no altsetting 0 [ 318.252220][ T3133] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 318.261345][ T3133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.271795][ T3133] usb 1-1: Product: syz [ 318.277096][ T3133] usb 1-1: Manufacturer: syz [ 318.282526][ T3133] usb 1-1: SerialNumber: syz 04:35:48 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 04:35:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000017c0)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e2389ceae7", 0x23}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:35:48 executing program 4: mq_unlink(&(0x7f00000003c0)='cgroup.type\x00') 04:35:48 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059df8440450c0061887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:35:48 executing program 1: getrusage(0x0, &(0x7f00000007c0)) 04:35:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bc", 0x8c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 04:35:48 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) [ 318.790039][ T56] usb 1-1: USB disconnect, device number 4 04:35:48 executing program 5: socket(0x22, 0x2, 0x3) [ 318.914885][T10164] xt_l2tp: wrong L2TP version: 0 [ 318.947642][T10171] xt_l2tp: wrong L2TP version: 0 04:35:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0x80089203, 0x0) [ 318.972346][ T3133] usb 5-1: new high-speed USB device number 2 using dummy_hcd 04:35:48 executing program 3: r0 = socket(0x11, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 04:35:49 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x4b) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xa}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x40080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$bfs(&(0x7f0000000a80)='bfs\x00', &(0x7f0000000ac0)='./file0\x00', 0x0, 0x3, &(0x7f0000000d00)=[{&(0x7f0000000b00)="87f726b096b9e683e59ea32492be6df4ff466b63276df6e9f17ba225aa2cc9b919fb1ff9992210d7f63e10cbf9f3b232eda43074567ae16625a880e24c3a", 0x3e, 0x8001}, {&(0x7f0000000b40)="be00bfac2143815ecbcdce0543faa07afa1785c238d2123b7fc3dd8cd0a8b4920ff6b2567be5ea9a21fb70c840645f178e3dc63e6925f4bfd8ccc98a5f6022bb3b14fc846ce10d6a17df378e45561e3a8f8428f64686f0ec8308ac83ec92cd0bac3f8f1a858007e28ac9d0cdddef000d3d1b280edee2e5f6bb629c3f6351c2a54b0aef65bc37ce03cb8c26a8e3", 0x8d}, {&(0x7f0000000c00)="d58307412f528314c89468ea5d0d0afb82bd8ef10f133c3dd9942bfe51f416bc49ad65296c9040224880369c3706959a4f656d0c93d533d31a1973ebbb24a8494968fdee50c1c4055e118d96d24167ccec847894a40a095edc9214254d7c27c77162caa64a3f2c438aa2f07898bedd1a0f2cedeb87c4", 0x76, 0x9}], 0x1b00441, &(0x7f0000000d80)={[{'blksize'}, {'euid'}, {'#:'}, {'fuse\x00'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}]}) 04:35:49 executing program 3: syz_mount_image$bfs(&(0x7f0000000a80)='bfs\x00', &(0x7f0000000ac0)='./file0\x00', 0x0, 0x3, &(0x7f0000000d00)=[{&(0x7f0000000b00)="87f726b096b9e683e59ea32492be6df4ff466b63276df6e9f17ba225aa2cc9b919fb1ff9992210d7f63e10cbf9f3b232eda43074", 0x34, 0x8001}, {&(0x7f0000000b40)="be00bfac2143815ecbcdce05", 0xc}, {&(0x7f0000000c00)="d5", 0x1}], 0x1b00441, &(0x7f0000000d80)={[{'blksize'}]}) 04:35:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) [ 319.342025][ T3133] usb 5-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=7c.88 [ 319.375675][ T3133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.404844][T10184] loop3: detected capacity change from 128 to 0 [ 319.414167][ T3133] usb 5-1: config 0 descriptor?? [ 319.415827][T10185] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 319.464241][ T3133] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 319.479228][T10192] loop5: detected capacity change from 128 to 0 [ 319.491140][T10184] loop3: detected capacity change from 128 to 0 [ 319.642667][T10192] loop5: detected capacity change from 128 to 0 [ 319.732090][ T9827] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 319.901782][ T3133] gspca_sonixj: reg_r err -71 [ 319.907050][ T3133] sonixj: probe of 5-1:0.0 failed with error -71 [ 319.918015][ T3133] usb 5-1: USB disconnect, device number 2 [ 319.991692][ T9827] usb 1-1: Using ep0 maxpacket: 8 [ 320.152312][ T9827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.166491][ T9827] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.195644][ T9827] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 320.239300][ T9827] usb 1-1: config 1 interface 0 has no altsetting 0 [ 320.422672][ T9827] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 320.437696][ T9827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.459071][ T9827] usb 1-1: Product: syz [ 320.467563][ T9827] usb 1-1: Manufacturer: syz [ 320.480916][ T9827] usb 1-1: SerialNumber: syz [ 320.691741][ T9832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 321.012082][ T56] usb 1-1: USB disconnect, device number 5 [ 321.052284][ T9832] usb 5-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=7c.88 [ 321.061522][ T9832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.122699][ T9832] usb 5-1: config 0 descriptor?? [ 321.184731][ T9832] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 321.402302][ T9832] gspca_sonixj: reg_w1 err -71 [ 321.407713][ T9832] sonixj: probe of 5-1:0.0 failed with error -71 04:35:51 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001380)={0x0, 0x0, 0x8}, 0x10) 04:35:51 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='-\xd7}\'+\x00') 04:35:51 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x4b) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xa}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x40080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$bfs(&(0x7f0000000a80)='bfs\x00', &(0x7f0000000ac0)='./file0\x00', 0x0, 0x3, &(0x7f0000000d00)=[{&(0x7f0000000b00)="87f726b096b9e683e59ea32492be6df4ff466b63276df6e9f17ba225aa2cc9b919fb1ff9992210d7f63e10cbf9f3b232eda43074567ae16625a880e24c3a", 0x3e, 0x8001}, {&(0x7f0000000b40)="be00bfac2143815ecbcdce0543faa07afa1785c238d2123b7fc3dd8cd0a8b4920ff6b2567be5ea9a21fb70c840645f178e3dc63e6925f4bfd8ccc98a5f6022bb3b14fc846ce10d6a17df378e45561e3a8f8428f64686f0ec8308ac83ec92cd0bac3f8f1a858007e28ac9d0cdddef000d3d1b280edee2e5f6bb629c3f6351c2a54b0aef65bc37ce03cb8c26a8e3", 0x8d}, {&(0x7f0000000c00)="d58307412f528314c89468ea5d0d0afb82bd8ef10f133c3dd9942bfe51f416bc49ad65296c9040224880369c3706959a4f656d0c93d533d31a1973ebbb24a8494968fdee50c1c4055e118d96d24167ccec847894a40a095edc9214254d7c27c77162caa64a3f2c438aa2f07898bedd1a0f2cedeb87c4", 0x76, 0x9}], 0x1b00441, &(0x7f0000000d80)={[{'blksize'}, {'euid'}, {'#:'}, {'fuse\x00'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}]}) 04:35:51 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059df8440450c0061887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 321.448438][ T9832] usb 5-1: USB disconnect, device number 3 [ 321.574230][T10254] loop5: detected capacity change from 128 to 0 04:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x6fdc64cc}, 0x40) 04:35:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) 04:35:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) 04:35:51 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000002000/0x2000)=nil, 0x1000, 0x1000006, 0x10, r0, 0x83000000) 04:35:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000740)={0x1f, 0x4, @any, 0x0, 0x2}, 0xe) 04:35:51 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x0, 0x0) [ 321.952052][ T9832] usb 5-1: new high-speed USB device number 4 using dummy_hcd 04:35:51 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x880) 04:35:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 04:35:51 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x11, r0, 0x0) 04:35:51 executing program 3: bpf$OBJ_GET_PROG(0x7, 0x0, 0x700) 04:35:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001640)={'team0\x00'}) [ 322.211889][ T9827] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 322.322466][ T9832] usb 5-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=7c.88 [ 322.331601][ T9832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.355786][ T9832] usb 5-1: config 0 descriptor?? [ 322.396429][ T9832] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 322.471927][ T9827] usb 1-1: Using ep0 maxpacket: 8 [ 322.612145][ T9827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.624463][ T9827] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.638090][ T9827] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 322.656168][ T9827] usb 1-1: config 1 interface 0 has no altsetting 0 [ 322.822047][ T9832] gspca_sonixj: reg_r err -71 [ 322.822502][ T9827] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 322.827815][ T9832] sonixj: probe of 5-1:0.0 failed with error -71 [ 322.849991][ T9827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.861962][ T9832] usb 5-1: USB disconnect, device number 4 [ 322.875855][ T9827] usb 1-1: Product: syz [ 322.881763][ T9827] usb 1-1: Manufacturer: syz [ 322.899816][ T9827] usb 1-1: SerialNumber: syz [ 323.194293][ T9827] usb 1-1: USB disconnect, device number 6 04:35:53 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059df8440450c0061887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:35:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x2) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 04:35:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8c1) 04:35:53 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d01, &(0x7f0000000140)) 04:35:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', 0x0}) 04:35:53 executing program 2: renameat2(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 04:35:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) [ 323.742129][ T9832] usb 5-1: new high-speed USB device number 5 using dummy_hcd 04:35:53 executing program 3: bpf$OBJ_GET_PROG(0x12, 0x0, 0x0) 04:35:53 executing program 2: setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), 0xfffffffffffffdc8) 04:35:53 executing program 5: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 04:35:53 executing program 1: io_uring_setup(0x0, 0x0) io_uring_setup(0x52a9, &(0x7f0000000380)) io_uring_setup(0x55bb, &(0x7f0000000480)) 04:35:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)) [ 324.106965][ T9832] usb 5-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=7c.88 [ 324.116753][ T9832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.122280][ T9827] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 324.185580][ T9832] usb 5-1: config 0 descriptor?? [ 324.224819][ T9832] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 324.382416][ T9827] usb 1-1: Using ep0 maxpacket: 8 [ 324.522232][ T9827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.542046][ T9827] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.558669][ T9827] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 324.583055][ T9827] usb 1-1: config 1 interface 0 has no altsetting 0 [ 324.662171][ T9832] gspca_sonixj: reg_r err -71 [ 324.667044][ T9832] sonixj: probe of 5-1:0.0 failed with error -71 [ 324.694705][ T9832] usb 5-1: USB disconnect, device number 5 [ 324.742628][ T9827] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 324.758025][ T9827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.771048][ T9827] usb 1-1: Product: syz [ 324.781133][ T9827] usb 1-1: Manufacturer: syz [ 324.790571][ T9827] usb 1-1: SerialNumber: syz [ 325.055279][ T9827] usb 1-1: USB disconnect, device number 7 04:35:54 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059df8440450c0061887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:35:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc020660b, 0x0) 04:35:54 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x2) 04:35:54 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfffffffffffff7d5, 0x840) 04:35:54 executing program 1: socketpair(0x29, 0x0, 0x0, &(0x7f0000000140)) 04:35:55 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101103, 0x0) 04:35:55 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 04:35:55 executing program 1: syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) 04:35:55 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 04:35:55 executing program 2: syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 04:35:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) [ 325.652256][ T9827] usb 5-1: new high-speed USB device number 6 using dummy_hcd 04:35:55 executing program 5: socketpair(0x2a, 0x0, 0x0, &(0x7f00000000c0)) [ 326.032475][ T9827] usb 5-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=7c.88 [ 326.052333][ T9827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.072366][ T56] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 326.072918][ T9827] usb 5-1: config 0 descriptor?? [ 326.164657][ T9827] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 326.322374][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 326.442464][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.452873][ T56] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.464541][ T56] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 326.477771][ T56] usb 1-1: config 1 interface 0 has no altsetting 0 [ 326.602281][ T9827] gspca_sonixj: reg_r err -71 [ 326.612377][ T9827] sonixj: probe of 5-1:0.0 failed with error -71 [ 326.629050][ T9827] usb 5-1: USB disconnect, device number 6 [ 326.642643][ T56] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 326.657094][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.670139][ T56] usb 1-1: Product: syz [ 326.676046][ T56] usb 1-1: Manufacturer: syz [ 326.680853][ T56] usb 1-1: SerialNumber: syz [ 326.931851][ T56] usb 1-1: USB disconnect, device number 8 04:35:56 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 04:35:56 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x105000, 0x0) 04:35:56 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x40202, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) 04:35:56 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000001a00)) 04:35:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000001680)={'ip6tnl0\x00', 0x0}) [ 327.213552][T10505] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 04:35:57 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/cuse\x00', 0x2, 0x0) 04:35:57 executing program 4: bpf$OBJ_GET_PROG(0x6, &(0x7f0000001380)={0x0, 0x0, 0x18}, 0x10) 04:35:57 executing program 3: syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') 04:35:57 executing program 5: bpf$OBJ_GET_PROG(0x11, 0x0, 0x0) 04:35:57 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x181) 04:35:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:35:57 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) 04:35:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, &(0x7f00000000c0)=""/67}) 04:35:57 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xfff, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) 04:35:57 executing program 1: bpf$OBJ_GET_PROG(0x17, &(0x7f0000001380)={0x0, 0x0, 0x18}, 0x10) 04:35:57 executing program 2: futimesat(0xffffffffffffffff, &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)={{0x0, 0xea60}, {0x77359400}}) 04:35:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0x5452, &(0x7f0000001200)={&(0x7f0000ffd000/0x2000)=nil}) 04:35:57 executing program 1: setgroups(0x2, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff]) 04:35:57 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) 04:35:57 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x801, 0x0) read$snddsp(r0, 0x0, 0x0) 04:35:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 04:35:57 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xffffffff, 0x0, 0x10001}) mlockall(0x1) 04:35:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:35:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) 04:35:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0x80087601, 0x0) 04:35:57 executing program 2: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xfff, 0x74c000) 04:35:57 executing program 5: memfd_create(&(0x7f0000000000)='*%@n-@%\')*^^@!,\x00', 0x0) 04:35:58 executing program 1: socketpair(0x1d, 0x0, 0x6, &(0x7f0000000100)) 04:35:58 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 04:35:58 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0x82, 0xc0, 0x40, 0x249c, 0x932c, 0x509a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6b, 0x28, 0xda, 0x0, [], [{}]}}]}}]}}, 0x0) 04:35:58 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x4000) 04:35:58 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000002340)={0x1f, @fixed={[], 0x10}}, 0x8) 04:35:58 executing program 1: bpf$OBJ_GET_PROG(0x1e, 0x0, 0x0) [ 328.833614][ T3133] usb 3-1: new high-speed USB device number 2 using dummy_hcd 04:35:58 executing program 4: add_key(&(0x7f0000009b40)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 04:35:58 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, 0x0) 04:35:58 executing program 1: bpf$OBJ_GET_PROG(0x8, &(0x7f0000001380)={0x0, 0x0, 0x18}, 0x10) 04:35:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 329.203378][ T3133] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 04:35:59 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001}) mlockall(0x1) 04:35:59 executing program 1: socketpair(0x3, 0x0, 0x0, &(0x7f0000002a40)) [ 329.384063][ T3133] usb 3-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=50.9a [ 329.407718][ T3133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 04:35:59 executing program 4: select(0x40, &(0x7f0000000240), 0x0, 0x0, 0x0) [ 329.446388][ T3133] usb 3-1: Product: syz [ 329.460042][ T3133] usb 3-1: Manufacturer: syz [ 329.472058][ T3133] usb 3-1: SerialNumber: syz [ 329.490836][ T3133] usb 3-1: config 0 descriptor?? 04:35:59 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000002340)={0x1f, @fixed={[], 0x10}}, 0x8) [ 329.762800][ T3133] usb 3-1: can't set first interface for hiFace device. [ 329.776571][ T3133] snd-usb-hiface: probe of 3-1:0.0 failed with error -5 [ 329.816176][ T3133] usb 3-1: USB disconnect, device number 2 [ 330.531398][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 330.662664][ T56] Bluetooth: hci5: command 0x0407 tx timeout [ 330.952819][ T7] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 331.172901][ T7] usb 3-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=50.9a [ 331.182149][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.191555][ T7] usb 3-1: Product: syz [ 331.196629][ T7] usb 3-1: Manufacturer: syz [ 331.202226][ T7] usb 3-1: SerialNumber: syz [ 331.214048][ T7] usb 3-1: config 0 descriptor?? 04:36:01 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0x82, 0xc0, 0x40, 0x249c, 0x932c, 0x509a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6b, 0x28, 0xda, 0x0, [], [{}]}}]}}]}}, 0x0) 04:36:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) 04:36:01 executing program 1: syz_mount_image$nfs4(0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0), 0x0, 0x0) 04:36:01 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000240)) syz_genetlink_get_family_id$l2tp(&(0x7f00000014c0)='l2tp\x00') syz_genetlink_get_family_id$l2tp(0x0) 04:36:01 executing program 4: r0 = socket(0x22, 0x2, 0x3) sendmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 04:36:01 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) fcntl$setown(r0, 0x8, 0x0) [ 331.472688][ T7] usb 3-1: can't set first interface for hiFace device. [ 331.480770][ T7] snd-usb-hiface: probe of 3-1:0.0 failed with error -5 [ 331.508695][ T7] usb 3-1: USB disconnect, device number 3 04:36:01 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) 04:36:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) 04:36:01 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x41) 04:36:01 executing program 1: syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)) [ 331.912851][ T9832] usb 1-1: new high-speed USB device number 9 using dummy_hcd 04:36:01 executing program 5: bpf$OBJ_GET_PROG(0x1b, 0x0, 0x0) 04:36:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000140)=ANY=[]) [ 332.033763][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 332.152762][ T9832] usb 1-1: Using ep0 maxpacket: 8 [ 332.273062][ T9832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.283792][ T9832] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.297671][ T9832] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 332.312237][ T9832] usb 1-1: config 1 interface 0 has no altsetting 0 [ 332.423731][ T7] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 332.473157][ T9832] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 332.482334][ T9832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.505425][ T9832] usb 1-1: Product: syz [ 332.509665][ T9832] usb 1-1: Manufacturer: syz [ 332.522906][ T9832] usb 1-1: SerialNumber: syz [ 332.633019][ T7] usb 3-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=50.9a [ 332.642146][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.650705][ T7] usb 3-1: Product: syz [ 332.655262][ T7] usb 3-1: Manufacturer: syz [ 332.660612][ T7] usb 3-1: SerialNumber: syz [ 332.673851][ T7] usb 3-1: config 0 descriptor?? [ 332.942853][ T7] usb 3-1: can't set first interface for hiFace device. [ 332.965172][ T7] snd-usb-hiface: probe of 3-1:0.0 failed with error -5 [ 332.990428][ T7] usb 3-1: USB disconnect, device number 4 [ 332.993938][ T56] usb 1-1: USB disconnect, device number 9 04:36:03 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') syz_mount_image$nfs4(0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0) 04:36:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) 04:36:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r0) 04:36:03 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400) 04:36:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0x80086301, &(0x7f0000001200)={&(0x7f0000ffd000/0x2000)=nil}) 04:36:03 executing program 3: set_mempolicy(0x1, &(0x7f0000000000)=0x4, 0x7ff) 04:36:03 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d01, 0x0) 04:36:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4318cc08d9e04e5cee90c435b9ad34093b0dfccf46bdf977e7ea54fe0eaf9634950e3072279fa8cba5cf90d7640fb5e92c4c3879eb3b536c31d37e1c77ca4d53", "b11bdcc1249e8d7465278a915b81ee72ca81c007ee17e17f07d7f835f5e119e1abc85cceab99c2ed088bc9b90a08750b5f6371debc13cd5e9cb57aa246d4c0fa", "5daece664ae859d1e818e02cd94f4eaac86cd4db6ef4b4f7e0338d2f5c953380"}) 04:36:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) 04:36:03 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) fcntl$setstatus(r0, 0x4, 0x0) 04:36:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x12, 0x7ff, 0x0, 0x6fdc64cc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x40) 04:36:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setflags(r0, 0x2, 0x1) 04:36:03 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@setlink={0x20}, 0x20}}, 0x0) [ 333.962900][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 334.204226][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 334.323375][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.344096][ T8] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.379122][ T8] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 334.402607][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 334.603289][ T8] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 334.646866][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.655507][ T8] usb 1-1: Product: syz [ 334.659733][ T8] usb 1-1: Manufacturer: syz [ 334.665238][ T8] usb 1-1: SerialNumber: syz [ 335.146778][ T9827] usb 1-1: USB disconnect, device number 10 04:36:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) 04:36:05 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 04:36:05 executing program 4: clone3(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x58) 04:36:05 executing program 3: getuid() r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xffffffff, 0x0, 0x10001}) mlockall(0x1) 04:36:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x48001) 04:36:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000200)) 04:36:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)) 04:36:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = semget(0x0, 0x4, 0x4) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xee00, 0x0, 0x0, 0xa6, 0x800}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x443, 0x7, 0x4, 0x0, 0x40, {}, {0x0, 0x8, 0x0, 0x41, 0x0, 0x8, "3496c340"}, 0x17, 0x1, @userptr=0x7, 0xffffff3b, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x8000) 04:36:05 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) 04:36:05 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0) [ 335.955786][ C1] hrtimer: interrupt took 87146 ns 04:36:05 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 04:36:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) [ 336.123141][ T9832] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 336.373536][ T9832] usb 1-1: Using ep0 maxpacket: 8 [ 336.493882][ T9832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.508940][ T9832] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.525489][ T9832] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 336.540353][ T9832] usb 1-1: config 1 interface 0 has no altsetting 0 [ 336.703647][ T9832] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 336.712751][ T9832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.737343][ T9832] usb 1-1: Product: syz [ 336.746638][ T9832] usb 1-1: Manufacturer: syz [ 336.758600][ T9832] usb 1-1: SerialNumber: syz [ 337.232116][ T56] usb 1-1: USB disconnect, device number 11 04:36:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 04:36:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 04:36:07 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x5, {0x7}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x0, 0x0, 0x20, 0x0, 0xff}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 04:36:07 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 04:36:07 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000014c0)) 04:36:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = semget(0x0, 0x4, 0x4) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xee00, 0x0, 0x0, 0xa6, 0x800}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x443, 0x7, 0x4, 0x0, 0x40, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x8, "3496c340"}, 0x17, 0x1, @userptr=0x7, 0xffffff3b, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x8000) 04:36:07 executing program 5: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x1, &(0x7f00000000c0), 0x4, 0xffffffffffffffff, 0xe}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x80800) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x6}, &(0x7f0000000400)=""/99, 0x63, &(0x7f0000000480)=""/135, 0x0}, 0x58) 04:36:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @l2, @rc, @rc={0x1f, @none}}) 04:36:07 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x20280, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/mnt\x00') [ 338.151319][ T9832] usb 2-1: new high-speed USB device number 2 using dummy_hcd 04:36:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = semget(0x0, 0x4, 0x4) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xee00, 0x0, 0x0, 0xa6, 0x800}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x443, 0x7, 0x4, 0x0, 0x40, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x8, "3496c340"}, 0x17, 0x1, @userptr=0x7, 0xffffff3b, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x8000) [ 338.193155][ T9827] usb 1-1: new high-speed USB device number 12 using dummy_hcd 04:36:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) semget(0x0, 0x4, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@remote, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000080)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) clock_gettime(0x0, &(0x7f0000000280)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000400)=0x8000) 04:36:08 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x20280, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/mnt\x00') [ 338.403158][ T9832] usb 2-1: Using ep0 maxpacket: 16 [ 338.433376][ T9827] usb 1-1: Using ep0 maxpacket: 8 [ 338.523624][ T9832] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 338.553500][ T9827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.555645][ T9832] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 338.572253][ T9827] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.609189][ T9827] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 338.636315][ T9827] usb 1-1: config 1 interface 0 has no altsetting 0 [ 338.671558][ T9832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.813436][ T9827] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 338.822550][ T9827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.832464][ T9827] usb 1-1: Product: syz [ 338.838005][ T9827] usb 1-1: Manufacturer: syz [ 338.842809][ T9827] usb 1-1: SerialNumber: syz [ 338.933698][ T9832] usb 2-1: string descriptor 0 read error: -22 [ 338.940026][ T9832] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.963146][ T9832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.016604][ T9832] usb 2-1: 0:2 : does not exist [ 339.240975][ T9827] usb 2-1: USB disconnect, device number 2 [ 339.289342][ T8] usb 1-1: USB disconnect, device number 12 04:36:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 04:36:09 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/kvm\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) [ 340.014139][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 340.127043][ T9827] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 340.253343][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 340.383419][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 340.392172][ T8] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 340.404404][ T9827] usb 1-1: Using ep0 maxpacket: 8 [ 340.409623][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.523471][ T9827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.534239][ T9827] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.549057][ T9827] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 340.562700][ T9827] usb 1-1: config 1 interface 0 has no altsetting 0 [ 340.663852][ T8] usb 2-1: string descriptor 0 read error: -22 [ 340.670818][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.680537][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.737087][ T8] usb 2-1: 0:2 : does not exist [ 340.753621][ T9827] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 340.765321][ T9827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.786811][ T9827] usb 1-1: Product: syz [ 340.791216][ T9827] usb 1-1: Manufacturer: syz [ 340.803330][ T9827] usb 1-1: SerialNumber: syz 04:36:10 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x800, 0x7, 0x0, 0x0, 0x0, 0x6, 0xfff}, &(0x7f0000000200)={0x8, 0x5}, &(0x7f0000000240)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x1]}, 0x8}) 04:36:10 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000240)={0x8}, &(0x7f00000002c0)={0x0, r0+10000000}, &(0x7f0000000340)={0x0}) 04:36:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) exit_group(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 04:36:10 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000840)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 04:36:10 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x5, {0x7}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x0, 0x0, 0x20, 0x0, 0xff}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 340.835792][ T3133] usb 2-1: USB disconnect, device number 3 04:36:10 executing program 2: ptrace$setregset(0x4205, 0x0, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000140)={0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x8, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x8, 0xffffffffffffffff, 0x1}) ptrace$setregset(0x4205, 0x0, 0x201, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='memory.max\x00', 0x2, 0x0) clone3(&(0x7f0000000580)={0x200000, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x6}, &(0x7f0000000400)=""/99, 0x63, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) ptrace$setregset(0x4205, r2, 0x202, &(0x7f0000000640)={0x0}) [ 341.264337][ T8] usb 1-1: USB disconnect, device number 13 04:36:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 04:36:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) exit_group(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) [ 341.453655][ T3133] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 341.733432][ T3133] usb 2-1: Using ep0 maxpacket: 16 04:36:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 04:36:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 04:36:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) [ 341.936732][ T3133] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 341.962374][ T3133] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 04:36:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) [ 342.009405][ T3133] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 04:36:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) exit_group(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 04:36:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 04:36:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) exit_group(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) [ 342.283972][ T3133] usb 2-1: string descriptor 0 read error: -22 [ 342.290305][ T3133] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.339828][ T3133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 04:36:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) [ 342.413434][ T9832] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 342.502507][ T3133] usb 2-1: 0:2 : does not exist [ 342.653722][ T9832] usb 1-1: Using ep0 maxpacket: 8 [ 342.730973][ T9827] usb 2-1: USB disconnect, device number 4 [ 342.773999][ T9832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.784700][ T9832] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.799172][ T9832] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 342.823746][ T9832] usb 1-1: config 1 interface 0 has no altsetting 0 [ 342.983906][ T9832] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 342.993022][ T9832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.004363][ T9832] usb 1-1: Product: syz [ 343.009362][ T9832] usb 1-1: Manufacturer: syz [ 343.015734][ T9832] usb 1-1: SerialNumber: syz 04:36:13 executing program 1: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x1, &(0x7f00000000c0), 0x4, 0xffffffffffffffff, 0xe}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x80800) r2 = pidfd_getfd(r1, r0, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x6}, &(0x7f0000000400)=""/99, 0x63, &(0x7f0000000480)=""/135, 0x0, 0x0, {r2}}, 0x58) 04:36:13 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001400)='/proc/self\x00', 0xc01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001640)='nbd\x00') 04:36:13 executing program 2: r0 = getpid() ptrace$setregset(0x4205, r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x0) clone3(&(0x7f0000000580)={0x200000, &(0x7f0000000340), 0x0, &(0x7f00000003c0), {0x6}, &(0x7f0000000400)=""/99, 0x63, 0x0, &(0x7f0000000540)=[r0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) 04:36:13 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:36:13 executing program 4: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 343.466342][ T9827] usb 1-1: USB disconnect, device number 14 04:36:13 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) 04:36:13 executing program 4: openat$pidfd(0xffffffffffffff9c, 0x0, 0xc01, 0x0) 04:36:13 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self\x00', 0x10000, 0x0) 04:36:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 04:36:13 executing program 2: clone3(&(0x7f0000000580)={0x200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:36:14 executing program 1: socket$inet(0x2, 0x0, 0x200) 04:36:14 executing program 4: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x8}, &(0x7f00000002c0)={0x0, r0+10000000}, 0x0) 04:36:14 executing program 3: ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)) modify_ldt$read_default(0x2, 0x0, 0x0) 04:36:14 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 04:36:14 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4}, &(0x7f0000000200)={0x8}, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x1]}, 0x8}) 04:36:14 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x20280, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/kvm\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000009c0)={0x0, @phonet={0x23, 0x4}, @llc={0x1a, 0x1, 0x7, 0x20, 0x44, 0x0, @remote}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x1}}, 0x1f, 0x0, 0x0, 0x0, 0xb46, &(0x7f0000000980)='veth1\x00', 0x0, 0x3, 0x1a5c}) [ 344.603562][ T5] usb 1-1: new high-speed USB device number 15 using dummy_hcd 04:36:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x902, &(0x7f0000000180), 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="df", 0x1}], 0x1}, 0x100) [ 344.843598][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 344.984167][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.995422][ T5] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.007192][ T5] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 345.021020][ T5] usb 1-1: config 1 interface 0 has no altsetting 0 [ 345.213893][ T5] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 345.223167][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.265829][ T5] usb 1-1: Product: syz [ 345.273596][ T5] usb 1-1: Manufacturer: syz [ 345.278240][ T5] usb 1-1: SerialNumber: syz [ 345.795122][ T9832] usb 1-1: USB disconnect, device number 15 04:36:16 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x7}, 0x0, &(0x7f0000000240)={0x8}, &(0x7f00000002c0)={0x0, r0+10000000}, 0x0) 04:36:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 04:36:16 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000840)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 04:36:16 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x5b}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x20280, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/mnt\x00') r5 = syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/kvm\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, @hci={0x1f, 0x2, 0x1}, @nfc={0x27, 0x0, 0x1, 0x1}, @nfc={0x27, 0x1, 0x2, 0x3}, 0x7, 0x0, 0x0, 0x0, 0xfffd, &(0x7f00000008c0)='vlan0\x00', 0x5313228a, 0x2, 0x2}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={0x0, @phonet={0x23, 0x4, 0x9, 0x80}, @llc={0x1a, 0x1, 0x7, 0x20, 0x44, 0xfa, @remote}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x1}}, 0x1f, 0x0, 0x0, 0x0, 0xb46, &(0x7f0000000980)='veth1\x00', 0x0, 0x3, 0x1a5c}) 04:36:16 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062000052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r1, 0x0, 0x0, 0x0) 04:36:16 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000840)) 04:36:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:36:16 executing program 4: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x2a}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x0, 0x1a, 0x3d, "2a447f7f5e98489aca268048d351d92f45b05591a8308e17e3e801ed181a8b94d462643cdd825a9faf93d702d3cd5dc62fbeec385cd28f19e4659cf9f2"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)={0x20, 0x81, 0x3, "c48d91"}, &(0x7f00000005c0)={0x20, 0x82, 0x2, "3197"}, &(0x7f0000000600)={0x20, 0x83, 0x2, "d6ae"}, &(0x7f0000000640)={0x20, 0x84, 0x2, "fd1b"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "0ee0a8"}}) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000980)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x9, 0xe0, 0x0, 0xff}, 0x27, &(0x7f0000000800)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x4, 0x0, 0x5, [0xc00f]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x87, 0x0, 0xfff}]}, 0x1, [{0x4, &(0x7f0000000940)=@lang_id={0x4}}]}) syz_usb_connect(0x2, 0x110, &(0x7f00000017c0)={{0x12, 0x1, 0x300, 0x19, 0xa4, 0x2d, 0x10, 0x12d1, 0x433e, 0xc604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x2, 0x80, 0x5, 0x0, 0x7, [{{0x9, 0x4, 0x7e, 0x7f, 0x8, 0xff, 0x1, 0x1, 0x1, [], [{{0x9, 0x5, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x9}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x7, 0x3, 0x1f}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x68, 0x0, 0x81}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x50, 0x1, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x1}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x6, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x10}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x9, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x909}]}}]}}, {{0x9, 0x4, 0x95, 0x1, 0x8, 0xa, 0x1e, 0x34, 0x0, [@uac_as, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f6"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8}, [@country_functional={0x6, 0x24, 0x7, 0x9}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x2, [0x0, 0x0]}, @ncm={0x6, 0x24, 0x1a, 0x1ff, 0x4}, @dmm={0x7, 0x24, 0x14, 0x5, 0x2}]}], [{{0x9, 0x5, 0x0, 0x10, 0x0, 0x7, 0x7, 0x0, [@generic={0x10, 0xb, "a1a8bfd1cc103a283ceb5793b6a7"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x0, 0xff}}, {{0x9, 0x5, 0x0, 0x4, 0x0, 0x1f}}, {{0x9, 0x5, 0x5, 0x0, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x11, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x62, 0x9}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x40, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x81}}]}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001d00)={0xa, 0x6, 0x0, 0x20, 0x0, 0x0, 0x0, 0xf3}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000045c0)={0x14, 0x0, &(0x7f00000044c0)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "1ecc5441c14a91efe2e34822ac40bdf94014c932f9acfd77ca239fbeed18b3e25b84cee2c7a660c2592301ddfcc7b8e69324f42d295c1d5139476c33ab9212751969f572b0f96b114a967d9192b5b6f8c0f3d78e18b5927e1eead79b2c79ed52a622797e7d9e35b521416e62ef59c62750794aefa93c8f44a6a98e0c1d7a99c1cc013b76c8f7e15c8d4cf86a2e4772b5a120ab27ff79b768d078beffd471303104dcbc5e2f7315f985dbc63470ee2d04fc59ee2cb9344e761c82d947309a443384071a6a3667d64c20ea3ba3a6d36722"}}}, &(0x7f0000004840)={0x34, 0x0, &(0x7f0000004640)={0x0, 0xa, 0x1}, &(0x7f0000004680)={0x0, 0x8, 0x1}, &(0x7f00000046c0)={0x20, 0x0, 0x38, {0x36, "73259074be42f97d37e0138439dc955e376f8a6a014ef348bb79cfe5dfe48c0cade1809a916a5f4c235e9a683626a173174dd9b63b28"}}, &(0x7f00000047c0)={0x20, 0x1, 0x1}, &(0x7f0000004800)={0x20, 0x0, 0x1}}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000004880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x90, 0xf8, [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x7, 0x1, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x8, 0x0, 0x8c}}}}}]}}]}}, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000052c0)={0x0, 0x0, 0xb, &(0x7f0000005100)={0x5, 0xf, 0xb, 0x2, [@generic={0x3, 0x10, 0x3}, @generic={0x3, 0x10, 0x4}]}, 0x1, [{0x4, &(0x7f0000005280)=@lang_id={0x4}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 04:36:16 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)) [ 346.793761][ T9827] usb 1-1: new high-speed USB device number 16 using dummy_hcd 04:36:16 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 04:36:16 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x3000, 0xe7, &(0x7f0000000000)=""/231}, {0x0, 0xb8, &(0x7f0000000100)=""/184}]}) [ 347.043817][ T9827] usb 1-1: Using ep0 maxpacket: 8 [ 347.174150][ T9827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.213326][ T9827] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:36:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f00000000c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x2]}]}}) [ 347.263907][ T5] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 347.272232][ T9827] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 347.357509][ T9827] usb 1-1: config 1 interface 0 has no altsetting 0 04:36:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0x0, 0x0, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) [ 347.554029][ T9827] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 04:36:17 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f0000004ac0)={0x77359400}) 04:36:17 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 347.596524][ T9827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.642905][ T9827] usb 1-1: Product: syz 04:36:17 executing program 5: r0 = msgget(0x2, 0x0) msgctl$MSG_STAT(r0, 0xb, 0x0) [ 347.665837][ T9827] usb 1-1: Manufacturer: syz [ 347.693267][ T9827] usb 1-1: SerialNumber: syz [ 347.699363][ T5] usb 5-1: unable to get BOS descriptor or descriptor too short [ 347.754145][ T5] usb 5-1: not running at top speed; connect to a high speed hub [ 347.854146][ T5] usb 5-1: config 128 has an invalid interface number: 126 but max is 1 [ 347.865061][ T5] usb 5-1: config 128 has an invalid interface number: 149 but max is 1 [ 347.900734][ T5] usb 5-1: config 128 has no interface number 0 [ 347.910204][ T5] usb 5-1: config 128 has no interface number 1 [ 347.919379][ T5] usb 5-1: config 128 interface 126 altsetting 127 has an invalid endpoint with address 0x0, skipping [ 347.950401][ T5] usb 5-1: config 128 interface 126 altsetting 127 has an invalid endpoint with address 0x0, skipping [ 347.963215][ T5] usb 5-1: config 128 interface 126 altsetting 127 has an invalid endpoint with address 0x80, skipping [ 347.976211][ T5] usb 5-1: config 128 interface 126 altsetting 127 has an invalid endpoint with address 0x0, skipping [ 347.992963][ T5] usb 5-1: config 128 interface 126 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 348.005847][ T5] usb 5-1: config 128 interface 149 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 348.019105][ T5] usb 5-1: config 128 interface 149 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 348.033311][ T5] usb 5-1: config 128 interface 149 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 348.046529][ T5] usb 5-1: config 128 interface 149 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 348.059455][ T5] usb 5-1: config 128 interface 149 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 348.074468][ T5] usb 5-1: config 128 interface 126 has no altsetting 0 [ 348.083398][ T5] usb 5-1: config 128 interface 149 has no altsetting 0 [ 348.193068][ T9827] usb 1-1: USB disconnect, device number 16 [ 348.324246][ T5] usb 5-1: string descriptor 0 read error: -22 [ 348.331799][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=433e, bcdDevice=c6.04 [ 348.342882][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.396017][ T5] ================================================================================ [ 348.413596][ T5] UBSAN: shift-out-of-bounds in drivers/usb/serial/option.c:2120:21 [ 348.422510][ T5] shift exponent 126 is too large for 64-bit type 'long unsigned int' [ 348.440797][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.0-rc7-next-20201208-syzkaller #0 [ 348.450236][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.460346][ T5] Workqueue: usb_hub_wq hub_event [ 348.465406][ T5] Call Trace: [ 348.468745][ T5] dump_stack+0x107/0x163 [ 348.473110][ T5] ubsan_epilogue+0xb/0x5a [ 348.477556][ T5] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 348.484380][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 348.490685][ T5] ? usb_match_id.part.0+0x15d/0x1b0 [ 348.496016][ T5] option_probe.cold+0x1a/0x1f [ 348.500904][ T5] usb_serial_probe+0x32d/0xef0 [ 348.505797][ T5] ? usb_probe_interface+0x5e7/0x7f0 [ 348.511123][ T5] ? mark_held_locks+0x9f/0xe0 [ 348.515931][ T5] ? ktime_get_mono_fast_ns+0x181/0x220 [ 348.521508][ T5] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 348.527383][ T5] usb_probe_interface+0x315/0x7f0 [ 348.532532][ T5] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 348.537943][ T5] really_probe+0x2b1/0xe40 [ 348.542495][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 348.548778][ T5] driver_probe_device+0x285/0x3f0 [ 348.553952][ T5] __device_attach_driver+0x216/0x2d0 [ 348.559359][ T5] ? driver_allows_async_probing+0x170/0x170 [ 348.565362][ T5] bus_for_each_drv+0x15f/0x1e0 [ 348.570245][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 348.575297][ T5] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 348.581161][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 348.586386][ T5] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 348.592251][ T5] __device_attach+0x228/0x4c0 [ 348.597041][ T5] ? really_probe+0xe40/0xe40 [ 348.601775][ T5] ? kobject_uevent_env+0x2bb/0x1680 [ 348.607102][ T5] bus_probe_device+0x1e4/0x290 [ 348.611985][ T5] device_add+0xbb2/0x1ce0 [ 348.616423][ T5] ? devlink_add_symlinks+0x450/0x450 [ 348.621838][ T5] ? kfree+0xdb/0x3c0 [ 348.625846][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 348.632126][ T5] usb_set_configuration+0x113c/0x1910 [ 348.637648][ T5] usb_generic_driver_probe+0xba/0x100 [ 348.643156][ T5] usb_probe_device+0xd9/0x2c0 [ 348.647954][ T5] ? usb_driver_release_interface+0x180/0x180 [ 348.654056][ T5] really_probe+0x2b1/0xe40 [ 348.658605][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 348.664886][ T5] driver_probe_device+0x285/0x3f0 [ 348.670070][ T5] __device_attach_driver+0x216/0x2d0 [ 348.675485][ T5] ? driver_allows_async_probing+0x170/0x170 [ 348.681536][ T5] bus_for_each_drv+0x15f/0x1e0 [ 348.686424][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 348.691480][ T5] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 348.697346][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 348.702608][ T5] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 348.708464][ T5] __device_attach+0x228/0x4c0 [ 348.713255][ T5] ? really_probe+0xe40/0xe40 [ 348.717965][ T5] ? kobject_uevent_env+0x2bb/0x1680 [ 348.723306][ T5] bus_probe_device+0x1e4/0x290 [ 348.728198][ T5] device_add+0xbb2/0x1ce0 [ 348.732649][ T5] ? devlink_add_symlinks+0x450/0x450 [ 348.738078][ T5] ? kfree+0xdb/0x3c0 [ 348.742108][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 348.748404][ T5] usb_new_device.cold+0x725/0x1057 [ 348.753647][ T5] ? hub_disconnect+0x510/0x510 [ 348.758531][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 348.763500][ T5] ? _raw_spin_unlock_irq+0x1f/0x40 [ 348.768751][ T5] hub_event+0x2348/0x42d0 [ 348.773253][ T5] ? hub_port_debounce+0x3b0/0x3b0 [ 348.778392][ T5] ? lock_release+0x710/0x710 [ 348.783109][ T5] ? lock_downgrade+0x6d0/0x6d0 [ 348.787989][ T5] ? do_raw_spin_lock+0x120/0x2b0 [ 348.793063][ T5] process_one_work+0x98d/0x1630 [ 348.798052][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 348.803460][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 348.808431][ T5] ? _raw_spin_lock_irq+0x41/0x50 [ 348.813495][ T5] worker_thread+0x64c/0x1120 [ 348.818214][ T5] ? process_one_work+0x1630/0x1630 [ 348.823454][ T5] kthread+0x3b1/0x4a0 [ 348.827547][ T5] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 348.833461][ T5] ret_from_fork+0x1f/0x30 [ 348.847103][T11196] udc-core: couldn't find an available UDC or it's busy [ 348.860467][T11196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 04:36:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000000c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xb5, 0x7f, [@perr={0x84, 0xaf, {0x0, 0xb, [@ext={{}, @broadcast}, @not_ext={{}, @broadcast}, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext={{}, @device_b}, @not_ext={{}, @device_b, 0x0, "", 0x29}, @not_ext={{}, @broadcast}, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @device_b, 0x0, @device_b}, @not_ext]}}]}, @NL80211_ATTR_PROBE_RESP={0x2ed, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0xa, 0x7f, [@ext_channel_switch={0x3c, 0x4}]}, @NL80211_ATTR_PROBE_RESP={0x349, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x45d, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0xec, {0x0, 0x0, 0x0, "05e8fb8a7f6f8b81a21b31326b871ac3dff83e50a65e2516824852f4ef59d0f12459e45ecd9dbb8cc09cdc5bab7ee3f73411947f98b09fa7cf9260ed1c7cff17af2dd029a773b77d0fb37b0effd428455546f6560a96f132b92f59cce7ff189d9983ce761642708728622ab5eeec7af8f0cc943644aec3b9ad904ec79d50ccd2abae43fa3e8e33c0e80bd5e77d4269ee4edca53524ca42ac747d7dc0ce2cb0f11e68ec1f9b13551cfe39f3a7964e6895732fe120fb9d1b994cdcc85168736ec81b91a4cc88a07349e924a594b88119a3e04d7fcb54ce969b1345805be364e0dff3a994ceb307d34380"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @void, [{0xdd, 0x1c, "943da6d98da3b11ffc27867c744d450bd266a53b666b5cae2064c2c9"}, {0xdd, 0xac, "f9154674a6eac8bd88b31e328e6ee349bfcaa35470f1b8204d1eb37a997c0306e72cea544a2ec5c40b35b7fc51a182d9409dbc89d5d4ce5d0e9b59db02243b6bb216410519b1e2108bc8edc3975f11df946bc1994e7aadac143a827d8575fe80df0185b7e6f8e7011569161824a108fba78d3da1f937898b1dd7d3a748f0c420f53f20e16ab981f0bfcbee23135dcbf4f846c3c676816c2a6dae52cf8df587735462d0b3f708a382d7402547"}, {0xdd, 0xd0, "a39a57653bc23835a32db2b08d5b3751f34a7054ae4b3b50ad01f8abd9a20e2513112defe59e965ba785da55562c0dcc293d3190bff6a797138567b4f013347b683e441fbc16640f46cc512f930e97382c3d49220c03617ceda40015531b99e8ae68de7313116277895a650fcab17166175a534a3c050f9988b3ad0bcff69893b233b85592c801abd5778643b7d079e6d71f36f4c61fc706878d676841db1ac1d4ee808d574889390a72b57ddbaf115702ac28a2054712335b3c630220cd5247aa2f22fbc4461ab9d00deb51935b8e90"}, {0xdd, 0x4f, "c2626b3ce4fd099b97a2d4f8e2e288e15fbbf4c0d5802ab37385717bf23f24da66bf64911ab8063600bb43fbbda205f92f59546a518da77dd5dec89bc50ff01a23ba0958d348e9ae0e94f23b17449d"}, {0xdd, 0xf0, "b51f7fd06bc55be0a0f67c780a2e1c8d6832c29dedff206aceed0d7de9aef14f994297f4abc465acd116f739f3d0d8e06bc506f7125149d4f63ca7b2aa8d17a69af19fa8f9d210af969eed58cdb09846ec25f41142d2e110b8998f5b9452f414c97e198b432206e8b559eedc46715e2f206bb3cbd19f0dc02b1dbff2aa86db2f2d8a24b4a8f12a32376529bbe934f434421047c2be91e80c4a925a17cd4f7d12f700338179f0dd9b9cd0582ed71a7746f20bdfc505c5e8a334de67d0f594d698363a99f399637699c70f6394f9c9e7786dd6d0614817760ae5835b87abe673b539123d2ff389b38530417c9da38bb116"}, {0xdd, 0x10, "67f7bd96fa7fd1976c9c2ebb1df193e3"}, {0xdd, 0x2d, "565684b65b0c84bdc0aac137103e9c59e86e3d6ceb75becef5920ed45c2f4c3fcead5f566062e0ba62e8573dc5"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x7d, 0x7f, [@rann={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ht={0x2d, 0x1a}, @erp={0x2a, 0x1}, @preq={0x82, 0x2b, @ext={{}, 0x0, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, 0x1, [{{}, @broadcast}]}}, @ext_channel_switch={0x3c, 0x4}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x2bc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xad, 0x2, "0f4f258e5924298d63664cfa11a91df8665c1013b652a9ca6dec0bafd482920faaabb41315f2ece852e3b857d0e0238ccdd16208f18261bb0965fc844da93a34bc2ea249fe699fe5ba780c01f7fb2c03ac7c7e73ac2e54553c6358a4e430146ab5fdf846993a9a26c4d166d62858fe16f58a53732dd02f52709bc56ddbe5b978e14132a3352c8acbdc7308de14320d0c3e085f2c55003b1ccc09356e752e230ccafd455cccabfb6ab3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x61, 0x3, "0de219888084f16a178534dcb7dd44cd8608bb644049689fd4ffd23eb9775453572c5fe4bbfbeee76a7091475130a6c3c538e5420310d0113e3bec85d0f0e01e0390f7c861f2c9295001502739b2fa92aed55ce68b3bf7ff52691ac4dc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x2d, 0x2, "83052fa61affabd967d104a8d6dc080f390fdc873c2f108b910dc92892a057634e6ac1b995b0f38b23"}, @NL80211_FTM_RESP_ATTR_LCI={0xfd, 0x2, "47b9604d5c8fe466de66cbe9f4c38b0e6f3f71e4eaa6fb0e08935f39a3cfd088b00be27088f039f5c5b556186fd0f31547782b9796b8fe9ed869807ef904b7739c16fc99f4db99631a4be9b692da0ec41c4e8ba6f04f2d2f2cbaf1fb5d7b87b42974600b21d9482ca0c1aa32f74da6285ccb00fccc6fdd2acf0f521ddaea906d309850ef642cbf6ae4af817444e11d6c2a45c677d4bd8df172782de1e5671d5abaf30aa08577e7085e8657052319242bf55304b01d040e1acf045e8d6c7f0ec5458f3601624d66a4e27ea335d9dceb77969baaa240d17b3b40055871fe38640b7b748d3fcf89b90a6a8e2bda38c367bf6f635e4220211ef405"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x61, 0x3, "19197c59816128347ef559637e46c2ebf47994b974b461b096be44c204f49552b0211d854b22f6b289e081ec06fc56c29bfdb738b7d47936ef99942266cc53e6a1e7d6d21f63b37cc3759311299ca15718d7c67a3d0cce3d6769007e9f"}]}]}, 0xec4}}, 0x0) 04:36:18 executing program 1: sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001580)='net/psched\x00') 04:36:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0x4400}, 0x8) [ 349.130777][ T5] ================================================================================ [ 349.163868][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 349.170558][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.0-rc7-next-20201208-syzkaller #0 [ 349.179949][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.190037][ T5] Workqueue: usb_hub_wq hub_event [ 349.195123][ T5] Call Trace: [ 349.198439][ T5] dump_stack+0x107/0x163 [ 349.202801][ T5] panic+0x343/0x77f [ 349.206722][ T5] ? __warn_printk+0xf3/0xf3 [ 349.211349][ T5] ? ubsan_epilogue+0x3e/0x5a [ 349.216056][ T5] ubsan_epilogue+0x54/0x5a [ 349.220590][ T5] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 349.227394][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 349.233657][ T5] ? usb_match_id.part.0+0x15d/0x1b0 [ 349.238984][ T5] option_probe.cold+0x1a/0x1f [ 349.243769][ T5] usb_serial_probe+0x32d/0xef0 [ 349.248654][ T5] ? usb_probe_interface+0x5e7/0x7f0 [ 349.253981][ T5] ? mark_held_locks+0x9f/0xe0 [ 349.258760][ T5] ? ktime_get_mono_fast_ns+0x181/0x220 [ 349.264327][ T5] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 349.270165][ T5] usb_probe_interface+0x315/0x7f0 [ 349.275316][ T5] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 349.280832][ T5] really_probe+0x2b1/0xe40 [ 349.285643][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 349.291929][ T5] driver_probe_device+0x285/0x3f0 [ 349.297086][ T5] __device_attach_driver+0x216/0x2d0 [ 349.302525][ T5] ? driver_allows_async_probing+0x170/0x170 [ 349.308534][ T5] bus_for_each_drv+0x15f/0x1e0 [ 349.313421][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 349.318476][ T5] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 349.324693][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 349.329930][ T5] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 349.335778][ T5] __device_attach+0x228/0x4c0 [ 349.340576][ T5] ? really_probe+0xe40/0xe40 [ 349.345314][ T5] ? kobject_uevent_env+0x2bb/0x1680 [ 349.350660][ T5] bus_probe_device+0x1e4/0x290 [ 349.355544][ T5] device_add+0xbb2/0x1ce0 [ 349.360003][ T5] ? devlink_add_symlinks+0x450/0x450 [ 349.365606][ T5] ? kfree+0xdb/0x3c0 [ 349.369616][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 349.375917][ T5] usb_set_configuration+0x113c/0x1910 [ 349.381450][ T5] usb_generic_driver_probe+0xba/0x100 [ 349.386979][ T5] usb_probe_device+0xd9/0x2c0 [ 349.391774][ T5] ? usb_driver_release_interface+0x180/0x180 [ 349.397881][ T5] really_probe+0x2b1/0xe40 [ 349.402427][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 349.408709][ T5] driver_probe_device+0x285/0x3f0 [ 349.413856][ T5] __device_attach_driver+0x216/0x2d0 [ 349.419264][ T5] ? driver_allows_async_probing+0x170/0x170 [ 349.425303][ T5] bus_for_each_drv+0x15f/0x1e0 [ 349.430630][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 349.435861][ T5] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 349.441696][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 349.447543][ T5] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 349.453422][ T5] __device_attach+0x228/0x4c0 [ 349.458229][ T5] ? really_probe+0xe40/0xe40 [ 349.462949][ T5] ? kobject_uevent_env+0x2bb/0x1680 [ 349.468623][ T5] bus_probe_device+0x1e4/0x290 [ 349.473506][ T5] device_add+0xbb2/0x1ce0 [ 349.477957][ T5] ? devlink_add_symlinks+0x450/0x450 [ 349.483351][ T5] ? kfree+0xdb/0x3c0 [ 349.487382][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 349.493657][ T5] usb_new_device.cold+0x725/0x1057 [ 349.498903][ T5] ? hub_disconnect+0x510/0x510 [ 349.503781][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 349.508751][ T5] ? _raw_spin_unlock_irq+0x1f/0x40 [ 349.513988][ T5] hub_event+0x2348/0x42d0 [ 349.518559][ T5] ? hub_port_debounce+0x3b0/0x3b0 [ 349.523717][ T5] ? lock_release+0x710/0x710 [ 349.529117][ T5] ? lock_downgrade+0x6d0/0x6d0 [ 349.534086][ T5] ? do_raw_spin_lock+0x120/0x2b0 [ 349.539153][ T5] process_one_work+0x98d/0x1630 [ 349.544129][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 349.549529][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 349.554489][ T5] ? _raw_spin_lock_irq+0x41/0x50 [ 349.559547][ T5] worker_thread+0x64c/0x1120 [ 349.564287][ T5] ? process_one_work+0x1630/0x1630 [ 349.569516][ T5] kthread+0x3b1/0x4a0 [ 349.573614][ T5] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 349.579622][ T5] ret_from_fork+0x1f/0x30 [ 349.584769][ T5] Kernel Offset: disabled [ 349.589339][ T5] Rebooting in 86400 seconds..