last executing test programs: 24.067147788s ago: executing program 2 (id=226): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) 23.918532968s ago: executing program 2 (id=228): syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101081) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r2) listen(r1, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'ethtool\x00'}]}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = gettid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r6, 0x0) syz_emit_vhci(0x0, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sigaltstack(0x0, 0x0) rt_sigqueueinfo(r5, 0x0, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 23.728812559s ago: executing program 2 (id=229): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1000, 0xfffffffffffffd94, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x95) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0xffffffffffffff7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f00007fe000/0x800000)=nil) r4 = syz_io_uring_setup(0x1fb, &(0x7f0000000080)={0x0, 0x0, 0x10101, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000140)) syz_io_uring_setup(0x311e, &(0x7f0000000480)={0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0xf9c, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x462}, 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xb00, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000206104724e0000000000010902240001fffcc0000000000904000001030002000d210000000122050010101e4cecfc191b5bc975aa28cc7c5d4fa31ae9388c", @ANYRES64=r6, @ANYRES8=r6, @ANYRESOCT=r6], 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000001280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x9}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009c00f6ff000000009500000000000000bd7b4f4f4846d9734d3b"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) 22.594354088s ago: executing program 1 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async) socket(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000440)) (async) fanotify_init(0x200, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x1) (async, rerun: 64) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1}) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="001d0200"/14], 0x14}}, 0x0) (async) r4 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) (async) futex(&(0x7f0000000200)=0x1, 0x0, 0xfffffffd, &(0x7f0000000300)={0x77359400}, 0x0, 0x0) (async) ioctl$SG_SET_COMMAND_Q(r4, 0x2276, 0xfffffffffffffffe) r5 = openat$sequencer(0xffffff9c, &(0x7f0000000200), 0x440, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x2, 0x0, @any, 0x0, 0x0, 0xf8}}}, 0x14) (async, rerun: 32) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x0, 0xea60}, {0x77359400}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x208, 0x220}}}}}}]}, 0x48}}, 0x0) (async) syz_emit_vhci(0x0, 0xac) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000300)={0x3ff}, 0x0, 0x0) (async) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xffdd) 22.488437641s ago: executing program 1 (id=233): sched_setaffinity(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15e", 0xbd}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e1729", 0x58}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c", 0x3}], 0x1}}], 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000000)={0x9, {0x0, 0x0, 0x0, 0xffffffea}}) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 22.04323505s ago: executing program 2 (id=237): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x32, @local, 0x4e22, 0x2, 'sed\x00', 0x22, 0x8, 0x7c}, 0x2c) (async) io_setup(0x1, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x7, 0x0, r0, &(0x7f0000000140)="a6", 0x1}]) 21.753877189s ago: executing program 2 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480}, 0x48) mmap(&(0x7f0000f9f000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x6000) 21.475018354s ago: executing program 2 (id=242): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439e73c82bad769c1516d4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2d568d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6325b4fb369c2aab53751ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e"}}) r0 = syz_io_uring_setup(0x55ab, &(0x7f0000000080)={0x0, 0x1e18, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @loopback}}}}}}, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040), 0x1) 21.006860768s ago: executing program 1 (id=245): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x18, &(0x7f0000000000)="89", 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0xffffffffffffff7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x100000000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f00007fe000/0x800000)=nil) r7 = syz_io_uring_setup(0x1fb, &(0x7f0000000080)={0x0, 0x0, 0x10101, 0x0, 0x0, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000140)) syz_io_uring_setup(0x4fb3, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x462}, 0x48) 20.838450573s ago: executing program 1 (id=247): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x0}) socket$kcm(0x10, 0x0, 0x10) signalfd4(r0, &(0x7f0000000300)={[0xca7]}, 0x8, 0x286cb3ab2b86723b) ioprio_set$uid(0x3, 0x0, 0x4007) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xa2}}}, 0xa) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000000c0)={r1, 0xfffffffb, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "e67a77fa82ab3fe8f31fe3dadbce46158f3dac1c93788d3437314b484e80dfe37da60cb4dfc619211936aa1e60155004220be3eb7dc64d3e66ad44d709c92b3a", "55773ebd7d709f92e04833c6fe84598c867d2696746b5b859f7bd371bfdf876399e635fd54af7889f2da1cba01e34b8c31de0deb57fe81a234e85f23b28cd80b", "438f68d63b63347f1c5f140da188c97eccc75c26645d63b6889e472aed325b7b"}}) socket$kcm(0x21, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0xff00) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="03c90081af6462f54ef987680ee163bf8514e0873c9e98d71c5464927e70df4fe196d6e39234349fb1806f12baa75a139b16633e8ae3143e542aeba10ee7ec62644226ed65bc4a014e1b423223fc7dcd12d6394e7902a9cec2af5b335e7dd851da31c75586bafa9236dc6aa53b5f33d94fd034272e1e55973b2f4598a6c34e7a152f8be713"], 0x85) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000006900012abd7000fedbdf250000000000000000080001000100000008000100010000000800010000000050d6745b28b43918190dbcc904de11000800010021000000e58d41fc5617ec22d3fd2fc792"], 0x38}}, 0x20000090) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r5, 0xedbe285f9b904783, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x178, r5, 0x200, 0x70bd2b, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x178}, 0x1, 0x0, 0x0, 0x8024}, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x37}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x804}, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 20.32455609s ago: executing program 1 (id=251): syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101081) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r2) listen(r1, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'ethtool\x00'}]}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = gettid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r6, 0x0) syz_emit_vhci(0x0, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sigaltstack(0x0, 0x0) rt_sigqueueinfo(r5, 0x0, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 20.008782693s ago: executing program 1 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}}, 0x4840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x8}, 0x0) 12.41977799s ago: executing program 0 (id=284): syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101081) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r2) listen(r1, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'ethtool\x00'}]}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) gettid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0x0) syz_emit_vhci(0x0, 0x6) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.335167618s ago: executing program 0 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x60000000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x2c}}, 0x0) 12.178681121s ago: executing program 0 (id=286): r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x10f242) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xefE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xd1\xa7@\xa1_B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xb0\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcd\x90\x95\xdd\x8a\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1d0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x26}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x80041, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0xd0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f0000000200)=""/119, &(0x7f00000002c0)=0x77) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001cf8"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020023"], 0x0}, 0x90) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) 10.320834339s ago: executing program 0 (id=299): r0 = dup(0xffffffffffffffff) read$nci(r0, &(0x7f0000002500)=""/14, 0xe) (async) read$nci(r0, &(0x7f0000002500)=""/14, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000008a04"]) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000006c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) (async) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4880) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4880) bpf$MAP_CREATE(0x0, 0x0, 0x0) iopl(0x3) prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000002440)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000002440)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'pim6reg1\x00', 0x1}, 0x18) r7 = socket(0x0, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) epoll_create1(0x0) (async) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0xe017be05}) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0xe017be05}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000003a00b5959750c6c403c89828b2beb35a3ee97a43aa35f4fd2611d6e76499fb8661f95063b9852eebbdbfcab5ae102bba300995817a243bafd01aefd52fb5070968085e90093ce32ca95c32b765bb2b18e16bab8d716226659dd4147735f72fecff3d70c7223fc49a85f4a4f784adefc0ac795a4969"], 0x18}}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000003a00b5959750c6c403c89828b2beb35a3ee97a43aa35f4fd2611d6e76499fb8661f95063b9852eebbdbfcab5ae102bba300995817a243bafd01aefd52fb5070968085e90093ce32ca95c32b765bb2b18e16bab8d716226659dd4147735f72fecff3d70c7223fc49a85f4a4f784adefc0ac795a4969"], 0x18}}, 0x4000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000001540)) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000000)="fc0000001a000708ab092500090007000aab0700a90100001d60369321000180fec0ffff00000000f1fffeff00039815fa2c1ec28656aaa79bb94b46fe00ff00bc00030005000000140000270400117c22ebc205214000000000008935d0730206001720d7d5bbc91a3e3280775e9ddefd5a32e280fc83ab820d9473decc9204d287f605f7029ddef2fe082038f4f8b29d3ef3d92c83170c5b8c4666e8e1bb05b7f589188319dd74ba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd1a6b567b4d5715587e658a1ad0a4f01731d05b0310b0041f2d48a99c03f080548deac270e3342", 0xfc) socket$igmp(0x2, 0x3, 0x2) 9.943045734s ago: executing program 0 (id=301): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="6ac1a2e7da534603ffd06f4bc169011fca2cb6a43299084ac7dc008c307f25d924690fcc4b6aec003f6526e0fdffcce8400b65e6c2af7e330e1eedc397dad71be88a11386e1a11ab9c1868c20fbcbbc27c73f59072da393f9df0bc076609b2c4", 0x60, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x0}, &(0x7f0000001100)="ac5ff57c", 0x4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001000)={r1, r0, r0}, &(0x7f0000002280)=""/198, 0xc6, 0x0) 5.5707873s ago: executing program 3 (id=310): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x8000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2, 0x3, 0x2) dup3(r1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r5 = socket(0x2, 0x3, 0x2) dup3(r4, r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x4, 0x4, 0x3ec, 0x0, 0x104, 0x208, 0x30c, 0x30c, 0x30c, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@random="dc44e0b45bfb"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan0\x00', 'lo\x00'}, 0xbc, 0x104, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xbc, 0x58}, {0x24, '\x00', 0x2}}}}, 0x47f) getdents64(r0, 0x0, 0x0) 5.266203715s ago: executing program 4 (id=311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x88, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x88}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x0) 4.77311145s ago: executing program 4 (id=312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x1b8, 0x12, 0x81c0ba3cd11c26f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e23}, 0x7a2}, [@INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "4628a1815271053fc1d75389fcaf18deb08a0df3c2c39f0162a77ed2c79bfc03d256d659e7fd0c3bebf1219e0b84fbe58e46459eb900a09edeca82be3dbb2213459c3837be82488825b548dfedd02b7de85c6857502197e3ef0121d8d0f57ce3a34e65a7dbbc32508ad9f528ba71a6902fc2d0a7e8aca6d336be3282250f9b17156bf75cf5ced9f818c4aaaa918377b8d0142320a27654e322b798044ed069c6597bf6c7b0401187fd92d1aa6f276416e7287d775e4ae45367d3c01609e6ad2395fd9393"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "de7015213026bb7e6dc1b6a5aaa76ba0db6f9a87ddfdf099f447082ff6224595796e081f4f1940a3723c2eb38a26fb8538a57d7d38ef928fdace0c883e0a7eb40423f74f312506a0d4521fe4c3dfba8305dd4c351987b1a8ad63777fe15cdf024a471dde0a102e9f2c82d5bbfa572838e29aea9957e951882ed5c8747c1307e51be7e5fdbe201f34b0b526ce4c4baa8efde5bbd5bf19ee52c9bddf017bbf"}]}, 0x1b8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000feffffff000000000000000418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, {@in6=@local, 0x3, 0x6c}, @in=@multicast1, {}, {}, {0xfffffffe}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES32=r4, @ANYRES64=r5, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003004000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730", @ANYRES64=r7], 0x1c8}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) syz_usb_connect(0x0, 0x285, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000240)=ANY=[], 0x78) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x0, r12}) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f00000003c0)={0x0, 0x0, 0x0, r12, 0x7}) sendto$inet(r9, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) r13 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cd) write$binfmt_script(r13, &(0x7f0000000440)={'#! ', '', [{0x20, '#! '}, {0x20, '.'}]}, 0xa) setsockopt$inet_mreqsrc(r13, 0x0, 0x28, &(0x7f0000000400)={@multicast2, @local, @local}, 0xc) 4.49482539s ago: executing program 3 (id=313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000f6b000/0x3000)=nil, 0x3000, 0x11) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000240)={0x2, @raw_data="4140ea6a53daaae5985f22e9a3dd146059305745b03742230ba2594045784be5fb62495a3bbbbdff3f0eac37acfa9bf82d75fdd1b8f6c776e6c817994b0cb9fe389886ae2a2bee57c2161178db787373063bfcd61cb5588b55848944fd2a19d7893330ab30d4649b5452e43a4aa73dd29f0879aca517fa52e1b01f2181fd8a0e1163836c99aa5420d373e0f06f5d5c8dab1a796d1274aaee40200577a0f243189952d803642f99c4d402cacb24cce78a187e2aac24873653e57b65204a4ebf0ff4bc7c48deb02b71"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r5}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r8, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r2}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b03feffe2ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r13, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.748913454s ago: executing program 4 (id=314): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae18, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4}) 2.407622835s ago: executing program 4 (id=315): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') pread64(r0, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x10, 0xffffffffffffffff, 0x7dc03000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="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", 0x26c}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f00000007c0)="121ec0ad49ef5e5d2c55677ee71d6710dff86c8debf984868d2d1f77fc3318e3a87a4ec0932d6ac09a9b7fa5e00fc52c05f7cf377e5978ebf353306bbdb78de0045993768d200063c4ab24ed2fd03c88f005f6c44fb8798011273bcb9ab32c281363e85617b9c756bca6e3efd8595b3e1afeebb6e81996465cdb8733782e609d6f1b", 0x82}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000980)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846d0513c1d9af3f721cad5b7a753816b79e9af459a7719536932401f193613b327704b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97f0e6ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d23", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x92}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0x8}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}, {&(0x7f0000000a80)="4bf2edbaeca8f1fd5a5ff9839532e236a7314831645a4cab8b93210bedfe4ceb20dd2bd631126162bef0201ca14872dc15d017f9560ef3791fd00df86210cce207bf560b9796d4a8afd20881a2721136963a765c8eea74bf1dc44f1974b2595cf6afbbce90e123469afbf597cd8a21805e31ac5d81add8fd0840c905c2f3a7246d4f1faf0212faa24cf9b13fed298a802414c359a2b17ae516f1dd84a822d3c4545f09ad", 0xa4}], 0x6}}], 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000001200)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r4, r2}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) 1.974805704s ago: executing program 4 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newtaction={0x70, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xd}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffd) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003500000008000300", @ANYRES32=r7, @ANYBLOB="14005500f2a061aa1180009b0e07efaadd67505c0a0006"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r10, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000040)={0x28, 0x0, r12, r11, 0x0, 0x0, 0xdead, 0x4}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000008c0)={0x2c, r13, 0x501, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}}, 0x0) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r9) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r15, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000000)="66b80500000066b9000000000f01d90f01df0f20d86635080000000f22d8660f3880ada7460f011f66b9e00900000f32660f38811c9a0f00c700ea0c00320180fbb7", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.880955719s ago: executing program 3 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)='}', 0x1}], 0x1, &(0x7f0000000a80)=[{0x10, 0x0, 0x6558}, {0x10}], 0x20}}], 0x1, 0x0) 1.762588151s ago: executing program 3 (id=318): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f030e00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e03ea3207b0500005f00010203010902120001000000000904"], 0x0) 1.404341876s ago: executing program 4 (id=319): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0xc0045009, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000025000/0x2000)=nil, 0x2000, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x6, 0x6) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default'], 0x2a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x400}, 0x20}}, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180), &(0x7f00000007c0)="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", 0xfb, 0xfffffffffffffffe) syz_usb_connect$cdc_ncm(0x2, 0x91, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x4, 0x88, 0xf7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6e, 0x8b, 0x401, 0x20}, {0x6, 0x24, 0x1a, 0x92bf, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @dmm={0x7, 0x24, 0x14, 0x2, 0x3}, @country_functional={0x6, 0x24, 0x7, 0x5, 0x8004}, @mbim={0xc, 0x24, 0x1b, 0xcd07, 0x9, 0x6, 0x0, 0x0, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x0, 0xfb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0xff, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x6, 0x3f}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x1f, 0x49, 0x20, 0x20, 0x7}, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000100)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1a00020000000406e1d27c6fb741fa52b2bb3c73db9a77cc44fa3b97065196c407f262944b2a94c0792a2d9eea41c45ea70de4c51a9728ed729a16ff2b9390c70a15d59677d573b239feb3407ecf7d9b4934d82816b61f325a7f41fa42941f2e882d9ac0cd39861845f9c029a229c303cf88f5f0302a3a1e2b97137cd7dfdcdb881557e0bafb77db5c3f0b6a9b1525d01ba1905d39c010903e450d079a3cbdc6201fbfa88ee47e41b57bdfdea74a4419316fc83fe0c05882"], 0x0}, &(0x7f0000000540)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0008ac39af62"], &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x41, {0x3f, "17838406c621615df6d73944148fcdfb73e7b90867448e4cc60d5198e3e5a8438ad1965f88ae53c5cc265dfbd05ed15e09d9b7036c4ba89b21211c7a434a74"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xd1}, 0x0}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x4e24, 0xffff, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x0) 141.61589ms ago: executing program 3 (id=320): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030080007f03e3f7000000096ee2ffca1b1f0000000004c00e72f750375ed08a56331d0000010000000000e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140078d224f37178bd0c27bfade0d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8a", 0x89}], 0x1}, 0x0) 0s ago: executing program 3 (id=321): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0xf, '\x00', @p_u32}}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 354.169619][ T5108] cgroup: Unknown subsys name 'net' [ 354.319240][ T5108] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 356.096671][ T5108] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 359.517236][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.527121][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.538703][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.548247][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.558104][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.565867][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.570528][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.573925][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.582230][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.587837][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.597375][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.603357][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.610033][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.623084][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 359.629835][ T5132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.632300][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.638559][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.645550][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.651451][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.667025][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.673488][ T5132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.676192][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 359.685700][ T5132] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.702775][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.710221][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.710313][ T4488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.724958][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 359.733153][ T4488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.741419][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.758086][ T4488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.401287][ T5133] chnl_net:caif_netlink_parms(): no params data found [ 360.426397][ T5137] chnl_net:caif_netlink_parms(): no params data found [ 360.594617][ T5134] chnl_net:caif_netlink_parms(): no params data found [ 360.605592][ T5135] chnl_net:caif_netlink_parms(): no params data found [ 360.763505][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.771105][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.779630][ T5137] bridge_slave_0: entered allmulticast mode [ 360.786816][ T5137] bridge_slave_0: entered promiscuous mode [ 360.796378][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.803808][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.811758][ T5137] bridge_slave_1: entered allmulticast mode [ 360.819113][ T5137] bridge_slave_1: entered promiscuous mode [ 360.832281][ T5136] chnl_net:caif_netlink_parms(): no params data found [ 360.872155][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.879407][ T5133] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.886816][ T5133] bridge_slave_0: entered allmulticast mode [ 360.894506][ T5133] bridge_slave_0: entered promiscuous mode [ 360.947512][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.954906][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.962738][ T5133] bridge_slave_1: entered allmulticast mode [ 360.970137][ T5133] bridge_slave_1: entered promiscuous mode [ 360.989247][ T5137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.001434][ T5137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.131970][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.139297][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.146558][ T5134] bridge_slave_0: entered allmulticast mode [ 361.154435][ T5134] bridge_slave_0: entered promiscuous mode [ 361.186546][ T5137] team0: Port device team_slave_0 added [ 361.195687][ T5137] team0: Port device team_slave_1 added [ 361.202066][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.209537][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.216742][ T5135] bridge_slave_0: entered allmulticast mode [ 361.224782][ T5135] bridge_slave_0: entered promiscuous mode [ 361.233414][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.241121][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.248653][ T5134] bridge_slave_1: entered allmulticast mode [ 361.255915][ T5134] bridge_slave_1: entered promiscuous mode [ 361.277855][ T5133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.306157][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.313700][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.321425][ T5135] bridge_slave_1: entered allmulticast mode [ 361.329095][ T5135] bridge_slave_1: entered promiscuous mode [ 361.358037][ T5133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.414197][ T5134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.451445][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.458721][ T5136] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.465972][ T5136] bridge_slave_0: entered allmulticast mode [ 361.473989][ T5136] bridge_slave_0: entered promiscuous mode [ 361.483114][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.490490][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.516586][ T5137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.544885][ T5134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.583996][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.591879][ T5136] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.600875][ T5136] bridge_slave_1: entered allmulticast mode [ 361.608616][ T5136] bridge_slave_1: entered promiscuous mode [ 361.616230][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.627854][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.653930][ T5137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.668050][ T5135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.694221][ T5133] team0: Port device team_slave_0 added [ 361.738201][ T5135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.752302][ T5134] team0: Port device team_slave_0 added [ 361.761372][ T5133] team0: Port device team_slave_1 added [ 361.768877][ T53] Bluetooth: hci4: command tx timeout [ 361.768897][ T5123] Bluetooth: hci2: command tx timeout [ 361.774659][ T53] Bluetooth: hci0: command tx timeout [ 361.783013][ T5134] team0: Port device team_slave_1 added [ 361.822105][ T5136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.835086][ T5136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.858206][ T4488] Bluetooth: hci3: command tx timeout [ 361.864189][ T53] Bluetooth: hci1: command tx timeout [ 361.875826][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.882928][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.909987][ T5133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.976019][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.983426][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.009564][ T5133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.038767][ T5135] team0: Port device team_slave_0 added [ 362.059646][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.066643][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.093673][ T5134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.112359][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.119448][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.145550][ T5134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.160338][ T5136] team0: Port device team_slave_0 added [ 362.175255][ T5135] team0: Port device team_slave_1 added [ 362.185553][ T5137] hsr_slave_0: entered promiscuous mode [ 362.196108][ T5137] hsr_slave_1: entered promiscuous mode [ 362.231305][ T5136] team0: Port device team_slave_1 added [ 362.324523][ T5136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.331670][ T5136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.357739][ T5136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.399697][ T5133] hsr_slave_0: entered promiscuous mode [ 362.406271][ T5133] hsr_slave_1: entered promiscuous mode [ 362.413232][ T5133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.421222][ T5133] Cannot create hsr debugfs directory [ 362.441921][ T5136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.449667][ T5136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.475684][ T5136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.488289][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.495336][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.521490][ T5135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.535525][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.542668][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.569306][ T5135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.635270][ T5134] hsr_slave_0: entered promiscuous mode [ 362.642761][ T5134] hsr_slave_1: entered promiscuous mode [ 362.649244][ T5134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.656846][ T5134] Cannot create hsr debugfs directory [ 362.882384][ T5136] hsr_slave_0: entered promiscuous mode [ 362.907401][ T5136] hsr_slave_1: entered promiscuous mode [ 362.915192][ T5136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.923108][ T5136] Cannot create hsr debugfs directory [ 362.934499][ T5135] hsr_slave_0: entered promiscuous mode [ 362.941581][ T5135] hsr_slave_1: entered promiscuous mode [ 362.949124][ T5135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.956711][ T5135] Cannot create hsr debugfs directory [ 363.317492][ T5137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.351121][ T5137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.361604][ T5137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.391997][ T5137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.463666][ T5134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.485682][ T5134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 363.496329][ T5134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 363.524278][ T5134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 363.593432][ T5133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.605377][ T5133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.616619][ T5133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.656412][ T5133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.749371][ T5136] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.789378][ T5136] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.821080][ T5136] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.848391][ T53] Bluetooth: hci0: command tx timeout [ 363.861526][ T53] Bluetooth: hci2: command tx timeout [ 363.861543][ T4488] Bluetooth: hci4: command tx timeout [ 363.878397][ T5137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.886044][ T5136] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.931526][ T4488] Bluetooth: hci3: command tx timeout [ 363.931558][ T53] Bluetooth: hci1: command tx timeout [ 363.970202][ T5135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.984013][ T5135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.010040][ T5135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.022192][ T5135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.111226][ T5137] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.147229][ T5134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.197945][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.205444][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.229315][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.236463][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.267359][ T5134] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.311041][ T5133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.331465][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.338696][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.349509][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.356767][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.474301][ T5133] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.522867][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.530042][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.583701][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.590924][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.611224][ T5136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.631636][ T5135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.700610][ T5136] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.762346][ T5134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.774196][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.781456][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.814969][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.822220][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.840520][ T5135] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.880049][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.887207][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.914552][ T5137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.934585][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.941808][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.969812][ T5133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.006661][ T5136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.017995][ T5136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.052595][ T5134] veth0_vlan: entered promiscuous mode [ 365.071697][ T5134] veth1_vlan: entered promiscuous mode [ 365.223019][ T5136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.263213][ T5134] veth0_macvtap: entered promiscuous mode [ 365.296849][ T5134] veth1_macvtap: entered promiscuous mode [ 365.321973][ T5137] veth0_vlan: entered promiscuous mode [ 365.352381][ T5135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.378894][ T5137] veth1_vlan: entered promiscuous mode [ 365.404323][ T5133] veth0_vlan: entered promiscuous mode [ 365.419393][ T5136] veth0_vlan: entered promiscuous mode [ 365.443537][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.465386][ T5133] veth1_vlan: entered promiscuous mode [ 365.477181][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.494185][ T5136] veth1_vlan: entered promiscuous mode [ 365.572225][ T5134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.581587][ T5134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.594417][ T5134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.603492][ T5134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.650375][ T5137] veth0_macvtap: entered promiscuous mode [ 365.661450][ T5133] veth0_macvtap: entered promiscuous mode [ 365.694898][ T5133] veth1_macvtap: entered promiscuous mode [ 365.708546][ T5137] veth1_macvtap: entered promiscuous mode [ 365.727362][ T5135] veth0_vlan: entered promiscuous mode [ 365.756300][ T5136] veth0_macvtap: entered promiscuous mode [ 365.810102][ T5135] veth1_vlan: entered promiscuous mode [ 365.826538][ T5136] veth1_macvtap: entered promiscuous mode [ 365.874888][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.886218][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.902464][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.922816][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.933694][ T53] Bluetooth: hci4: command tx timeout [ 365.940093][ T53] Bluetooth: hci2: command tx timeout [ 365.945662][ T53] Bluetooth: hci0: command tx timeout [ 365.951475][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.961851][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.972589][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.985113][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.008129][ T53] Bluetooth: hci1: command tx timeout [ 366.008399][ T4488] Bluetooth: hci3: command tx timeout [ 366.030811][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.042359][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.052479][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.063090][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.074533][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.085323][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.099467][ T5136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.112232][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.123135][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.134792][ T5136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.145652][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.156236][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.166137][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.177215][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.189283][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.202226][ T5137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.211081][ T5137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.221743][ T5137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.231100][ T5137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.245730][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.271697][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.280337][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.293872][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.304705][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.316784][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.327064][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.339421][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.352936][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.390897][ T5136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.402663][ T5136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.412004][ T5136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.426534][ T5136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.439775][ T5133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.448782][ T5133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.458717][ T5133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.467471][ T5133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.515065][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.523303][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.547130][ T5135] veth0_macvtap: entered promiscuous mode [ 366.580715][ T5135] veth1_macvtap: entered promiscuous mode [ 366.764103][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.785325][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.848465][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.865453][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.875558][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.891087][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.902135][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.912799][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.923579][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.934235][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.946811][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.034952][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.053955][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.066911][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.085991][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.110060][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.123814][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.130456][ T5187] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 367.134514][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.158652][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.170401][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.180630][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.194266][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.196388][ T5135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.227169][ T5135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.247651][ T5135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.256410][ T5135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.295697][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.305279][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.344258][ T5190] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 367.430363][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.441090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.464042][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.497648][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.534478][ T5170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.569321][ T5170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.746849][ T5196] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 367.799175][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.815930][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.816212][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.824907][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.988282][ T5199] bridge_slave_1: left allmulticast mode [ 367.996736][ T5199] bridge_slave_1: left promiscuous mode [ 368.008357][ T4488] Bluetooth: hci2: command tx timeout [ 368.008905][ T5123] Bluetooth: hci4: command tx timeout [ 368.019870][ T53] Bluetooth: hci0: command tx timeout [ 368.031211][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.063037][ T5199] bridge_slave_0: left allmulticast mode [ 368.088174][ T5123] Bluetooth: hci1: command tx timeout [ 368.094434][ T53] Bluetooth: hci3: command tx timeout [ 368.106407][ T5199] bridge_slave_0: left promiscuous mode [ 368.134269][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.293043][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.293074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.848350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.429725][ T5177] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 369.508061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.537675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 369.665664][ T5177] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=6e.9b [ 369.687494][ T5177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.707447][ T5177] usb 4-1: Product: syz [ 369.722927][ T5177] usb 4-1: Manufacturer: syz [ 369.734988][ T5177] usb 4-1: SerialNumber: syz [ 369.759261][ T5177] usb 4-1: config 0 descriptor?? [ 369.787068][ T5177] cdc_mbim 4-1:0.0: CDC Union missing and no IAD found [ 369.795012][ T5177] cdc_mbim 4-1:0.0: bind() failure [ 370.029364][ T5176] usb 4-1: USB disconnect, device number 2 [ 370.717782][ T5176] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 370.786870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 370.842879][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.854877][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.877292][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.886187][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.904013][ T5123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 370.915294][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.928947][ T5176] usb 1-1: Using ep0 maxpacket: 32 [ 370.936962][ T5176] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 370.948211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 371.014321][ T5176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.150000][ T5176] usb 1-1: config 0 descriptor?? [ 371.233650][ T5176] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 371.241506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 371.369666][ T5170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.708863][ T5170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.750356][ T5306] netlink: 'syz.4.37': attribute type 29 has an invalid length. [ 371.792211][ T5309] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.37'. [ 371.821558][ T5306] netlink: 'syz.4.37': attribute type 29 has an invalid length. [ 371.900501][ T5170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.921611][ T5309] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.37'. [ 371.997212][ T5170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.147941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 372.157691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 372.308377][ T5287] chnl_net:caif_netlink_parms(): no params data found [ 372.362987][ T5176] gspca_nw80x: reg_w err -71 [ 372.379153][ T5176] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 372.419549][ T5176] usb 1-1: USB disconnect, device number 2 [ 372.771217][ T5170] bridge_slave_1: left allmulticast mode [ 372.779477][ T5170] bridge_slave_1: left promiscuous mode [ 372.786356][ T5170] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.800870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 372.827307][ T5170] bridge_slave_0: left allmulticast mode [ 372.833519][ T5170] bridge_slave_0: left promiscuous mode [ 372.844596][ T5170] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.878100][ T5124] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 373.048645][ T53] Bluetooth: hci0: command tx timeout [ 373.068023][ T5124] usb 4-1: Invalid ep0 maxpacket: 64 [ 373.129510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 373.267838][ T5124] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 373.470196][ T5124] usb 4-1: Invalid ep0 maxpacket: 64 [ 373.491885][ T5124] usb usb4-port1: attempt power cycle [ 373.778500][ T5170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.868204][ T5170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.899629][ T5170] bond0 (unregistering): Released all slaves [ 373.918475][ T5124] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 373.970222][ T5124] usb 4-1: Invalid ep0 maxpacket: 64 [ 374.221507][ T5124] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 374.282393][ T5124] usb 4-1: Invalid ep0 maxpacket: 64 [ 374.301685][ T5124] usb usb4-port1: unable to enumerate USB device [ 374.325588][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.345890][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.358479][ T5287] bridge_slave_0: entered allmulticast mode [ 374.365808][ T5287] bridge_slave_0: entered promiscuous mode [ 374.376067][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.385209][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.404663][ T5287] bridge_slave_1: entered allmulticast mode [ 374.421274][ T5287] bridge_slave_1: entered promiscuous mode [ 374.518118][ T5078] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 374.639738][ T5287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.692947][ T5287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.719756][ T5078] usb 1-1: config 0 has an invalid interface number: 58 but max is 1 [ 374.758079][ T5078] usb 1-1: config 0 has an invalid interface number: 145 but max is 1 [ 374.805591][ T5078] usb 1-1: config 0 has no interface number 0 [ 374.831893][ T5078] usb 1-1: config 0 has no interface number 1 [ 374.842217][ T5078] usb 1-1: config 0 interface 58 altsetting 0 endpoint 0xD has an invalid bInterval 129, changing to 7 [ 374.853954][ T5078] usb 1-1: config 0 interface 58 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 374.865013][ T5078] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 1.46 [ 374.875597][ T5078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.912687][ T5078] usb 1-1: config 0 descriptor?? [ 375.112269][ T5287] team0: Port device team_slave_0 added [ 375.141036][ T53] Bluetooth: hci0: command tx timeout [ 375.153627][ T8] usb 1-1: USB disconnect, device number 3 [ 375.320858][ T5170] hsr_slave_0: left promiscuous mode [ 375.406174][ T5170] hsr_slave_1: left promiscuous mode [ 375.426901][ T5361] netlink: 56 bytes leftover after parsing attributes in process `syz.1.53'. [ 375.468247][ T5170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.475800][ T5170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.508268][ T5170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.515746][ T5170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.635579][ T5170] veth1_macvtap: left promiscuous mode [ 375.650388][ T5170] veth0_macvtap: left promiscuous mode [ 375.679137][ T5170] veth1_vlan: left promiscuous mode [ 375.712697][ T5170] veth0_vlan: left promiscuous mode [ 376.119155][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.145047][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.154561][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.165886][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.180637][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 376.189352][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.019731][ T5170] team0 (unregistering): Port device team_slave_1 removed [ 377.062299][ T5170] team0 (unregistering): Port device team_slave_0 removed [ 377.157985][ T5172] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 377.210707][ T5123] Bluetooth: hci0: command tx timeout [ 377.342352][ T5172] usb 4-1: Using ep0 maxpacket: 8 [ 377.363788][ T5172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 377.383795][ T5172] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 377.394918][ T5172] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 377.411107][ T5172] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 377.420606][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 377.428977][ T5172] usb 4-1: SerialNumber: syz [ 377.442053][ T5395] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.459205][ T5172] hub 4-1:1.0: bad descriptor, ignoring hub [ 377.465186][ T5172] hub 4-1:1.0: probe with driver hub failed with error -5 [ 377.505388][ T5287] team0: Port device team_slave_1 added [ 377.697003][ T5395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.711916][ T5395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.834569][ T5395] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.853951][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.874950][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.904183][ T5287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.993835][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.028311][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.064630][ T5287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.146001][ T5172] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 378.220449][ T5172] usb 4-1: USB disconnect, device number 7 [ 378.249155][ T5123] Bluetooth: hci3: command tx timeout [ 378.428230][ T5287] hsr_slave_0: entered promiscuous mode [ 378.455258][ T5287] hsr_slave_1: entered promiscuous mode [ 378.471045][ T5287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.484608][ T5287] Cannot create hsr debugfs directory [ 378.527843][ T57] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 378.732907][ T57] usb 1-1: Using ep0 maxpacket: 8 [ 378.766869][ T57] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 378.785661][ T57] usb 1-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 378.826749][ T57] usb 1-1: config 0 has no interface number 0 [ 378.861904][ T57] usb 1-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=f1.14 [ 378.883334][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.895036][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.895348][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.924878][ T57] usb 1-1: Product: syz [ 378.933514][ T5170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.966180][ T57] usb 1-1: Manufacturer: syz [ 378.988848][ T57] usb 1-1: SerialNumber: syz [ 379.009836][ T57] usb 1-1: config 0 descriptor?? [ 379.020557][ T57] smsc95xx v2.0.0 [ 379.024254][ T57] smsc95xx 1-1:0.253 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 379.054331][ T57] smsc95xx 1-1:0.253: probe with driver smsc95xx failed with error -22 [ 379.073469][ T5433] netlink: 56 bytes leftover after parsing attributes in process `syz.3.68'. [ 379.226675][ T29] audit: type=1326 audit(1720844451.197:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.0.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63f7375bd9 code=0x0 [ 379.271209][ T5170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.291137][ T5123] Bluetooth: hci0: command tx timeout [ 379.439364][ T5170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.632164][ T5170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.756436][ T5382] chnl_net:caif_netlink_parms(): no params data found [ 380.020280][ T5463] sctp: failed to load transform for md5: -4 [ 380.312130][ T5382] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.327886][ T5123] Bluetooth: hci3: command tx timeout [ 380.347761][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.355084][ T5382] bridge_slave_0: entered allmulticast mode [ 380.367871][ T5176] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 380.382077][ T5382] bridge_slave_0: entered promiscuous mode [ 380.566902][ T5382] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.605154][ T5176] usb 4-1: Using ep0 maxpacket: 8 [ 380.618407][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.636623][ T5382] bridge_slave_1: entered allmulticast mode [ 380.644147][ T5176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 380.645358][ T5382] bridge_slave_1: entered promiscuous mode [ 380.672883][ T5176] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 380.692595][ T5176] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 380.716957][ T5176] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 380.726597][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 380.741856][ T5176] usb 4-1: SerialNumber: syz [ 380.770370][ T5476] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 380.801540][ T5176] hub 4-1:1.0: bad descriptor, ignoring hub [ 380.828950][ T5176] hub 4-1:1.0: probe with driver hub failed with error -5 [ 380.932293][ T5382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.033161][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.048342][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.155284][ T5476] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 381.222614][ T5172] usb 1-1: USB disconnect, device number 4 [ 381.403075][ T5176] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 381.463580][ T5176] usb 4-1: USB disconnect, device number 8 [ 381.627233][ T5170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.643335][ T5170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.654738][ T5170] bond0 (unregistering): Released all slaves [ 381.673547][ T5382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.792986][ T5382] team0: Port device team_slave_0 added [ 381.807832][ T5172] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 381.815784][ T5382] team0: Port device team_slave_1 added [ 381.837929][ T5124] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 381.924002][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.942368][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.977962][ T5382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.017087][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.024537][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.027925][ T5172] usb 1-1: Using ep0 maxpacket: 8 [ 382.062034][ T5382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.074559][ T5124] usb 2-1: config 0 has an invalid interface number: 58 but max is 1 [ 382.097829][ T5124] usb 2-1: config 0 has an invalid interface number: 145 but max is 1 [ 382.117191][ T5505] netlink: 56 bytes leftover after parsing attributes in process `syz.3.80'. [ 382.127598][ T5124] usb 2-1: config 0 has no interface number 0 [ 382.140522][ T5172] usb 1-1: config 1 has an invalid interface number: 8 but max is 2 [ 382.149033][ T5172] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 382.152528][ T5124] usb 2-1: config 0 has no interface number 1 [ 382.170091][ T5172] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 382.175063][ T5124] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0xD has an invalid bInterval 129, changing to 7 [ 382.183383][ T5172] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.196620][ T5124] usb 2-1: config 0 interface 58 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 382.219048][ T5172] usb 1-1: config 1 has no interface number 0 [ 382.220137][ T5124] usb 2-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 1.46 [ 382.246882][ T5124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.263654][ T5172] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.274929][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.292506][ T5124] usb 2-1: config 0 descriptor?? [ 382.312524][ T5172] usb 1-1: Product: syz [ 382.334994][ T5172] usb 1-1: Manufacturer: syz [ 382.346529][ T5172] usb 1-1: SerialNumber: syz [ 382.418647][ T5123] Bluetooth: hci3: command tx timeout [ 382.457899][ T5287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 382.483693][ T5287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 382.507434][ T5382] hsr_slave_0: entered promiscuous mode [ 382.521115][ T5382] hsr_slave_1: entered promiscuous mode [ 382.547132][ T5382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.561188][ T5176] usb 2-1: USB disconnect, device number 2 [ 382.568337][ T5382] Cannot create hsr debugfs directory [ 382.594964][ T5123] Bluetooth: hci4: unknown advertising packet type: 0x65 [ 382.595066][ T5123] Bluetooth: hci4: Malformed LE Event: 0x02 [ 382.606939][ T5500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.78'. [ 382.627028][ T5287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 382.667147][ T5287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 382.690996][ T5172] usb 1-1: 8:2 : does not exist [ 382.749126][ T5172] usb 1-1: USB disconnect, device number 5 [ 382.824694][ T5170] hsr_slave_0: left promiscuous mode [ 382.846003][ T5170] hsr_slave_1: left promiscuous mode [ 382.861454][ T5170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.897810][ T5170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.919424][ T5170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.927169][ T5170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.963972][ T5170] veth1_macvtap: left promiscuous mode [ 382.969909][ T5170] veth0_macvtap: left promiscuous mode [ 382.975626][ T5170] veth1_vlan: left promiscuous mode [ 382.982836][ T5170] veth0_vlan: left promiscuous mode [ 383.062702][ T5169] udevd[5169]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.187928][ T5176] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 383.375373][ T5176] usb 4-1: Using ep0 maxpacket: 8 [ 383.392465][ T5176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.416086][ T5176] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 383.433354][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.456643][ T5176] usb 4-1: config 0 descriptor?? [ 383.468912][ T5124] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 383.669989][ T5124] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 383.681581][ T5124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.715116][ T5124] usb 2-1: config 0 descriptor?? [ 383.776601][ T5170] team0 (unregistering): Port device team_slave_1 removed [ 383.824847][ T5170] team0 (unregistering): Port device team_slave_0 removed [ 384.445030][ T5176] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 384.490059][ T5123] Bluetooth: hci3: command tx timeout [ 384.497719][ T5176] usb 4-1: USB disconnect, device number 9 [ 384.576327][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 384.619722][ T5176] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 384.744854][ T5124] usb 2-1: Cannot set autoneg [ 384.765389][ T5124] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 385.127046][ T5548] netlink: 56 bytes leftover after parsing attributes in process `syz.0.89'. [ 385.347701][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 385.422132][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.513546][ T5287] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.544844][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.552218][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.569274][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 385.602366][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.609679][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.615916][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 385.649940][ T5560] futex_wake_op: syz.0.90 tries to shift op by 32; fix this program [ 385.658694][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 385.697323][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 385.734613][ T9] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 385.755942][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 385.773978][ T9] usb 4-1: SerialNumber: syz [ 385.809373][ T5544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.838721][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 385.844711][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 385.848299][ T5287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.877828][ T5382] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 385.894717][ T5382] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.925005][ T5382] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.967360][ T5382] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.017952][ T5176] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 386.066371][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.081127][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.146732][ T5544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 386.165207][ T5287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.208633][ T5176] usb 1-1: Using ep0 maxpacket: 16 [ 386.217297][ T5176] usb 1-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 386.245219][ T5176] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 386.255738][ T5176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.266492][ T8] usb 2-1: USB disconnect, device number 3 [ 386.287769][ T5176] usb 1-1: Product: syz [ 386.293350][ T5176] usb 1-1: Manufacturer: syz [ 386.315013][ T5176] usb 1-1: SerialNumber: syz [ 386.361014][ T5176] usb 1-1: config 0 descriptor?? [ 386.368977][ T5382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.380690][ T5565] capability: warning: `syz.1.91' uses deprecated v2 capabilities in a way that may be insecure [ 386.408295][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 386.420711][ T5176] ims_pcu 1-1:0.0: Zero length descriptor [ 386.440791][ T5176] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 386.475740][ T5382] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.484480][ T9] usb 4-1: USB disconnect, device number 10 [ 386.547279][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.554535][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.636337][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.643605][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.741834][ T5287] veth0_vlan: entered promiscuous mode [ 386.804775][ T5287] veth1_vlan: entered promiscuous mode [ 386.952227][ T5287] veth0_macvtap: entered promiscuous mode [ 387.041141][ T5287] veth1_macvtap: entered promiscuous mode [ 387.142020][ T5382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.167050][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.197677][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.223308][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.245056][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.275684][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.309235][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.333597][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.387403][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.415497][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.426865][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.443447][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.455988][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.473089][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.513500][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.606116][ T5287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.636401][ T5287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.653386][ T5287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.674876][ T5287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.939859][ T5382] veth0_vlan: entered promiscuous mode [ 388.055820][ T5382] veth1_vlan: entered promiscuous mode [ 388.103529][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.129433][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.198522][ T5124] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 388.242449][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.255396][ T5382] veth0_macvtap: entered promiscuous mode [ 388.281921][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.327480][ T5382] veth1_macvtap: entered promiscuous mode [ 388.350058][ T5177] usb 1-1: USB disconnect, device number 6 [ 388.398969][ T5124] usb 2-1: Using ep0 maxpacket: 8 [ 388.409653][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.439885][ T5124] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 388.455520][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.467086][ T5124] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.473976][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.495980][ T5124] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.506310][ T5124] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.516639][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.523774][ T5124] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.546293][ T5124] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 388.546449][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.574828][ T5124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.597711][ T5612] netlink: 56 bytes leftover after parsing attributes in process `syz.3.98'. [ 388.599400][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.634947][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.656819][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.684332][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.740745][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.801280][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.825564][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.847828][ T5124] usb 2-1: usb_control_msg returned -32 [ 388.856535][ T5124] usbtmc 2-1:16.0: can't read capabilities [ 388.880972][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.894378][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.922781][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.960059][ T5382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.976478][ T5382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.996384][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.040360][ T5382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.088943][ T5382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.108430][ T5382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.125184][ T5382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.521323][ T5168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.553327][ T5168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.631388][ T5644] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 389.686291][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.737769][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.129033][ T5174] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 390.342591][ T5174] usb 4-1: Using ep0 maxpacket: 8 [ 390.376034][ T5174] usb 4-1: config 0 has no interfaces? [ 390.391849][ T5174] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 390.433486][ T5174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.485055][ T5174] usb 4-1: config 0 descriptor?? [ 390.675589][ T5667] futex_wake_op: syz.2.108 tries to shift op by 32; fix this program [ 390.730525][ T5668] futex_wake_op: syz.4.107 tries to shift op by 32; fix this program [ 391.020556][ T5176] usb 2-1: USB disconnect, device number 4 [ 391.057623][ T57] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 391.127954][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 391.218404][ T5692] rtc_cmos 00:00: Alarms can be up to one day in the future [ 391.230414][ T5689] netlink: 56 bytes leftover after parsing attributes in process `syz.1.111'. [ 391.277852][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 391.347945][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 391.359720][ T5124] usb 4-1: USB disconnect, device number 11 [ 391.367975][ T57] usb 5-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 391.385679][ T8] usb 3-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 391.449317][ T57] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 391.479700][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.486363][ T8] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 391.497772][ T57] usb 5-1: Product: syz [ 391.501987][ T57] usb 5-1: Manufacturer: syz [ 391.520463][ T5696] Zero length message leads to an empty skb [ 391.534106][ T57] usb 5-1: SerialNumber: syz [ 391.539036][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.587197][ T57] usb 5-1: config 0 descriptor?? [ 391.594043][ T8] usb 3-1: Product: syz [ 391.601763][ T57] ims_pcu 5-1:0.0: Zero length descriptor [ 391.612060][ T57] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 391.621019][ T8] usb 3-1: Manufacturer: syz [ 391.683922][ T8] usb 3-1: SerialNumber: syz [ 391.744070][ T8] usb 3-1: config 0 descriptor?? [ 391.791513][ T8] ims_pcu 3-1:0.0: Zero length descriptor [ 391.810397][ T8] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 392.958151][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 393.188548][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 393.215577][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 393.254183][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 393.279390][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 393.307342][ T8] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 393.317795][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.331267][ T5745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 393.358846][ T8] usb 4-1: SerialNumber: syz [ 393.394674][ T5727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.410097][ T8] hub 4-1:1.0: bad descriptor, ignoring hub [ 393.434987][ T8] hub 4-1:1.0: probe with driver hub failed with error -5 [ 393.459879][ T5177] usb 5-1: USB disconnect, device number 2 [ 393.564606][ T5176] usb 3-1: USB disconnect, device number 2 [ 393.706371][ T5727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.719854][ T5748] netlink: 56 bytes leftover after parsing attributes in process `syz.4.123'. [ 393.772689][ T5727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.892775][ T5727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.144676][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 394.241156][ T8] usb 4-1: USB disconnect, device number 12 [ 394.503943][ T5770] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 394.868540][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 395.071681][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 395.117109][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.161032][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.197611][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.206834][ T5786] futex_wake_op: syz.3.133 tries to shift op by 32; fix this program [ 395.237663][ T8] usb 5-1: Product: syz [ 395.241985][ T8] usb 5-1: Manufacturer: syz [ 395.276210][ T8] usb 5-1: SerialNumber: syz [ 395.303913][ T8] cdc_ether 5-1:1.0: skipping garbage [ 395.329359][ T8] usb 5-1: bad CDC descriptors [ 395.347691][ T5176] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 395.541788][ T5124] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 395.594159][ T5176] usb 1-1: config 0 has an invalid interface number: 58 but max is 1 [ 395.602833][ T5176] usb 1-1: config 0 has an invalid interface number: 145 but max is 1 [ 395.622801][ T5176] usb 1-1: config 0 has no interface number 0 [ 395.646040][ T5176] usb 1-1: config 0 has no interface number 1 [ 395.663933][ T5176] usb 1-1: config 0 interface 58 altsetting 0 endpoint 0xD has an invalid bInterval 129, changing to 7 [ 395.691831][ T5176] usb 1-1: config 0 interface 58 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 395.737668][ T5124] usb 4-1: Using ep0 maxpacket: 16 [ 395.754556][ T5176] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 1.46 [ 395.779450][ T8] usb 5-1: USB disconnect, device number 3 [ 395.803350][ T5124] usb 4-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 395.825612][ T5176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.864047][ T5124] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 395.888251][ T5176] usb 1-1: config 0 descriptor?? [ 395.898025][ T5124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.916894][ T5124] usb 4-1: Product: syz [ 395.940235][ T5124] usb 4-1: Manufacturer: syz [ 395.961285][ T5124] usb 4-1: SerialNumber: syz [ 396.012363][ T5124] usb 4-1: config 0 descriptor?? [ 396.051821][ T5124] ims_pcu 4-1:0.0: Zero length descriptor [ 396.083406][ T5124] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 396.156475][ T8] usb 1-1: USB disconnect, device number 7 [ 396.185857][ T5805] futex_wake_op: syz.1.136 tries to shift op by 32; fix this program [ 396.347969][ T5807] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 396.467801][ T5124] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 396.657778][ T5124] usb 2-1: Using ep0 maxpacket: 16 [ 396.671429][ T5124] usb 2-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 396.687634][ T5124] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 396.707849][ T5124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.716191][ T5124] usb 2-1: Product: syz [ 396.720573][ T5124] usb 2-1: Manufacturer: syz [ 396.727066][ T5124] usb 2-1: SerialNumber: syz [ 396.742594][ T5124] usb 2-1: config 0 descriptor?? [ 396.765610][ T5124] ims_pcu 2-1:0.0: Zero length descriptor [ 396.771778][ T5124] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 397.524513][ T5124] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 397.729785][ T5124] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 397.748029][ T5124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.764160][ T5124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.774976][ T5124] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 397.791655][ T5124] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 397.799886][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 397.800975][ T5124] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 397.816939][ T5124] usb 5-1: Manufacturer: syz [ 397.829403][ T5124] usb 5-1: config 0 descriptor?? [ 397.943117][ T5177] usb 4-1: USB disconnect, device number 13 [ 398.014215][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 398.040088][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 398.077875][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 398.117613][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 398.145618][ T5168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.148930][ T8] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 398.192348][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 398.210897][ T8] usb 1-1: SerialNumber: syz [ 398.225294][ T5825] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 398.239288][ T8] hub 1-1:1.0: bad descriptor, ignoring hub [ 398.255492][ T8] hub 1-1:1.0: probe with driver hub failed with error -5 [ 398.256633][ T5124] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 398.298950][ T5124] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 398.343561][ T5124] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 398.352750][ T5168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.466810][ T5825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.470858][ T5168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.496535][ T5825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.587874][ T5177] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 398.594789][ T5825] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 398.617408][ T5168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.727071][ T5833] netlink: 56 bytes leftover after parsing attributes in process `syz.4.141'. [ 398.796948][ T5177] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.810459][ T5177] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 398.819677][ T5177] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 398.833326][ T5177] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 398.833947][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 398.842486][ T5177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.855520][ T8] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 398.874072][ T5177] usb 4-1: config 0 descriptor?? [ 398.879618][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 398.888511][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 398.907969][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 398.917746][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 398.925253][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.957887][ T786] usb 2-1: USB disconnect, device number 5 [ 398.999417][ T8] usb 1-1: USB disconnect, device number 8 [ 399.168734][ T5168] bridge_slave_1: left allmulticast mode [ 399.195410][ T5168] bridge_slave_1: left promiscuous mode [ 399.218479][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.257777][ T5168] bridge_slave_0: left allmulticast mode [ 399.274907][ T5168] bridge_slave_0: left promiscuous mode [ 399.298856][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.498317][ T5177] ath6kl: Failed to submit usb control message: -71 [ 399.526438][ T5177] ath6kl: unable to send the bmi data to the device: -71 [ 399.552482][ T5177] ath6kl: Unable to send get target info: -71 [ 399.596210][ T5177] ath6kl: Failed to init ath6kl core: -71 [ 399.611528][ T5177] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 399.625903][ T5177] usb 4-1: USB disconnect, device number 14 [ 400.062546][ T5168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.082297][ T5168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.104125][ T5168] bond0 (unregistering): Released all slaves [ 400.137146][ T5849] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 400.422084][ T9] usb 5-1: USB disconnect, device number 4 [ 401.067682][ T53] Bluetooth: hci0: command tx timeout [ 401.159674][ T5168] hsr_slave_0: left promiscuous mode [ 401.270098][ T5168] hsr_slave_1: left promiscuous mode [ 401.308103][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.328818][ T5168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.383597][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.406486][ T5168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.477076][ T5887] process 'syz.1.157' launched '/dev/fd/10/./file0' with NULL argv: empty string added [ 401.504803][ T5168] veth1_macvtap: left promiscuous mode [ 401.534083][ T5168] veth0_macvtap: left promiscuous mode [ 401.559961][ T5168] veth1_vlan: left promiscuous mode [ 401.572012][ T5168] veth0_vlan: left promiscuous mode [ 402.671032][ T5168] team0 (unregistering): Port device team_slave_1 removed [ 402.745072][ T5168] team0 (unregistering): Port device team_slave_0 removed [ 403.127798][ T53] Bluetooth: hci0: command tx timeout [ 403.460677][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 403.763954][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 404.111866][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 404.512114][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.555897][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.608475][ T5837] bridge_slave_0: entered allmulticast mode [ 404.645850][ T5837] bridge_slave_0: entered promiscuous mode [ 404.695015][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.718928][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.746541][ T5837] bridge_slave_1: entered allmulticast mode [ 404.784046][ T5926] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 404.805688][ T5837] bridge_slave_1: entered promiscuous mode [ 405.000345][ T5933] dccp_close: ABORT with 20 bytes unread [ 405.120463][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.172580][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.209457][ T53] Bluetooth: hci0: command tx timeout [ 405.314051][ T5837] team0: Port device team_slave_0 added [ 405.331282][ T5837] team0: Port device team_slave_1 added [ 405.407761][ T5177] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 405.417821][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.424992][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.462447][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.467709][ T57] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 405.482053][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.497323][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.532522][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.637599][ T5177] usb 1-1: Using ep0 maxpacket: 8 [ 405.645586][ T5177] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 405.654545][ T5177] usb 1-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 405.674694][ T5177] usb 1-1: config 0 has no interface number 0 [ 405.683391][ T5837] hsr_slave_0: entered promiscuous mode [ 405.696854][ T5837] hsr_slave_1: entered promiscuous mode [ 405.704325][ T5177] usb 1-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=f1.14 [ 405.715003][ T5177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.716609][ T57] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 405.723596][ T5177] usb 1-1: Product: syz [ 405.751146][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.752368][ T5177] usb 1-1: Manufacturer: syz [ 405.776736][ T5177] usb 1-1: SerialNumber: syz [ 405.786371][ T57] usb 2-1: config 0 descriptor?? [ 405.801005][ T5177] usb 1-1: config 0 descriptor?? [ 405.812787][ T5177] smsc95xx v2.0.0 [ 405.819745][ T5177] smsc95xx 1-1:0.253 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 405.860673][ T5177] smsc95xx 1-1:0.253: probe with driver smsc95xx failed with error -22 [ 406.048327][ T29] audit: type=1326 audit(1720844478.017:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63f7375bd9 code=0x0 [ 406.264681][ T5963] netlink: 'syz.4.174': attribute type 1 has an invalid length. [ 406.290187][ T5963] netlink: 100 bytes leftover after parsing attributes in process `syz.4.174'. [ 406.654963][ T5976] FAULT_INJECTION: forcing a failure. [ 406.654963][ T5976] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 406.691379][ T5976] CPU: 1 PID: 5976 Comm: syz.3.177 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 406.701402][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 406.711477][ T5976] Call Trace: [ 406.714761][ T5976] [ 406.717723][ T5976] dump_stack_lvl+0x241/0x360 [ 406.722428][ T5976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.727654][ T5976] ? __pfx__printk+0x10/0x10 [ 406.732276][ T5976] ? __pfx_lock_release+0x10/0x10 [ 406.737345][ T5976] ? vfs_write+0x7c4/0xc90 [ 406.741782][ T5976] should_fail_ex+0x3b0/0x4e0 [ 406.746475][ T5976] _copy_from_user+0x2f/0xe0 [ 406.751079][ T5976] __sys_bpf+0x1a4/0x810 [ 406.755340][ T5976] ? __pfx___sys_bpf+0x10/0x10 [ 406.760216][ T5976] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 406.766205][ T5976] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.772540][ T5976] ? do_syscall_64+0x100/0x230 [ 406.777341][ T5976] __x64_sys_bpf+0x7c/0x90 [ 406.781794][ T5976] do_syscall_64+0xf3/0x230 [ 406.786318][ T5976] ? clear_bhb_loop+0x35/0x90 [ 406.791182][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.797099][ T5976] RIP: 0033:0x7f6d11375bd9 [ 406.801534][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.821167][ T5976] RSP: 002b:00007f6d12181048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.829613][ T5976] RAX: ffffffffffffffda RBX: 00007f6d11503f60 RCX: 00007f6d11375bd9 [ 406.837622][ T5976] RDX: 0000000000000080 RSI: 0000000020000600 RDI: 0000000000000005 [ 406.845701][ T5976] RBP: 00007f6d121810a0 R08: 0000000000000000 R09: 0000000000000000 [ 406.853683][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.861704][ T5976] R13: 000000000000000b R14: 00007f6d11503f60 R15: 00007f6d1162fa78 [ 406.869690][ T5976] [ 407.090530][ T57] usb 2-1: Cannot set autoneg [ 407.105017][ T57] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 407.180954][ T57] usb 2-1: USB disconnect, device number 6 [ 407.213114][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.257891][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.291651][ T53] Bluetooth: hci0: command tx timeout [ 407.321051][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.345134][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.574465][ T5992] dccp_close: ABORT with 20 bytes unread [ 407.731935][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.832303][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.874158][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.881619][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.971839][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.979125][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.074502][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 408.216331][ T5124] usb 1-1: USB disconnect, device number 9 [ 408.253408][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.353615][ T29] audit: type=1326 audit(1720844480.327:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7375bd9 code=0x7ffc0000 [ 408.432137][ T29] audit: type=1326 audit(1720844480.327:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7375bd9 code=0x7ffc0000 [ 408.495841][ T29] audit: type=1326 audit(1720844480.327:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f63f7375bd9 code=0x7ffc0000 [ 408.503799][ T5837] veth0_vlan: entered promiscuous mode [ 408.586713][ T29] audit: type=1326 audit(1720844480.327:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7375bd9 code=0x7ffc0000 [ 408.613967][ T5837] veth1_vlan: entered promiscuous mode [ 408.661872][ T29] audit: type=1326 audit(1720844480.327:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7375bd9 code=0x7ffc0000 [ 408.716451][ T29] audit: type=1326 audit(1720844480.327:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63f7375bd9 code=0x7ffc0000 [ 408.776999][ T5837] veth0_macvtap: entered promiscuous mode [ 408.817320][ T5837] veth1_macvtap: entered promiscuous mode [ 408.869411][ T29] audit: type=1326 audit(1720844480.327:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7375bd9 code=0x7ffc0000 [ 408.869469][ T29] audit: type=1326 audit(1720844480.327:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7375bd9 code=0x7ffc0000 [ 408.869522][ T29] audit: type=1326 audit(1720844480.367:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f63f7375bd9 code=0x7ffc0000 [ 408.899132][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.899160][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.899174][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.899190][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.899202][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.899219][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.899234][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.899250][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.918478][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.149988][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.208045][ T57] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 409.236334][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.277900][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.308204][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.337801][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.369031][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.392055][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.402770][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 409.420059][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.441343][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.458232][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.476722][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.480345][ T57] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.523198][ T57] usb 1-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 409.528769][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'. [ 409.541044][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.574559][ T57] usb 1-1: config 0 descriptor?? [ 409.610582][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.677597][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.717118][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.753617][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.004091][ T57] hid (null): unknown global tag 0xc [ 410.052529][ T57] wacom 0003:056A:0323.0002: unknown global tag 0xc [ 410.108904][ T57] wacom 0003:056A:0323.0002: item 0 2 1 12 parsing failed [ 410.128950][ T57] wacom 0003:056A:0323.0002: parse failed [ 410.135013][ T57] wacom 0003:056A:0323.0002: probe with driver wacom failed with error -22 [ 410.194304][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.227561][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.389456][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.416092][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.434533][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 410.660018][ T8] usb 5-1: config 0 has an invalid interface number: 58 but max is 1 [ 410.698275][ T8] usb 5-1: config 0 has an invalid interface number: 145 but max is 1 [ 410.718001][ T8] usb 5-1: config 0 has no interface number 0 [ 410.734812][ T8] usb 5-1: config 0 has no interface number 1 [ 410.735265][ T6081] syzkaller1: entered promiscuous mode [ 410.748484][ T8] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0xD has an invalid bInterval 129, changing to 7 [ 410.760044][ T8] usb 5-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 1.46 [ 410.769441][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.788393][ T6081] syzkaller1: entered allmulticast mode [ 410.817794][ T8] usb 5-1: config 0 descriptor?? [ 411.073148][ T8] usb 5-1: USB disconnect, device number 5 [ 411.764059][ T6113] futex_wake_op: syz.1.204 tries to shift op by 32; fix this program [ 411.915870][ T786] usb 1-1: USB disconnect, device number 10 [ 412.142972][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 412.367474][ T6131] netlink: 'syz.4.209': attribute type 29 has an invalid length. [ 412.411518][ T6131] netlink: 'syz.4.209': attribute type 29 has an invalid length. [ 412.417632][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 412.474564][ T8] usb 2-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 412.502657][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 412.529860][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.553667][ T8] usb 2-1: Product: syz [ 412.575807][ T8] usb 2-1: Manufacturer: syz [ 412.610618][ T8] usb 2-1: SerialNumber: syz [ 412.615059][ T6131] netlink: 'syz.4.209': attribute type 29 has an invalid length. [ 412.646923][ T8] usb 2-1: config 0 descriptor?? [ 412.681400][ T8] ims_pcu 2-1:0.0: Zero length descriptor [ 412.697621][ T8] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 412.733428][ T6138] dvmrp1: entered allmulticast mode [ 412.786823][ T6138] dvmrp0: entered allmulticast mode [ 412.980989][ T6150] futex_wake_op: syz.4.213 tries to shift op by 36; fix this program [ 413.021033][ T6144] warning: `syz.0.210' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 413.117798][ T5124] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 413.338196][ T5124] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 413.350518][ T5124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.373411][ T5124] usb 3-1: Product: syz [ 413.385897][ T5124] usb 3-1: Manufacturer: syz [ 413.405833][ T5124] usb 3-1: SerialNumber: syz [ 413.418827][ T5124] usb 3-1: config 0 descriptor?? [ 413.871236][ T57] usb 3-1: USB disconnect, device number 3 [ 413.967750][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 414.090377][ T5124] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 414.164807][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.181742][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 414.195050][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 414.208208][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 414.221926][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 414.239353][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.248526][ T5124] usb 5-1: device descriptor read/64, error -71 [ 414.261611][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.274285][ T9] usb 4-1: Product: syz [ 414.283633][ T9] usb 4-1: Manufacturer: syz [ 414.297137][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 414.309050][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 414.325944][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 414.338195][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 414.521496][ T5124] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 414.627417][ T57] usb 2-1: USB disconnect, device number 7 [ 414.662350][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.700555][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.707805][ T5124] usb 5-1: device descriptor read/64, error -71 [ 414.854850][ T5124] usb usb5-port1: attempt power cycle [ 414.904114][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.931514][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.020866][ T6197] tun0: tun_chr_ioctl cmd 1074812118 [ 415.062542][ T6197] ucma_write: process 136 (syz.0.222) changed security contexts after opening file descriptor, this is not allowed. [ 415.289576][ T5124] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 415.358703][ T5124] usb 5-1: device descriptor read/8, error -71 [ 415.648060][ T5124] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 415.661437][ T57] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 415.709389][ T5124] usb 5-1: device descriptor read/8, error -71 [ 415.829202][ T5124] usb usb5-port1: unable to enumerate USB device [ 415.858093][ T5176] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 415.865957][ T57] usb 1-1: Using ep0 maxpacket: 8 [ 415.881186][ T57] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 415.900032][ T57] usb 1-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 415.931578][ T57] usb 1-1: config 0 has no interface number 0 [ 415.942618][ T57] usb 1-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=f1.14 [ 415.953495][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.964052][ T57] usb 1-1: Product: syz [ 415.969236][ T57] usb 1-1: Manufacturer: syz [ 415.974087][ T57] usb 1-1: SerialNumber: syz [ 415.982899][ T57] usb 1-1: config 0 descriptor?? [ 415.991297][ T57] smsc95xx v2.0.0 [ 415.995021][ T57] smsc95xx 1-1:0.253 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 416.012287][ T57] smsc95xx 1-1:0.253: probe with driver smsc95xx failed with error -22 [ 416.078144][ T5176] usb 3-1: Using ep0 maxpacket: 32 [ 416.089531][ T5176] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 416.101362][ T5176] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 416.113576][ T5176] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 416.123867][ T5176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.202469][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 416.202518][ T29] audit: type=1326 audit(1720844488.177:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.0.227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63f7375bd9 code=0x0 [ 416.231873][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.403212][ T5176] usb 3-1: string descriptor 0 read error: -71 [ 416.436744][ T5176] usb 3-1: USB disconnect, device number 4 [ 416.652765][ T8] usb 4-1: USB disconnect, device number 15 [ 417.151975][ T6241] futex_wake_op: syz.3.234 tries to shift op by 32; fix this program [ 417.587692][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 417.795024][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 417.810031][ T9] usb 4-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 417.832067][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 417.860503][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.876659][ T9] usb 4-1: Product: syz [ 417.894207][ T9] usb 4-1: Manufacturer: syz [ 417.899529][ T9] usb 4-1: SerialNumber: syz [ 417.912937][ T9] usb 4-1: config 0 descriptor?? [ 417.921244][ T6259] binder_alloc: 6258: binder_alloc_buf, no vma [ 417.929498][ T6259] netlink: 'syz.4.243': attribute type 10 has an invalid length. [ 417.958033][ T9] ims_pcu 4-1:0.0: Zero length descriptor [ 417.963897][ T9] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 418.199286][ T6264] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 418.206244][ T6264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.242820][ T6264] vhci_hcd vhci_hcd.0: Device attached [ 418.313985][ T6266] vhci_hcd: connection closed [ 418.319234][ T5627] vhci_hcd: stop threads [ 418.349555][ T5627] vhci_hcd: release socket [ 418.354948][ T5627] vhci_hcd: disconnect device [ 418.450651][ T5176] usb 1-1: USB disconnect, device number 11 [ 418.575782][ T53] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 419.163279][ T5136] syz-executor (5136) used greatest stack depth: 18448 bytes left [ 419.341785][ T5168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.506255][ T5168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.673158][ T5168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.709932][ T6297] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 419.740523][ T6297] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 419.757003][ T6297] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 419.765850][ T6297] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 419.841217][ T5168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.963787][ T8] usb 4-1: USB disconnect, device number 16 [ 420.272630][ T5168] bridge_slave_1: left allmulticast mode [ 420.292511][ T5168] bridge_slave_1: left promiscuous mode [ 420.298713][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.337893][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.348768][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.352798][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.383301][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.425147][ T5168] bridge_slave_0: left allmulticast mode [ 420.432928][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 420.440401][ T5168] bridge_slave_0: left promiscuous mode [ 420.440669][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.446247][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.459355][ T6308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.472972][ T6311] dccp_close: ABORT with 20 bytes unread [ 421.167748][ T5124] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 421.358050][ T5124] usb 1-1: Using ep0 maxpacket: 16 [ 421.649514][ T5168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.673323][ T5168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.712164][ T5168] bond0 (unregistering): Released all slaves [ 421.782222][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 421.870306][ T6321] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 421.905837][ T6321] netlink: 'syz.0.266': attribute type 2 has an invalid length. [ 421.931851][ T6321] netlink: 1 bytes leftover after parsing attributes in process `syz.0.266'. [ 421.948555][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 421.976241][ T5124] usb 1-1: unable to get BOS descriptor or descriptor too short [ 422.020311][ T5124] usb 1-1: no configurations [ 422.044649][ T5124] usb 1-1: can't read configurations, error -22 [ 422.568236][ T53] Bluetooth: hci1: command tx timeout [ 422.587459][ T5168] hsr_slave_0: left promiscuous mode [ 422.624678][ T5168] hsr_slave_1: left promiscuous mode [ 422.674627][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.718252][ T5168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.756261][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.792753][ T5168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.905247][ T5168] veth1_macvtap: left promiscuous mode [ 422.925044][ T5168] veth0_macvtap: left promiscuous mode [ 422.962904][ T5168] veth1_vlan: left promiscuous mode [ 422.995022][ T5168] veth0_vlan: left promiscuous mode [ 423.361408][ T6343] futex_wake_op: syz.3.272 tries to shift op by 32; fix this program [ 423.697612][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 423.928135][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 424.012120][ T9] usb 4-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 424.065385][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 424.077638][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.085856][ T9] usb 4-1: Product: syz [ 424.106106][ T9] usb 4-1: Manufacturer: syz [ 424.115434][ T9] usb 4-1: SerialNumber: syz [ 424.170542][ T9] usb 4-1: config 0 descriptor?? [ 424.203720][ T9] ims_pcu 4-1:0.0: Zero length descriptor [ 424.211331][ T9] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 424.238611][ T6357] dccp_close: ABORT with 20 bytes unread [ 424.660416][ T53] Bluetooth: hci1: command tx timeout [ 424.963602][ T5168] team0 (unregistering): Port device team_slave_1 removed [ 425.033859][ T5168] team0 (unregistering): Port device team_slave_0 removed [ 426.124383][ T786] usb 4-1: USB disconnect, device number 17 [ 426.181169][ T57] IPVS: starting estimator thread 0... [ 426.297900][ T6375] IPVS: using max 19 ests per chain, 45600 per kthread [ 426.467397][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 426.674047][ T6385] tipc: Enabling of bearer rejected, failed to enable media [ 426.727855][ T53] Bluetooth: hci1: command tx timeout [ 426.823946][ T6396] dccp_close: ABORT with 20 bytes unread [ 427.011074][ T6407] loop0: detected capacity change from 0 to 16384 [ 427.026579][ T6398] veth1_to_team: invalid flags given to default FDB implementation [ 427.061282][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.098196][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.105515][ T6315] bridge_slave_0: entered allmulticast mode [ 427.137658][ T6315] bridge_slave_0: entered promiscuous mode [ 427.186731][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.216997][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.238022][ T6315] bridge_slave_1: entered allmulticast mode [ 427.268544][ T6315] bridge_slave_1: entered promiscuous mode [ 427.331427][ T6412] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 427.430283][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.476288][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.630943][ T6412] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 427.796253][ T6315] team0: Port device team_slave_0 added [ 427.827363][ T6315] team0: Port device team_slave_1 added [ 428.164322][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.232491][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.344820][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.378792][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.385795][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.457583][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.495297][ T6436] tipc: Enabling of bearer rejected, failed to enable media [ 428.513934][ T5123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.528237][ T5123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.539170][ T5123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.561692][ T5123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.578555][ T5123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 428.588085][ T5123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.810604][ T53] Bluetooth: hci1: command tx timeout [ 428.873765][ T6315] hsr_slave_0: entered promiscuous mode [ 428.938130][ T6315] hsr_slave_1: entered promiscuous mode [ 428.966221][ T6315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.996581][ T6315] Cannot create hsr debugfs directory [ 429.327797][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 429.537681][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 429.549192][ T8] usb 5-1: too many configurations: 229, using maximum allowed: 8 [ 429.580584][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 429.667745][ T8] usb 5-1: can't read configurations, error -61 [ 429.887697][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 429.978938][ T5213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.133832][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 430.181986][ T8] usb 5-1: too many configurations: 229, using maximum allowed: 8 [ 430.219334][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 430.241431][ T8] usb 5-1: can't read configurations, error -61 [ 430.262812][ T8] usb usb5-port1: attempt power cycle [ 430.329902][ T5213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.546485][ T6473] netlink: 'syz.3.303': attribute type 30 has an invalid length. [ 430.582542][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 430.595327][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 430.603769][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 430.613877][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 430.622046][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 430.631976][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 430.647834][ T5123] Bluetooth: hci5: command tx timeout [ 430.697837][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 430.740206][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 430.744253][ T5213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.746211][ T8] usb 5-1: too many configurations: 229, using maximum allowed: 8 [ 430.771206][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 430.779034][ T8] usb 5-1: can't read configurations, error -61 [ 430.837494][ T6472] wireguard0: entered promiscuous mode [ 430.854375][ T6472] wireguard0: entered allmulticast mode [ 430.927791][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 430.961609][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 430.978108][ T8] usb 5-1: too many configurations: 229, using maximum allowed: 8 [ 431.026934][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 431.057882][ T8] usb 5-1: can't read configurations, error -61 [ 431.088310][ T8] usb usb5-port1: unable to enumerate USB device [ 431.283654][ T5213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.581960][ T6442] chnl_net:caif_netlink_parms(): no params data found [ 432.083503][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.107847][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.123495][ T6442] bridge_slave_0: entered allmulticast mode [ 432.140511][ T6442] bridge_slave_0: entered promiscuous mode [ 432.161868][ T5213] bridge_slave_1: left allmulticast mode [ 432.176605][ T5213] bridge_slave_1: left promiscuous mode [ 432.206409][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.226937][ T5213] bridge_slave_0: left allmulticast mode [ 432.236726][ T5213] bridge_slave_0: left promiscuous mode [ 432.252185][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.564207][ T5124] IPVS: starting estimator thread 0... [ 432.577065][ T6501] loop0: detected capacity change from 0 to 7 [ 432.627457][ T6501] Dev loop0: unable to read RDB block 7 [ 432.633604][ T6501] loop0: AHDI p3 [ 432.657889][ T6501] loop0: partition table partially beyond EOD, truncated [ 432.687884][ T6500] IPVS: using max 24 ests per chain, 57600 per kthread [ 432.729154][ T5123] Bluetooth: hci5: command tx timeout [ 432.729165][ T53] Bluetooth: hci4: command tx timeout [ 433.118831][ T5213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.137400][ T5213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.150631][ T5213] bond0 (unregistering): Released all slaves [ 433.227842][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.248103][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.271609][ T6442] bridge_slave_1: entered allmulticast mode [ 433.292738][ T6442] bridge_slave_1: entered promiscuous mode [ 434.044377][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.076977][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.394486][ T6475] chnl_net:caif_netlink_parms(): no params data found [ 434.485209][ T6315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.541848][ T6520] capability: warning: `syz.4.312' uses 32-bit capabilities (legacy support in use) [ 434.580685][ T6442] team0: Port device team_slave_0 added [ 434.705468][ T6315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.745926][ T5213] hsr_slave_0: left promiscuous mode [ 434.759708][ T5213] hsr_slave_1: left promiscuous mode [ 434.781508][ T5213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.789524][ T5213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.798960][ T5213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.807836][ T53] Bluetooth: hci5: command tx timeout [ 434.807845][ T5123] Bluetooth: hci4: command tx timeout [ 434.825363][ T5213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.870162][ T5213] veth1_macvtap: left promiscuous mode [ 434.875780][ T5213] veth0_macvtap: left promiscuous mode [ 434.887775][ T5124] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 434.891520][ T5213] veth1_vlan: left promiscuous mode [ 434.905246][ T5213] veth0_vlan: left promiscuous mode [ 435.070059][ T5124] usb 5-1: config 0 has an invalid interface number: 160 but max is 1 [ 435.087707][ T5124] usb 5-1: config 0 has an invalid interface number: 243 but max is 1 [ 435.088057][ T5177] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 435.096098][ T5124] usb 5-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 435.096129][ T5124] usb 5-1: config 0 has no interface number 0 [ 435.096149][ T5124] usb 5-1: config 0 has no interface number 1 [ 435.168796][ T5124] usb 5-1: config 0 interface 243 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 435.187568][ T5124] usb 5-1: config 0 interface 243 altsetting 0 endpoint 0xD has an invalid bInterval 128, changing to 11 [ 435.207583][ T5124] usb 5-1: config 0 interface 243 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 435.237770][ T5124] usb 5-1: config 0 interface 243 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 435.256185][ T5124] usb 5-1: config 0 interface 243 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 435.286548][ T5124] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=3f.37 [ 435.306047][ T5124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.319228][ T5177] usb 4-1: Using ep0 maxpacket: 32 [ 435.339330][ T5124] usb 5-1: config 0 descriptor?? [ 435.350984][ T5177] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 435.377597][ T5177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.414554][ T5177] usb 4-1: Product: syz [ 435.420364][ T5177] usb 4-1: Manufacturer: syz [ 435.425010][ T5177] usb 4-1: SerialNumber: syz [ 435.444890][ T5177] usb 4-1: config 0 descriptor?? [ 435.464328][ T5177] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 435.830684][ T8] usb 5-1: USB disconnect, device number 14 [ 435.998742][ T5213] team0 (unregistering): Port device team_slave_1 removed [ 436.094528][ T5213] team0 (unregistering): Port device team_slave_0 removed [ 436.306095][ T6522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.366040][ T6522] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 436.535925][ T5177] gspca_stk1135: reg_w 0x5 err -71 [ 436.562263][ T5177] gspca_stk1135: serial bus timeout: status=0x00 [ 436.588629][ T5177] gspca_stk1135: Sensor write failed [ 436.594087][ T5177] gspca_stk1135: serial bus timeout: status=0x00 [ 436.611417][ T5177] gspca_stk1135: Sensor write failed [ 436.616833][ T5177] gspca_stk1135: serial bus timeout: status=0x00 [ 436.647694][ T5177] gspca_stk1135: Sensor read failed [ 436.653147][ T5177] gspca_stk1135: serial bus timeout: status=0x00 [ 436.667632][ T5177] gspca_stk1135: Sensor read failed [ 436.672903][ T5177] gspca_stk1135: Detected sensor type unknown (0x0) [ 436.694178][ T5177] gspca_stk1135: serial bus timeout: status=0x00 [ 436.707611][ T5177] gspca_stk1135: Sensor read failed [ 436.723203][ T5177] gspca_stk1135: serial bus timeout: status=0x00 [ 436.737581][ T5177] gspca_stk1135: Sensor read failed [ 436.757719][ T5177] gspca_stk1135: serial bus timeout: status=0x00 [ 436.764252][ T5177] gspca_stk1135: Sensor write failed [ 436.777625][ T5177] gspca_stk1135: serial bus timeout: status=0x00 [ 436.789519][ T5177] gspca_stk1135: Sensor write failed [ 436.817850][ T5177] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 436.876381][ T5177] usb 4-1: USB disconnect, device number 18 [ 436.891041][ T53] Bluetooth: hci4: command tx timeout [ 436.891055][ T5123] Bluetooth: hci5: command tx timeout [ 437.429435][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.316'. [ 437.514337][ T6539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.555991][ T6442] team0: Port device team_slave_1 added [ 437.644090][ T6315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.753361][ T6315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.757712][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 437.842181][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.856342][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.885278][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.946014][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.977726][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.997655][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 438.033988][ T9] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.5f [ 438.043879][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.057715][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.083199][ T9] usb 4-1: Product: syz [ 438.106993][ T9] usb 4-1: Manufacturer: syz [ 438.111821][ T9] usb 4-1: SerialNumber: syz [ 438.119888][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.131460][ T9] usb 4-1: config 0 descriptor?? [ 438.131650][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.147425][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 438.174760][ T6475] bridge_slave_0: entered allmulticast mode [ 438.197438][ T6475] bridge_slave_0: entered promiscuous mode [ 438.197451][ T9] usb-storage 4-1:0.0: Quirks match for vid 057b pid 0000: 1 [ 438.306120][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.338669][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.353467][ T9] usb 4-1: USB disconnect, device number 19 [ 438.390473][ T6475] bridge_slave_1: entered allmulticast mode [ 438.417164][ T6475] bridge_slave_1: entered promiscuous mode [ 438.493227][ T6442] hsr_slave_0: entered promiscuous mode [ 438.528325][ T6442] hsr_slave_1: entered promiscuous mode [ 438.545620][ T6442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.564937][ T6442] Cannot create hsr debugfs directory [ 438.681864][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.735318][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.967774][ T5123] Bluetooth: hci4: command tx timeout [ 438.993356][ T5213] IPVS: stop unused estimator thread 0... [ 439.109475][ T6475] team0: Port device team_slave_0 added [ 439.117782][ T5124] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 439.133044][ T6475] team0: Port device team_slave_1 added [ 439.328646][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.335654][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.368944][ T5124] usb 5-1: not running at top speed; connect to a high speed hub [ 439.380020][ T5124] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 439.398257][ T5124] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 439.399454][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.418336][ T5124] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.443248][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.447587][ T5124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.467640][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.477798][ T5124] usb 5-1: Product: syz [ 439.524657][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.545560][ T5124] usb 5-1: Manufacturer: 䀊 [ 439.550384][ T5124] usb 5-1: SerialNumber: syz [ 439.567640][ T5177] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 439.592602][ T6550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 439.760818][ T5177] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.783564][ T5177] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.802051][ T6475] hsr_slave_0: entered promiscuous mode [ 439.817198][ T5177] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.836023][ T5177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.846814][ T6475] hsr_slave_1: entered promiscuous mode [ 439.872772][ T6475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.887906][ T5177] usb 4-1: SerialNumber: syz [ 439.907657][ T6475] Cannot create hsr debugfs directory [ 440.131845][ T5177] usb 4-1: 0:2 : does not exist [ 440.136900][ T5177] ------------[ cut here ]------------ [ 440.166502][ T5177] UBSAN: shift-out-of-bounds in sound/usb/mixer.c:2057:20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 440.192676][ T5177] shift exponent 45 is too large for 32-bit type 'int' [ 440.208419][ T5177] CPU: 0 PID: 5177 Comm: kworker/0:5 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 440.214767][ T6442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.218616][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 440.218655][ T5177] Workqueue: usb_hub_wq hub_event [ 440.218691][ T5177] Call Trace: [ 440.218704][ T5177] [ 440.218716][ T5177] dump_stack_lvl+0x241/0x360 [ 440.255295][ T5177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.260562][ T5177] ? __pfx__printk+0x10/0x10 [ 440.265223][ T5177] ? validate_processing_unit+0x402/0x600 [ 440.271082][ T5177] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 440.277580][ T5177] parse_audio_unit+0x277d/0x3f10 [ 440.282746][ T5177] ? really_probe+0x2b8/0xad0 [ 440.287446][ T5177] ? __driver_probe_device+0x1a2/0x390 [ 440.292940][ T5177] ? __driver_probe_device+0x1a2/0x390 [ 440.298418][ T5177] ? bus_probe_device+0x189/0x260 [ 440.303464][ T5177] ? usb_new_device+0x104a/0x19a0 [ 440.308525][ T5177] ? hub_event+0x2d6a/0x5150 [ 440.313185][ T5177] ? kthread+0x2f0/0x390 [ 440.317449][ T5177] ? ret_from_fork+0x4b/0x80 [ 440.322063][ T5177] ? ret_from_fork_asm+0x1a/0x30 [ 440.327032][ T5177] ? __pfx_parse_audio_unit+0x10/0x10 [ 440.332468][ T5177] ? __kasan_kmalloc+0x98/0xb0 [ 440.337516][ T5177] ? snd_usb_create_mixer+0x1da/0x2fa0 [ 440.343086][ T5177] ? snd_usb_find_csint_desc+0x217/0x220 [ 440.348830][ T5177] ? snd_usb_validate_audio_desc+0x43f/0x4f0 [ 440.354829][ T5177] snd_usb_create_mixer+0x1365/0x2fa0 [ 440.360244][ T5177] ? __pfx_snd_usb_create_mixer+0x10/0x10 [ 440.365998][ T5177] ? _dev_err+0x122/0x170 [ 440.370364][ T5177] ? usb_ifnum_to_if+0x125/0x2d0 [ 440.375350][ T5177] ? usb_audio_probe+0xe91/0x2100 [ 440.380413][ T5177] ? __pfx__dev_err+0x10/0x10 [ 440.385293][ T5177] ? __pfx_snd_usb_audio_create+0x10/0x10 [ 440.391045][ T5177] ? snd_usb_create_stream+0x38b/0x630 [ 440.396524][ T5177] ? snd_usb_find_csint_desc+0x217/0x220 [ 440.402190][ T5177] usb_audio_probe+0x1688/0x2100 [ 440.407162][ T5177] ? __pfx_usb_audio_probe+0x10/0x10 [ 440.412467][ T5177] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 440.418383][ T5177] ? pm_runtime_enable+0x1c2/0x2d0 [ 440.423569][ T5177] usb_probe_interface+0x645/0xbb0 [ 440.428721][ T5177] ? __pfx_usb_probe_interface+0x10/0x10 [ 440.434387][ T5177] really_probe+0x2b8/0xad0 [ 440.438920][ T5177] __driver_probe_device+0x1a2/0x390 [ 440.444226][ T5177] driver_probe_device+0x50/0x430 [ 440.449281][ T5177] __device_attach_driver+0x2d6/0x530 [ 440.454699][ T5177] bus_for_each_drv+0x24e/0x2e0 [ 440.459604][ T5177] ? __pfx___device_attach_driver+0x10/0x10 [ 440.465533][ T5177] ? __pfx_bus_for_each_drv+0x10/0x10 [ 440.470953][ T5177] __device_attach+0x333/0x520 [ 440.475743][ T5177] ? __pfx_lock_release+0x10/0x10 [ 440.480806][ T5177] ? __pfx___device_attach+0x10/0x10 [ 440.486132][ T5177] ? do_raw_spin_unlock+0x13c/0x8b0 [ 440.491398][ T5177] bus_probe_device+0x189/0x260 [ 440.496296][ T5177] device_add+0x856/0xbf0 [ 440.500813][ T5177] usb_set_configuration+0x1976/0x1fb0 [ 440.506334][ T5177] usb_generic_driver_probe+0x88/0x140 [ 440.511838][ T5177] usb_probe_device+0x1b8/0x380 [ 440.516716][ T5177] ? __pfx_usb_probe_device+0x10/0x10 [ 440.522205][ T5177] really_probe+0x2b8/0xad0 [ 440.526752][ T5177] __driver_probe_device+0x1a2/0x390 [ 440.532106][ T5177] driver_probe_device+0x50/0x430 [ 440.537159][ T5177] __device_attach_driver+0x2d6/0x530 [ 440.542562][ T5177] bus_for_each_drv+0x24e/0x2e0 [ 440.547703][ T5177] ? __pfx___device_attach_driver+0x10/0x10 [ 440.553622][ T5177] ? __pfx_bus_for_each_drv+0x10/0x10 [ 440.559029][ T5177] __device_attach+0x333/0x520 [ 440.563827][ T5177] ? __pfx___device_attach+0x10/0x10 [ 440.569146][ T5177] bus_probe_device+0x189/0x260 [ 440.574033][ T5177] device_add+0x856/0xbf0 [ 440.578427][ T5177] usb_new_device+0x104a/0x19a0 [ 440.583435][ T5177] ? __pfx_usb_new_device+0x10/0x10 [ 440.588764][ T5177] ? _raw_spin_unlock_irq+0x23/0x50 [ 440.593994][ T5177] ? lockdep_hardirqs_on+0x99/0x150 [ 440.599228][ T5177] hub_event+0x2d6a/0x5150 [ 440.603729][ T5177] ? __pfx_hub_event+0x10/0x10 [ 440.608527][ T5177] ? __pfx_lock_acquire+0x10/0x10 [ 440.613572][ T5177] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 440.619663][ T5177] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 440.626105][ T5177] ? process_scheduled_works+0x945/0x1830 [ 440.631928][ T5177] process_scheduled_works+0xa2c/0x1830 [ 440.637529][ T5177] ? __pfx_process_scheduled_works+0x10/0x10 [ 440.643630][ T5177] ? assign_work+0x364/0x3d0 [ 440.648239][ T5177] worker_thread+0x86d/0xd50 [ 440.652952][ T5177] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 440.658872][ T5177] ? __kthread_parkme+0x169/0x1d0 [ 440.664005][ T5177] ? __pfx_worker_thread+0x10/0x10 [ 440.669143][ T5177] kthread+0x2f0/0x390 [ 440.673344][ T5177] ? __pfx_worker_thread+0x10/0x10 [ 440.678486][ T5177] ? __pfx_kthread+0x10/0x10 [ 440.683117][ T5177] ret_from_fork+0x4b/0x80 [ 440.687567][ T5177] ? __pfx_kthread+0x10/0x10 [ 440.692190][ T5177] ret_from_fork_asm+0x1a/0x30 [ 440.697002][ T5177] [ 440.736276][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.743108][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.427595][ T5177] ---[ end trace ]--- [ 441.431697][ T5177] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 441.439038][ T5177] CPU: 0 PID: 5177 Comm: kworker/0:5 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 441.449315][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 441.459413][ T5177] Workqueue: usb_hub_wq hub_event [ 441.464497][ T5177] Call Trace: [ 441.467804][ T5177] [ 441.470762][ T5177] dump_stack_lvl+0x241/0x360 [ 441.475504][ T5177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.480769][ T5177] ? __pfx__printk+0x10/0x10 [ 441.485498][ T5177] ? vprintk_emit+0x631/0x770 [ 441.490238][ T5177] ? vscnprintf+0x5d/0x90 [ 441.494631][ T5177] panic+0x349/0x860 [ 441.498579][ T5177] ? check_panic_on_warn+0x21/0xb0 [ 441.503833][ T5177] ? __pfx_panic+0x10/0x10 [ 441.508415][ T5177] ? _printk+0xd5/0x120 [ 441.512643][ T5177] ? __pfx__printk+0x10/0x10 [ 441.517294][ T5177] check_panic_on_warn+0x86/0xb0 [ 441.522352][ T5177] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 441.528926][ T5177] parse_audio_unit+0x277d/0x3f10 [ 441.534028][ T5177] ? really_probe+0x2b8/0xad0 [ 441.538740][ T5177] ? __driver_probe_device+0x1a2/0x390 [ 441.544247][ T5177] ? __driver_probe_device+0x1a2/0x390 [ 441.549857][ T5177] ? bus_probe_device+0x189/0x260 [ 441.554943][ T5177] ? usb_new_device+0x104a/0x19a0 [ 441.560013][ T5177] ? hub_event+0x2d6a/0x5150 [ 441.564625][ T5177] ? kthread+0x2f0/0x390 [ 441.568885][ T5177] ? ret_from_fork+0x4b/0x80 [ 441.573498][ T5177] ? ret_from_fork_asm+0x1a/0x30 [ 441.578472][ T5177] ? __pfx_parse_audio_unit+0x10/0x10 [ 441.583899][ T5177] ? __kasan_kmalloc+0x98/0xb0 [ 441.588686][ T5177] ? snd_usb_create_mixer+0x1da/0x2fa0 [ 441.594169][ T5177] ? snd_usb_find_csint_desc+0x217/0x220 [ 441.599845][ T5177] ? snd_usb_validate_audio_desc+0x43f/0x4f0 [ 441.605855][ T5177] snd_usb_create_mixer+0x1365/0x2fa0 [ 441.611283][ T5177] ? __pfx_snd_usb_create_mixer+0x10/0x10 [ 441.617051][ T5177] ? _dev_err+0x122/0x170 [ 441.621415][ T5177] ? usb_ifnum_to_if+0x125/0x2d0 [ 441.626371][ T5177] ? usb_audio_probe+0xe91/0x2100 [ 441.631444][ T5177] ? __pfx__dev_err+0x10/0x10 [ 441.636147][ T5177] ? __pfx_snd_usb_audio_create+0x10/0x10 [ 441.641916][ T5177] ? snd_usb_create_stream+0x38b/0x630 [ 441.647407][ T5177] ? snd_usb_find_csint_desc+0x217/0x220 [ 441.653078][ T5177] usb_audio_probe+0x1688/0x2100 [ 441.658060][ T5177] ? __pfx_usb_audio_probe+0x10/0x10 [ 441.663364][ T5177] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 441.669285][ T5177] ? pm_runtime_enable+0x1c2/0x2d0 [ 441.674525][ T5177] usb_probe_interface+0x645/0xbb0 [ 441.679669][ T5177] ? __pfx_usb_probe_interface+0x10/0x10 [ 441.685317][ T5177] really_probe+0x2b8/0xad0 [ 441.689852][ T5177] __driver_probe_device+0x1a2/0x390 [ 441.695356][ T5177] driver_probe_device+0x50/0x430 [ 441.700398][ T5177] __device_attach_driver+0x2d6/0x530 [ 441.706060][ T5177] bus_for_each_drv+0x24e/0x2e0 [ 441.711006][ T5177] ? __pfx___device_attach_driver+0x10/0x10 [ 441.717154][ T5177] ? __pfx_bus_for_each_drv+0x10/0x10 [ 441.722568][ T5177] __device_attach+0x333/0x520 [ 441.727389][ T5177] ? __pfx_lock_release+0x10/0x10 [ 441.732540][ T5177] ? __pfx___device_attach+0x10/0x10 [ 441.738130][ T5177] ? do_raw_spin_unlock+0x13c/0x8b0 [ 441.743371][ T5177] bus_probe_device+0x189/0x260 [ 441.748256][ T5177] device_add+0x856/0xbf0 [ 441.752799][ T5177] usb_set_configuration+0x1976/0x1fb0 [ 441.758503][ T5177] usb_generic_driver_probe+0x88/0x140 [ 441.764195][ T5177] usb_probe_device+0x1b8/0x380 [ 441.769078][ T5177] ? __pfx_usb_probe_device+0x10/0x10 [ 441.774556][ T5177] really_probe+0x2b8/0xad0 [ 441.779091][ T5177] __driver_probe_device+0x1a2/0x390 [ 441.784401][ T5177] driver_probe_device+0x50/0x430 [ 441.789476][ T5177] __device_attach_driver+0x2d6/0x530 [ 441.794871][ T5177] bus_for_each_drv+0x24e/0x2e0 [ 441.799747][ T5177] ? __pfx___device_attach_driver+0x10/0x10 [ 441.805658][ T5177] ? __pfx_bus_for_each_drv+0x10/0x10 [ 441.811079][ T5177] __device_attach+0x333/0x520 [ 441.815956][ T5177] ? __pfx___device_attach+0x10/0x10 [ 441.821361][ T5177] bus_probe_device+0x189/0x260 [ 441.826239][ T5177] device_add+0x856/0xbf0 [ 441.830600][ T5177] usb_new_device+0x104a/0x19a0 [ 441.835496][ T5177] ? __pfx_usb_new_device+0x10/0x10 [ 441.840723][ T5177] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.845939][ T5177] ? lockdep_hardirqs_on+0x99/0x150 [ 441.851167][ T5177] hub_event+0x2d6a/0x5150 [ 441.855651][ T5177] ? __pfx_hub_event+0x10/0x10 [ 441.860436][ T5177] ? __pfx_lock_acquire+0x10/0x10 [ 441.865483][ T5177] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.871487][ T5177] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.877850][ T5177] ? process_scheduled_works+0x945/0x1830 [ 441.883585][ T5177] process_scheduled_works+0xa2c/0x1830 [ 441.889175][ T5177] ? __pfx_process_scheduled_works+0x10/0x10 [ 441.895184][ T5177] ? assign_work+0x364/0x3d0 [ 441.899799][ T5177] worker_thread+0x86d/0xd50 [ 441.904422][ T5177] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 441.910343][ T5177] ? __kthread_parkme+0x169/0x1d0 [ 441.915407][ T5177] ? __pfx_worker_thread+0x10/0x10 [ 441.920552][ T5177] kthread+0x2f0/0x390 [ 441.924649][ T5177] ? __pfx_worker_thread+0x10/0x10 [ 441.929816][ T5177] ? __pfx_kthread+0x10/0x10 [ 441.934431][ T5177] ret_from_fork+0x4b/0x80 [ 441.938872][ T5177] ? __pfx_kthread+0x10/0x10 [ 441.943487][ T5177] ret_from_fork_asm+0x1a/0x30 [ 441.948299][ T5177] [ 441.951635][ T5177] Kernel Offset: disabled [ 441.956046][ T5177] Rebooting in 86400 seconds..