last executing test programs: 14.375178674s ago: executing program 1 (id=1633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="d8c2f5975236c19aee763f70f103017ce3dc310d72d30650a1fb8f303dd0a4f02ba310d2dee2b948dd7f9a93b0cd9e5e45941c14d261db15ab54053aba", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000060ed947f670cfd2c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000f700000000000000181100000000000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008212ea234c29ead90a1eea9819846dfe5e117939febdeedb0314416e98920d067bf4ca631a478c957611a5ff5baa0a20970befa1b6af712f0786ede172cbe53f9d452404c1d955e4b70f2cf0ed347c03600c6278569d0a28fb15f1a51ffd395d15b8669e8e1aacf804ca6dfb5ca632c9d91d6ab14af07e1f949c2b0a4039ed1ceb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'vlan0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="02030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r7}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000f4fd000000000000", @ANYRES32=0x1, @ANYBLOB="010000000078000200"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000010000000400"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x3, '\x00', r4, r6, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000001800000000b7080000000000007b8af8ff00000000bfa200000000000007020000f80000080018172de20000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 13.908357312s ago: executing program 1 (id=1635): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001"], 0x7c}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2a2}) 13.709758888s ago: executing program 1 (id=1637): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x5, 0x800000000000004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x82310}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 12.526489703s ago: executing program 1 (id=1641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000540)={r1, @in6={{0xa, 0x4e24, 0xffffffc0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, [0x3, 0x5, 0x200, 0x80000001, 0x4, 0x0, 0x7, 0x2, 0x6, 0xc1, 0xfffffffffffffbf5, 0x80000001, 0x7fff, 0x91, 0x80000001]}, &(0x7f0000000100)=0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x81, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000003300)=@userptr={0x6, 0x3, 0x0, 0x10000, 0x9, {0x0, 0x2710}, {0x2, 0x3fd7b3a1caf19d30, 0x5, 0x1, 0x4, 0x3, "17b6a222"}, 0x8, 0x2, {&(0x7f0000000180)}, 0x96}) r4 = dup(r2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008604"]) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0000000000000001000000fdffffff02c401001c9abba18ee4c79782ebfd25e9e575d94f8e30cfa0ff80fe9431bf931b6be6d2a2042fd545079ec1a48bb63cfb1096636264f0322ae997b5a9d1a78a80004ca84d89976deff5767822d5589e95440928b1ff532fff32f3670541bedda526eff15c6deb95a76746e2ffb910a6f7470bd6af7865f8df25f40d2c9a71e6db48c361122f90d6c84f", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000000000000300000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) 11.273724188s ago: executing program 3 (id=1646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000007040000", 0x58}], 0x1) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x1e, 0x100) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076"]}, 0x113) read$midi(r2, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) readv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x80047455, &(0x7f0000000100)=0xa70410b) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000240)=0x2200004) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'macvlan1\x00'}}, 0x1e) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000280)="002144177ab3d35d9d047120000000253a00ebc53e74", 0x16}], 0x1, 0x0, 0x0) r8 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$sequencer(r8, &(0x7f0000000040)=[@l={0x92, 0x1, 0xe0, 0x3, 0x7f, 0x9, 0x1}], 0x8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r10, 0x1, 0x1, &(0x7f0000000180)={0xb}, 0x4) 9.573301292s ago: executing program 1 (id=1658): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8], 0xfb}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x5, 0x900, 0x9, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0xe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x205, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x20, {0x7}}}}}}}]}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0xfffffffd, 0x0, 0x10001, 0x0, 0x800, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x2}) write$snddsp(r3, &(0x7f0000000100)="711c6e2883c2c16fc900d45b43c601699ee0d57c4cf6f56e49218206", 0x1c) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x20, 0x31, 0xec, {0xec, 0xa, "79b9dc20f96f8ec01cec2675d273f6e1e27ef60953b33522954e49c4b4c5e0e88301f84455e2c6e42905a4c1adbabeeb35838d739c09650a8a0b36efce0567533840187a682bf5af21277eba01e75075c8f51c65fe8cb7e83b134652760129424718efdb36b06b1c437c188a002da8d1222a38d3949540ef30ea328139d3e36b5ee20a9be42be0e5706e77b2bff99d295549dce5a087c34dbf79bd832d80fa23eb42e857d57a3a69c470fc7271f12c9e6366b58af2dfc013e2a5fd1fa16b008108f7dbcc3e71cce68c61ef7764418afcfcee486f9bbda82647f3344660ff8f381ef33f12f798f95c12a9"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f0000000040)={0x0, 0x22, 0x17, {[@global=@item_4={0x3, 0x1, 0x1, "3805556d"}, @local=@item_012={0x0, 0x2, 0xe}, @global=@item_012={0x2, 0x1, 0x2, "c769"}, @local=@item_012={0x2, 0x2, 0xa, '>='}, @local=@item_012={0x1, 0x2, 0x4, "14"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x2, 0x1, 0x3, "0b97"}, @global=@item_4={0x3, 0x1, 0x7, "2089de96"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xea51, 0x6, 0x1, {0x22, 0x31e}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x3f, "2fcdb3eb11b35b3d670d06032ab8fbc48ce41eeb4891ab426936cad736a57d5ef910b9c2fea8925d4edc9fccd12f67dfc5a4c35ca49053c48fe00e22c15b38"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xd8, "3f0fcda99de4d7eee1d7d19f21f56b8040e4a08882b4bec9d21088ea4caec5414665a812f7c851a9ba850d8e9f2727fbeea5f096ae8f9275b86a2b7aa1002d52ba9316655212ebdfbd71b6973fdd0242cbd445e6c96cdb7f90392547ebfb7a88518bce597bc41f87243ffda3afa3e395b6928417b6dc224bd01e69ad65dc96856e6e6642846d913582baf4e588e2dc0994821f671f3f9c14835d1eff67b8bebd5a13e20ff9725f7b03a4e4d5fd4a00d33531a2a431657bef8bdc4b46bad74279bede15ba31c6f740f37a3f666cb2c8b0e476e7fa0f719188"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x4}}) 9.330339429s ago: executing program 1 (id=1661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="afa701ca2ac3"}, 0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x1, {@in6_addr=@loopback, 0x800}}}]}, 0x38}, 0x1, 0xf00}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private, @in=@private, 0x0, 0xfffe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001015000000000000000000000000000a54000000060e0b040000000000000000020000002800048024000180090001006d6574610000080014000280080002400000000c080003f2e9d576d9a66c700073797a30850000000900020073797a320000000014000000110001e300000000000000000000000a"], 0x7c}}, 0x0) r9 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x40002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000091}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004f1a8600", "cf0d00", "8657e2b7e43934e4"}, 0x28) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000000000001e030000000000010800000000000000ef090000000000000700000000000000b50900000000000041fdffffffffffffbd0a0000000000000200000000000000"]) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 8.938449469s ago: executing program 3 (id=1665): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000090400"/18, @ANYRES32=r2, @ANYBLOB="000200000000000024001280110001"], 0x44}}, 0x0) 8.672755249s ago: executing program 3 (id=1667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) socket$kcm(0xa, 0x922000000003, 0x11) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') lseek(r1, 0xc1e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000400)=""/218, 0xda) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000980)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0xc08c5334, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x80000001}) tkill(r4, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) 8.141278687s ago: executing program 3 (id=1669): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000540)={r1, @in6={{0xa, 0x4e24, 0xffffffc0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, [0x3, 0x5, 0x200, 0x80000001, 0x4, 0x0, 0x7, 0x2, 0x6, 0xc1, 0xfffffffffffffbf5, 0x80000001, 0x7fff, 0x91, 0x80000001]}, &(0x7f0000000100)=0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x81, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000003300)=@userptr={0x6, 0x3, 0x0, 0x10000, 0x9, {0x0, 0x2710}, {0x2, 0x3fd7b3a1caf19d30, 0x5, 0x1, 0x4, 0x3, "17b6a222"}, 0x8, 0x2, {&(0x7f0000000180)}, 0x96}) r4 = dup(r2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008604"]) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0000000000000001000000fdffffff02c401001c9abba18ee4c79782ebfd25e9e575d94f8e30cfa0ff80fe9431bf931b6be6d2a2042fd545079ec1a48bb63cfb1096636264f0322ae997b5a9d1a78a80004ca84d89976deff5767822d5589e95440928b1ff532fff32f3670541bedda526eff15c6deb95a76746e2ffb910a6f7470bd6af7865f8df25f40d2c9a71e6db48c361122f90d6c84f", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000000000000300000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) 5.858158763s ago: executing program 4 (id=1677): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x14, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x45a5, 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 5.272016078s ago: executing program 4 (id=1680): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000107d1e502d00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) 5.264557905s ago: executing program 2 (id=1681): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8], 0xfb}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x5, 0x900, 0x9, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0xe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x205, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x20, {0x7}}}}}}}]}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0xfffffffd, 0x0, 0x10001, 0x0, 0x800, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x2}) write$snddsp(r3, &(0x7f0000000100)="711c6e2883c2c16fc900d45b43c601699ee0d57c4cf6f56e49218206", 0x1c) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.817782644s ago: executing program 3 (id=1682): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) getpid() unshare(0x68040300) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 3.782567176s ago: executing program 0 (id=1684): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x8100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5169b}]}, 0x3c}}, 0x0) 3.617264369s ago: executing program 4 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x3000000, @local}}}, 0x88) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4, 0x1, [0x0, 0x0, 0x0]}]}]}, 0x38}}, 0x0) 3.21704145s ago: executing program 2 (id=1686): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x300000000000000) 3.118460482s ago: executing program 2 (id=1687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r3, @ANYBLOB="92"], 0x20}}, 0x0) 2.813535892s ago: executing program 0 (id=1688): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000090400"/19, @ANYRES32=r2, @ANYBLOB="000200000000000024001280110001"], 0x44}}, 0x0) 2.754574064s ago: executing program 4 (id=1689): r0 = socket(0x10, 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x10, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_proto_private(r2, 0x8990, &(0x7f0000000280)="6ba4fadd6caebf8c660f67523a") ioctl$VIDIOC_ENUM_FMT(r1, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f030e00f007120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r7 = accept4(r4, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @loopback}, &(0x7f0000000280)=0xc) rt_sigaction(0xf, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x105}) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8011}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) unshare(0x60480) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/213, 0xd5}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x3}}}) 2.725519429s ago: executing program 2 (id=1690): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x14, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x45a5, 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 2.606567733s ago: executing program 3 (id=1691): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x0, 0x0, 0x33524742, 0x2000000}}) 2.262088593s ago: executing program 0 (id=1693): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000107d1e502d00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f00ffffffffffffffffc8f9edde47"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) 2.165823248s ago: executing program 2 (id=1694): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8], 0xfb}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x5, 0x900, 0x9, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0xe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x205, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x20, {0x7}}}}}}}]}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0xfffffffd, 0x0, 0x10001, 0x0, 0x800, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x2}) write$snddsp(r3, &(0x7f0000000100)="711c6e2883c2c16fc900d45b43c601699ee0d57c4cf6f56e49218206", 0x1c) 1.772851059s ago: executing program 4 (id=1695): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8], 0xfb}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x5, 0x900, 0x9, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0xe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x205, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x20, {0x7}}}}}}}]}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0xfffffffd, 0x0, 0x10001, 0x0, 0x800, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x2}) write$snddsp(r3, &(0x7f0000000100)="711c6e2883c2c16fc900d45b43c601699ee0d57c4cf6f56e49218206", 0x1c) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) 1.410329788s ago: executing program 0 (id=1696): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="da"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="0b2a0200"], 0x20}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="ff0f20d835080000000f22d80066b86b4266eff2dce166b8e20066ef0f29902cbb0100c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4e}], 0x1, 0x62, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000380)={{0x0, 0x0, 0x80}, "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", "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"}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000000)="9a6ba79ac22b00f30fc73500f0ffff66bad004ef66b805018ee0f3adb9800000c00f3235001000000f30c4c1ad63319aa20c77f4bb00660f38809202000000c4e1305831", 0x44}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) recvmmsg$unix(r8, &(0x7f00000082c0)=[{{&(0x7f0000002400), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/11, 0xb}], 0x2, &(0x7f0000003500)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003540)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f00000035c0)=""/1, 0x1}, {&(0x7f0000003600)=""/50, 0x32}, {&(0x7f0000003640)=""/6, 0x6}], 0x3, &(0x7f00000036c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/210, 0xd2}, {&(0x7f0000004800)=""/38, 0x26}, {&(0x7f0000004840)=""/14, 0xe}, {&(0x7f0000004880)=""/155, 0x9b}, {&(0x7f0000004940)=""/101, 0x65}, {&(0x7f00000049c0)=""/240, 0xf0}], 0x7, &(0x7f0000004b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000004c00), 0x6e, &(0x7f0000007ec0)=[{&(0x7f0000004c80)=""/154, 0x9a}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/143, 0x8f}, {&(0x7f0000006e00)=""/191, 0xbf}, {&(0x7f0000006ec0)=""/4096, 0x1000}], 0x6, &(0x7f0000007f40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000007f80)=@abs, 0x6e, &(0x7f0000008280)=[{&(0x7f0000008000)=""/220, 0xdc}, {&(0x7f0000008100)=""/156, 0x9c}, {&(0x7f00000081c0)=""/134, 0x86}], 0x3}}], 0x5, 0x40000000, &(0x7f0000008440)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0xe0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x56, 0x8, 0x8, &(0x7f0000001780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0xd, 0x9, &(0x7f0000008480)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x200, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x14, '\x00', r1, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x61b9, 0x6}, 0x10, r10, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001940)=[{0x5, 0x2, 0xd, 0xb}, {0x2, 0x4, 0x0, 0x2}], 0x10, 0xa1a, @void, @value}, 0x90) r11 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) socket(0x2, 0x6, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 376.411513ms ago: executing program 2 (id=1697): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="200008000a000100aaaaaaaaaabb000005000c0004"], 0x38}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a80)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 110.842669ms ago: executing program 0 (id=1698): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setpgid(0x0, 0x0) 32.770318ms ago: executing program 0 (id=1699): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="2c00ec0ef12545000000000000000000181100006b20d44fb115876c194b0c75048df75fd581db584cdd6656290ed86fa51c1a94b0a988d6cdb512cad86d9652225163517bea067e2c1e0b9c7c60829b553a231a6f951c5aa528b0cd7f2cd7004094ee26fb1f88c820a2f270a260230c", @ANYRES32=0xffffffffffffffff, @ANYBLOB="79ca7d66c1999d85b4140409ad15464615338393bcbaca60b5d21fdea06cf3f0f06f408851d93f097402e7324745bf1bf025786e518742d2081d0bb5c1f8f9f6885a51b1d053297d0b9669929d4d9967b18168df087c62d184d27125edab3e3a0939a2448fb7e70442b6687a2d5fe94843cf3bfd9b5764a3b5b27a74"], 0x0, 0x48000000, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffbca, @void, @value}, 0x90) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="0c010000100013070000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000003200000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000014000e00ac1414aa0000000000000000000000000800180001000080"], 0x10c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=r3, @ANYRES64=0x0, @ANYRES16, @ANYRES8=r4, @ANYRESOCT=r5, @ANYRESDEC=r2, @ANYRESOCT=r8], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000000)) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000001ca110000000000000000000000009b6c8776fc50b59d852aa5ba7cd2c16aabe647fb38d56f23b76f2d2f864cc62b1db9d12eed75a74530c3272134d18335fc48af21948733e295888e9dae30304bd890"], 0x14}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x90, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0x90}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0) 0s ago: executing program 4 (id=1700): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f00000000c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000000400000102090000052406000105240000050d240f01000004eaffffff1a0006031a00000804800200090581", @ANYRES8=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, 0x0, 0x0) pwritev(r1, &(0x7f00000001c0), 0x0, 0x6, 0x1) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) kernel console output (not intermixed with test programs): root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3f57dff9 code=0x7ffc0000 [ 521.147488][ T1848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.149802][ T1848] usb 4-1: config 0 descriptor?? [ 521.185691][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.298917][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 521.309442][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 521.319179][T11791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.347074][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.369690][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.380423][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.392458][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.405267][T11791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.438098][T11791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.448524][T11791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.457732][T11791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.468454][T11791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.480960][ T1848] ath6kl: Failed to submit usb control message: -71 [ 521.491219][ T1848] ath6kl: unable to send the bmi data to the device: -71 [ 521.500580][ T1848] ath6kl: Unable to send get target info: -71 [ 521.513936][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.521380][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.573554][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.580758][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.588832][ T1848] ath6kl: Failed to init ath6kl core: -71 [ 521.605572][ T1848] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 521.665741][ T1848] usb 4-1: USB disconnect, device number 73 [ 521.801495][T12076] IPVS: stopping backup sync thread 12078 ... [ 521.875350][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.884157][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.888426][T11891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.920489][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 521.928639][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 522.026766][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.043000][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.208434][T11891] veth0_vlan: entered promiscuous mode [ 522.261248][T11891] veth1_vlan: entered promiscuous mode [ 522.375920][T12094] veth1_macvtap: left promiscuous mode [ 522.434399][T11891] veth0_macvtap: entered promiscuous mode [ 522.460005][T11891] veth1_macvtap: entered promiscuous mode [ 522.517410][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.548972][ T9] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 522.557797][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.575499][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 522.582937][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 522.603505][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.647160][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.674962][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.686687][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.699211][T11891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.712841][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 522.735544][T11242] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 522.803839][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 522.815810][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 522.834790][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 522.860933][ T9] usb 5-1: USB disconnect, device number 111 [ 522.890703][T11242] usb 4-1: Using ep0 maxpacket: 16 [ 522.910527][T11242] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 522.940667][T11242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.966015][T11242] usb 4-1: config 0 descriptor?? [ 522.993958][T11242] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 523.006612][T11242] usb 4-1: Detected FT4232H [ 523.095880][T12102] netlink: 'syz.2.1494': attribute type 5 has an invalid length. [ 523.196051][T12099] team0 (unregistering): Port device team_slave_0 removed [ 523.208939][T11242] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 523.232040][T12099] team0 (unregistering): Port device team_slave_1 removed [ 523.239785][T11242] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 523.339712][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.394975][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.425011][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.440355][T12097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.455326][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.466178][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.480843][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.493679][T11891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.501699][T12097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.523258][T12097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.555072][T12097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.682776][T11891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.692279][T11891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.702479][T11891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.719446][T11891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.740378][T12105] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 523.833740][ T7827] usb 4-1: USB disconnect, device number 74 [ 523.860399][ T7827] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 523.918488][ T7827] ftdi_sio 4-1:0.0: device disconnected [ 524.199063][ T3011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.274724][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.295095][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.339305][ T3011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.355306][ T8] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 524.511379][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.545026][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 524.557393][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 524.578979][ T3011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.602909][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 524.614199][ T8] usb 2-1: SerialNumber: syz [ 524.645320][ T8] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 524.654109][ T8] usb-storage 2-1:1.0: USB Mass Storage device detected [ 524.692406][ T8] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 524.757421][ T8] scsi host1: usb-storage 2-1:1.0 [ 524.879048][ T3011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.904153][T12115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.940140][T12140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1505'. [ 524.948287][T12115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.966847][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.987601][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.990212][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.005612][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.015495][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.021082][ T8] usb 2-1: USB disconnect, device number 103 [ 525.039137][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.050450][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 525.061295][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.345028][ T2979] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 525.355549][ T3011] bridge_slave_1: left promiscuous mode [ 525.363088][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.389979][ T3011] bridge_slave_0: left allmulticast mode [ 525.396587][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.404484][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.421053][ T3011] bridge_slave_0: left promiscuous mode [ 525.429365][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.495623][ T7827] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 525.668640][ T7827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 525.703506][ T7827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 525.725175][ T7827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 525.738296][ T7827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 525.747730][ T7827] usb 4-1: SerialNumber: syz [ 525.773826][ T7827] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 525.783285][ T7827] usb-storage 4-1:1.0: USB Mass Storage device detected [ 525.797564][ T7827] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 525.808569][ T7827] scsi host1: usb-storage 4-1:1.0 [ 525.985951][T12148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.997775][T12148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.010653][T11242] usb 4-1: USB disconnect, device number 75 [ 526.155051][ T1848] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 526.303700][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.314041][ T1848] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 526.324512][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.332441][ T1848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.343559][ T1848] usb 2-1: config 0 descriptor?? [ 526.350199][ T3011] bond0 (unregistering): Released all slaves [ 526.360968][ T1848] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 526.561819][T12146] chnl_net:caif_netlink_parms(): no params data found [ 526.594618][ T1848] gp8psk: usb in 128 operation failed. [ 526.714930][ T1848] gp8psk: usb in 137 operation failed. [ 526.720460][ T1848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 526.764326][ T1848] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 526.773761][ T1848] usb 2-1: media controller created [ 526.813311][ T1848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.842895][ T1848] gp8psk_fe: Frontend attached [ 526.871151][ T1848] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 526.896411][ T1848] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 526.915206][T11242] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 526.946243][ T1848] gp8psk: usb in 138 operation failed. [ 526.951795][ T1848] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 526.968096][ T1848] gp8psk: found Genpix USB device pID = 203 (hex) [ 526.977588][ T1848] usb 2-1: USB disconnect, device number 104 [ 527.040375][ T1848] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 527.087912][T12146] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.095279][T11242] usb 4-1: Using ep0 maxpacket: 32 [ 527.123416][T12146] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.138964][T11242] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.150641][ T5236] Bluetooth: hci2: command tx timeout [ 527.167383][T12146] bridge_slave_0: entered allmulticast mode [ 527.173595][T11242] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 527.182898][T12146] bridge_slave_0: entered promiscuous mode [ 527.185743][T11242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 527.205302][T11242] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 527.215564][T11242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 527.230946][T11242] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 527.244764][T12146] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.254983][T11242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 527.262609][T11058] cxacru 3-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 527.284296][T11242] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.294541][T12146] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.313772][T11242] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 527.320082][T12146] bridge_slave_1: entered allmulticast mode [ 527.338664][T11242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.350737][T12146] bridge_slave_1: entered promiscuous mode [ 527.394340][T11242] usb 4-1: Product: syz [ 527.412590][T11242] usb 4-1: Manufacturer: syz [ 527.428325][T11242] usb 4-1: SerialNumber: syz [ 527.450577][T11242] usb 4-1: config 0 descriptor?? [ 527.465782][T12180] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 527.488714][ T3011] hsr_slave_0: left promiscuous mode [ 527.512668][ T3011] hsr_slave_1: left promiscuous mode [ 527.533326][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.555796][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.590942][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.615037][ T25] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 527.629666][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.658088][ T3011] batman_adv: batadv0: Removing interface: ipvlan2 [ 527.694274][T11242] cxacru 4-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 527.724368][ T3011] veth1_macvtap: left promiscuous mode [ 527.730232][T11242] cxacru 4-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 527.730884][ T3011] veth0_macvtap: left promiscuous mode [ 527.747963][ T3011] veth1_vlan: left promiscuous mode [ 527.760432][ T3011] veth0_vlan: left promiscuous mode [ 527.765362][T11242] cxacru 4-1:0.0: probe with driver cxacru failed with error -22 [ 527.804456][T11242] usb 4-1: USB disconnect, device number 76 [ 527.806122][ T25] usb 3-1: device descriptor read/all, error -71 [ 528.612924][T12231] FAULT_INJECTION: forcing a failure. [ 528.612924][T12231] name failslab, interval 1, probability 0, space 0, times 0 [ 528.654331][T12231] CPU: 1 UID: 0 PID: 12231 Comm: syz.3.1516 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 528.665274][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 528.675454][T12231] Call Trace: [ 528.678755][T12231] [ 528.681699][T12231] dump_stack_lvl+0x241/0x360 [ 528.686400][T12231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.691625][T12231] ? __pfx__printk+0x10/0x10 [ 528.696271][T12231] ? __kmalloc_noprof+0xb0/0x400 [ 528.701239][T12231] ? __pfx___might_resched+0x10/0x10 [ 528.706554][T12231] should_fail_ex+0x3b0/0x4e0 [ 528.711276][T12231] ? security_sk_alloc+0x53/0x360 [ 528.716345][T12231] should_failslab+0xac/0x100 [ 528.721070][T12231] ? security_sk_alloc+0x53/0x360 [ 528.726119][T12231] __kmalloc_noprof+0xd8/0x400 [ 528.730906][T12231] ? sk_prot_alloc+0x58/0x210 [ 528.735604][T12231] security_sk_alloc+0x53/0x360 [ 528.740574][T12231] sk_prot_alloc+0xfa/0x210 [ 528.745115][T12231] sk_alloc+0x38/0x370 [ 528.749319][T12231] inet_create+0x652/0xe70 [ 528.753764][T12231] ? inet_create+0x9c/0xe70 [ 528.758314][T12231] ? __sock_create+0x337/0x920 [ 528.763126][T12231] __sock_create+0x490/0x920 [ 528.767753][T12231] mptcp_subflow_create_socket+0x132/0xdf0 [ 528.773684][T12231] ? look_up_lock_class+0x77/0x170 [ 528.778945][T12231] ? register_lock_class+0x102/0x980 [ 528.784287][T12231] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 528.790649][T12231] ? __pfx_register_lock_class+0x10/0x10 [ 528.796313][T12231] ? mark_lock+0x9a/0x360 [ 528.800671][T12231] __mptcp_nmpc_sk+0x178/0x800 [ 528.805648][T12231] ? __lock_acquire+0x1384/0x2050 [ 528.810970][T12231] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 528.816297][T12231] mptcp_connect+0x71/0xb20 [ 528.820838][T12231] ? mark_lock+0x9a/0x360 [ 528.825249][T12231] __inet_stream_connect+0x262/0xf30 [ 528.830594][T12231] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 528.837050][T12231] ? __local_bh_enable_ip+0x168/0x200 [ 528.842649][T12231] ? lockdep_hardirqs_on+0x99/0x150 [ 528.847881][T12231] ? __pfx___inet_stream_connect+0x10/0x10 [ 528.853747][T12231] ? __local_bh_enable_ip+0x168/0x200 [ 528.859166][T12231] ? inet_stream_connect+0x50/0xa0 [ 528.864332][T12231] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 528.870119][T12231] inet_stream_connect+0x65/0xa0 [ 528.875126][T12231] ? __pfx_inet_stream_connect+0x10/0x10 [ 528.880822][T12231] __sys_connect+0x2d1/0x300 [ 528.885445][T12231] ? __pfx___sys_connect+0x10/0x10 [ 528.890601][T12231] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 528.897003][T12231] ? do_syscall_64+0x100/0x230 [ 528.901836][T12231] __x64_sys_connect+0x7a/0x90 [ 528.906683][T12231] do_syscall_64+0xf3/0x230 [ 528.911247][T12231] ? clear_bhb_loop+0x35/0x90 [ 528.915987][T12231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.921949][T12231] RIP: 0033:0x7f046537dff9 [ 528.926426][T12231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.946442][T12231] RSP: 002b:00007f04661f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 528.955118][T12231] RAX: ffffffffffffffda RBX: 00007f0465535f80 RCX: 00007f046537dff9 [ 528.963186][T12231] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 528.971219][T12231] RBP: 00007f04661f0090 R08: 0000000000000000 R09: 0000000000000000 [ 528.979254][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.987282][T12231] R13: 0000000000000000 R14: 00007f0465535f80 R15: 00007f046565fa28 [ 528.995443][T12231] [ 529.159492][T12240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.190961][T12240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.276743][ T5236] Bluetooth: hci2: command tx timeout [ 529.587197][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 529.655158][T11242] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 529.675591][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 529.842526][T11242] usb 4-1: config 0 has no interfaces? [ 529.863098][T11242] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.876930][T11242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.898076][T11242] usb 4-1: config 0 descriptor?? [ 530.374026][T12146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.394789][T12215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1514'. [ 530.458666][T12146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.479296][ T7827] usb 4-1: USB disconnect, device number 77 [ 530.598262][T12146] team0: Port device team_slave_0 added [ 530.618762][T12146] team0: Port device team_slave_1 added [ 530.722143][T12146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.741024][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.773506][T12146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.782522][T12146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.808515][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.859861][T12146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.985319][ T7827] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 530.997971][T12146] hsr_slave_0: entered promiscuous mode [ 531.016673][T12146] hsr_slave_1: entered promiscuous mode [ 531.038373][T12146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.054743][T12146] Cannot create hsr debugfs directory [ 531.187297][ T7827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 531.196977][T12274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1524'. [ 531.231121][T12274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.234929][ T7827] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 531.275619][ T7827] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 531.286224][T12274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.299361][ T7827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.306138][ T5236] Bluetooth: hci2: command tx timeout [ 531.341337][ T3011] IPVS: stop unused estimator thread 0... [ 531.362869][ T7827] usb 3-1: config 0 descriptor?? [ 531.614522][ T7827] ath6kl: Failed to submit usb control message: -71 [ 531.634957][ T7827] ath6kl: unable to send the bmi data to the device: -71 [ 531.642089][ T7827] ath6kl: Unable to send get target info: -71 [ 531.663054][ T7827] ath6kl: Failed to init ath6kl core: -71 [ 531.670023][ T7827] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 531.715969][ T7827] usb 3-1: USB disconnect, device number 84 [ 532.860209][T12315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.947895][T12315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.068503][T12146] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 533.109535][T12146] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.201530][T12146] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 533.232792][T12146] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 533.385556][ T5236] Bluetooth: hci2: command tx timeout [ 533.524802][T12146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.609514][T12146] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.636435][ T29] audit: type=1326 audit(1727919712.232:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 533.641519][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.666163][ T9343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.673842][ T29] audit: type=1326 audit(1727919712.232:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 533.698112][T12343] ALSA: seq fatal error: cannot create timer (-22) [ 533.713152][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.720447][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.729382][T12346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.742254][T12346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.742408][ T29] audit: type=1326 audit(1727919712.262:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 533.783926][ T29] audit: type=1326 audit(1727919712.262:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 533.826849][ T25] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 533.845224][ T29] audit: type=1326 audit(1727919712.262:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 533.856454][T12146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.939438][ T29] audit: type=1326 audit(1727919712.262:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 533.964383][T12146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.978029][ T29] audit: type=1326 audit(1727919712.322:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 534.020749][ T29] audit: type=1326 audit(1727919712.322:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 534.045419][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.057928][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.070448][ T25] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 534.080507][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.091732][T12349] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1538'. [ 534.103636][T12146] veth0_vlan: entered promiscuous mode [ 534.104901][ T29] audit: type=1326 audit(1727919712.322:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 534.132905][ T25] usb 2-1: config 0 descriptor?? [ 534.154175][T12146] veth1_vlan: entered promiscuous mode [ 534.168918][ T29] audit: type=1326 audit(1727919712.322:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12341 comm="syz.3.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046537dff9 code=0x7ffc0000 [ 534.227444][T12146] veth0_macvtap: entered promiscuous mode [ 534.283263][T12146] veth1_macvtap: entered promiscuous mode [ 534.316775][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.329543][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.350544][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.375914][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.400985][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.412204][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.425790][T12146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.457429][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.483309][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.504782][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.525667][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.536065][T12146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.546730][T12146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.558559][T12146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.586242][ T5236] Bluetooth: hci4: command tx timeout [ 534.598541][T12146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.610344][T12344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.622900][T12146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.631859][T12146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.642420][T12146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.652284][T12344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.737539][ T25] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 534.758285][ T25] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 534.896763][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.928418][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.971839][ T25] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 535.016919][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.040130][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.384088][ T25] cp2112 0003:10C4:EA90.0012: error setting SMBus config [ 535.410729][ T25] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 535.457842][ T25] usb 2-1: USB disconnect, device number 105 [ 536.064994][ T25] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 536.246797][ T25] usb 4-1: config 0 has no interfaces? [ 536.252577][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 536.293450][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.336592][ T25] usb 4-1: config 0 descriptor?? [ 536.601354][T12379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1544'. [ 536.611303][ T8] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 536.633697][ T9] usb 4-1: USB disconnect, device number 78 [ 536.785092][T11242] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 536.792915][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 536.807911][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 536.819718][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 536.838721][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 536.848793][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.857495][ T8] usb 2-1: Product: syz [ 536.861725][ T8] usb 2-1: Manufacturer: syz [ 536.867875][ T8] usb 2-1: SerialNumber: syz [ 536.874677][ T8] usb 2-1: config 0 descriptor?? [ 536.886803][ T8] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 536.900344][ T8] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 536.987593][T11242] usb 5-1: Using ep0 maxpacket: 16 [ 537.004421][T11242] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 537.023142][T11242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 537.037765][T11242] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 537.047859][T11242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.056024][T11242] usb 5-1: Product: syz [ 537.060605][T11242] usb 5-1: Manufacturer: syz [ 537.065635][T11242] usb 5-1: SerialNumber: syz [ 537.080896][T11242] usb 5-1: config 0 descriptor?? [ 537.093852][T11242] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 537.106804][T11242] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 537.487461][ T8] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 537.495162][ T8] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 537.629425][T12403] sctp: [Deprecated]: syz.3.1553 (pid 12403) Use of int in maxseg socket option. [ 537.629425][T12403] Use struct sctp_assoc_value instead [ 537.695988][T11242] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 537.713736][T11242] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 537.940229][T12411] batman_adv: batadv0: Adding interface: ipvlan2 [ 537.963909][T12411] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.014438][T12411] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 538.089032][T12420] fuse: Unknown parameter 'grou00000000000000000000' [ 538.108806][ T8] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 538.145048][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 538.181363][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 538.205073][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 538.225037][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 538.247793][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 538.265178][ T8] usb 2-1: USB disconnect, device number 106 [ 538.313204][T12418] xt_cgroup: path and classid specified [ 538.391786][T11242] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 538.415686][T11242] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 538.427554][T11242] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 538.500659][T12426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.523088][T12426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.643746][T11242] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 538.652653][T11242] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 538.659762][T11242] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 538.676717][T11242] usb 5-1: USB disconnect, device number 112 [ 539.225630][ T1848] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 539.415273][ T1848] usb 4-1: Using ep0 maxpacket: 32 [ 539.422283][ T1848] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.434177][ T1848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 539.446961][ T1848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 539.458705][ T1848] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 539.470866][ T1848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 539.481179][ T1848] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 539.494191][T12434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.505717][ T1848] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.523679][ T1848] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 539.535437][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.537855][ T1848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.560194][T12434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.570913][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 539.583068][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 539.593037][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 539.601294][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 539.609850][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 539.609883][T12434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.617466][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 539.635510][ T1848] usb 4-1: Product: syz [ 539.639733][ T1848] usb 4-1: Manufacturer: syz [ 539.644464][ T1848] usb 4-1: SerialNumber: syz [ 539.652503][ T1848] usb 4-1: config 0 descriptor?? [ 539.669727][T12428] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 539.697031][T12434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.806290][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.892387][ T1848] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 539.921958][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.929114][ T1848] usb 4-1: USB disconnect, device number 79 [ 540.067600][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.169186][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 540.179701][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 540.195562][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 540.209544][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 540.218554][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 540.226755][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 540.277271][T12436] chnl_net:caif_netlink_parms(): no params data found [ 540.400542][ T68] bridge_slave_1: left allmulticast mode [ 540.419287][ T68] bridge_slave_1: left promiscuous mode [ 540.465154][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.554533][ T68] bridge_slave_0: left allmulticast mode [ 540.573443][ T68] bridge_slave_0: left promiscuous mode [ 540.595357][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.864954][ T7827] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 541.069967][ T7827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.121825][ T7827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.150393][ T7827] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 541.182227][ T7827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.227904][ T7827] usb 4-1: config 0 descriptor?? [ 541.628107][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.657169][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.678831][ T68] bond0 (unregistering): Released all slaves [ 541.705125][ T5239] Bluetooth: hci1: command tx timeout [ 541.728301][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.800887][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.856594][T12436] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.875069][T12436] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.896144][T12436] bridge_slave_0: entered allmulticast mode [ 541.923265][ T7827] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 541.941870][T12436] bridge_slave_0: entered promiscuous mode [ 541.956961][T12436] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.967139][ T7827] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 541.980124][T12436] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.987936][T12436] bridge_slave_1: entered allmulticast mode [ 542.006114][T12436] bridge_slave_1: entered promiscuous mode [ 542.140828][T12436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.170454][ T7827] cp2112 0003:10C4:EA90.0013: Part Number: 0x82 Device Version: 0xFE [ 542.208881][T12436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.284213][ T5239] Bluetooth: hci2: command tx timeout [ 542.459145][ T68] hsr_slave_0: left promiscuous mode [ 542.487151][ T68] hsr_slave_1: left promiscuous mode [ 542.504226][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.526640][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.544983][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.553436][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.564496][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.572441][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.583591][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.624233][ T68] veth0_macvtap: left promiscuous mode [ 542.630180][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.640566][ T68] veth1_vlan: left promiscuous mode [ 542.647412][ T68] veth0_vlan: left promiscuous mode [ 542.803399][ T7827] cp2112 0003:10C4:EA90.0013: error reading lock byte: -71 [ 542.838436][ T7827] usb 4-1: USB disconnect, device number 80 [ 542.867817][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 542.890651][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 542.900422][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 542.916931][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 542.944426][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 542.952160][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 543.785028][ T5239] Bluetooth: hci1: command tx timeout [ 543.959957][T12436] team0: Port device team_slave_0 added [ 543.999147][T12436] team0: Port device team_slave_1 added [ 544.137669][T12436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.152024][T12436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.178960][T12436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.233401][T12436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.241463][T12436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.282386][T12436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.353851][ T5239] Bluetooth: hci2: command tx timeout [ 544.445667][T12436] hsr_slave_0: entered promiscuous mode [ 544.452778][T12436] hsr_slave_1: entered promiscuous mode [ 544.460240][ T7827] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 544.478190][T12436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.505482][T12436] Cannot create hsr debugfs directory [ 544.534313][T12444] chnl_net:caif_netlink_parms(): no params data found [ 544.615047][ T7827] usb 4-1: device descriptor read/64, error -71 [ 544.888709][ T7827] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 544.985804][ T5239] Bluetooth: hci6: command tx timeout [ 545.035087][ T7827] usb 4-1: device descriptor read/64, error -71 [ 545.134570][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.156272][ T7827] usb usb4-port1: attempt power cycle [ 545.272513][T12444] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.290126][T12444] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.305352][T12444] bridge_slave_0: entered allmulticast mode [ 545.312620][T12444] bridge_slave_0: entered promiscuous mode [ 545.334414][T12444] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.351977][T12444] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.362264][T12444] bridge_slave_1: entered allmulticast mode [ 545.386462][T12444] bridge_slave_1: entered promiscuous mode [ 545.498570][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.524243][ T7827] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 545.575851][ T7827] usb 4-1: device descriptor read/8, error -71 [ 545.665661][T12444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.692063][T12489] chnl_net:caif_netlink_parms(): no params data found [ 545.793318][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.825798][ T7827] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 545.855697][ T7827] usb 4-1: device descriptor read/8, error -71 [ 545.865101][ T5239] Bluetooth: hci1: command tx timeout [ 545.878124][T12444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.947284][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.975651][ T7827] usb usb4-port1: unable to enumerate USB device [ 546.037680][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 546.056811][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 546.066935][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 546.077674][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 546.088608][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 546.096804][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 546.112211][T12444] team0: Port device team_slave_0 added [ 546.184263][T12444] team0: Port device team_slave_1 added [ 546.344125][T12444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.353346][T12444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.380589][T12444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.419338][T12489] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.428766][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.432646][ T5239] Bluetooth: hci2: command tx timeout [ 546.449340][T12489] bridge_slave_0: entered allmulticast mode [ 546.460585][T12489] bridge_slave_0: entered promiscuous mode [ 546.469580][T12489] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.477215][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.484516][T12489] bridge_slave_1: entered allmulticast mode [ 546.492696][T12489] bridge_slave_1: entered promiscuous mode [ 546.507954][T12444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.515247][T12444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.541484][T12444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.637869][ T68] bridge_slave_1: left allmulticast mode [ 546.643567][ T68] bridge_slave_1: left promiscuous mode [ 546.651263][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.661579][ T68] bridge_slave_0: left allmulticast mode [ 546.667857][ T68] bridge_slave_0: left promiscuous mode [ 546.674333][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.078624][ T5239] Bluetooth: hci6: command tx timeout [ 547.130446][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.157696][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.174781][ T68] bond0 (unregistering): Released all slaves [ 547.210687][T12489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.234541][T12489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.422719][T12489] team0: Port device team_slave_0 added [ 547.660988][T12489] team0: Port device team_slave_1 added [ 547.747856][T12444] hsr_slave_0: entered promiscuous mode [ 547.764549][T12444] hsr_slave_1: entered promiscuous mode [ 547.792027][T12444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.799784][T12444] Cannot create hsr debugfs directory [ 547.841381][T12489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.865034][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.907698][T12489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.940865][T12436] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 547.955113][ T5239] Bluetooth: hci1: command tx timeout [ 547.997567][T12436] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 548.074115][T12489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.092033][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.143527][T12489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.185046][ T5239] Bluetooth: hci5: command tx timeout [ 548.216657][T12436] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 548.276184][T12436] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 548.369204][ T68] hsr_slave_0: left promiscuous mode [ 548.381419][ T68] hsr_slave_1: left promiscuous mode [ 548.387557][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.395170][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.404438][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.412371][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.441648][ T68] veth1_macvtap: left promiscuous mode [ 548.447469][ T68] veth0_macvtap: left promiscuous mode [ 548.453191][ T68] veth1_vlan: left promiscuous mode [ 548.458854][ T68] veth0_vlan: left promiscuous mode [ 548.505044][ T5239] Bluetooth: hci2: command tx timeout [ 549.145036][ T5239] Bluetooth: hci6: command tx timeout [ 549.302845][ T68] team0 (unregistering): Port device team_slave_1 removed [ 549.423944][ T68] team0 (unregistering): Port device team_slave_0 removed [ 550.265263][ T5239] Bluetooth: hci5: command tx timeout [ 550.427188][T12489] hsr_slave_0: entered promiscuous mode [ 550.443176][T12489] hsr_slave_1: entered promiscuous mode [ 550.460098][T12489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.475547][T12489] Cannot create hsr debugfs directory [ 550.642658][T12543] chnl_net:caif_netlink_parms(): no params data found [ 550.992158][T12489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.109425][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.125096][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.142692][T12543] bridge_slave_0: entered allmulticast mode [ 551.156454][T12543] bridge_slave_0: entered promiscuous mode [ 551.203763][T12489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.214422][ T1848] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 551.225349][ T5239] Bluetooth: hci6: command tx timeout [ 551.245764][T12543] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.260292][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.274774][T12543] bridge_slave_1: entered allmulticast mode [ 551.297493][T12543] bridge_slave_1: entered promiscuous mode [ 551.357551][T12489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.395449][ T1848] usb 4-1: Using ep0 maxpacket: 32 [ 551.411839][ T1848] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 551.422899][ T1848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.432183][ T1848] usb 4-1: Product: syz [ 551.436221][T12543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.445521][ T1848] usb 4-1: SerialNumber: syz [ 551.461124][ T1848] usb 4-1: config 0 descriptor?? [ 551.520576][T12489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.567930][T12543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.674654][T12543] team0: Port device team_slave_0 added [ 551.767553][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.803162][T12543] team0: Port device team_slave_1 added [ 551.859358][T12543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.867692][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.907687][T12543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.009449][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.039565][T12543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.053961][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.094426][T12543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.227988][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.269124][T12543] hsr_slave_0: entered promiscuous mode [ 552.291871][T12543] hsr_slave_1: entered promiscuous mode [ 552.298554][T12543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.307108][T12543] Cannot create hsr debugfs directory [ 552.347456][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.354955][ T5239] Bluetooth: hci5: command tx timeout [ 552.387620][T12489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 552.471938][T12489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 552.488928][T12489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 552.532699][T12489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 552.702382][T12436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.906643][T12436] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.939171][ T68] bridge_slave_1: left allmulticast mode [ 552.957301][ T68] bridge_slave_1: left promiscuous mode [ 552.963156][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.988791][ T68] bridge_slave_0: left allmulticast mode [ 552.994781][ T68] bridge_slave_0: left promiscuous mode [ 553.001408][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.711287][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.722644][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.735710][ T68] bond0 (unregistering): Released all slaves [ 553.820534][ T1848] usb 4-1: USB disconnect, device number 85 [ 553.893196][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.900479][ T9343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.921574][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.928833][ T9343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.063697][T12489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.210216][T12489] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.284367][T12444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 554.298530][T12444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 554.427732][ T5239] Bluetooth: hci5: command tx timeout [ 554.514273][ T68] hsr_slave_0: left promiscuous mode [ 554.544121][ T68] hsr_slave_1: left promiscuous mode [ 554.550960][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.585283][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.596822][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.604314][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.613056][ T68] batman_adv: batadv0: Removing interface: ipvlan2 [ 554.656618][ T68] veth1_macvtap: left promiscuous mode [ 554.663053][ T68] veth0_macvtap: left promiscuous mode [ 554.669658][ T68] veth1_vlan: left promiscuous mode [ 554.675358][ T68] veth0_vlan: left promiscuous mode [ 554.977519][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 554.998172][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 555.006558][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 555.014153][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 555.023688][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 555.032599][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 555.451267][ T68] team0 (unregistering): Port device team_slave_1 removed [ 555.512867][ T68] team0 (unregistering): Port device team_slave_0 removed [ 556.050185][T12444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 556.069513][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.076716][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.198386][T12444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 556.223143][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.230309][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.336146][T12436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.581635][T12489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 556.598126][T12489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.660052][T12436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.809041][T12444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.868838][T12543] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 556.925207][T12543] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 556.948155][T12444] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.009756][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.040883][T12489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.053376][T12543] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 557.065809][ T5236] Bluetooth: hci4: command tx timeout [ 557.081345][T12543] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 557.127159][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.134321][ T9343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.181723][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.218752][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.226355][ T9343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.274713][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.317532][T12657] chnl_net:caif_netlink_parms(): no params data found [ 557.372380][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.404436][T12436] veth0_vlan: entered promiscuous mode [ 557.492568][T12436] veth1_vlan: entered promiscuous mode [ 557.604282][T12657] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.617014][T12657] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.624329][T12657] bridge_slave_0: entered allmulticast mode [ 557.632568][T12657] bridge_slave_0: entered promiscuous mode [ 557.642290][T12657] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.656729][T12657] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.664039][T12657] bridge_slave_1: entered allmulticast mode [ 557.671980][T12657] bridge_slave_1: entered promiscuous mode [ 557.695914][T12489] veth0_vlan: entered promiscuous mode [ 557.755298][T12657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.780598][T12489] veth1_vlan: entered promiscuous mode [ 557.850876][T12657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.952534][T12657] team0: Port device team_slave_0 added [ 557.970395][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.039503][T12436] veth0_macvtap: entered promiscuous mode [ 558.070294][T12657] team0: Port device team_slave_1 added [ 558.087993][T12444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.580659][ T68] bond0 (unregistering): Released all slaves [ 558.631017][T12657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.645178][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.679109][T12657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.704020][T12436] veth1_macvtap: entered promiscuous mode [ 558.726587][T12657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.733586][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.765798][T12657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.787306][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.813742][T12489] veth0_macvtap: entered promiscuous mode [ 558.880532][T12436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.891689][T12436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.903935][T12436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.917826][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.925005][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.933902][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.941085][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.993911][T12436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.006671][T12436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.018397][T12436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.053088][T12657] hsr_slave_0: entered promiscuous mode [ 559.060097][T12657] hsr_slave_1: entered promiscuous mode [ 559.069131][T12657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.076959][T12657] Cannot create hsr debugfs directory [ 559.083361][T12489] veth1_macvtap: entered promiscuous mode [ 559.146332][ T5239] Bluetooth: hci4: command tx timeout [ 559.188465][T12436] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.198000][T12436] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.209010][T12436] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.217878][T12436] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.375072][ T68] hsr_slave_0: left promiscuous mode [ 559.381491][ T68] hsr_slave_1: left promiscuous mode [ 559.398020][ T68] batman_adv: batadv0: Removing interface: ipvlan2 [ 559.414428][ T68] batman_adv: batadv0: Removing interface: ipvlan3 [ 559.447956][ T68] veth1_macvtap: left promiscuous mode [ 559.454569][ T68] veth0_macvtap: left promiscuous mode [ 559.475519][ T68] veth1_vlan: left promiscuous mode [ 559.480896][ T68] veth0_vlan: left promiscuous mode [ 560.029386][ T5239] Bluetooth: hci0: command 0x0406 tx timeout [ 560.881573][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.892976][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.903921][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.915439][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.927448][T12489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.042134][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.064216][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.077169][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.094935][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.128266][T12489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.187607][T12489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.205237][T12489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.216441][T12489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.226049][ T5236] Bluetooth: hci4: command tx timeout [ 561.233054][T12489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.284107][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.321801][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.342007][T12444] veth0_vlan: entered promiscuous mode [ 561.358359][T12543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.439485][T12444] veth1_vlan: entered promiscuous mode [ 561.547150][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.556811][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.708483][T12444] veth0_macvtap: entered promiscuous mode [ 561.811993][T12444] veth1_macvtap: entered promiscuous mode [ 561.862246][T12444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.874000][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.892996][T12444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.907633][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.917453][T12444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.930099][T12444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.940561][T12444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.951785][T12444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.963685][T12444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.977391][T12543] veth0_vlan: entered promiscuous mode [ 562.028108][T12444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.040372][T12444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.054952][ T7827] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 562.074160][T12444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.095580][T12444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.114968][T12444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.135481][T12444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.158237][T12444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.202433][T12444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.231489][T12444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.242223][ T7827] usb 2-1: config 0 has no interfaces? [ 562.248354][ T7827] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 562.255124][T12444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.257965][ T7827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.284636][T12444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.285975][ T7827] usb 2-1: config 0 descriptor?? [ 562.319985][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.332749][T12543] veth1_vlan: entered promiscuous mode [ 562.365019][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.620796][ T46] usb 2-1: USB disconnect, device number 107 [ 562.650418][T12543] veth0_macvtap: entered promiscuous mode [ 562.691456][T12543] veth1_macvtap: entered promiscuous mode [ 562.718462][T12657] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 562.740690][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.756997][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.775702][T12657] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 562.798475][T12657] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 562.820846][T12657] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 562.871546][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.892820][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.915001][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.934905][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.948581][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.966710][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.977402][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.989078][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.011897][T12543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.040304][ T9343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.062333][ T9343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.078096][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.084620][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.100560][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.122935][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.133480][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.161022][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.181312][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.215100][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.241811][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.279770][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.305306][ T5236] Bluetooth: hci4: command tx timeout [ 563.307589][T12543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.441188][T12749] netlink: 204488 bytes leftover after parsing attributes in process `syz.1.1596'. [ 563.472752][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 563.472777][ T29] audit: type=1326 audit(1727919742.032:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 563.527335][ T29] audit: type=1326 audit(1727919742.032:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 563.552729][ T29] audit: type=1326 audit(1727919742.032:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 563.576307][ T29] audit: type=1326 audit(1727919742.032:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 563.604996][T12543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.613831][T12543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.623000][ T29] audit: type=1326 audit(1727919742.032:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 563.647963][T12543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.658845][T12543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.669981][ T29] audit: type=1326 audit(1727919742.032:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 563.824966][ T29] audit: type=1326 audit(1727919742.032:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 563.909056][ T29] audit: type=1326 audit(1727919742.032:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 563.933993][ T29] audit: type=1326 audit(1727919742.032:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 563.956978][ T29] audit: type=1326 audit(1727919742.032:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efe5d77dff9 code=0x7ffc0000 [ 564.297476][T12657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.314269][T12768] veth1_macvtap: left promiscuous mode [ 564.356214][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.368895][T12768] veth1_macvtap: entered promiscuous mode [ 564.381895][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.390083][T12768] macsec0: entered allmulticast mode [ 564.395595][T12768] veth1_macvtap: entered allmulticast mode [ 564.666959][T12657] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.696881][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.725589][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.750624][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.757850][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.776716][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.783904][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.844998][ T46] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 564.993524][T12657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 565.034728][T12657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.039557][ T46] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 565.065270][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.093929][ T46] usb 2-1: config 0 descriptor?? [ 565.141216][ T46] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 565.219104][T12657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.474058][ T9343] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.529031][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 565.540978][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 565.549456][ T46] gp8psk: usb in 128 operation failed. [ 565.557114][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 565.571549][ T46] gp8psk: usb in 137 operation failed. [ 565.581931][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 565.591232][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 565.599698][ T46] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 565.612252][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 565.620006][ T46] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 565.633401][ T46] usb 2-1: USB disconnect, device number 108 [ 565.881656][ T9343] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.891323][T12807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.919612][T12807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.990405][ T9343] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.041615][T12657] veth0_vlan: entered promiscuous mode [ 566.100979][ T9343] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.172482][T12657] veth1_vlan: entered promiscuous mode [ 566.305597][ T9] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 566.452112][ T9343] bridge_slave_1: left allmulticast mode [ 566.463004][ T9343] bridge_slave_1: left promiscuous mode [ 566.469431][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.480445][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.493313][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 566.502926][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 566.516364][ T9343] bridge_slave_0: left allmulticast mode [ 566.522093][ T9343] bridge_slave_0: left promiscuous mode [ 566.529546][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.537865][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 566.547536][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.566793][T12810] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 566.589363][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 566.607921][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 566.621542][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1607'. [ 566.652752][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 566.666327][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 566.679633][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 566.695715][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 566.811792][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.857823][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.977918][ T9] usb 5-1: USB disconnect, device number 113 [ 567.262464][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 567.287314][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 567.355852][ T9] usb 5-1: new low-speed USB device number 114 using dummy_hcd [ 567.514396][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.525312][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 567.549745][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 567.561447][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 567.585075][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.622066][T12810] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 567.652692][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 567.705240][ T5236] Bluetooth: hci6: command tx timeout [ 567.706428][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 567.764044][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 567.772213][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 567.821553][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 567.842987][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 567.881674][ T9] usb 5-1: USB disconnect, device number 114 [ 567.957967][ T9343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.973856][ T9343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.987357][ T9343] bond0 (unregistering): Released all slaves [ 568.047599][T12831] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 568.072521][T12802] chnl_net:caif_netlink_parms(): no params data found [ 568.097100][T12657] veth0_macvtap: entered promiscuous mode [ 568.527647][T12657] veth1_macvtap: entered promiscuous mode [ 568.888160][ T9343] hsr_slave_0: left promiscuous mode [ 568.897306][ T9343] hsr_slave_1: left promiscuous mode [ 568.920298][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.965262][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.005703][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.037371][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.113091][ T9343] veth1_macvtap: left promiscuous mode [ 569.120343][ T9343] veth0_macvtap: left promiscuous mode [ 569.155234][ T9343] veth1_vlan: left promiscuous mode [ 569.167115][ T9343] veth0_vlan: left promiscuous mode [ 569.195064][T11242] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 569.356138][T11242] usb 5-1: Using ep0 maxpacket: 32 [ 569.373136][T11242] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 569.399554][T11242] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 569.434087][T11242] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.485829][T11242] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 569.496805][T11242] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 569.523739][T11242] usb 5-1: Product: syz [ 569.529153][T11242] usb 5-1: Manufacturer: syz [ 569.534223][T11242] usb 5-1: SerialNumber: syz [ 569.561304][T12854] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 569.572167][T11242] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input30 [ 569.652913][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 569.785297][ T5236] Bluetooth: hci6: command tx timeout [ 569.986343][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.023730][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.096087][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.126836][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.293828][T12863] netlink: 173 bytes leftover after parsing attributes in process `syz.1.1615'. [ 570.562227][ T9343] team0 (unregistering): Port device team_slave_1 removed [ 570.623565][ T9343] team0 (unregistering): Port device team_slave_0 removed [ 570.666429][T11242] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 570.859205][T11242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.870409][T11242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.891467][T11242] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 570.900943][T11242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.911325][T11242] usb 2-1: config 0 descriptor?? [ 571.365701][T12865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.383786][T12865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.481953][ T5785] usb 5-1: USB disconnect, device number 115 [ 571.492543][T12802] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.497107][T11242] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 571.523819][T12802] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.544744][T11242] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 571.557100][T12802] bridge_slave_0: entered allmulticast mode [ 571.558579][ T5785] appletouch 5-1:1.0: input: appletouch disconnected [ 571.586281][T12802] bridge_slave_0: entered promiscuous mode [ 571.613059][T12802] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.630629][T12802] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.638992][T12802] bridge_slave_1: entered allmulticast mode [ 571.652362][T12802] bridge_slave_1: entered promiscuous mode [ 571.662010][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.673191][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.684257][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.700308][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.700881][T11242] cp2112 0003:10C4:EA90.0014: Part Number: 0x6A Device Version: 0xAF [ 571.711213][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.735708][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.747522][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.758816][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.769979][T12876] syz.0.1618 (12876): attempted to duplicate a private mapping with mremap. This is not supported. [ 571.790250][T12657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.874990][ T5236] Bluetooth: hci6: command tx timeout [ 571.887980][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.914358][T11242] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 571.914958][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.957945][T11242] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71 [ 571.984973][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.007138][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.019948][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.020484][T11242] usb 2-1: USB disconnect, device number 109 [ 572.031648][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.105216][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.129963][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.162519][T12657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.194006][T12802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.272918][T12657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.297550][T12657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.324976][T12657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.333969][T12657] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.364662][T12802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.482241][T12802] team0: Port device team_slave_0 added [ 572.582334][T12802] team0: Port device team_slave_1 added [ 572.857712][T12802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.864743][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.921614][T12802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.006246][T12802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.013311][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.050162][T12802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.070007][T12896] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 573.086382][T12896] syzkaller0: linktype set to 65535 [ 573.147280][ T9343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.167297][ T9343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.247178][T12802] hsr_slave_0: entered promiscuous mode [ 573.285413][T12802] hsr_slave_1: entered promiscuous mode [ 573.296247][T12802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.325693][T12802] Cannot create hsr debugfs directory [ 573.344347][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.369105][T12914] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1623'. [ 573.423222][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.441226][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.455104][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.522998][T12921] bridge0: port 3(vlan2) entered blocking state [ 573.543039][T12921] bridge0: port 3(vlan2) entered disabled state [ 573.584106][T12921] vlan2: entered allmulticast mode [ 573.594698][T12921] vlan2: left allmulticast mode [ 573.824995][ T46] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 573.945934][ T5236] Bluetooth: hci6: command tx timeout [ 574.015688][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 574.054970][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 574.074944][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.129616][ T46] usb 2-1: string descriptor 0 read error: -22 [ 574.136615][ T46] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 574.169899][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.185437][T12682] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 574.230302][ T46] usb 2-1: config 0 descriptor?? [ 574.247358][ T46] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 574.275541][ T46] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 574.330634][T12942] batman_adv: batadv0: Adding interface: ipvlan2 [ 574.365836][T12682] usb 4-1: Using ep0 maxpacket: 8 [ 574.379591][T12682] usb 4-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 574.382877][T12942] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.399197][T12682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.467132][T12682] usb 4-1: Product: syz [ 574.479331][T12682] usb 4-1: Manufacturer: syz [ 574.494422][T12682] usb 4-1: SerialNumber: syz [ 574.499330][T12942] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 574.520175][T12682] usb 4-1: config 0 descriptor?? [ 574.547640][T12682] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 574.558493][ T46] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 574.588173][ T46] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 574.608939][ T46] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 574.629350][ T46] em28xx 2-1:0.0: No AC97 audio processor [ 574.653784][ T46] usb 2-1: USB disconnect, device number 110 [ 574.682505][ T46] em28xx 2-1:0.0: Disconnecting em28xx [ 574.703070][ T46] em28xx 2-1:0.0: Freeing device [ 574.755777][T12682] usb 4-1: reset high-speed USB device number 86 using dummy_hcd [ 575.363430][T12802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 575.372232][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.388367][T12802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 575.408482][T12802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 575.421169][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.468898][T12682] usb 4-1: device descriptor read/64, error -71 [ 575.513595][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.535765][T12802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 575.552594][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.788964][T12682] usb 4-1: reset high-speed USB device number 86 using dummy_hcd [ 575.894652][T12802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.927843][T12802] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.977219][T12983] pim6reg1: entered promiscuous mode [ 575.982658][T12983] pim6reg1: entered allmulticast mode [ 576.011702][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.019034][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.076616][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.083872][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.115067][ T5785] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 576.233383][T12802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.255714][T12682] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 576.261882][T12682] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 576.282726][ T5785] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 576.322816][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.330735][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.340845][ T5785] usb 5-1: Product: syz [ 576.355427][ T5785] usb 5-1: Manufacturer: syz [ 576.363781][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.374256][ T5785] usb 5-1: SerialNumber: syz [ 576.407586][ T5785] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 576.428737][T12802] veth0_vlan: entered promiscuous mode [ 576.462088][T12802] veth1_vlan: entered promiscuous mode [ 576.487877][ T7827] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 576.571381][T12802] veth0_macvtap: entered promiscuous mode [ 576.617733][T12802] veth1_macvtap: entered promiscuous mode [ 576.679111][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.712779][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.724322][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.735689][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.735801][T12682] usb 4-1: USB disconnect, device number 86 [ 576.749034][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.762925][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.795160][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.806283][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.817022][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.828213][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.841753][T12802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.857503][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.871665][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.883065][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.894761][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.905764][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.917760][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.928558][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.940698][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.981012][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.005253][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.027317][T12802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.068345][T12802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.086868][T12802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.096521][T12802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.105483][T12802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.176586][ T5284] usb 5-1: USB disconnect, device number 116 [ 577.339830][ T9343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.355036][ T9343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.376704][T13008] fuse: Bad value for 'fd' [ 577.423955][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.466786][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.632758][ T7827] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 577.660937][ T7827] ath9k_htc: Failed to initialize the device [ 577.678381][ T5284] usb 5-1: ath9k_htc: USB layer deinitialized [ 577.760033][T13017] input: syz1 as /devices/virtual/input/input31 [ 577.905538][T11242] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 578.065755][T11242] usb 2-1: Using ep0 maxpacket: 16 [ 578.081709][T11242] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 578.115167][T11242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 578.135230][ T5284] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 578.156931][T11242] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 578.165388][T12682] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 578.175086][T11242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.193921][T11242] usb 2-1: Product: syz [ 578.199511][T11242] usb 2-1: Manufacturer: syz [ 578.205489][T11242] usb 2-1: SerialNumber: syz [ 578.212386][T11242] usb 2-1: config 0 descriptor?? [ 578.237411][T11242] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 578.256765][T11242] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 578.270647][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.325109][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 578.337394][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.349323][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.367869][T12682] usb 3-1: Using ep0 maxpacket: 32 [ 578.369157][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.380447][T12682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 578.409982][ T5284] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 578.413971][T12682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 578.457691][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.478442][T12682] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 578.485917][ T5284] usb 5-1: config 0 descriptor?? [ 578.495893][T12682] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 578.523632][T12682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.537824][T12682] usb 3-1: Product: syz [ 578.542057][T12682] usb 3-1: Manufacturer: syz [ 578.555262][T12682] usb 3-1: SerialNumber: syz [ 578.562712][ T46] IPVS: starting estimator thread 0... [ 578.600922][T12682] usb 3-1: config 0 descriptor?? [ 578.612959][T12682] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 578.623525][T12682] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 578.655183][T13027] IPVS: using max 15 ests per chain, 36000 per kthread [ 578.836726][T11242] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 578.850613][T11242] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 578.867724][T12736] usb 3-1: USB disconnect, device number 85 [ 578.936632][ T5284] usbhid 5-1:0.0: can't add hid device: -71 [ 578.954214][ T5284] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 578.979417][ T5284] usb 5-1: USB disconnect, device number 117 [ 578.988647][T13031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.078669][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.092953][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.230778][T12682] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 579.405070][T12682] usb 4-1: Using ep0 maxpacket: 8 [ 579.427995][T12682] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 579.453495][T12682] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 579.482442][T12682] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 579.498013][T11242] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 579.503220][T12682] usb 4-1: Product: syz [ 579.510576][T12682] usb 4-1: Manufacturer: syz [ 579.519356][T11242] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 579.535469][T12682] usb 4-1: SerialNumber: syz [ 579.760854][T12682] usb 4-1: Handspring Visor / Palm OS: port 170, is for unknown use [ 579.784591][T12682] usb 4-1: Handspring Visor / Palm OS: Number of ports: 1 [ 579.841148][T13047] bridge_slave_0: left allmulticast mode [ 579.865721][T13047] bridge_slave_0: left promiscuous mode [ 579.871778][T13047] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.886241][T13047] bridge_slave_1: left allmulticast mode [ 579.892005][T13047] bridge_slave_1: left promiscuous mode [ 579.914242][T13047] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.939181][T11242] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 579.954478][T11242] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 579.964483][T11242] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 579.974062][T11242] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 579.986132][T12682] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 580.001939][T11242] usb 2-1: USB disconnect, device number 111 [ 580.005670][T12682] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 580.016916][T13047] bond0: (slave bond_slave_0): Releasing backup interface [ 580.043039][T12682] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 580.065639][T13047] bond0: (slave bond_slave_1): Releasing backup interface [ 580.077659][T12682] usb 4-1: USB disconnect, device number 87 [ 580.104625][T12682] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 580.118975][T12682] visor 4-1:1.0: device disconnected [ 580.152763][T13047] team0: Port device team_slave_0 removed [ 580.185039][T13047] team0: Port device team_slave_1 removed [ 580.191660][T13047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.200437][T13047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.211805][T13047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.219787][T13047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.300748][T13050] team0: Port device wg2 added [ 580.306675][T13051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1654'. [ 580.623402][T13063] batman_adv: batadv0: Adding interface: ipvlan2 [ 580.645021][T13063] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.676766][T13063] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 580.745321][ T46] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 580.927582][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.943085][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.978901][ T46] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 581.015484][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.056020][ T46] usb 3-1: config 0 descriptor?? [ 581.250849][ T9343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.298579][T13074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1665'. [ 581.337525][T13076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.401126][T13076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.477406][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.489972][ T9343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.507764][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.517665][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.535172][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.536463][T13060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.555008][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 581.563915][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.580140][T13076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.619721][T13060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.633222][T13076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.710517][ T46] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 581.726040][ T46] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 581.729770][ T9343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.880761][ T9343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.917134][ T46] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 582.217020][T13082] chnl_net:caif_netlink_parms(): no params data found [ 582.286488][ T9343] bridge_slave_1: left allmulticast mode [ 582.302459][ T9343] bridge_slave_1: left promiscuous mode [ 582.312804][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.345543][T12073] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 582.360336][T13094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.382474][ T9343] bridge_slave_0: left allmulticast mode [ 582.384730][T13094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.390888][ T9343] bridge_slave_0: left promiscuous mode [ 582.406297][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.516651][T12073] usb 4-1: Using ep0 maxpacket: 16 [ 582.523585][ T46] cp2112 0003:10C4:EA90.0015: error reading lock byte: -71 [ 582.552434][T12073] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 582.568099][ T46] usb 3-1: USB disconnect, device number 86 [ 582.584727][T12073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 582.614277][T12073] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 582.643729][T12073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.654048][T12073] usb 4-1: Product: syz [ 582.672950][T12073] usb 4-1: Manufacturer: syz [ 582.683171][T12073] usb 4-1: SerialNumber: syz [ 582.709462][T12073] usb 4-1: config 0 descriptor?? [ 582.723394][T12073] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 582.739173][T12073] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 583.211195][T13109] netlink: 'syz.2.1674': attribute type 9 has an invalid length. [ 583.247368][T13109] netlink: 69136 bytes leftover after parsing attributes in process `syz.2.1674'. [ 583.303096][T13109] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 583.366063][T12073] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 583.512479][T13115] ALSA: seq fatal error: cannot create timer (-22) [ 583.553700][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 583.553723][ T29] audit: type=1326 audit(1727919762.102:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 583.602594][ T29] audit: type=1326 audit(1727919762.102:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 583.635221][ T29] audit: type=1326 audit(1727919762.102:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 583.672004][T12073] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 583.678661][ T5236] Bluetooth: hci1: command tx timeout [ 583.746860][ T29] audit: type=1326 audit(1727919762.102:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 583.797402][ T9343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.822193][ T29] audit: type=1326 audit(1727919762.122:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 583.858447][ T9343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.884342][ T9343] bond0 (unregistering): Released all slaves [ 583.900355][ T29] audit: type=1326 audit(1727919762.122:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 583.942645][ T29] audit: type=1326 audit(1727919762.122:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 583.974076][ T29] audit: type=1326 audit(1727919762.122:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 584.078352][ T29] audit: type=1326 audit(1727919762.672:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 584.124047][ T29] audit: type=1326 audit(1727919762.672:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8abd7dff9 code=0x7ffc0000 [ 584.250888][T12073] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 584.258869][T12073] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 584.312646][T13123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1676'. [ 584.446069][T13082] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.453411][T13082] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.500717][T13082] bridge_slave_0: entered allmulticast mode [ 584.525657][T13082] bridge_slave_0: entered promiscuous mode [ 584.656410][T13082] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.667985][T12073] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 584.677081][T12073] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 584.687659][T12073] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 584.702440][T12073] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 584.724416][T12073] usb 4-1: USB disconnect, device number 88 [ 584.743173][T13082] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.831691][T13082] bridge_slave_1: entered allmulticast mode [ 584.886629][T13082] bridge_slave_1: entered promiscuous mode [ 585.046886][ T9343] hsr_slave_0: left promiscuous mode [ 585.084262][ T9343] hsr_slave_1: left promiscuous mode [ 585.094121][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.109770][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.117152][ T46] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 585.132507][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.147415][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.192509][ T9343] veth1_macvtap: left allmulticast mode [ 585.199491][ T9343] veth1_macvtap: left promiscuous mode [ 585.205797][ T9343] veth0_macvtap: left promiscuous mode [ 585.212704][ T9343] veth1_vlan: left promiscuous mode [ 585.218118][ T9343] veth0_vlan: left promiscuous mode [ 585.235039][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 585.285193][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 585.321637][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.356597][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.385039][ T46] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 585.394591][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.407050][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.416262][ T46] usb 5-1: config 0 descriptor?? [ 585.421137][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.443417][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.462702][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 585.484947][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.485147][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.510285][ T9] usb 3-1: config 0 descriptor?? [ 585.581732][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.601731][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.704953][ T5236] Bluetooth: hci1: command tx timeout [ 585.845284][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 585.851361][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 585.873283][ T46] usb 5-1: USB disconnect, device number 118 [ 585.961386][T13151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.972774][T13151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.063962][ T9] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 586.089123][ T9] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 586.273018][ T9] cp2112 0003:10C4:EA90.0016: error requesting version [ 586.311331][ T9343] team0 (unregistering): Port device team_slave_1 removed [ 586.315922][ T9] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -71 [ 586.353103][ T9] usb 3-1: USB disconnect, device number 87 [ 586.414230][ T9343] team0 (unregistering): Port device team_slave_0 removed [ 587.165968][T13082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.251527][T13162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'. [ 587.276395][T13082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.433415][T13082] team0: Port device team_slave_0 added [ 587.457286][T13168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1688'. [ 587.473672][T13082] team0: Port device team_slave_1 added [ 587.630926][T13082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.638858][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.687940][T13082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.733706][T13082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.765485][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.797502][ T5236] Bluetooth: hci1: command tx timeout [ 587.870623][T13082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.965897][T13181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.011103][T13181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.058041][T13082] hsr_slave_0: entered promiscuous mode [ 588.089275][T13082] hsr_slave_1: entered promiscuous mode [ 588.110047][T13082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.141365][T13082] Cannot create hsr debugfs directory [ 588.284952][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 588.350470][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 588.370424][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 588.379393][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 588.393205][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 588.401535][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 588.413841][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 588.417270][ T9343] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.439205][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.450697][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.466337][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 588.475865][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.492431][ T9] usb 3-1: config 0 descriptor?? [ 588.645180][ T5284] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 588.658556][ T9343] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.818154][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.831503][ T9343] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.842135][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.856334][ T5284] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 588.865890][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.886940][ T5284] usb 5-1: config 0 descriptor?? [ 588.898524][T13200] veth1_macvtap: left promiscuous mode [ 588.966656][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.983816][T13202] veth1_macvtap: entered promiscuous mode [ 588.992765][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.005107][T13202] macsec0: entered allmulticast mode [ 589.010553][T13202] veth1_macvtap: entered allmulticast mode [ 589.092965][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 589.105301][ T9343] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.121494][T13200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.126433][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 589.139982][T13200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.158872][ T9] usb 3-1: USB disconnect, device number 88 [ 589.318409][T13194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.385991][T13194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.504591][ T5284] usbhid 5-1:0.0: can't add hid device: -71 [ 589.513679][ T5284] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 589.555640][ T5284] usb 5-1: USB disconnect, device number 119 [ 589.850205][ T9343] bridge_slave_1: left allmulticast mode [ 589.861216][ T9343] bridge_slave_1: left promiscuous mode [ 589.869714][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.875195][ T5236] Bluetooth: hci1: command tx timeout [ 589.891320][ T9343] bridge_slave_0: left allmulticast mode [ 589.901892][ T9343] bridge_slave_0: left promiscuous mode [ 589.909372][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.064975][ T46] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 590.225116][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 590.258855][ T46] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 590.291921][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.312211][ T46] usb 3-1: Product: syz [ 590.322099][ T46] usb 3-1: Manufacturer: syz [ 590.344876][ T46] usb 3-1: SerialNumber: syz [ 590.351924][ T46] usb 3-1: config 0 descriptor?? [ 590.367568][ T46] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 590.485484][ T7827] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 590.515686][ T5236] Bluetooth: hci4: command tx timeout [ 590.586861][ T30] INFO: task kworker/0:5:5289 blocked for more than 143 seconds. [ 590.596711][ T30] Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 590.604540][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 590.617284][ T30] task:kworker/0:5 state:D stack:20144 pid:5289 tgid:5289 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 590.637306][ T30] Workqueue: pm hcd_resume_work [ 590.652115][ T30] Call Trace: [ 590.665227][ T30] [ 590.668336][ T30] __schedule+0x1895/0x4b30 [ 590.672934][ T30] ? schedule+0x90/0x320 [ 590.679320][ T7827] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 590.704908][ T7827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.714965][ T30] ? __pfx___schedule+0x10/0x10 [ 590.716497][ T7827] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 590.720040][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 590.764985][ T30] ? __pfx_lock_release+0x10/0x10 [ 590.770204][ T30] ? kick_pool+0x1bd/0x620 [ 590.774730][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.840102][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 590.846205][ T30] ? schedule+0x90/0x320 [ 590.850589][ T30] schedule+0x14b/0x320 [ 590.875831][ T30] schedule_preempt_disabled+0x13/0x30 [ 590.881487][ T30] __mutex_lock+0x6a7/0xd70 [ 590.887720][ T30] ? __mutex_lock+0x52a/0xd70 [ 590.892521][ T30] ? usb_remote_wakeup+0x23/0x100 [ 590.909980][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 590.925075][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 590.931217][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 590.939074][ T30] ? process_scheduled_works+0x976/0x1850 [ 590.944962][ T30] usb_remote_wakeup+0x23/0x100 [ 590.949929][ T30] process_scheduled_works+0xa63/0x1850 [ 590.965047][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 590.971196][ T30] ? assign_work+0x364/0x3d0 [ 590.991917][ T30] worker_thread+0x870/0xd30 [ 590.997629][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 591.003736][ T30] ? __kthread_parkme+0x169/0x1d0 [ 591.022779][ T30] ? __pfx_worker_thread+0x10/0x10 [ 591.028143][ T30] kthread+0x2f0/0x390 [ 591.032297][ T30] ? __pfx_worker_thread+0x10/0x10 [ 591.050697][ T30] ? __pfx_kthread+0x10/0x10 [ 591.055669][ T30] ret_from_fork+0x4b/0x80 [ 591.060214][ T30] ? __pfx_kthread+0x10/0x10 [ 591.079211][ T30] ret_from_fork_asm+0x1a/0x30 [ 591.084383][ T30] [ 591.087900][ T30] INFO: task syz.0.1156:10392 blocked for more than 143 seconds. [ 591.112698][ T30] Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 591.120757][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.129647][ T30] task:syz.0.1156 state:D stack:27392 pid:10392 tgid:10373 ppid:5252 flags:0x00004004 [ 591.140151][ T30] Call Trace: [ 591.143504][ T30] [ 591.146938][ T30] __schedule+0x1895/0x4b30 [ 591.151561][ T30] ? __pfx___schedule+0x10/0x10 [ 591.157650][ T30] ? __pfx_lock_release+0x10/0x10 [ 591.162804][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 591.168480][ T30] ? schedule+0x90/0x320 [ 591.172838][ T30] schedule+0x14b/0x320 [ 591.177216][ T30] schedule_preempt_disabled+0x13/0x30 [ 591.182881][ T30] __mutex_lock+0x6a7/0xd70 [ 591.187591][ T30] ? __mutex_lock+0x52a/0xd70 [ 591.192352][ T30] ? usbdev_ioctl+0x268/0x6120 [ 591.197337][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 591.203147][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 591.208650][ T30] ? preempt_count_add+0x93/0x190 [ 591.213780][ T30] usbdev_ioctl+0x268/0x6120 [ 591.218945][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 591.224373][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 591.230998][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 591.237732][ T30] ? __kernel_text_address+0xd/0x40 [ 591.243061][ T30] ? unwind_get_return_address+0x4d/0x90 [ 591.249496][ T30] ? __pfx_usbdev_ioctl+0x10/0x10 [ 591.254615][ T30] ? arch_stack_walk+0xfd/0x150 [ 591.260182][ T30] ? stack_trace_save+0x118/0x1d0 [ 591.266692][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 591.272192][ T30] ? stack_depot_save_flags+0x29/0x830 [ 591.281008][ T30] ? kasan_save_track+0x51/0x80 [ 591.293659][ T30] ? kasan_save_track+0x3f/0x80 [ 591.303728][ T30] ? kasan_save_free_info+0x40/0x50 [ 591.325301][ T30] ? __kasan_slab_free+0x59/0x70 [ 591.330469][ T30] ? kfree+0x1a0/0x440 [ 591.334629][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 591.340552][ T30] ? security_file_ioctl+0xc6/0x2a0 [ 591.346034][ T30] ? __se_sys_ioctl+0x47/0x170 [ 591.350931][ T30] ? do_syscall_64+0xf3/0x230 [ 591.356097][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.362295][ T30] ? do_vfs_ioctl+0xf08/0x2e40 [ 591.368007][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 591.373152][ T30] ? mark_lock+0x9a/0x360 [ 591.378083][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 591.383813][ T30] ? __pfx_lock_release+0x10/0x10 [ 591.390419][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 591.396269][ T30] ? kfree+0x1a0/0x440 [ 591.400462][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 591.420285][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 591.435902][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 591.441762][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 591.459766][ T30] ? __fget_files+0x29/0x470 [ 591.464474][ T30] ? __fget_files+0x3f3/0x470 [ 591.475438][ T46] gspca_ov534_9: reg_w failed -110 [ 591.484943][ T30] ? __pfx_usbdev_ioctl+0x10/0x10 [ 591.490042][ T30] __se_sys_ioctl+0xf9/0x170 [ 591.494693][ T30] do_syscall_64+0xf3/0x230 [ 591.508519][ T30] ? clear_bhb_loop+0x35/0x90 [ 591.522562][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.528716][ T30] RIP: 0033:0x7f790dd7dff9 [ 591.533209][ T30] RSP: 002b:00007f790eb71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.541981][ T30] RAX: ffffffffffffffda RBX: 00007f790df36058 RCX: 00007f790dd7dff9 [ 591.550366][ T30] RDX: 0000000000000000 RSI: 0000000000005522 RDI: 0000000000000005 [ 591.559173][ T30] RBP: 00007f790ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 591.567867][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.576017][ T30] R13: 0000000000000001 R14: 00007f790df36058 R15: 00007f790e05fa28 [ 591.584074][ T30] [ 591.587254][ T30] INFO: task syz.3.1163:10406 blocked for more than 144 seconds. [ 591.598885][ T30] Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 591.606665][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.615923][ T30] task:syz.3.1163 state:D stack:27264 pid:10406 tgid:10400 ppid:9986 flags:0x00000004 [ 591.626873][ T30] Call Trace: [ 591.630244][ T30] [ 591.633253][ T30] __schedule+0x1895/0x4b30 [ 591.637966][ T30] ? __pfx___schedule+0x10/0x10 [ 591.642952][ T30] ? __pfx_lock_release+0x10/0x10 [ 591.648160][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 591.653721][ T30] ? schedule+0x90/0x320 [ 591.658157][ T30] schedule+0x14b/0x320 [ 591.662407][ T30] schedule_preempt_disabled+0x13/0x30 [ 591.667998][ T30] __mutex_lock+0x6a7/0xd70 [ 591.672541][ T30] ? __mutex_lock+0x52a/0xd70 [ 591.677343][ T30] ? usbdev_open+0x156/0x770 [ 591.682070][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 591.693674][ T30] ? bus_find_device+0x29b/0x2f0 [ 591.698837][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 591.704193][ T30] ? usbdev_open+0xa8/0x770 [ 591.716116][ T30] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 591.721766][ T30] usbdev_open+0x156/0x770 [ 591.726453][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 591.731449][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 591.736887][ T30] ? apparmor_file_open+0x5a3/0x7b0 [ 591.742148][ T30] chrdev_open+0x521/0x600 [ 591.746754][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 591.752358][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 591.759762][ T30] ? security_file_open+0x513/0x990 [ 591.765424][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 591.770737][ T30] do_dentry_open+0x978/0x1460 [ 591.775779][ T46] gspca_ov534_9: Unknown sensor 0000 [ 591.775857][ T46] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 591.789859][ T30] vfs_open+0x3e/0x330 [ 591.794003][ T30] path_openat+0x2c84/0x3590 [ 591.799694][ T30] ? __pfx_path_openat+0x10/0x10 [ 591.804766][ T30] do_filp_open+0x235/0x490 [ 591.810453][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 591.819765][ T30] ? _raw_spin_unlock+0x28/0x50 [ 591.824699][ T30] ? alloc_fd+0x5a1/0x640 [ 591.829503][ T30] do_sys_openat2+0x13e/0x1d0 [ 591.834258][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 591.839598][ T30] __x64_sys_openat+0x247/0x2a0 [ 591.844724][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 591.850641][ T30] ? exc_page_fault+0x590/0x8c0 [ 591.855642][ T30] ? do_syscall_64+0xb6/0x230 [ 591.860734][ T30] do_syscall_64+0xf3/0x230 [ 591.868172][ T30] ? clear_bhb_loop+0x35/0x90 [ 591.873051][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.879084][ T30] RIP: 0033:0x7fc5cf37c990 [ 591.883556][ T30] RSP: 002b:00007fc5d0112b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 591.892937][ T30] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007fc5cf37c990 [ 591.901143][ T30] RDX: 0000000000101301 RSI: 00007fc5d0112c10 RDI: 00000000ffffff9c [ 591.909291][ T30] RBP: 00007fc5d0112c10 R08: 0000000000000000 R09: 0000000000000000 [ 591.917400][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 591.926872][ T30] R13: 0000000000000000 R14: 00007fc5cf536058 R15: 00007fc5cf65fa28 [ 591.935079][ T30] [ 591.949394][ T30] [ 591.949394][ T30] Showing all locks held in the system: [ 591.967708][ T30] 3 locks held by kworker/0:1/9: [ 591.972710][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 591.985378][ T30] #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 591.996630][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 592.007189][ T30] 3 locks held by kworker/u8:1/12: [ 592.012339][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 592.025504][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 592.052773][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 592.062205][ T30] 1 lock held by khungtaskd/30: [ 592.067417][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 592.077474][ T30] 2 locks held by kworker/u8:3/52: [ 592.082628][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 592.093540][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 592.106066][ T30] 5 locks held by kworker/0:2/1167: [ 592.111316][ T30] #0: ffff88801c29ad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 592.122810][ T30] #1: ffffc90004297d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 592.136287][ T30] #2: ffff888028912190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 592.145346][ T30] #3: ffff888028916510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 592.155581][ T30] #4: ffff888028366468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 592.165690][ T30] 3 locks held by kworker/u8:8/2979: [ 592.171280][ T30] #0: ffff88814bd30148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 592.183096][ T30] #1: ffffc9000a0c7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 592.197191][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 592.206905][ T30] 1 lock held by dhcpcd/4900: [ 592.211616][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 592.221780][ T30] 2 locks held by getty/4992: [ 592.227898][ T30] #0: ffff888031f1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 592.238028][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 592.249009][ T30] 3 locks held by kworker/0:5/5289: [ 592.254244][ T30] #0: ffff88801c299d48 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 592.265292][ T30] #1: ffffc90003fb7d00 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 592.277993][ T30] #2: ffff888028912190 (&dev->mutex){....}-{3:3}, at: usb_remote_wakeup+0x23/0x100 [ 592.288006][ T30] 3 locks held by kworker/0:7/7827: [ 592.293256][ T30] #0: ffff88801c29ad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 592.304840][ T30] #1: ffffc90004467d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 592.317780][ T30] #2: ffff8881447c0190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 592.327695][ T30] 5 locks held by kworker/u8:7/9343: [ 592.334224][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 592.345491][ T30] #1: ffffc90003d97d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 592.356209][ T30] #2: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 592.365891][ T30] #3: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 592.374965][ T30] #4: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 592.386122][ T30] 1 lock held by syz.0.1156/10392: [ 592.391277][ T30] #0: ffff888028912190 (&dev->mutex){....}-{3:3}, at: usbdev_ioctl+0x268/0x6120 [ 592.400691][ T30] 1 lock held by syz.3.1163/10406: [ 592.406006][ T30] #0: ffff888028912190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x770 [ 592.415231][ T30] 1 lock held by syz.2.1529/12307: [ 592.423527][ T30] #0: ffff888028912190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x770 [ 592.436278][ T30] 7 locks held by syz-executor/13082: [ 592.441706][ T30] #0: ffff8880322ca420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 592.450897][ T30] #1: ffff88802fe49c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 592.460795][ T30] #2: ffff8881437ccf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 592.471266][ T30] #3: ffffffff8f56f7c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 592.481733][ T30] #4: ffff88806bf030e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 592.492554][ T30] #5: ffff88806d0a8250 (&devlink->lock_key#29){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 592.502819][ T30] #6: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 592.512469][ T30] 1 lock held by syz-executor/13195: [ 592.517875][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 592.527644][ T30] 1 lock held by syz.2.1697/13226: [ 592.534604][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 592.544273][ T30] 2 locks held by syz.0.1699/13236: [ 592.550959][ T30] #0: ffffffff8f4b91e8 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 592.559914][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x789/0x1cd0 [ 592.568952][ T30] 2 locks held by syz.4.1700/13232: [ 592.574190][ T30] #0: ffff888062bcb6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 592.584680][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 592.585044][ T5236] Bluetooth: hci4: command tx timeout [ 592.593791][ T30] [ 592.605037][ T30] ============================================= [ 592.605037][ T30] [ 592.613554][ T30] NMI backtrace for cpu 0 [ 592.617912][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 592.628439][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 592.638508][ T30] Call Trace: [ 592.641790][ T30] [ 592.644723][ T30] dump_stack_lvl+0x241/0x360 [ 592.649410][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.654610][ T30] ? __pfx__printk+0x10/0x10 [ 592.659231][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 592.664195][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 592.669670][ T30] ? _printk+0xd5/0x120 [ 592.673851][ T30] ? __pfx__printk+0x10/0x10 [ 592.678464][ T30] ? __wake_up_klogd+0xcc/0x110 [ 592.683336][ T30] ? __pfx__printk+0x10/0x10 [ 592.687953][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 592.692999][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 592.699002][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 592.705016][ T30] watchdog+0xff4/0x1040 [ 592.709297][ T30] ? watchdog+0x1ea/0x1040 [ 592.713738][ T30] ? __pfx_watchdog+0x10/0x10 [ 592.718437][ T30] kthread+0x2f0/0x390 [ 592.722526][ T30] ? __pfx_watchdog+0x10/0x10 [ 592.727221][ T30] ? __pfx_kthread+0x10/0x10 [ 592.731829][ T30] ret_from_fork+0x4b/0x80 [ 592.736270][ T30] ? __pfx_kthread+0x10/0x10 [ 592.740883][ T30] ret_from_fork_asm+0x1a/0x30 [ 592.745686][ T30] [ 592.749763][ T30] Sending NMI from CPU 0 to CPUs 1: [ 592.755429][ C1] NMI backtrace for cpu 1 [ 592.755446][ C1] CPU: 1 UID: 0 PID: 3011 Comm: kworker/u8:9 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 592.755469][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 592.755482][ C1] Workqueue: bat_events batadv_nc_worker [ 592.755515][ C1] RIP: 0010:kasan_check_range+0x24/0x290 [ 592.755542][ C1] Code: 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f 82 56 02 00 00 <48> 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb [ 592.755559][ C1] RSP: 0018:ffffc90009ec7820 EFLAGS: 00000012 [ 592.755575][ C1] RAX: 0000000000000001 RBX: 00000000000006c3 RCX: ffffffff817059ec [ 592.755589][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c58d8 [ 592.755603][ C1] RBP: 189f7a1e654a1337 R08: ffffffff942c58e0 R09: 1ffffffff2858b1b [ 592.755617][ C1] R10: dffffc0000000000 R11: fffffbfff2858b1c R12: 0000000000000000 [ 592.755631][ C1] R13: ffff88802f32a8d8 R14: 1ffff11005e6552a R15: ffff88802f32a950 [ 592.755648][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 592.755667][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.755681][ C1] CR2: 00007f5c0e3bcf98 CR3: 000000000e734000 CR4: 00000000003526f0 [ 592.755698][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 592.755710][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 592.755723][ C1] Call Trace: [ 592.755731][ C1] [ 592.755739][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 592.755762][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 592.755794][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 592.755836][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 592.755862][ C1] ? nmi_handle+0x14f/0x5a0 [ 592.755881][ C1] ? nmi_handle+0x2a/0x5a0 [ 592.755901][ C1] ? kasan_check_range+0x24/0x290 [ 592.755923][ C1] ? default_do_nmi+0x63/0x160 [ 592.755949][ C1] ? exc_nmi+0x123/0x1f0 [ 592.755971][ C1] ? end_repeat_nmi+0xf/0x53 [ 592.755992][ C1] ? __lock_acquire+0xf3c/0x2050 [ 592.756020][ C1] ? kasan_check_range+0x24/0x290 [ 592.756043][ C1] ? kasan_check_range+0x24/0x290 [ 592.756066][ C1] ? kasan_check_range+0x24/0x290 [ 592.756092][ C1] [ 592.756099][ C1] [ 592.756107][ C1] __lock_acquire+0xf3c/0x2050 [ 592.756141][ C1] lock_acquire+0x1ed/0x550 [ 592.756168][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 592.756196][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 592.756225][ C1] ? __local_bh_disable_ip+0x187/0x220 [ 592.756252][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 592.756278][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 592.756303][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 592.756328][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 592.756352][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 592.756380][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 592.756407][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 592.756432][ C1] _raw_spin_lock_bh+0x35/0x50 [ 592.756458][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 592.756482][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 592.756511][ C1] batadv_nc_purge_paths+0xe8/0x3b0 [ 592.756542][ C1] batadv_nc_worker+0x328/0x610 [ 592.756566][ C1] ? batadv_nc_worker+0xcb/0x610 [ 592.756589][ C1] ? process_scheduled_works+0x976/0x1850 [ 592.756615][ C1] process_scheduled_works+0xa63/0x1850 [ 592.756653][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 592.756685][ C1] ? assign_work+0x364/0x3d0 [ 592.756711][ C1] worker_thread+0x870/0xd30 [ 592.756740][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 592.756768][ C1] ? __kthread_parkme+0x169/0x1d0 [ 592.756798][ C1] ? __pfx_worker_thread+0x10/0x10 [ 592.756830][ C1] kthread+0x2f0/0x390 [ 592.756848][ C1] ? __pfx_worker_thread+0x10/0x10 [ 592.756874][ C1] ? __pfx_kthread+0x10/0x10 [ 592.756892][ C1] ret_from_fork+0x4b/0x80 [ 592.756918][ C1] ? __pfx_kthread+0x10/0x10 [ 592.756938][ C1] ret_from_fork_asm+0x1a/0x30 [ 592.756972][ C1] [ 592.757728][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 593.155425][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 593.165942][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 593.176036][ T30] Call Trace: [ 593.179338][ T30] [ 593.182389][ T30] dump_stack_lvl+0x241/0x360 [ 593.187113][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.192348][ T30] ? __pfx__printk+0x10/0x10 [ 593.196964][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 593.202975][ T30] ? vscnprintf+0x5d/0x90 [ 593.207332][ T30] panic+0x349/0x880 [ 593.211253][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 593.217441][ T30] ? __pfx_panic+0x10/0x10 [ 593.221888][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 593.227288][ T30] ? __irq_work_queue_local+0x137/0x410 [ 593.232862][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 593.238255][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 593.244429][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 593.250607][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 593.256796][ T30] watchdog+0x1033/0x1040 [ 593.261153][ T30] ? watchdog+0x1ea/0x1040 [ 593.265681][ T30] ? __pfx_watchdog+0x10/0x10 [ 593.270405][ T30] kthread+0x2f0/0x390 [ 593.274488][ T30] ? __pfx_watchdog+0x10/0x10 [ 593.279187][ T30] ? __pfx_kthread+0x10/0x10 [ 593.283799][ T30] ret_from_fork+0x4b/0x80 [ 593.288247][ T30] ? __pfx_kthread+0x10/0x10 [ 593.292853][ T30] ret_from_fork_asm+0x1a/0x30 [ 593.297655][ T30] [ 593.300976][ T30] Kernel Offset: disabled [ 593.305324][ T30] Rebooting in 86400 seconds..