last executing test programs: 14.656728202s ago: executing program 0 (id=3774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) unshare(0x2c020400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0x0, 0x0) 13.069647888s ago: executing program 0 (id=3780): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 9.112337493s ago: executing program 2 (id=3794): r0 = io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0x0, 0x400, 0xfffffffe, 0x248}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.975713979s ago: executing program 0 (id=3795): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000001800)=[@rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @remote, @mcast2, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x4, 0xe, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x18, 0x54, "71ea28af473f2d9b1e52e6fb16d7cd2d17a321b6b8b2a7018959dd5a11580da2c963ce2e0adfa391910eced718f8b3a220834028b88a8f5293b9bfbd137c6fe803bcce07416117150d84bf14d30917fc37ed858a"}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf7, 0xbac, [0x9]}}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x87, 0xe, 0x0, 0xf2, 0x0, [@mcast2, @mcast1, @remote, @mcast2, @empty, @mcast1, @mcast1]}}}, @tclass={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@padn, @ra={0x5, 0x2, 0xd}]}}}, @dstopts={{0x158, 0x29, 0x37, {0x0, 0x27, '\x00', [@generic={0x2, 0xd8, "2643e36b1785875b125a39346cb47490823d0f43653d5824b2ce66c6313092b2d672351681192365913f18d34f2aa5941179ff2c7f302f34b43fdd92552b21ce960cbc968128ba2be5be098cc20dc01ee6b02a87764aa7a1dc5e382785f40d81635fe5aa027d1e00940d3c65c2dc0ece79d641bb2400d72a832a6ab1d047114b2568c53779571f44f9b0869dd91c1fbaf9ee2b54e58c54bb0bc69aa8acc08b1f37e377261ad28b0b559f966c5597c385fcb4fef68e7c8ca093373f1f358df9e2b199dd67c297cb0113a46d16c0bf0e26dd8c0e18c4dd2275"}, @enc_lim={0x4, 0x1, 0xdb}, @generic={0x0, 0x5a, "e60a04df37a74fc72c6f2a751999de0c8117fae0b6ce8431ad66fe5ed9c4292083ccee155ccaf67e134652f071999d91b50294d4998cb5ec3002b4cb32098c9a6e88bcd9a67308cab5bb459129b7e315d93675f40be537529090"}]}}}], 0x340}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000005200010000000000000000001c"], 0x20}}, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x161101, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0xffffffff, {0x2}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x2c}}, 0x0) 7.506154114s ago: executing program 2 (id=3798): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) 7.331469624s ago: executing program 2 (id=3800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x9, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14) 7.177746969s ago: executing program 3 (id=3802): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0xffffffffffff0001, 0x8990, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='projid_map\x00') close(r4) rt_sigaction(0x34, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3}}) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 6.297255915s ago: executing program 2 (id=3803): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x409, 0x0, 0x0, {0x2, 0x2}}, 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x42, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score\x00') lseek(r6, 0xae7e, 0x0) openat$incfs(r4, 0x0, 0x0, 0x4) dup(0xffffffffffffffff) 6.191944664s ago: executing program 1 (id=3804): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x0, 0xe, 0x2, "930f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 6.191115441s ago: executing program 3 (id=3805): io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x0, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc}]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) r4 = epoll_create(0x3) socket$kcm(0x2, 0xa, 0x2) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) socket$packet(0x11, 0x2, 0x300) symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0xe8, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x3, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/211, 0xd3, 0x2, 0x35}, @fda={0x66646185, 0x0, 0x1, 0x29}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}}, @transaction_sg={0x40486311, {0x2002, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@fd, @fda={0x66646185, 0x5, 0x2, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/147, 0x93, 0x1, 0x1f}}, &(0x7f0000000300)={0x0, 0x18, 0x38}}}, @acquire_done, @dead_binder_done, @register_looper, @enter_looper, @free_buffer, @acquire={0x40046305, 0x3}, @acquire, @free_buffer], 0x65, 0x0, &(0x7f00000007c0)="2ccea6d395175f004ae45edeb774f323148641f6b0c3d6f94c7a8855e9fcceff45e8cbcafd4c743b3915d17efb32263e5a5637e6d9fc1846cce99240b793dd7e5fac709f51f499d4681e6c7db6fa243f9ffa0fa00b722d2bd11cd339f6e532d8049c38374d"}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) epoll_pwait2(r4, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 5.407168008s ago: executing program 4 (id=3807): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080), 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x95e1, 0xb9, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.519675713s ago: executing program 1 (id=3808): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80801) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x14, 0x67}}, 0x1c}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$xdp(0x2c, 0x3, 0x0) r3 = signalfd(r2, &(0x7f0000000040)={[0x8]}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140e, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x800) 4.518760623s ago: executing program 4 (id=3809): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) unshare(0x24020400) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) 3.743120676s ago: executing program 1 (id=3810): mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="230902ffffff7ffbe00001000000"], 0x14}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 3.689376626s ago: executing program 3 (id=3811): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@remote}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev}, {@multicast2}, {@private=0xa010121, 0x1ff}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @rr={0x7, 0x7, 0x17, [@local]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.587491728s ago: executing program 2 (id=3812): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3e0, 0xe8, 0x1e8, 0x1e8, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'caif0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "0d0004b6c18b4cee61070d0a5bc61412961817e5774250e48e6229f6112e"}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xff, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac=@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 3.438200988s ago: executing program 2 (id=3813): syz_open_dev$ndb(&(0x7f00000004c0), 0x0, 0x88001) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) userfaultfd(0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x400, 0x2, 0x8092031a}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 2.874390644s ago: executing program 0 (id=3814): symlink(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.634907247s ago: executing program 4 (id=3815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000076c000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x80010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000780)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) 2.119296554s ago: executing program 4 (id=3816): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0xffffffffffff0001, 0x8990, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='projid_map\x00') close(r4) rt_sigaction(0x34, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3}}) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 2.055808168s ago: executing program 3 (id=3817): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) 2.035634836s ago: executing program 0 (id=3818): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) dup3(r0, r3, 0x0) 1.180114571s ago: executing program 4 (id=3819): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x0, 0xe, 0x2, "930f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 962.72431ms ago: executing program 3 (id=3820): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x64, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x300}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}]}}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0014"], 0x34}}, 0xc000) 864.356267ms ago: executing program 3 (id=3821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x2, 0xd4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @rand_addr=0x64010102]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 710.779662ms ago: executing program 0 (id=3822): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000001800)=[@rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @remote, @mcast2, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x4, 0xe, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x18, 0x54, "71ea28af473f2d9b1e52e6fb16d7cd2d17a321b6b8b2a7018959dd5a11580da2c963ce2e0adfa391910eced718f8b3a220834028b88a8f5293b9bfbd137c6fe803bcce07416117150d84bf14d30917fc37ed858a"}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf7, 0xbac, [0x9]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x30, 0x29, 0x36, {0x3c, 0x3, '\x00', [@padn, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xd}]}}}, @dstopts={{0x158, 0x29, 0x37, {0x0, 0x27, '\x00', [@generic={0x2, 0xd8, "2643e36b1785875b125a39346cb47490823d0f43653d5824b2ce66c6313092b2d672351681192365913f18d34f2aa5941179ff2c7f302f34b43fdd92552b21ce960cbc968128ba2be5be098cc20dc01ee6b02a87764aa7a1dc5e382785f40d81635fe5aa027d1e00940d3c65c2dc0ece79d641bb2400d72a832a6ab1d047114b2568c53779571f44f9b0869dd91c1fbaf9ee2b54e58c54bb0bc69aa8acc08b1f37e377261ad28b0b559f966c5597c385fcb4fef68e7c8ca093373f1f358df9e2b199dd67c297cb0113a46d16c0bf0e26dd8c0e18c4dd2275"}, @enc_lim={0x4, 0x1, 0xdb}, @generic={0x0, 0x5a, "e60a04df37a74fc72c6f2a751999de0c8117fae0b6ce8431ad66fe5ed9c4292083ccee155ccaf67e134652f071999d91b50294d4998cb5ec3002b4cb32098c9a6e88bcd9a67308cab5bb459129b7e315d93675f40be537529090"}]}}}], 0x2b0}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000005200010000000000000000001c"], 0x20}}, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x161101, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0xffffffff, {0x2}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x2c}}, 0x0) 523.870136ms ago: executing program 1 (id=3823): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3e0, 0xe8, 0x1e8, 0x1e8, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'caif0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "0d0004b6c18b4cee61070d0a5bc61412961817e5774250e48e6229f6112e"}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xff, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac=@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 427.947019ms ago: executing program 1 (id=3824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000021"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 262.837874ms ago: executing program 4 (id=3825): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) unshare(0x24020400) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) 0s ago: executing program 1 (id=3826): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ice loop2): udf_read_tagged: read failed, block=256, location=256 [ 2637.648948][T22898] syz.2.3383: attempt to access beyond end of device [ 2637.648948][T22898] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2637.662339][T22898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 2637.672363][T22898] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 2637.680326][T22898] UDF-fs: Scanning with blocksize 2048 failed [ 2637.688532][T22898] syz.2.3383: attempt to access beyond end of device [ 2637.688532][T22898] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2637.702694][T22898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 2637.712906][T22898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 2637.722772][T22898] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 2637.730460][T22898] UDF-fs: Scanning with blocksize 4096 failed [ 2637.736663][T22898] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 2638.052314][T21880] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2638.230524][T22908] fuse: Bad value for 'fd' [ 2638.262226][T21880] usb 2-1: Using ep0 maxpacket: 16 [ 2638.297872][T21880] usb 2-1: config 0 has no interfaces? [ 2638.317403][T21880] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2638.403477][T21880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2638.417435][T21880] usb 2-1: Product: syz [ 2638.421747][T21880] usb 2-1: Manufacturer: syz [ 2638.427272][T21880] usb 2-1: SerialNumber: syz [ 2638.443504][T21880] usb 2-1: config 0 descriptor?? [ 2639.078046][T22923] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3389'. [ 2639.939171][T21741] Bluetooth: hci7: command 0x0406 tx timeout [ 2639.945297][T21726] Bluetooth: hci9: command 0x0406 tx timeout [ 2639.952758][T21726] Bluetooth: hci3: command 0x0406 tx timeout [ 2639.958754][T21726] Bluetooth: hci1: command 0x0406 tx timeout [ 2640.376176][T22929] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3391'. [ 2641.031109][T13046] usb 2-1: USB disconnect, device number 68 [ 2641.622234][T13046] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2642.318386][T13046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2642.395642][T13046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2642.444764][T13046] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2642.512421][T13046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2642.571268][T13046] usb 3-1: config 0 descriptor?? [ 2642.994720][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.046388][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.072417][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.080330][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.099654][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.110264][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.117455][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.124540][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.131531][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.150489][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.157521][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.168830][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.175833][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.309812][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.316794][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.323695][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.330507][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.337473][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.346936][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.353880][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.360964][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.367985][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.375508][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.382482][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.389424][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2643.959402][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.162184][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.169029][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.178588][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.185476][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.192351][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.199160][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.206052][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.212954][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.219765][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.227409][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.235007][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.241905][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.248853][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.255705][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.264894][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.271707][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.382310][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.389159][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.396046][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.412218][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.419039][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.441621][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.452606][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.476917][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.514039][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.531095][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.662593][T22968] block nbd2: shutting down sockets [ 2644.687317][T21740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2644.697995][T21740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2644.708775][T21740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2644.717761][T21740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2644.725509][T21740] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2644.732313][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2644.740575][T21740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2645.035049][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.148525][T22976] block nbd2: shutting down sockets [ 2645.150030][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.185192][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.192022][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.292839][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.299682][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.347412][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.411141][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.439181][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.475079][T22970] chnl_net:caif_netlink_parms(): no params data found [ 2645.547056][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.641013][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.659564][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.677718][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.821158][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.887643][T22970] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.901747][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.919308][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.938714][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.953997][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2645.966851][T22970] bridge0: port 1(bridge_slave_0) entered disabled state [ 2645.986878][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.142214][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.149055][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.170759][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.815369][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.870144][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.877300][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.884184][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.891740][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.895221][T22970] bridge_slave_0: entered allmulticast mode [ 2646.899059][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.906074][T22970] bridge_slave_0: entered promiscuous mode [ 2646.911225][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.923809][T21740] Bluetooth: hci4: command tx timeout [ 2646.923966][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.937103][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.943917][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.950675][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.957513][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.964357][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.971147][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.978004][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.984842][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.992447][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2646.999255][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.006600][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.013478][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.020281][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.027183][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.034358][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.041158][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.043464][T22993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3408'. [ 2647.048262][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.063937][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.070739][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.076745][T22970] bridge0: port 2(bridge_slave_1) entered blocking state [ 2647.077674][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.095238][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.102050][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.109073][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.115931][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.122812][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.125582][T22970] bridge0: port 2(bridge_slave_1) entered disabled state [ 2647.129587][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.129619][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.150886][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.157766][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.164647][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.171457][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.174723][T22970] bridge_slave_1: entered allmulticast mode [ 2647.178312][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.190952][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.198616][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.206198][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.213339][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.220139][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.227105][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.234258][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.236457][T22970] bridge_slave_1: entered promiscuous mode [ 2647.241033][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x1 [ 2647.254048][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.260853][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.268461][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.275333][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.282201][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x4 [ 2647.289069][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.296169][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.342365][T16034] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2647.506415][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.513351][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.520148][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.526994][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.533856][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.541255][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.548127][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.554976][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.658517][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.665649][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.672716][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.679696][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.686744][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.693986][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.700984][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.747837][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.754933][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.761922][T13046] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 2647.768918][T13046] sony 0003:054C:024B.0017: unexpected long global item [ 2647.781007][T13046] sony 0003:054C:024B.0017: parse failed [ 2647.787288][T13046] sony 0003:054C:024B.0017: probe with driver sony failed with error -22 [ 2648.185546][T16034] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 2648.194020][T16034] usb 5-1: config 0 has no interface number 0 [ 2648.200400][T16034] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 2648.240132][T13046] usb 3-1: USB disconnect, device number 77 [ 2648.255597][T16034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.277174][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 2648.287160][T23003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3411'. [ 2648.300727][T23003] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 2648.302916][T16034] usb 5-1: config 0 descriptor?? [ 2648.467492][T22970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2648.483610][T22970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2649.516768][T21740] Bluetooth: hci4: command tx timeout [ 2650.673035][T22970] team0: Port device team_slave_0 added [ 2650.699503][T22970] team0: Port device team_slave_1 added [ 2650.717875][T16034] usb 5-1: string descriptor 0 read error: -71 [ 2650.745668][T16034] ath6kl: Failed to submit usb control message: -71 [ 2650.776351][T16034] ath6kl: unable to send the bmi data to the device: -71 [ 2650.790109][T22970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2650.807319][T16034] ath6kl: Unable to send get target info: -71 [ 2650.820823][T22970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2650.860802][T16034] ath6kl: Failed to init ath6kl core: -71 [ 2650.885332][T16034] ath6kl_usb 5-1:0.143: probe with driver ath6kl_usb failed with error -71 [ 2650.936592][T16034] usb 5-1: USB disconnect, device number 89 [ 2650.950106][T22970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2650.993796][T22970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2651.011933][T22970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2651.076885][T22970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2651.155779][T23022] block nbd4: shutting down sockets [ 2651.166255][T22970] hsr_slave_0: entered promiscuous mode [ 2651.196288][T22970] hsr_slave_1: entered promiscuous mode [ 2651.237325][T22970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2651.276024][T22970] Cannot create hsr debugfs directory [ 2651.532485][T21740] Bluetooth: hci4: command tx timeout [ 2652.164566][T12687] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2652.409578][T12687] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2652.616544][T12687] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2652.874609][T23038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3420'. [ 2653.164540][T12687] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.216582][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2653.222996][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.613836][T21740] Bluetooth: hci4: command tx timeout [ 2653.689184][T12687] bridge_slave_1: left allmulticast mode [ 2653.728239][T12687] bridge_slave_1: left promiscuous mode [ 2653.751264][T12687] bridge0: port 2(bridge_slave_1) entered disabled state [ 2653.787943][T12687] bridge_slave_0: left allmulticast mode [ 2653.863099][T23054] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3425'. [ 2654.589643][T12687] bridge_slave_0: left promiscuous mode [ 2654.609518][T12687] bridge0: port 1(bridge_slave_0) entered disabled state [ 2655.733137][ T5269] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2655.769900][T12687] ip6gretap0 (unregistering): left allmulticast mode [ 2655.995232][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2656.010933][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2656.028567][ T5269] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2656.065856][ T5269] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2656.078122][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2656.135232][ T5269] usb 4-1: config 0 descriptor?? [ 2656.778745][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.830046][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.862694][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.879258][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.912892][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.929724][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.941620][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.949871][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.958757][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.966948][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.981761][ T5269] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 2656.993430][ T5269] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 2657.100238][T23080] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3431'. [ 2657.744378][ T5269] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2657.787067][ T5269] usb 4-1: USB disconnect, device number 91 [ 2658.288313][T12687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2658.379499][T12687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2658.519823][T12687] bond0 (unregistering): Released all slaves [ 2658.571771][T23073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3423'. [ 2658.710181][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3432'. [ 2659.415333][T12687] hsr_slave_0: left promiscuous mode [ 2659.421349][T12687] hsr_slave_1: left promiscuous mode [ 2659.450466][T12687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2659.492714][T12687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2659.516150][T12687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2659.548922][T12687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2659.608377][T12687] veth1_macvtap: left promiscuous mode [ 2659.620512][T12687] veth0_macvtap: left promiscuous mode [ 2659.638526][T12687] veth1_vlan: left promiscuous mode [ 2659.704329][T12687] veth0_vlan: left promiscuous mode [ 2662.212510][ T5269] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2662.439469][ T5269] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2662.449719][ T5269] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2662.469781][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2662.511246][ T5269] usb 5-1: config 0 descriptor?? [ 2663.580286][ T5269] pwc: Askey VC010 type 2 USB webcam detected. [ 2663.831514][ T5269] pwc: send_video_command error -71 [ 2663.843449][ T5269] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2663.859516][ T5269] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2663.893504][ T5269] usb 5-1: USB disconnect, device number 90 [ 2665.115375][T12687] team0 (unregistering): Port device team_slave_1 removed [ 2665.345621][T12687] team0 (unregistering): Port device team_slave_0 removed [ 2665.629942][T23141] overlayfs: failed to resolve './file1': -2 [ 2669.196248][T22970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2669.245545][T22970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2669.277153][T22970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2669.899302][T22970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2670.313885][T22970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2670.345286][T22970] 8021q: adding VLAN 0 to HW filter on device team0 [ 2670.401439][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 2670.408563][ T8154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2670.423361][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 2670.430500][ T8154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2670.475391][T22970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2670.489503][T22970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2671.677244][T22970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2671.825746][T22970] veth0_vlan: entered promiscuous mode [ 2672.001502][T22970] veth1_vlan: entered promiscuous mode [ 2672.030355][T22970] veth0_macvtap: entered promiscuous mode [ 2672.326098][T23193] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3463'. [ 2672.348229][T22970] veth1_macvtap: entered promiscuous mode [ 2674.971664][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2675.904819][T23205] bio_check_eod: 2 callbacks suppressed [ 2675.904838][T23205] syz.3.3466: attempt to access beyond end of device [ 2675.904838][T23205] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2675.924358][T23205] syz.3.3466: attempt to access beyond end of device [ 2675.924358][T23205] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2675.937910][T23205] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 2675.948444][T23205] syz.3.3466: attempt to access beyond end of device [ 2675.948444][T23205] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2675.961679][T23205] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 2675.971333][T23205] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2675.979080][T23205] UDF-fs: Scanning with blocksize 512 failed [ 2675.987930][T23205] syz.3.3466: attempt to access beyond end of device [ 2675.987930][T23205] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2676.001226][T23205] syz.3.3466: attempt to access beyond end of device [ 2676.001226][T23205] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2676.014805][T23205] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 2676.024510][T23205] syz.3.3466: attempt to access beyond end of device [ 2676.024510][T23205] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2676.037582][T23205] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 2676.047143][T23205] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2676.054798][T23205] UDF-fs: Scanning with blocksize 1024 failed [ 2676.061133][T23205] syz.3.3466: attempt to access beyond end of device [ 2676.061133][T23205] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2676.074143][T23205] syz.3.3466: attempt to access beyond end of device [ 2676.074143][T23205] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2676.087200][T23205] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 2676.096925][T23205] syz.3.3466: attempt to access beyond end of device [ 2676.096925][T23205] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2676.109997][T23205] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 2676.119557][T23205] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2676.132740][T23205] UDF-fs: Scanning with blocksize 2048 failed [ 2676.139040][T23205] syz.3.3466: attempt to access beyond end of device [ 2676.139040][T23205] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2676.152025][T23205] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 2676.161684][T23205] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 2676.171254][T23205] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2676.179200][T23205] UDF-fs: Scanning with blocksize 4096 failed [ 2676.185287][T23205] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 2676.347691][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.374355][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2676.391378][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.420526][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2676.436707][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.452611][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2676.469676][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.481860][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2676.514070][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.641384][T22970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2676.655084][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2676.673888][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.683823][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2676.694921][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.702316][T21880] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2676.705215][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2676.722923][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.733059][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2676.743861][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.753776][T22970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2676.764258][T22970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2676.775459][T22970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2676.789122][T22970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.798052][T22970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.806888][T22970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.815677][T22970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.873485][T21880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2676.907054][T21880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2676.921340][T21880] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2676.968211][T21880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2677.000991][T21880] usb 3-1: config 0 descriptor?? [ 2677.158019][ T8154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2677.194278][ T8154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2677.277596][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2677.364221][T23217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'. [ 2677.395914][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2677.421924][T21880] sony 0003:054C:024B.0019: unexpected long global item [ 2677.434030][T21880] sony 0003:054C:024B.0019: parse failed [ 2677.473250][T21880] sony 0003:054C:024B.0019: probe with driver sony failed with error -22 [ 2677.743947][T21880] usb 3-1: USB disconnect, device number 78 [ 2678.063126][ T5270] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2678.324584][ T5270] usb 1-1: Using ep0 maxpacket: 16 [ 2678.337029][ T5270] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2679.066377][ T5270] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2679.208498][ T5270] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2679.230425][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2679.258811][ T5270] usb 1-1: Product: syz [ 2679.266487][ T5270] usb 1-1: Manufacturer: syz [ 2679.278284][ T5270] usb 1-1: SerialNumber: syz [ 2679.299977][ T5270] usb 1-1: config 0 descriptor?? [ 2680.408993][T23243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3475'. [ 2681.027784][T13046] usb 1-1: USB disconnect, device number 99 [ 2681.539287][T23258] netlink: 1252 bytes leftover after parsing attributes in process `syz.2.3478'. [ 2683.035072][T23277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 2684.388100][T23291] fuse: Bad value for 'fd' [ 2684.596497][T23293] syzkaller0: entered promiscuous mode [ 2684.602026][T23293] syzkaller0: entered allmulticast mode [ 2684.775417][T23300] bio_check_eod: 2 callbacks suppressed [ 2684.775435][T23300] syz.0.3489: attempt to access beyond end of device [ 2684.775435][T23300] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2684.798063][T23300] syz.0.3489: attempt to access beyond end of device [ 2684.798063][T23300] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2684.811296][T23300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2684.821885][T23300] syz.0.3489: attempt to access beyond end of device [ 2684.821885][T23300] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2684.835274][T23300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2684.844951][T23300] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2684.852677][T23300] UDF-fs: Scanning with blocksize 512 failed [ 2684.861550][T23300] syz.0.3489: attempt to access beyond end of device [ 2684.861550][T23300] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2684.875377][T23300] syz.0.3489: attempt to access beyond end of device [ 2684.875377][T23300] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2684.888564][T23300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2684.899006][T23300] syz.0.3489: attempt to access beyond end of device [ 2684.899006][T23300] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2684.912443][T23300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2684.922231][T23300] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2684.929932][T23300] UDF-fs: Scanning with blocksize 1024 failed [ 2684.938205][T23300] syz.0.3489: attempt to access beyond end of device [ 2684.938205][T23300] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2684.951784][T23300] syz.0.3489: attempt to access beyond end of device [ 2684.951784][T23300] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2684.965125][T23300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2684.975513][T23300] syz.0.3489: attempt to access beyond end of device [ 2684.975513][T23300] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2684.988838][T23300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2684.998511][T23300] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2685.006380][T23300] UDF-fs: Scanning with blocksize 2048 failed [ 2685.014354][T23300] syz.0.3489: attempt to access beyond end of device [ 2685.014354][T23300] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2685.028192][T23300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2685.038546][T23300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2685.048188][T23300] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2685.055921][T23300] UDF-fs: Scanning with blocksize 4096 failed [ 2685.062046][T23300] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 2686.528950][T23310] netlink: 1252 bytes leftover after parsing attributes in process `syz.3.3492'. [ 2689.351639][T23323] random: crng reseeded on system resumption [ 2691.452552][T23344] netlink: 'syz.4.3503': attribute type 72 has an invalid length. [ 2692.262888][T21712] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2692.434133][T21712] usb 4-1: Using ep0 maxpacket: 16 [ 2692.475522][T21712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2692.493675][T21712] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2692.540824][T21712] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2692.555674][T21712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2692.590423][T21712] usb 4-1: Product: syz [ 2692.596604][T21712] usb 4-1: Manufacturer: syz [ 2692.601945][T21712] usb 4-1: SerialNumber: syz [ 2692.627360][T21712] usb 4-1: config 0 descriptor?? [ 2692.722871][T23359] Illegal XDP return value 4294967274 on prog (id 818) dev N/A, expect packet loss! [ 2692.799353][T21732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2692.815603][T21732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2692.847648][T21732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2692.868007][T21732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2692.876503][T21732] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2692.910823][T21732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2693.899034][T21880] usb 4-1: USB disconnect, device number 92 [ 2695.040222][T23361] chnl_net:caif_netlink_parms(): no params data found [ 2695.063913][T21732] Bluetooth: hci1: command tx timeout [ 2695.187881][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 2695.207066][T23380] macvtap2: entered promiscuous mode [ 2695.213295][T23380] macvtap2: entered allmulticast mode [ 2695.231019][T23361] bridge0: port 1(bridge_slave_0) entered blocking state [ 2695.241201][T23361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.249917][T23361] bridge_slave_0: entered allmulticast mode [ 2695.259681][T23361] bridge_slave_0: entered promiscuous mode [ 2695.267551][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 2695.312536][T23361] bridge0: port 2(bridge_slave_1) entered blocking state [ 2695.323586][T23361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2695.339710][T23361] bridge_slave_1: entered allmulticast mode [ 2695.351503][T23361] bridge_slave_1: entered promiscuous mode [ 2695.357457][T21880] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2695.430860][T23361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2695.464256][T23361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2695.492267][T21880] usb 2-1: device descriptor read/64, error -71 [ 2695.558362][T23361] team0: Port device team_slave_0 added [ 2695.568805][T23361] team0: Port device team_slave_1 added [ 2695.594674][T23361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2695.622032][T23361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2695.693021][T23361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2695.733275][T21880] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2695.741369][T23361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2695.764207][T23361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2695.808517][T23361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2695.850679][T23361] hsr_slave_0: entered promiscuous mode [ 2695.858234][T23361] hsr_slave_1: entered promiscuous mode [ 2695.976353][T21880] usb 2-1: device descriptor read/64, error -71 [ 2696.062350][T23361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2696.069955][T23361] Cannot create hsr debugfs directory [ 2696.072433][T23396] block nbd4: server does not support multiple connections per device. [ 2696.108060][T23396] block nbd4: shutting down sockets [ 2696.111425][T21880] usb usb2-port1: attempt power cycle [ 2696.464370][T21880] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2696.502578][T21880] usb 2-1: device descriptor read/8, error -71 [ 2696.574396][T23361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2696.850891][T21880] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2696.882613][T21880] usb 2-1: device descriptor read/8, error -71 [ 2696.890397][T23404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3519'. [ 2696.911699][T23361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2696.965969][T23361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2696.992440][T21880] usb usb2-port1: unable to enumerate USB device [ 2697.075349][T23361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2697.132476][T21732] Bluetooth: hci1: command tx timeout [ 2697.360350][T23361] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2697.389768][T23361] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2697.399505][T23361] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2697.408039][T23361] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2697.517912][T23361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2697.855721][T23361] 8021q: adding VLAN 0 to HW filter on device team0 [ 2698.267936][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 2698.275083][ T8154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2698.339121][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 2698.346275][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2698.417544][T23361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2698.435656][T23361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2699.078742][T23361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2699.158650][T23361] veth0_vlan: entered promiscuous mode [ 2699.222535][T21732] Bluetooth: hci1: command tx timeout [ 2699.243631][T23361] veth1_vlan: entered promiscuous mode [ 2699.378704][T23361] veth0_macvtap: entered promiscuous mode [ 2699.408017][T23361] veth1_macvtap: entered promiscuous mode [ 2699.466453][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2699.521732][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.534601][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2699.545443][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.555716][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2699.566854][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.576960][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2699.587966][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.619205][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2699.646700][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.667056][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2699.693357][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.717246][T23361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2699.742773][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2699.784113][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.810782][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2699.825549][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.836991][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2699.848069][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.858556][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2699.898672][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2699.946750][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2700.015520][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2700.138366][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2700.166114][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2700.179409][T23361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2700.200282][T23361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.281181][T23361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.330578][T23361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.355364][T23361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.650208][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2700.705176][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2700.761675][ T5650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2700.770794][ T5650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2700.812577][T23436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3527'. [ 2700.852801][T18227] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2701.292635][T21732] Bluetooth: hci1: command tx timeout [ 2701.832794][T18227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2701.866415][T18227] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2701.891620][T18227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2701.935965][T18227] usb 5-1: config 0 descriptor?? [ 2702.231205][T18227] pwc: Askey VC010 type 2 USB webcam detected. [ 2702.394082][T18227] pwc: send_video_command error -71 [ 2702.457454][T18227] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2702.544099][T18227] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2702.584286][T18227] usb 5-1: USB disconnect, device number 92 [ 2702.584547][T23450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3530'. [ 2703.125464][T18227] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2703.812481][T21880] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2703.942379][T21880] usb 2-1: device descriptor read/64, error -71 [ 2703.980407][T23471] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2704.183566][T21880] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2704.202647][T23475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3539'. [ 2704.322239][T21880] usb 2-1: device descriptor read/64, error -71 [ 2704.780390][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2704.802488][T21880] usb usb2-port1: attempt power cycle [ 2704.811659][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2704.866097][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2704.882376][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2704.916936][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2704.948795][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2704.973822][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.004472][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.022318][ T5270] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2705.042286][ T5304] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2705.054459][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.076649][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.084153][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.091769][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.099454][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.106888][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.114504][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.122337][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.129713][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.137515][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.145054][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.152653][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.160259][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.168133][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.175638][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.183332][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.191351][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.199219][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.209773][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.219486][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.227078][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.239826][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.253148][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.261814][T18603] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2705.281514][T18603] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2705.352264][T21880] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2705.376356][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2705.389301][T21880] usb 2-1: device descriptor read/8, error -71 [ 2705.443183][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2705.461159][ T5304] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2705.470478][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2705.492810][ T5270] usb 1-1: Using ep0 maxpacket: 8 [ 2705.504135][ T5304] usb 4-1: config 0 descriptor?? [ 2705.543701][ T5270] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=46.d9 [ 2705.552915][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2705.569353][ T5270] usb 1-1: config 0 descriptor?? [ 2705.632288][T21880] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2705.653150][T21880] usb 2-1: device descriptor read/8, error -71 [ 2705.762565][T21880] usb usb2-port1: unable to enumerate USB device [ 2705.883221][ T5270] usb 1-1: USB disconnect, device number 100 [ 2705.938117][ T5304] usbhid 4-1:0.0: can't add hid device: -71 [ 2705.944203][ T5304] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2705.994753][ T5304] usb 4-1: USB disconnect, device number 93 [ 2706.230095][T23487] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3542'. [ 2707.132795][ T5304] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2707.277812][T23504] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3547'. [ 2707.751834][ T5304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2707.781898][ T5304] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2707.828221][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2708.007376][ T5304] usb 5-1: config 0 descriptor?? [ 2708.117861][ T5304] pwc: Askey VC010 type 2 USB webcam detected. [ 2708.338202][ T5304] pwc: send_video_command error -71 [ 2708.349956][ T5304] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2708.389754][ T5304] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2708.583866][ T5304] usb 5-1: USB disconnect, device number 94 [ 2709.183991][ T5304] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2709.514747][ T5304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2709.525241][ T5304] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2709.539555][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2709.556381][ T5304] usb 5-1: config 0 descriptor?? [ 2709.575960][ T5304] pwc: Askey VC010 type 2 USB webcam detected. [ 2709.992392][ T5269] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2710.062603][ T5304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2710.072780][ T5304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2710.080151][ T5304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2710.087413][ T5304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2710.112928][ T5304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2710.121876][ T5304] pwc: recv_control_msg error -32 req 04 val 1400 [ 2710.132820][ T5269] usb 2-1: device descriptor read/64, error -71 [ 2710.154469][ T5304] pwc: recv_control_msg error -32 req 02 val 2000 [ 2710.183091][ T5304] pwc: recv_control_msg error -32 req 02 val 2100 [ 2710.233013][ T5304] pwc: recv_control_msg error -32 req 04 val 1500 [ 2710.258635][T23529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3554'. [ 2710.373584][ T5269] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2710.432398][T13046] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2710.491788][ T5304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2710.500570][ T5304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2710.537137][ T5269] usb 2-1: device descriptor read/64, error -71 [ 2710.550853][ T5304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2710.560961][ T5304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2710.573843][ T5304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2710.585664][ T5304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2710.611353][ T5304] pwc: Registered as video71. [ 2710.620888][ T5304] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 2710.641937][ T5304] usb 5-1: USB disconnect, device number 95 [ 2710.654348][T13046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2710.662618][ T5269] usb usb2-port1: attempt power cycle [ 2710.722067][T13046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2710.732414][T13046] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2710.741486][T13046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2710.756134][T13046] usb 4-1: config 0 descriptor?? [ 2711.034979][ T5269] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2711.113275][ T5269] usb 2-1: device descriptor read/8, error -71 [ 2711.182075][T13046] usbhid 4-1:0.0: can't add hid device: -71 [ 2711.188200][T13046] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2711.219389][T13046] usb 4-1: USB disconnect, device number 94 [ 2711.678440][ T5269] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2711.702941][ T5269] usb 2-1: device descriptor read/8, error -71 [ 2711.812571][ T5269] usb usb2-port1: unable to enumerate USB device [ 2712.737009][ T2404] block nbd2: Possible stuck request ffff88802509c000: control (flush@18446744073709551104,0B). Runtime 30 seconds [ 2713.040906][T23555] fuse: Bad value for 'fd' [ 2713.661450][T23557] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2714.036682][T23562] syzkaller0: entered promiscuous mode [ 2714.050426][T23562] syzkaller0: entered allmulticast mode [ 2714.258321][T23567] syzkaller0: entered promiscuous mode [ 2714.309158][T23567] syzkaller0: entered allmulticast mode [ 2714.657817][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2714.664259][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2715.850057][ T5304] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2716.112330][ T5304] usb 3-1: device descriptor read/64, error -71 [ 2716.352272][ T5304] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2716.522358][ T5304] usb 3-1: device descriptor read/64, error -71 [ 2716.683119][ T5304] usb usb3-port1: attempt power cycle [ 2716.732671][T21740] Bluetooth: hci0: command 0x0406 tx timeout [ 2717.024243][ T5304] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2717.042886][ T5269] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2717.092803][ T5304] usb 3-1: device descriptor read/8, error -71 [ 2717.237910][ T5269] usb 5-1: Using ep0 maxpacket: 8 [ 2717.265032][ T5269] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2717.305766][ T5269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2717.322298][ T5269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2717.333616][ T5269] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2717.346852][ T5269] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2717.356287][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.364737][ T5304] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2717.392957][ T5304] usb 3-1: device descriptor read/8, error -71 [ 2717.502905][ T5304] usb usb3-port1: unable to enumerate USB device [ 2717.601860][ T5269] usb 5-1: GET_CAPABILITIES returned 0 [ 2717.657260][ T5269] usbtmc 5-1:16.0: can't read capabilities [ 2717.817551][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2718.822256][T21732] Bluetooth: hci3: command 0x0406 tx timeout [ 2718.843976][ T5269] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2719.002207][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 2719.053014][ T5269] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2719.062848][ T5269] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2719.072707][ T5269] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2719.082810][ T5269] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2719.095836][ T5269] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2719.104891][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.390223][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2719.759920][T13046] usb 5-1: USB disconnect, device number 96 [ 2720.579763][T21732] Bluetooth: hci4: command tx timeout [ 2721.445301][ T5269] usb 1-1: usb_control_msg returned -71 [ 2721.450914][ T5269] usbtmc 1-1:16.0: can't read capabilities [ 2721.459603][ T5269] usb 1-1: USB disconnect, device number 101 [ 2725.116811][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.144026][T21740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2725.153728][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.165092][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.184234][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.191619][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.212372][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.226737][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.242184][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.249608][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.272210][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.279635][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.312445][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.319828][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.342394][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.349776][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.372370][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.379788][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.402212][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.409586][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.432284][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.439675][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.462264][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.470006][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.492189][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.499613][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.522180][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.529554][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.552204][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.559581][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.582250][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.589633][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.612276][ T5269] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2725.656477][ T5269] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2725.732441][T21741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2725.741055][T21741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2725.799202][T21741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2725.807007][T21741] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2725.865038][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2725.900273][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2725.933614][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2725.952310][T21880] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2725.997476][T21741] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2726.007506][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2726.117294][T21880] usb 1-1: Using ep0 maxpacket: 8 [ 2726.133878][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2726.141573][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2726.173929][T21880] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=46.d9 [ 2726.183225][T21880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2726.192850][T21880] usb 1-1: config 0 descriptor?? [ 2726.481659][T13046] usb 1-1: USB disconnect, device number 102 [ 2728.173033][T21740] Bluetooth: hci5: command tx timeout [ 2728.252461][T21740] Bluetooth: hci6: command tx timeout [ 2730.252408][T21740] Bluetooth: hci5: command tx timeout [ 2730.332318][T21740] Bluetooth: hci6: command tx timeout [ 2730.523046][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2730.543350][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2730.554376][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2730.580339][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2730.603654][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2730.616251][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2730.638056][T23654] syzkaller0: entered promiscuous mode [ 2730.671360][T23654] syzkaller0: entered allmulticast mode [ 2730.805547][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'. [ 2730.814549][T23668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3591'. [ 2730.825467][T23668] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 2732.334848][T21740] Bluetooth: hci5: command tx timeout [ 2732.413029][T21740] Bluetooth: hci6: command tx timeout [ 2732.735525][T21740] Bluetooth: hci7: command tx timeout [ 2733.706619][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.423642][T21740] Bluetooth: hci5: command tx timeout [ 2734.492537][T21740] Bluetooth: hci6: command tx timeout [ 2734.672781][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.812426][T21740] Bluetooth: hci7: command tx timeout [ 2734.858820][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2735.069008][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2735.135422][T23640] chnl_net:caif_netlink_parms(): no params data found [ 2735.335877][T23637] chnl_net:caif_netlink_parms(): no params data found [ 2735.489220][ T35] bridge_slave_1: left allmulticast mode [ 2735.501457][ T35] bridge_slave_1: left promiscuous mode [ 2735.564222][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 2735.611044][ T35] bridge_slave_0: left allmulticast mode [ 2735.624514][ T35] bridge_slave_0: left promiscuous mode [ 2735.636918][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2736.599170][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2736.630177][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2736.679161][ T35] bond0 (unregistering): Released all slaves [ 2736.892515][T21740] Bluetooth: hci7: command tx timeout [ 2736.915754][T23640] bridge0: port 1(bridge_slave_0) entered blocking state [ 2736.952432][T23640] bridge0: port 1(bridge_slave_0) entered disabled state [ 2736.960073][T23640] bridge_slave_0: entered allmulticast mode [ 2736.967434][T23640] bridge_slave_0: entered promiscuous mode [ 2737.059742][T23671] chnl_net:caif_netlink_parms(): no params data found [ 2737.147174][T23712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'. [ 2737.169297][T23640] bridge0: port 2(bridge_slave_1) entered blocking state [ 2737.187714][T23640] bridge0: port 2(bridge_slave_1) entered disabled state [ 2737.204954][T23640] bridge_slave_1: entered allmulticast mode [ 2737.217964][T23640] bridge_slave_1: entered promiscuous mode [ 2737.471275][T23637] bridge0: port 1(bridge_slave_0) entered blocking state [ 2738.414084][T23637] bridge0: port 1(bridge_slave_0) entered disabled state [ 2738.421375][T23637] bridge_slave_0: entered allmulticast mode [ 2738.429380][T23637] bridge_slave_0: entered promiscuous mode [ 2738.464760][T23637] bridge0: port 2(bridge_slave_1) entered blocking state [ 2738.484239][T23637] bridge0: port 2(bridge_slave_1) entered disabled state [ 2738.491453][T23637] bridge_slave_1: entered allmulticast mode [ 2738.523600][T23637] bridge_slave_1: entered promiscuous mode [ 2738.749233][T23640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2738.908386][ T35] hsr_slave_0: left promiscuous mode [ 2738.914529][ T35] hsr_slave_1: left promiscuous mode [ 2738.921875][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2738.933236][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2738.940985][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2738.949936][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2738.969795][ T35] veth1_macvtap: left promiscuous mode [ 2738.976108][T21740] Bluetooth: hci7: command tx timeout [ 2738.981705][ T35] veth0_macvtap: left promiscuous mode [ 2738.989340][ T35] veth1_vlan: left promiscuous mode [ 2738.994812][ T35] veth0_vlan: left promiscuous mode [ 2740.857735][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2740.958192][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2741.998473][T23640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2742.061474][T23637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2742.119088][T23637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2742.281528][T23671] bridge0: port 1(bridge_slave_0) entered blocking state [ 2742.309158][T23671] bridge0: port 1(bridge_slave_0) entered disabled state [ 2742.353615][T23671] bridge_slave_0: entered allmulticast mode [ 2742.360683][T23671] bridge_slave_0: entered promiscuous mode [ 2742.421512][T23640] team0: Port device team_slave_0 added [ 2742.502030][T23637] team0: Port device team_slave_0 added [ 2742.517960][T23671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2742.549134][T23671] bridge0: port 2(bridge_slave_1) entered disabled state [ 2742.581753][T23671] bridge_slave_1: entered allmulticast mode [ 2742.611870][T23671] bridge_slave_1: entered promiscuous mode [ 2742.629282][T23640] team0: Port device team_slave_1 added [ 2742.649820][T23637] team0: Port device team_slave_1 added [ 2742.780433][T23640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2742.801652][T23640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2742.835838][ T2404] block nbd2: Possible stuck request ffff88802509c000: control (flush@18446744073709551104,0B). Runtime 60 seconds [ 2742.879371][T23640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2742.904001][T23640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2742.910945][T23640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2742.952444][T23640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2742.965285][T23637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2742.972684][T23637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2742.999815][T23637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2743.014843][T23637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2743.023483][T23637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2743.049748][T23637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2743.070576][T23671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2743.084677][T23671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2743.153405][T23640] hsr_slave_0: entered promiscuous mode [ 2743.172059][T23640] hsr_slave_1: entered promiscuous mode [ 2743.231906][T23640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2743.261343][T23640] Cannot create hsr debugfs directory [ 2743.431768][T23671] team0: Port device team_slave_0 added [ 2743.640236][T23671] team0: Port device team_slave_1 added [ 2743.698652][T23637] hsr_slave_0: entered promiscuous mode [ 2743.708458][T23637] hsr_slave_1: entered promiscuous mode [ 2743.722914][T23637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2743.742503][T23637] Cannot create hsr debugfs directory [ 2743.807714][T23671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2743.822816][T23671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2743.856588][T23671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2743.948769][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2743.978704][T23671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2743.985947][T23671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2744.018350][T23671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2744.141279][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2744.168083][T23671] hsr_slave_0: entered promiscuous mode [ 2744.174987][T23671] hsr_slave_1: entered promiscuous mode [ 2744.181262][T23671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2744.189714][T23671] Cannot create hsr debugfs directory [ 2744.264295][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2744.481416][T23640] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2744.620321][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2745.541123][T23640] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2745.759699][T23640] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2745.876364][T23640] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2746.012489][T13046] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2746.092922][ T35] bridge_slave_1: left allmulticast mode [ 2746.101581][ T35] bridge_slave_1: left promiscuous mode [ 2746.127094][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 2746.152207][ T35] bridge_slave_0: left allmulticast mode [ 2746.158157][ T35] bridge_slave_0: left promiscuous mode [ 2746.172944][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2746.197829][ T35] bridge_slave_1: left allmulticast mode [ 2746.213455][ T35] bridge_slave_1: left promiscuous mode [ 2746.219754][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 2746.251972][ T35] bridge_slave_0: left allmulticast mode [ 2746.263073][ T35] bridge_slave_0: left promiscuous mode [ 2746.268865][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2746.296868][T13046] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2746.310719][T13046] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2746.321782][T13046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2746.353112][T13046] usb 3-1: config 0 descriptor?? [ 2746.370934][T13046] pwc: Askey VC010 type 2 USB webcam detected. [ 2746.568762][T13046] pwc: send_video_command error -71 [ 2746.654687][T13046] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2746.680472][ T35] ip6gretap0 (unregistering): left allmulticast mode [ 2746.682525][T13046] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 2746.747134][T13046] usb 3-1: USB disconnect, device number 83 [ 2747.173191][T13046] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2747.379114][T13046] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2747.426141][T13046] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2747.442217][T13046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2747.473279][T13046] usb 3-1: config 0 descriptor?? [ 2747.501319][T13046] pwc: Askey VC010 type 2 USB webcam detected. [ 2747.831192][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2747.847346][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2747.859501][ T35] bond0 (unregistering): Released all slaves [ 2747.884592][T13046] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2747.900913][T13046] pwc: recv_control_msg error -32 req 02 val 2700 [ 2747.908291][T13046] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2747.925792][T13046] pwc: recv_control_msg error -32 req 04 val 1000 [ 2747.953193][T13046] pwc: recv_control_msg error -32 req 04 val 1300 [ 2747.961247][T13046] pwc: recv_control_msg error -32 req 04 val 1400 [ 2747.969119][T13046] pwc: recv_control_msg error -32 req 02 val 2000 [ 2748.016745][T13046] pwc: recv_control_msg error -32 req 02 val 2100 [ 2748.054861][T13046] pwc: recv_control_msg error -32 req 04 val 1500 [ 2748.157493][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2748.191627][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2748.224760][ T35] bond0 (unregistering): Released all slaves [ 2748.264644][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3608'. [ 2748.309951][T13046] pwc: recv_control_msg error -71 req 02 val 2400 [ 2748.336323][T13046] pwc: recv_control_msg error -71 req 02 val 2600 [ 2748.396997][T13046] pwc: recv_control_msg error -71 req 02 val 2900 [ 2748.410485][T23640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2748.506718][T13046] pwc: recv_control_msg error -71 req 02 val 2800 [ 2748.553606][T13046] pwc: recv_control_msg error -71 req 04 val 1100 [ 2748.613274][T23640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2748.660208][T13046] pwc: recv_control_msg error -71 req 04 val 1200 [ 2748.717913][T13046] pwc: Registered as video71. [ 2748.760497][T13046] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 2748.804775][T23640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2748.864696][T13046] usb 3-1: USB disconnect, device number 84 [ 2748.879199][T23640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2749.148878][T23825] xt_connbytes: Forcing CT accounting to be enabled [ 2749.156502][T23825] Cannot find add_set index 0 as target [ 2749.901275][T23828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 2749.927683][T23833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 2751.118691][T23640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2751.219691][T23640] 8021q: adding VLAN 0 to HW filter on device team0 [ 2751.248550][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 2751.255776][ T8154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2751.344273][ T35] hsr_slave_0: left promiscuous mode [ 2751.464033][ T35] hsr_slave_1: left promiscuous mode [ 2751.537633][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2751.557986][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2751.593561][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2751.621450][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2751.677378][ T35] hsr_slave_0: left promiscuous mode [ 2752.623466][ T35] hsr_slave_1: left promiscuous mode [ 2752.643016][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2752.751655][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2752.798968][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2752.829144][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2752.994580][ T35] veth1_macvtap: left promiscuous mode [ 2753.000400][ T35] veth0_macvtap: left promiscuous mode [ 2753.006159][ T35] veth1_vlan: left promiscuous mode [ 2753.011691][ T35] veth0_vlan: left promiscuous mode [ 2753.044793][ T35] veth1_macvtap: left promiscuous mode [ 2753.050305][ T35] veth0_macvtap: left promiscuous mode [ 2753.056185][ T35] veth1_vlan: left promiscuous mode [ 2753.061477][ T35] veth0_vlan: left promiscuous mode [ 2755.171952][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2755.249483][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2756.631912][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2756.713266][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2757.404900][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 2757.411980][ T8154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2757.744091][T23640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2757.802275][T23637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2757.984850][T23637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2758.045860][T23637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2758.149111][T23637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2758.359975][T23640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2759.064249][T23637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2759.203701][T23640] veth0_vlan: entered promiscuous mode [ 2759.229485][T23640] veth1_vlan: entered promiscuous mode [ 2759.294867][T23637] 8021q: adding VLAN 0 to HW filter on device team0 [ 2759.510918][T23637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2759.526991][T23637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2759.678636][T12687] bridge0: port 1(bridge_slave_0) entered blocking state [ 2759.685757][T12687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2759.710169][T12687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2759.717285][T12687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2759.756598][T23640] veth0_macvtap: entered promiscuous mode [ 2759.775548][T23640] veth1_macvtap: entered promiscuous mode [ 2759.790834][T23637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2759.828212][T23640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2759.855470][T23640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2759.877039][T23640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.022783][T23640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.056584][T23640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.090511][T23640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.121909][T23640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.151233][T23640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.311191][T23640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2760.354843][T23671] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2760.388813][T23671] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2760.428595][T23671] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2760.478190][T23640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2760.489460][T23640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.499750][T23640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2760.510293][T23640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.520172][T23640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2760.530832][T23640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.540878][T23640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2760.551420][T23640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.566992][T23640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2760.623631][T23637] veth0_vlan: entered promiscuous mode [ 2760.629560][T23671] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2760.694501][T23640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.703454][T23640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.712203][T23640] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.721003][T23640] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.827990][T23637] veth1_vlan: entered promiscuous mode [ 2760.850230][T23637] veth0_macvtap: entered promiscuous mode [ 2760.864215][T23637] veth1_macvtap: entered promiscuous mode [ 2760.899389][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.910095][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.920419][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.930942][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.940995][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.962057][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.972898][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.985371][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.013432][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2761.077579][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.116217][T23637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2761.283898][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.325412][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.335686][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.380401][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.448395][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.472332][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.502272][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.548566][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.576380][T23637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.601116][T23637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.643188][T23637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2761.693255][T23637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2761.720723][T23637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2761.740593][T23637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2761.750477][T23637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2761.796391][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2761.833781][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2761.926425][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2761.973126][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.140981][T23671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2762.654152][T12683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2762.663117][T12683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.722279][ T8154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2762.730161][ T8154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.893342][T23671] 8021q: adding VLAN 0 to HW filter on device team0 [ 2763.701620][T23671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2763.712027][T23671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2763.777062][T12687] bridge0: port 1(bridge_slave_0) entered blocking state [ 2763.784192][T12687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2763.794365][T12687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2763.801440][T12687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2764.512305][T13046] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2764.549983][T23671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2764.698942][T13046] usb 3-1: Using ep0 maxpacket: 8 [ 2764.847450][T13046] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2764.857328][T13046] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2764.867761][T13046] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2764.877819][T21712] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2764.885606][T13046] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2764.932296][T13046] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2764.941565][T13046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.035435][T21712] usb 2-1: device descriptor read/64, error -71 [ 2765.179417][T13046] usb 3-1: GET_CAPABILITIES returned 0 [ 2765.185664][T13046] usbtmc 3-1:16.0: can't read capabilities [ 2765.282585][T21712] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2765.388052][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2765.456350][T21712] usb 2-1: device descriptor read/64, error -71 [ 2766.060498][T21712] usb usb2-port1: attempt power cycle [ 2766.131223][T23671] veth0_vlan: entered promiscuous mode [ 2766.142351][T23671] veth1_vlan: entered promiscuous mode [ 2766.165273][T23671] veth0_macvtap: entered promiscuous mode [ 2766.174338][T23671] veth1_macvtap: entered promiscuous mode [ 2766.201287][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.237502][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.248139][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.275140][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.291157][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.313164][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.328806][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.339971][ T54] Bluetooth: hci1: command tx timeout [ 2766.351004][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.368188][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.381270][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.396554][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.409212][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.438814][T23671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2766.458695][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.479190][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.490900][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.511094][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.521588][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.555237][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.566084][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.581876][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.594777][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.605832][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.616710][T23671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.622447][T21712] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2766.627827][T23671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.683013][T21712] usb 2-1: device descriptor read/8, error -71 [ 2766.687133][T23671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2766.728323][T23671] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.754259][T23671] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.769808][T23671] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.789539][T23671] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.791503][ T5271] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2767.400109][T16034] usb 3-1: USB disconnect, device number 85 [ 2767.552504][T21712] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2767.583012][ T5271] usb 1-1: Using ep0 maxpacket: 8 [ 2767.626983][ T5271] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2767.655039][ T8154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2767.666362][ T5271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2767.713266][ T8154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2767.782357][T21712] usb 2-1: device not accepting address 84, error -71 [ 2767.882831][T21712] usb usb2-port1: unable to enumerate USB device [ 2767.902931][ T5271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2768.127536][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 2768.200169][ T5271] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2768.252276][ T5271] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2768.327743][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2768.333433][T12687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.344916][T12687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.965444][T24035] xt_connbytes: Forcing CT accounting to be enabled [ 2768.972762][T24035] Cannot find add_set index 0 as target [ 2769.158002][T24044] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2769.323384][T24041] Cannot find add_set index 0 as target [ 2769.609212][T24050] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2770.173176][T21740] Bluetooth: hci4: command 0x0406 tx timeout [ 2771.717241][ T5271] usb 1-1: usb_control_msg returned -71 [ 2771.726606][ T5271] usbtmc 1-1:16.0: can't read capabilities [ 2771.992265][T13046] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2772.228514][ T5271] usb 1-1: USB disconnect, device number 103 [ 2772.522255][T13046] usb 4-1: Using ep0 maxpacket: 8 [ 2772.529689][T13046] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2772.575390][T13046] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2772.769546][T13046] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2773.049822][T24104] netlink: 'syz.0.3642': attribute type 10 has an invalid length. [ 2773.053049][ T2404] block nbd2: Possible stuck request ffff88802509c000: control (flush@18446744073709551104,0B). Runtime 90 seconds [ 2773.074609][T24104] syz_tun: entered promiscuous mode [ 2773.103993][T24104] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2774.022226][T21740] Bluetooth: hci6: command tx timeout [ 2774.031597][T13046] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2774.059119][T13046] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2774.072253][T13046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2774.374883][T13046] usb 4-1: GET_CAPABILITIES returned 0 [ 2774.401420][T13046] usbtmc 4-1:16.0: can't read capabilities [ 2774.577454][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2775.044596][T24126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'. [ 2776.096318][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2776.102856][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.763154][ T5271] usb 4-1: USB disconnect, device number 95 [ 2777.126268][T24160] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3651'. [ 2778.937142][T24174] netlink: 'syz.1.3653': attribute type 10 has an invalid length. [ 2779.103672][T24174] syz_tun: entered promiscuous mode [ 2779.602594][ T5270] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2780.115925][ T5270] usb 5-1: Using ep0 maxpacket: 8 [ 2780.487227][ T5270] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2780.508500][ T5270] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2780.520256][ T5270] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2780.550746][T24201] sctp: [Deprecated]: syz.3.3660 (pid 24201) Use of int in maxseg socket option. [ 2780.550746][T24201] Use struct sctp_assoc_value instead [ 2780.599244][ T5270] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2780.646301][ T5270] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2780.694239][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2781.452951][T21740] Bluetooth: hci7: command tx timeout [ 2782.936606][ T5270] usb 5-1: usb_control_msg returned -71 [ 2782.954048][ T5270] usbtmc 5-1:16.0: can't read capabilities [ 2783.024018][ T5270] usb 5-1: USB disconnect, device number 97 [ 2785.888646][T24255] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3671'. [ 2785.920006][T24257] sctp: [Deprecated]: syz.1.3673 (pid 24257) Use of int in maxseg socket option. [ 2785.920006][T24257] Use struct sctp_assoc_value instead [ 2789.066383][T24285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3682'. [ 2789.530014][T24285] ip6gretap0: entered promiscuous mode [ 2789.569429][T24285] macvtap1: entered promiscuous mode [ 2789.604787][T24285] macvtap1: entered allmulticast mode [ 2789.616365][T24285] ip6gretap0: entered allmulticast mode [ 2789.756912][T24296] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3685'. [ 2790.472264][T21712] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2790.628425][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2790.639967][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2790.659290][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2790.682697][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2790.702616][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2790.726916][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2790.782293][T21712] usb 5-1: Using ep0 maxpacket: 8 [ 2790.870617][T21712] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2791.031741][T21712] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2791.156690][T21712] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2791.218756][T24308] chnl_net:caif_netlink_parms(): no params data found [ 2791.320371][T21712] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2791.482543][T21712] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2791.493612][T24308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2791.724144][T24322] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3691'. [ 2792.474741][ T54] Bluetooth: hci7: command tx timeout [ 2792.512260][T21712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2793.106957][T24308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.132005][T24308] bridge_slave_0: entered allmulticast mode [ 2793.159130][T24308] bridge_slave_0: entered promiscuous mode [ 2793.165735][ T54] Bluetooth: hci3: command tx timeout [ 2793.179394][T24308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2793.186972][T24308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.217529][T24308] bridge_slave_1: entered allmulticast mode [ 2793.268939][T24308] bridge_slave_1: entered promiscuous mode [ 2793.383873][T21712] usb 5-1: can't set config #16, error -71 [ 2793.433552][T24308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2793.494652][T21712] usb 5-1: USB disconnect, device number 98 [ 2794.230162][T21740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2794.257139][T21740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2794.258300][T24347] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3696'. [ 2794.267763][T21740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2794.283938][T21740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2794.297133][T24196] bond0: (slave syz_tun): Releasing backup interface [ 2794.302532][T21740] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2794.322467][T21740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2794.422938][T24308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2795.274983][T21740] Bluetooth: hci3: command tx timeout [ 2795.318279][ T5650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.254115][ T5650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.506570][T21740] Bluetooth: hci4: command tx timeout [ 2796.506780][T24308] team0: Port device team_slave_0 added [ 2796.953608][ T5650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.986127][T24373] netlink: 'syz.1.3703': attribute type 10 has an invalid length. [ 2797.008038][T24308] team0: Port device team_slave_1 added [ 2797.158484][ T5650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2797.292534][T21740] Bluetooth: hci3: command tx timeout [ 2797.339742][T24308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2797.381427][T24308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2797.450494][T24308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2797.529742][T24308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2797.554518][T24308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2797.613321][T24308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2797.723983][T24384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3706'. [ 2797.745522][T24392] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3708'. [ 2797.993656][T24308] hsr_slave_0: entered promiscuous mode [ 2798.021652][T24308] hsr_slave_1: entered promiscuous mode [ 2798.059982][T24308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2798.069250][T24308] Cannot create hsr debugfs directory [ 2798.206847][T24344] chnl_net:caif_netlink_parms(): no params data found [ 2798.452034][ T5650] bridge_slave_1: left allmulticast mode [ 2798.493618][ T5650] bridge_slave_1: left promiscuous mode [ 2798.499554][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 2798.573869][T21740] Bluetooth: hci4: command tx timeout [ 2798.609631][ T5650] bridge_slave_0: left allmulticast mode [ 2798.616108][ T5650] bridge_slave_0: left promiscuous mode [ 2798.622515][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 2799.372387][T21740] Bluetooth: hci3: command tx timeout [ 2800.652335][T21740] Bluetooth: hci4: command tx timeout [ 2801.483383][ T5650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2801.500521][ T5650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2801.543309][ T5650] bond0 (unregistering): Released all slaves [ 2801.614910][T24425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3713'. [ 2801.809299][T24441] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3718'. [ 2801.852684][T24344] bridge0: port 1(bridge_slave_0) entered blocking state [ 2801.860953][T24344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2801.877039][T24344] bridge_slave_0: entered allmulticast mode [ 2801.885116][T24344] bridge_slave_0: entered promiscuous mode [ 2801.895984][T24344] bridge0: port 2(bridge_slave_1) entered blocking state [ 2801.908387][T24344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2801.916252][T24344] bridge_slave_1: entered allmulticast mode [ 2801.929262][T24344] bridge_slave_1: entered promiscuous mode [ 2801.959634][T24344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2801.972704][T24344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2802.250930][T24344] team0: Port device team_slave_0 added [ 2802.494707][T24344] team0: Port device team_slave_1 added [ 2802.552402][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3720'. [ 2802.732262][T21740] Bluetooth: hci4: command tx timeout [ 2802.985213][T24344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2803.011473][T24344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.156072][T24344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2803.442436][T24344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2803.449908][T24344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.485253][T24344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2803.615857][ T2404] block nbd2: Possible stuck request ffff88802509c000: control (flush@18446744073709551104,0B). Runtime 120 seconds [ 2803.629794][ T5650] hsr_slave_0: left promiscuous mode [ 2803.648319][ T5650] hsr_slave_1: left promiscuous mode [ 2803.658346][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2803.677543][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2803.693892][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2803.703817][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2803.755878][ T5650] veth1_macvtap: left promiscuous mode [ 2803.761470][ T5650] veth0_macvtap: left promiscuous mode [ 2803.779792][ T5650] veth1_vlan: left promiscuous mode [ 2803.791634][ T5650] veth0_vlan: left promiscuous mode [ 2806.720328][ T5650] team0 (unregistering): Port device team_slave_1 removed [ 2806.903976][ T5650] team0 (unregistering): Port device team_slave_0 removed [ 2808.776377][T24308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2808.941689][T24344] hsr_slave_0: entered promiscuous mode [ 2808.951319][T24344] hsr_slave_1: entered promiscuous mode [ 2808.970129][T24344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2808.978669][T24344] Cannot create hsr debugfs directory [ 2808.999431][T24308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2809.071956][T24308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2809.341208][T24514] netlink: 'syz.2.3734': attribute type 10 has an invalid length. [ 2809.349949][T24514] syz_tun: entered promiscuous mode [ 2809.412389][T24308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2810.057184][T24344] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.253636][T24344] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.855723][T24308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2811.983755][T24344] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2812.487601][T24344] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2812.655696][T24308] 8021q: adding VLAN 0 to HW filter on device team0 [ 2812.722810][T24308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2812.735867][T24308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2812.788553][T24431] bridge0: port 1(bridge_slave_0) entered blocking state [ 2812.795729][T24431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2812.879058][T24431] bridge0: port 2(bridge_slave_1) entered blocking state [ 2812.886272][T24431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2813.121336][ T5650] bridge_slave_1: left allmulticast mode [ 2813.127825][ T5650] bridge_slave_1: left promiscuous mode [ 2813.134435][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 2813.164459][ T5650] bridge_slave_0: left allmulticast mode [ 2813.170220][ T5650] bridge_slave_0: left promiscuous mode [ 2813.194168][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 2815.247111][ T5650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2815.265904][ T5650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2815.298189][ T5650] bond0 (unregistering): Released all slaves [ 2815.497794][T24594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'. [ 2815.506882][T24594] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3750'. [ 2815.791655][T24308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2815.996101][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3751'. [ 2816.023074][T24614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3751'. [ 2816.089822][T24344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2816.119871][T24344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2816.238692][ T5650] hsr_slave_0: left promiscuous mode [ 2816.293729][ T5650] hsr_slave_1: left promiscuous mode [ 2816.378281][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2816.399714][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2816.427188][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2816.454670][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2816.551160][ T5650] veth1_macvtap: left promiscuous mode [ 2816.562569][ T5650] veth0_macvtap: left promiscuous mode [ 2817.232778][ T5650] veth1_vlan: left promiscuous mode [ 2817.238064][ T5650] veth0_vlan: left promiscuous mode [ 2819.298496][T21740] Bluetooth: hci1: command 0x0406 tx timeout [ 2819.550219][ T5650] team0 (unregistering): Port device team_slave_1 removed [ 2819.625413][ T5650] team0 (unregistering): Port device team_slave_0 removed [ 2820.268219][T24344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2820.442932][T24344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2820.528935][T24308] veth0_vlan: entered promiscuous mode [ 2820.585054][T24308] veth1_vlan: entered promiscuous mode [ 2820.840041][T24308] veth0_macvtap: entered promiscuous mode [ 2821.004753][T24308] veth1_macvtap: entered promiscuous mode [ 2821.056774][T24344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2821.118988][T24344] 8021q: adding VLAN 0 to HW filter on device team0 [ 2821.155154][T17327] bridge0: port 1(bridge_slave_0) entered blocking state [ 2821.162371][T17327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2821.176364][T17327] bridge0: port 2(bridge_slave_1) entered blocking state [ 2821.183477][T17327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2821.337421][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2821.396750][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.419081][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2821.438154][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.449970][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2821.469370][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.487686][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2821.520249][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.530812][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2821.556064][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.603280][T24308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2821.618254][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.629109][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.639393][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.650122][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.660344][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.671106][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.682273][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.692948][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.708528][T24308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.722300][T24308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.745424][T24308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2821.773519][T24308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.830119][T24308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.877447][T24308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.897096][T24308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2822.078615][T24344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2822.182083][T24656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3765'. [ 2822.534862][T24344] veth0_vlan: entered promiscuous mode [ 2822.581208][ T5650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2822.632619][ T5650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2822.673638][ T5304] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2822.732504][T24344] veth1_vlan: entered promiscuous mode [ 2822.776988][T24344] veth0_macvtap: entered promiscuous mode [ 2822.805912][T24344] veth1_macvtap: entered promiscuous mode [ 2822.850818][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2822.867131][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2822.882592][ T5304] usb 2-1: Using ep0 maxpacket: 8 [ 2822.890990][ T5304] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 2822.908512][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2822.928952][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2822.946314][ T5304] usb 2-1: Product: syz [ 2822.951263][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2822.983789][ T5304] usb 2-1: Manufacturer: syz [ 2823.005415][ T5304] usb 2-1: SerialNumber: syz [ 2823.012341][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.033160][ T5304] usb 2-1: config 0 descriptor?? [ 2823.038506][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.057184][ T5304] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 2823.069554][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.091995][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.102663][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.113391][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.126104][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.152045][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.169518][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.181466][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.203509][T24344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2823.249776][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.293020][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.309974][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.334211][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.354120][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.368686][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.385493][T24674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2823.395399][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.410343][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.427288][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.438291][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.458783][T24344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.488079][T24344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.527296][T24674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2823.553707][T24344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2823.589896][T24674] bond_slave_0: entered promiscuous mode [ 2823.595789][T24674] bond_slave_1: entered promiscuous mode [ 2823.643696][T24674] macvlan2: entered allmulticast mode [ 2823.665350][T24674] bond0: entered allmulticast mode [ 2823.681458][T24674] bond_slave_0: entered allmulticast mode [ 2824.372240][T24674] bond_slave_1: entered allmulticast mode [ 2824.379052][T24674] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2824.407827][T24674] bond0: left allmulticast mode [ 2824.413205][T24674] bond_slave_0: left allmulticast mode [ 2824.419844][T24674] bond_slave_1: left allmulticast mode [ 2824.434989][T24674] bond_slave_0: left promiscuous mode [ 2824.440453][T24674] bond_slave_1: left promiscuous mode [ 2824.504202][T24344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2824.530121][T24344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2824.560220][T24344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2824.591717][T24344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2824.725070][T21880] usb 2-1: USB disconnect, device number 85 [ 2824.858092][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2824.908237][T12683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2824.916121][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2824.925786][T12683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2824.937966][T24685] fuse: Bad value for 'fd' [ 2826.185063][T24701] netlink: 'syz.1.3775': attribute type 10 has an invalid length. [ 2827.804627][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 2827.813793][T24720] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3779'. [ 2828.577708][T24724] sctp: [Deprecated]: syz.4.3781 (pid 24724) Use of int in maxseg socket option. [ 2828.577708][T24724] Use struct sctp_assoc_value instead [ 2828.608674][T24713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3778'. [ 2828.792375][ T5270] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2828.974171][ T5270] usb 1-1: device descriptor read/64, error -71 [ 2829.066741][T24733] fuse: Bad value for 'fd' [ 2829.213879][ T5270] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2829.353696][ T5270] usb 1-1: device descriptor read/64, error -71 [ 2829.504792][ T5270] usb usb1-port1: attempt power cycle [ 2829.945572][ T5270] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2830.067522][ T5270] usb 1-1: device descriptor read/8, error -71 [ 2830.376258][ T5270] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2830.544049][ T5270] usb 1-1: device descriptor read/8, error -71 [ 2830.662653][ T5270] usb usb1-port1: unable to enumerate USB device [ 2833.430878][T24796] fuse: Bad value for 'fd' [ 2833.532799][T24776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3795'. [ 2834.316689][ T2404] block nbd2: Possible stuck request ffff88802509c000: control (flush@18446744073709551104,0B). Runtime 150 seconds [ 2834.728692][T24813] netlink: 'syz.4.3806': attribute type 10 has an invalid length. [ 2834.738804][T24813] syz_tun: entered promiscuous mode [ 2834.778784][T24813] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2837.286212][T12831] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2837.390369][T24841] netlink: 'syz.2.3813': attribute type 10 has an invalid length. [ 2837.455162][T12831] usb 2-1: Using ep0 maxpacket: 8 [ 2837.490424][T12831] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2837.536784][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2837.544055][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.556288][T12831] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2837.567057][T12831] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2837.576960][T12831] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2837.591336][T12831] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2837.604818][T12831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2837.631651][T12831] usbtmc 2-1:16.0: bulk endpoints not found [ 2839.697090][T24859] openvswitch: netlink: Actions may not be safe on all matching packets [ 2840.027816][T21712] usb 2-1: USB disconnect, device number 86 [ 2840.290905][T24873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3824'. [ 2840.357332][T24872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3822'. [ 2840.732869][ T30] INFO: task syz.2.3482:23270 blocked for more than 144 seconds. [ 2840.740742][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2840.898227][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2840.976038][ T30] task:syz.2.3482 state:D stack:27424 pid:23270 tgid:23266 ppid:22421 flags:0x00004004 [ 2840.997213][ T30] Call Trace: [ 2841.000992][ T30] [ 2841.008609][ T30] __schedule+0x1843/0x4ae0 [ 2841.020555][ T30] ? __pfx___schedule+0x10/0x10 [ 2841.037631][ T30] ? __pfx_lock_release+0x10/0x10 [ 2841.054782][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2841.060796][ T30] ? schedule+0x90/0x320 [ 2841.084226][ T30] schedule+0x14b/0x320 [ 2841.088573][ T30] blk_mq_freeze_queue_wait+0xff/0x190 [ 2841.138946][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 2841.197355][ T30] ? percpu_ref_put+0x1f/0x250 [ 2841.246818][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2841.274007][ T30] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 2841.279928][ T30] blk_mq_update_nr_hw_queues+0x2b7/0x1b00 [ 2841.302220][ T30] ? __mutex_lock+0x9a1/0xd70 [ 2841.307925][ T30] ? __pfx_lock_release+0x10/0x10 [ 2841.322489][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 2841.332238][ T30] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 2841.338508][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2841.362474][ T30] ? __mutex_lock+0x9ab/0xd70 [ 2841.367193][ T30] ? __mutex_lock+0x52a/0xd70 [ 2841.382963][ T30] ? nbd_ioctl+0x13c/0xf40 [ 2841.402321][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2841.407355][ T30] nbd_start_device+0x16c/0xaa0 [ 2841.420434][ T30] nbd_ioctl+0x5dc/0xf40 [ 2841.436191][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 2841.440960][ T30] ? __asan_memset+0x23/0x50 [ 2841.450564][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 2841.460052][ T30] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2841.466891][ T30] ? file_to_blk_mode+0xcc/0x140 [ 2841.471910][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 2841.481501][ T30] blkdev_ioctl+0x57d/0x6a0 [ 2841.489201][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2841.505643][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2841.511899][ T30] __se_sys_ioctl+0xf9/0x170 [ 2841.521042][ T30] do_syscall_64+0xf3/0x230 [ 2841.526647][ T30] ? clear_bhb_loop+0x35/0x90 [ 2841.531399][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2841.541846][ T30] RIP: 0033:0x7fc6a357dff9 [ 2841.546766][ T30] RSP: 002b:00007fc6a42e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2841.563198][ T30] RAX: ffffffffffffffda RBX: 00007fc6a3736130 RCX: 00007fc6a357dff9 [ 2841.571675][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 2841.585611][ T30] RBP: 00007fc6a35f0296 R08: 0000000000000000 R09: 0000000000000000 [ 2841.602943][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2841.610946][ T30] R13: 0000000000000001 R14: 00007fc6a3736130 R15: 00007ffc992dc538 [ 2841.625362][ T30] [ 2841.629114][ T30] INFO: task syz.2.3482:23271 blocked for more than 144 seconds. [ 2841.637607][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 2841.645568][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2841.663170][ T30] task:syz.2.3482 state:D stack:27424 pid:23271 tgid:23266 ppid:22421 flags:0x00000004 [ 2841.703142][ T30] Call Trace: [ 2841.706480][ T30] [ 2841.709422][ T30] __schedule+0x1843/0x4ae0 [ 2841.728917][ T30] ? __pfx___schedule+0x10/0x10 [ 2841.734545][ T30] ? __pfx_lock_release+0x10/0x10 [ 2841.739613][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2841.751678][ T30] ? schedule+0x90/0x320 [ 2841.760587][ T30] schedule+0x14b/0x320 [ 2841.772510][ T30] schedule_preempt_disabled+0x13/0x30 [ 2841.778178][ T30] __mutex_lock+0x6a7/0xd70 [ 2841.791777][ T30] ? __mutex_lock+0x52a/0xd70 [ 2841.808319][ T30] ? nbd_ioctl+0x13c/0xf40 [ 2841.817758][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2841.831312][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 2841.841240][ T30] ? bpf_lsm_capable+0x9/0x10 [ 2841.855159][ T30] nbd_ioctl+0x13c/0xf40 [ 2841.867861][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 2841.876054][ T30] ? __asan_memset+0x23/0x50 [ 2841.880659][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 2841.891921][ T30] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2841.934131][ T30] ? file_to_blk_mode+0xcc/0x140 [ 2841.939125][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 2841.946373][ T30] blkdev_ioctl+0x57d/0x6a0 [ 2841.951070][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2841.957042][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2841.962074][ T30] __se_sys_ioctl+0xf9/0x170 [ 2841.974795][ T30] do_syscall_64+0xf3/0x230 [ 2841.979338][ T30] ? clear_bhb_loop+0x35/0x90 [ 2841.984543][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2841.996549][ T30] RIP: 0033:0x7fc6a357dff9 [ 2842.001641][ T30] RSP: 002b:00007fc6a42c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2842.011613][ T30] RAX: ffffffffffffffda RBX: 00007fc6a3736208 RCX: 00007fc6a357dff9 [ 2842.021731][ T30] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 000000000000000a [ 2842.034480][ T30] RBP: 00007fc6a35f0296 R08: 0000000000000000 R09: 0000000000000000 [ 2842.050566][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2842.059071][ T30] R13: 0000000000000000 R14: 00007fc6a3736208 R15: 00007ffc992dc538 [ 2842.069228][ T30] [ 2842.079636][ T30] [ 2842.079636][ T30] Showing all locks held in the system: [ 2842.100541][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 2842.142292][ T30] #0: ffff8880b863ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 2842.192723][ T30] 1 lock held by khungtaskd/30: [ 2842.197602][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2842.235612][ T30] 2 locks held by getty/4977: [ 2842.251398][ T30] #0: ffff88802e5d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2842.282371][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 2842.341602][ T30] 3 locks held by kworker/1:6/13046: [ 2842.352238][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2842.390389][ T30] #1: ffffc9000319fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2842.428512][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 2842.468906][ T30] 2 locks held by syz.2.3482/23270: [ 2842.474556][ T30] #0: ffff88802523d998 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x13c/0xf40 [ 2842.494427][ T30] #1: ffff88802523d8d8 (&set->tag_list_lock){+.+.}-{3:3}, at: blk_mq_update_nr_hw_queues+0xc8/0x1b00 [ 2842.514767][ T30] 1 lock held by syz.2.3482/23271: [ 2842.520732][ T30] #0: ffff88802523d998 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x13c/0xf40 [ 2842.538464][ T30] 4 locks held by syz-executor/23637: [ 2842.545358][ T30] #0: ffff8880636f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2842.562395][ T30] #1: ffff8880636f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2842.582548][ T30] #2: ffffffff8fe2c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2842.600475][ T30] #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 2842.622765][ T30] 3 locks held by syz.2.3813/24840: [ 2842.627970][ T30] #0: ffff88807cb30d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2842.644421][ T30] #1: ffff88807cb30078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2842.665416][ T30] #2: ffffffff8fe2c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2842.684525][ T30] 3 locks held by syz.3.3821/24860: [ 2842.689722][ T30] #0: ffff88807eb78d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2842.706750][ T30] #1: ffff88807eb78078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2842.722261][ T30] #2: ffffffff8fe2c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2842.742267][ T30] 3 locks held by syz.4.3825/24877: [ 2842.749707][ T30] #0: ffff88805436cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2842.760270][ T30] #1: ffff88805436c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2842.777215][ T30] #2: ffffffff8fe2c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2842.791602][ T30] [ 2842.797931][ T30] ============================================= [ 2842.797931][ T30] [ 2842.821844][ T30] NMI backtrace for cpu 0 [ 2842.826311][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 2842.837051][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2842.847112][ T30] Call Trace: [ 2842.850378][ T30] [ 2842.853299][ T30] dump_stack_lvl+0x241/0x360 [ 2842.857969][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2842.863154][ T30] ? __pfx__printk+0x10/0x10 [ 2842.867826][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2842.872817][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2842.878279][ T30] ? _printk+0xd5/0x120 [ 2842.882425][ T30] ? __pfx__printk+0x10/0x10 [ 2842.887002][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2842.891898][ T30] ? __pfx__printk+0x10/0x10 [ 2842.896474][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2842.901510][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2842.907532][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2842.913525][ T30] watchdog+0xff4/0x1040 [ 2842.917825][ T30] ? watchdog+0x1ea/0x1040 [ 2842.922253][ T30] ? __pfx_watchdog+0x10/0x10 [ 2842.926947][ T30] kthread+0x2f0/0x390 [ 2842.931048][ T30] ? __pfx_watchdog+0x10/0x10 [ 2842.935711][ T30] ? __pfx_kthread+0x10/0x10 [ 2842.940282][ T30] ret_from_fork+0x4b/0x80 [ 2842.944747][ T30] ? __pfx_kthread+0x10/0x10 [ 2842.949319][ T30] ret_from_fork_asm+0x1a/0x30 [ 2842.954120][ T30] [ 2842.957885][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2842.963530][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 2842.970551][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2842.985578][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 2842.996088][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2843.006133][ T30] Call Trace: [ 2843.009395][ T30] [ 2843.012312][ T30] dump_stack_lvl+0x241/0x360 [ 2843.016978][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2843.022181][ T30] ? __pfx__printk+0x10/0x10 [ 2843.027134][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2843.033114][ T30] ? vscnprintf+0x5d/0x90 [ 2843.037434][ T30] panic+0x349/0x880 [ 2843.041318][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2843.047456][ T30] ? __pfx_panic+0x10/0x10 [ 2843.051857][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2843.057281][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2843.062883][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2843.068238][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2843.074380][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2843.080519][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2843.086660][ T30] watchdog+0x1033/0x1040 [ 2843.090978][ T30] ? watchdog+0x1ea/0x1040 [ 2843.095388][ T30] ? __pfx_watchdog+0x10/0x10 [ 2843.100068][ T30] kthread+0x2f0/0x390 [ 2843.104123][ T30] ? __pfx_watchdog+0x10/0x10 [ 2843.108782][ T30] ? __pfx_kthread+0x10/0x10 [ 2843.113356][ T30] ret_from_fork+0x4b/0x80 [ 2843.117759][ T30] ? __pfx_kthread+0x10/0x10 [ 2843.122337][ T30] ret_from_fork_asm+0x1a/0x30 [ 2843.127118][ T30] [ 2843.130435][ T30] Kernel Offset: disabled [ 2843.134753][ T30] Rebooting in 86400 seconds..