last executing test programs: 11.728096023s ago: executing program 3 (id=305): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a81, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x2, 0x0, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = dup(r1) read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) r4 = syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64(r4, &(0x7f0000001880)=""/4096, 0x1000, 0x100) r5 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r4, 0x0, 0x40) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f041}) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r0, 0x0, 0x0, 0x0, 0xfffffffc) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 11.416492543s ago: executing program 3 (id=306): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) socket$inet_tcp(0x2, 0x1, 0x0) lsm_get_self_attr(0x9025a27164544f94, 0xffffffffffffffff, &(0x7f0000000040), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000002d00000000000000a7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="039c5663b8bc5f649b5b3bddffb33a0376300afa090a864c12891b", 0x1b}], 0x1}}], 0x1, 0x0) close(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setns(r6, 0x0) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 10.515630248s ago: executing program 3 (id=309): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d40)={0x24, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.390570181s ago: executing program 4 (id=314): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) epoll_create(0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x4446, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000340), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.388541239s ago: executing program 2 (id=325): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x3bad, 0x7ff, 0x3c, 0x40007, 0x7fff, 0x1, 0x9db}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x54, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r4, &(0x7f00000001c0)="d2", 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x200) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000100)=0x1) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x4, 0x200000000, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x81, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffc], 0x10000}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003904000000000000000000", @ANYBLOB="e9"], 0x40}}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7.198968666s ago: executing program 4 (id=316): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$EVIOCGEFFECTS(r3, 0x40044591, 0x0) 6.298690927s ago: executing program 0 (id=319): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x172af2e4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x101242, 0x0) copy_file_range(r3, 0x0, r3, &(0x7f00000013c0)=0xffffffffffffff71, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c030000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x2a020400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) poll(&(0x7f00000004c0)=[{}], 0x20000000000000f3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, r6, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x8b2}]}}}}}}}, 0x0) 6.29827004s ago: executing program 3 (id=321): semget(0x3, 0x2, 0x284) semget(0x3, 0x0, 0x0) semget(0x0, 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_io_uring_setup(0xd2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47ba, 0x95ff, 0x0, 0x0, 0x0) 6.192861705s ago: executing program 1 (id=322): r0 = socket$inet6(0xa, 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x87f2, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000002b80)=ANY=[], 0x130) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x40b469, 0x1, {{0x19, 0x4, 0x1, 0x8, 0x64, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @private=0xa010101, {[@lsrr={0x83, 0x1f, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @private=0xa010101, @local, @broadcast, @multicast2]}, @generic={0x5, 0x5, "a49a77"}, @lsrr={0x83, 0xb, 0x8b, [@rand_addr=0x64010102, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x99, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop, @generic={0x7, 0xd, "c82d317a740def26c08e19"}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000500), 0x20000000}, 0x20) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/18, 0x12}], 0x1}}], 0x1, 0x162, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000080)=0x87f2, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) 6.005030248s ago: executing program 2 (id=323): r0 = socket$inet(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xa8}}, 0x0) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) r2 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@bridge_newvlan={0x34, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8}}}]}, 0x34}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 5.584270786s ago: executing program 4 (id=324): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.4536353s ago: executing program 1 (id=326): epoll_create(0x8) r0 = creat(0x0, 0x1de) close(r0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x18, 0xc8, "0b6646251e1e2453"}}}}, 0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r1 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) fadvise64(r1, 0x0, 0x0, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}}}, 0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 5.099001835s ago: executing program 0 (id=327): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000880)='.\x00', 0x9800, &(0x7f0000001dc0)={0x0, 0x0, 0x20000}, 0x20) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000580)={0x8d, 0x4, 0x8002}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000002c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x50, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdf}]}, 0x50}, 0x1, 0x0, 0x0, 0x400}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149b82, 0x1e4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xb4, 0x3, 0x9, 0xffffff29, 0x10000, 0x6, "605b549900a6fbe97b6915bd613d322c3bf78ff8793c4530bffa5eb964070dd47616f506b25840faae4f9e95713888ecebf3b0db9ef6dc08031b45a40fa0b2478b1bb7aeec865eb3add670b912215c95aea008b6320fd52acb63e9c4e7fa1efdc6d491886aefa9790e8d605479fef4cece735051e9efb62adabf68a56f85731fb0130544b2848cd86671944aff6723ca35026bf74780c105822b80a34a49d48f5023e2adfe5fb1e49dc9df6941b826656b5ec6c7"}}, 0x1cc) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r7, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000005c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x10, 0x0, [0x8, 0x7, 0x1ff, 0x4, 0x2, 0x1c, 0x1, 0x3d20, 0x6, 0x7f, 0x7ff, 0x2, 0x5, 0x4, 0x80000001, 0x8440]}], r7, 0x1, 0x1, 0x48}}, 0x20) write$cgroup_int(r5, &(0x7f0000000000)=0x100, 0x12) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800c00010062697477697365001c0002800800034000000008080001400000c51608000240000000050900010073797a30000000000900020073797a32"], 0x84}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006340692071040206fe1001020301090212"], 0x0) socket(0x2, 0x2, 0x0) 5.029786609s ago: executing program 2 (id=328): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000b08000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00001e4000/0x2000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x201000, 0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000040)=r1) r6 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x900) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 5.016087973s ago: executing program 1 (id=329): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) epoll_create(0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x4446, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000340), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.559291533s ago: executing program 3 (id=330): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.526371198s ago: executing program 1 (id=331): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x5fef, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r1, 0x0, 0x0, 0x2043, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x43, 0x0, 0xfffffff4, 0x14, @mcast1, @remote, 0x700, 0x8, 0xffff1247, 0x7e7758bb}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r3, 0x20, 0x8000, 0x9, 0x403, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x66, 0x0, 0x7, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0xb, 0x3b, [@rand_addr=0x64010100, @local]}, @noop, @timestamp={0x44, 0x14, 0xff, 0x0, 0x4, [0x10001, 0x1ff, 0xfffffe01, 0xfffffff7]}, @ra={0x94, 0x4}]}}}}}) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000001c0)=0x7, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000200)="e6b7e2a14accc4f68bec1c86266587c614d8fbb57b126136ddbff71593839e63123b500c9a2619539f1a84bb5aa9cc22a04afd0b8730717fd1da38ec9acd33ba427b7dd233baccca3f6f3a6c09a9d9", &(0x7f0000000280)=@udp=r2, 0x2}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x1, 0x4, 0x1}}, 0x2e) r5 = openat$adsp1(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000380)) 3.906702225s ago: executing program 2 (id=332): socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0xa4}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsmount(r0, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f000000a700)=@deltfilter={0x38, 0x2d, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000080)="9d7c3aefc84eb9cc62795cefd62bda062726f2e01ed9d5e6a296b9807d57430d9dd5ebffae15ab07eff69567ee35dc6b7baa860bbc371fbe14771305620879393bccf68628ffa5a0a3ca4532007dd03dc8adba337a1c828c1d6577a464eb7f7a71a9eb871278850cd3b70659310900212cd507002cc76de6a870122c6a345306cf79dc56c271715e1d28c860a4f7ed686a4fad63fabdc7ee4b2695f3d5ac1d4dd0e76c9879b31ea2c84b3e6046d6f0c8f8276c92110099e7654df63bd251c87918d62ac9f69fa2486dd08ff5d0502a", 0xfffffffffffffff5) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xa, 0x148, 0x190, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'syz_tun\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x10001, 0x0, 0x8, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4e0) 3.893245999s ago: executing program 1 (id=333): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) write$char_usb(r1, &(0x7f0000001680)="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", 0x533e7e033570fa8b) r2 = epoll_create(0x1) write(0xffffffffffffffff, &(0x7f0000000240)='\f', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)={0x20000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) preadv2(r4, &(0x7f0000000400)=[{&(0x7f0000001140)=""/4096, 0x2007ffb}], 0x1, 0x0, 0x0, 0x41) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000005500030008000300", @ANYRES32=r6], 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x300]}}) 3.497155496s ago: executing program 0 (id=334): openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x202280) connect$pppoe(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x0, {0x3, @local, 'veth1_to_batadv\x00'}}, 0x1e) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$xdp(r1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @broadcast, 'vlan1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) 3.350730328s ago: executing program 0 (id=335): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000300)=""/57, 0x39}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x4000000000000d8, 0x9200000000000000) bind$packet(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x24f5, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0x0, 0x400000, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40480, 0x0) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) 2.623774053s ago: executing program 2 (id=336): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000901000000000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000000000000000000005001b003a000000080003009b", @ANYRESOCT=r4], 0x2c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000240), 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x0) unshare(0x68060200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080207000000110000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 2.437326317s ago: executing program 4 (id=337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x40000000}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}}}}]}, 0x78}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000004480)={0x18, 0x0, {0x4, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x40047452, &(0x7f0000000000)={0x18, 0x0, {0x0, @remote, 'vcan0\x00'}}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000011000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e"], 0x3c}}, 0x0) unshare(0x2a020480) r7 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc088cf2, 0x0, 0x0) pread64(r7, &(0x7f00000003c0)=""/32, 0x20, 0x0) syz_usb_connect(0x0, 0xaf, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xaa, 0x75, 0xb7, 0x0, [], [{{0x9, 0x5, 0x0, 0x4, 0x40, 0x71, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}, @generic={0x36, 0x0, "573668c07d74b522b047c53bafa8499a18f9c01d3012ccd89d6e7d9a2068ab04abc88c0eb8d98091fd2e6beda98ad7114d92b06d"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xff, 0x0, 0x0, [@generic={0x2c, 0xc, "ccacce9bc9b97a5314c34891e10ab324a73857a4429a31b9c4095e916d7b7d2d7f8258afbe9c4aa441c4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x9}]}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x0, 0x0, 0x9, 0x9, 0x8}, 0x5, &(0x7f00000013c0)={0x5, 0xf, 0x5}, 0x4, [{0x8a, &(0x7f00000002c0)=@string={0x8a, 0x3, "9100694d9a19d3998aee5694444e6c24a7b396246f1a2e883cb7c4e2f47f2ea5d940467ed7400ac449010148abe0260120b39acfb47b743ad8ed1a67d28cf2a6deba8604082254fcdaee57f7f5dafac4eabba37f1d5773316b7621d1ec7edae2b0b03927277fe7b5ea8e52971d4909402cfc00eb9610c0293b0e72e8b296cabe67465b9c0cfdacc8"}}, {0x0, 0x0}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x419}}, {0x15, &(0x7f00000016c0)=@string={0x15, 0x3, "50473aaab109b1995dff432124e7cbfc596f6c"}}]}) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000001c0)) 2.372352664s ago: executing program 0 (id=338): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000180), 0x0, 0x7b1c80) pipe2$9p(0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044146, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) openat$hwrng(0xffffff9c, 0x0, 0x202000, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190880"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x141982) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpu.stat\x00', 0x26e1, 0x0) close(0xffffffffffffffff) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x80) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0b45545, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, 0x0) 1.671490827s ago: executing program 3 (id=339): socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x5298, 0x0, 0x0, &(0x7f00000001c0)=0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xb}, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fsync(r4) eventfd2(0x0, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) 944.040014ms ago: executing program 4 (id=340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000040), 0x4) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="fd", 0x1}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 697.244631ms ago: executing program 2 (id=341): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_pts(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x59, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x51d829, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',allo'], 0x0, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x5ac}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x6000)=nil, 0x6000}, 0x3}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000bc0), 0x6, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}]}) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 675.688483ms ago: executing program 1 (id=342): memfd_create(&(0x7f0000000000)='\x00', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f000001aac0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x4000009, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xd4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)=""/108, 0x6c}], 0x1}}], 0x1, 0x40, &(0x7f0000000440)={0x77359400}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504"], 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1300000065ffff0a00000006003950323030300c068342076176af9c9d63a0581e306728fb2110a2b832ffbc7a282b173f8318f8cfca2ae0fe809fcc02b090795b4b6ff26d8fdfac9383b7c7a900d6f04e84b889b4e198415da18849881eea68fc4a85ccb38cb83196cde811de01bed406df2beb063b6b8f5d2e71b747c44fa3a46374ff6d2e2d7cb49c36952f739d7beb2aa253409e7ecc7fa3cdb1084cc7b2793e25f4671dbbf764eecce4940a9d3a0524e36a6ca4749777edc5e61ddec508f613ba6220a3b92637ca318125852f7669532df9d798c1d3166d892a5773b4519a3e4d5d83157791e36e063a3af9135d55d9c3ced287"], 0x13) 348.878561ms ago: executing program 0 (id=343): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040630437c539340100000109022400010000000009040000"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0xa, "e1eb1e2d"}]}}, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600053582c137153e37080c188004ac0f000300", 0x33fe0}], 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x800, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000019800)={0x0, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000800)=""/102385, 0x18ff1}], 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011145b7c0000009a618122cee13a4500000000000800030000000000"], 0x20}}, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=344): semget(0x3, 0x2, 0x284) semget(0x3, 0x0, 0x0) semget(0x0, 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_io_uring_setup(0xd2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47ba, 0x95ff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 7.217668][ T6034] program syz.3.169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.504710][ T5234] Bluetooth: hci1: command tx timeout [ 117.529034][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 117.714084][ T46] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.731194][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.758377][ T46] usb 5-1: config 0 descriptor?? [ 117.780008][ T46] cp210x 5-1:0.0: cp210x converter detected [ 117.840212][ T5231] usb 3-1: can't set first interface for hiFace device. [ 117.847869][ T5231] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 117.874274][ T5231] usb 3-1: USB disconnect, device number 6 [ 117.950563][ T12] bond0 (unregistering): Released all slaves [ 118.413881][ T46] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 118.423824][ T46] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 118.453708][ T46] usb 5-1: cp210x converter now attached to ttyUSB0 [ 118.495137][ T46] usb 5-1: USB disconnect, device number 10 [ 118.533829][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 118.563616][ T46] cp210x 5-1:0.0: device disconnected [ 118.617961][ T6013] chnl_net:caif_netlink_parms(): no params data found [ 118.633245][ T6053] netlink: 'syz.2.173': attribute type 4 has an invalid length. [ 118.768199][ T12] hsr_slave_0: left promiscuous mode [ 118.778625][ T12] hsr_slave_1: left promiscuous mode [ 118.815457][ T12] veth1_macvtap: left promiscuous mode [ 118.828224][ T12] veth0_macvtap: left promiscuous mode [ 118.841983][ T12] veth1_vlan: left promiscuous mode [ 118.851676][ T12] veth0_vlan: left promiscuous mode [ 119.108575][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.264729][ T5234] Bluetooth: hci4: command tx timeout [ 119.316594][ T46] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.346989][ T46] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 119.395782][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.432897][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 119.445019][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.461456][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 119.483896][ T46] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.494016][ T46] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.510893][ T46] usb 3-1: Product: syz [ 119.516840][ T46] usb 3-1: Manufacturer: syz [ 119.548075][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 119.554094][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 119.580072][ T46] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 119.586711][ T46] cdc_wdm 3-1:1.0: Unknown control protocol [ 119.604622][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 119.617558][ T25] usb 4-1: config index 0 descriptor too short (expected 236, got 129) [ 119.637730][ T25] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 119.651129][ T25] usb 4-1: config 36 has 0 interfaces, different from the descriptor's value: 10 [ 119.671681][ T25] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00f1, bcdDevice=41.fa [ 119.681885][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.697031][ T25] usb 4-1: Product: syz [ 119.702171][ T25] usb 4-1: Manufacturer: syz [ 119.708886][ T25] usb 4-1: SerialNumber: syz [ 119.949856][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 119.956474][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 119.963757][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 119.970396][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 119.976631][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 119.983242][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 119.989491][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 119.996085][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 120.002346][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 120.008935][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 120.015161][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 120.021749][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 120.027978][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 120.034575][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 120.040800][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 120.047413][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 120.053641][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 120.060231][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 120.066551][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 120.073140][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 120.116792][ T8] usb 3-1: USB disconnect, device number 7 [ 120.116883][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 120.127071][ T6075] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 120.506610][ T25] usb 4-1: USB disconnect, device number 9 [ 121.225608][ T6083] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 121.245581][ T6083] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.177'. [ 121.344640][ T5234] Bluetooth: hci4: command tx timeout [ 121.378222][ T6089] syz.4.177 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.558227][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.580195][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.602529][ T6013] bridge_slave_0: entered allmulticast mode [ 121.619394][ T6013] bridge_slave_0: entered promiscuous mode [ 121.712389][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.727387][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.735187][ T6013] bridge_slave_1: entered allmulticast mode [ 121.742613][ T6013] bridge_slave_1: entered promiscuous mode [ 121.792653][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.819112][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.844055][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 122.016001][ T6013] team0: Port device team_slave_0 added [ 122.044835][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 122.057858][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.072887][ T5917] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.094219][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.117345][ T6013] team0: Port device team_slave_1 added [ 122.123248][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.140847][ T5917] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.159821][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 122.185752][ T5917] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.192648][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.222278][ T9] usb 5-1: config 0 descriptor?? [ 122.291475][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.312507][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.378059][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.405176][ T5917] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.442682][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.464102][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.492285][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.591954][ T6013] hsr_slave_0: entered promiscuous mode [ 122.610366][ T6013] hsr_slave_1: entered promiscuous mode [ 122.621738][ T6013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.632357][ T6013] Cannot create hsr debugfs directory [ 122.729871][ T9] uclogic 0003:28BD:0078.0004: interface is invalid, ignoring [ 122.744674][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 122.906191][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.917715][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.936768][ T25] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 122.946436][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.956607][ T25] usb 4-1: config 0 descriptor?? [ 123.085948][ T46] usb 5-1: USB disconnect, device number 11 [ 123.194304][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.224880][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 123.240644][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 123.256732][ T25] usb 4-1: USB disconnect, device number 10 [ 123.292430][ T5917] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.413676][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.420882][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.431979][ T5234] Bluetooth: hci4: command tx timeout [ 123.477576][ T2535] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.484810][ T2535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.653912][ T6119] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 123.866732][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.906891][ T5917] veth0_vlan: entered promiscuous mode [ 123.918020][ T5917] veth1_vlan: entered promiscuous mode [ 123.959982][ T5917] veth0_macvtap: entered promiscuous mode [ 123.969825][ T5917] veth1_macvtap: entered promiscuous mode [ 124.032121][ T6013] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.057091][ T6130] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 124.071900][ T6013] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.123023][ T6013] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.141518][ T6013] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.156706][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.171030][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.201654][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.232275][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.245499][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.257861][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.264631][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 124.269354][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.313204][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.341361][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.375681][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.438931][ T5917] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.453413][ T5917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.469183][ T25] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 124.472507][ T5917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.478566][ T25] usb 4-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 124.493744][ T5917] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.527736][ T25] usb 4-1: Manufacturer: syz [ 124.549494][ T25] usb 4-1: config 0 descriptor?? [ 124.569861][ T25] hub 4-1:0.0: bad descriptor, ignoring hub [ 124.579829][ T25] hub 4-1:0.0: probe with driver hub failed with error -5 [ 124.598852][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 124.608196][ T25] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 124.638032][ T25] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 124.678900][ T6140] loop4: detected capacity change from 0 to 7 [ 124.691045][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.700751][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.709041][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.731675][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.747507][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.756205][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.779419][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.790787][ T6140] ldm_validate_partition_table(): Disk read failed. [ 124.803379][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.827812][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.828862][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.844826][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.893905][ T6140] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.914069][ T6140] Dev loop4: unable to read RDB block 0 [ 124.929616][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.938217][ T6140] loop4: unable to read partition table [ 124.958890][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.964483][ T6140] loop4: partition table beyond EOD, truncated [ 124.976101][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.984398][ T6140] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 124.984398][ T6140] ) failed (rc=-5) [ 124.990166][ T6013] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.026091][ T25] usb 4-1: USB disconnect, device number 11 [ 125.048428][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.055667][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.075471][ T25] ftdi_sio 4-1:0.0: device disconnected [ 125.129762][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.137040][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.337330][ T6013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.448583][ T6013] veth0_vlan: entered promiscuous mode [ 125.513892][ T6013] veth1_vlan: entered promiscuous mode [ 125.602420][ T6013] veth0_macvtap: entered promiscuous mode [ 125.618280][ T6013] veth1_macvtap: entered promiscuous mode [ 125.719458][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.719487][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.719502][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.719529][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.720916][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.726008][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.726031][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.726044][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.726060][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.726100][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.726116][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.726130][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.726145][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.727419][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.734748][ T6013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.734789][ T6013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.734838][ T6013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.734869][ T6013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.073574][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.073599][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.135450][ T5284] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 126.229740][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.249816][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.303485][ T5284] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.323896][ T5284] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.343700][ T5284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.378383][ T5284] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 126.430649][ T5284] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 126.515658][ T5284] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.548916][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.608064][ T5284] usb 5-1: Product: syz [ 126.612302][ T5284] usb 5-1: Manufacturer: syz [ 126.650755][ T5284] cdc_wdm 5-1:1.0: skipping garbage [ 126.656275][ T5283] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.682323][ T6186] tipc: Enabling of bearer rejected, failed to enable media [ 126.690979][ T5284] cdc_wdm 5-1:1.0: skipping garbage [ 126.698193][ T5284] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 126.704146][ T5284] cdc_wdm 5-1:1.0: Unknown control protocol [ 126.844710][ T5283] usb 2-1: Using ep0 maxpacket: 8 [ 126.857935][ T5283] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.875449][ T5284] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 126.891163][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.917708][ T5283] usb 2-1: Product: syz [ 126.931835][ T5283] usb 2-1: Manufacturer: syz [ 126.950239][ T5283] usb 2-1: SerialNumber: syz [ 126.965440][ T5285] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.987668][ T5283] usb 2-1: config 0 descriptor?? [ 127.030828][ C1] wdm_int_callback: 241 callbacks suppressed [ 127.030850][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 127.032573][ T9] usb 5-1: USB disconnect, device number 12 [ 127.036861][ C1] wdm_int_callback: 241 callbacks suppressed [ 127.036878][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 127.036897][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 127.038404][ T6169] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 127.100686][ T5284] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.148038][ T5284] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 127.166744][ T5285] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 127.184834][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.202980][ T5284] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.223812][ T5285] usb 3-1: config 0 descriptor?? [ 127.236563][ T5283] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.245140][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.365764][ T5284] usb 1-1: config 0 descriptor?? [ 127.450277][ T5284] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 127.733882][ T5284] usb 1-1: USB disconnect, device number 13 [ 128.011980][ T5285] usb 3-1: USB disconnect, device number 8 [ 128.941206][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 129.117052][ T6253] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 129.191839][ T8] usb 4-1: config 0 has no interfaces? [ 129.197558][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.207004][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.256016][ T8] usb 4-1: config 0 descriptor?? [ 129.287981][ T5283] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 129.335661][ T5283] usb 2-1: USB disconnect, device number 9 [ 129.385308][ T5285] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.541857][ T939] usb 4-1: USB disconnect, device number 12 [ 129.581832][ T5285] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.621705][ T5285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.652987][ T5285] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.671532][ T5285] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.693294][ T5285] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.711423][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.729635][ T5285] usb 5-1: Product: syz [ 129.733854][ T5285] usb 5-1: Manufacturer: syz [ 129.735295][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 129.752335][ T5285] cdc_wdm 5-1:1.0: skipping garbage [ 129.770268][ T5285] cdc_wdm 5-1:1.0: skipping garbage [ 129.780818][ T5285] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 129.788194][ T5285] cdc_wdm 5-1:1.0: Unknown control protocol [ 129.937022][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 129.992100][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 130.000484][ T6278] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 130.020989][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.028335][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.035842][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.039636][ T8] usb 1-1: Product: syz [ 130.043880][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.052707][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.056982][ T8] usb 1-1: Manufacturer: syz [ 130.058967][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.070061][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.076315][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.082954][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.089209][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.095817][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.102102][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.108711][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.115028][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.121659][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.127920][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.134613][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.140879][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.147483][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.182449][ T939] usb 5-1: USB disconnect, device number 13 [ 130.183488][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 130.213779][ T8] usb 1-1: SerialNumber: syz [ 130.268008][ T8] usb 1-1: config 0 descriptor?? [ 130.334073][ T5284] IPVS: starting estimator thread 0... [ 130.434842][ T6287] IPVS: using max 24 ests per chain, 57600 per kthread [ 130.520136][ T8] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.521963][ T5285] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 130.693069][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.718208][ T5285] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 130.742137][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.758985][ T5285] usb 4-1: config 0 descriptor?? [ 131.082156][ T6305] netlink: 'syz.4.209': attribute type 10 has an invalid length. [ 131.165182][ T939] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 131.191479][ T5285] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 131.212994][ T5285] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 131.221142][ T5285] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 131.230847][ T5285] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 131.250765][ T5285] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 131.276105][ T5285] corsair 0003:1B1C:1B3E.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 131.286809][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.324828][ T939] usb 2-1: Using ep0 maxpacket: 8 [ 131.350317][ T939] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 131.369199][ T939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.420424][ T939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.433695][ T939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.458513][ T939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.475432][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 131.512162][ T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 131.534586][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.552380][ T939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.561737][ T9] usb 3-1: config 0 has no interface number 0 [ 131.574034][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.584366][ T9] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.604016][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.656816][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.700288][ T9] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.716276][ T6307] syz.4.209 (6307): drop_caches: 1 [ 131.754281][ T9] usb 3-1: config 0 interface 52 has no altsetting 0 [ 131.799493][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 131.847348][ T939] usb 2-1: GET_CAPABILITIES returned 0 [ 131.862108][ T939] usbtmc 2-1:16.0: can't read capabilities [ 131.873142][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.897909][ T9] usb 3-1: config 0 descriptor?? [ 131.920393][ T5285] usb 4-1: USB disconnect, device number 13 [ 131.947757][ T8] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 131.963039][ T8] usb 1-1: USB disconnect, device number 14 [ 132.034183][ T6307] syz.4.209 (6307): drop_caches: 1 [ 132.195778][ T9] usb 3-1: Can not set alternate setting to 1, error: -71 [ 132.207127][ T9] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 132.223237][ T9] usb 3-1: USB disconnect, device number 9 [ 132.634708][ T5285] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 132.661109][ T6321] sctp: [Deprecated]: syz.3.213 (pid 6321) Use of int in max_burst socket option. [ 132.661109][ T6321] Use struct sctp_assoc_value instead [ 132.697566][ T6321] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.213'. [ 132.722990][ T6321] netlink: 22488 bytes leftover after parsing attributes in process `syz.3.213'. [ 132.837498][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 132.847063][ T5285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.866364][ T5285] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.881344][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 132.892269][ T6327] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 132.900640][ T5285] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.918836][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.946355][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952739][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.976732][ T5285] usb 5-1: config 0 descriptor?? [ 133.006930][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.217'. [ 133.623203][ T29] audit: type=1326 audit(1727103952.821:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 133.749014][ T5285] usb 5-1: string descriptor 0 read error: -71 [ 133.759496][ T5285] usb 5-1: USB disconnect, device number 14 [ 133.766074][ T29] audit: type=1326 audit(1727103952.821:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 133.787884][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.821317][ T29] audit: type=1326 audit(1727103952.841:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 133.846551][ T29] audit: type=1326 audit(1727103952.841:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 133.868362][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.881492][ T5283] usb 2-1: USB disconnect, device number 10 [ 133.999740][ T29] audit: type=1326 audit(1727103952.841:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 134.044198][ T29] audit: type=1326 audit(1727103952.841:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 134.069159][ T29] audit: type=1326 audit(1727103952.841:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 134.100463][ T29] audit: type=1326 audit(1727103952.841:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 134.122301][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.133490][ T29] audit: type=1326 audit(1727103952.841:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 134.155315][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.161767][ T46] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 134.176183][ T29] audit: type=1326 audit(1727103952.841:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 134.209940][ T6353] program syz.3.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.344743][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 134.352178][ T46] usb 1-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 134.375567][ T46] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 134.389353][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.400169][ T6359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.223'. [ 134.402441][ T46] usb 1-1: Product: syz [ 134.421573][ T46] usb 1-1: Manufacturer: syz [ 134.426595][ T46] usb 1-1: SerialNumber: syz [ 134.445573][ T46] usb 1-1: config 0 descriptor?? [ 134.453062][ T46] usb 1-1: bad CDC descriptors [ 134.463751][ T46] usb 1-1: unsupported MDLM descriptors [ 134.546539][ T5234] Bluetooth: hci4: command 0x0406 tx timeout [ 134.595615][ T2535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.726479][ T46] usb 1-1: USB disconnect, device number 15 [ 134.828423][ T2535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.908958][ T2535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.985167][ T2535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.160042][ T2535] bridge_slave_1: left allmulticast mode [ 135.176431][ T2535] bridge_slave_1: left promiscuous mode [ 135.182520][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.199807][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.210022][ T2535] bridge_slave_0: left allmulticast mode [ 135.216330][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.219705][ T2535] bridge_slave_0: left promiscuous mode [ 135.230321][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.233171][ T2535] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.247027][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.255591][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 135.263118][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.472133][ T6373] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 136.066830][ T2535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.102437][ T2535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.119922][ T2535] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 136.198942][ T2535] bond0 (unregistering): Released all slaves [ 136.564631][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 136.670391][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 136.698884][ T2535] hsr_slave_0: left promiscuous mode [ 136.719020][ T2535] hsr_slave_1: left promiscuous mode [ 136.742179][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.755347][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.762892][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.774988][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 136.793803][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.826080][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.835441][ T2535] veth1_macvtap: left promiscuous mode [ 136.841059][ T2535] veth0_macvtap: left promiscuous mode [ 136.847961][ T2535] veth1_vlan: left promiscuous mode [ 136.854394][ T2535] veth0_vlan: left promiscuous mode [ 136.860288][ T6387] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.871710][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.157020][ T5283] usb 4-1: USB disconnect, device number 14 [ 137.348179][ T5234] Bluetooth: hci2: command tx timeout [ 137.959837][ T2535] team0 (unregistering): Port device team_slave_1 removed [ 138.030689][ T2535] team0 (unregistering): Port device team_slave_0 removed [ 138.504741][ T6370] chnl_net:caif_netlink_parms(): no params data found [ 138.806694][ T6431] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 138.996782][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.065888][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.085454][ T6370] bridge_slave_0: entered allmulticast mode [ 139.113254][ T6370] bridge_slave_0: entered promiscuous mode [ 139.138685][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.165111][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.205202][ T6370] bridge_slave_1: entered allmulticast mode [ 139.212335][ T6370] bridge_slave_1: entered promiscuous mode [ 139.393680][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.424741][ T5234] Bluetooth: hci2: command tx timeout [ 139.434271][ T6443] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.246'. [ 139.448650][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.641598][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.658929][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.671854][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.682854][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.691384][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.704993][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.803019][ T6370] team0: Port device team_slave_0 added [ 139.848016][ T6370] team0: Port device team_slave_1 added [ 139.871563][ T5226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.882143][ T5226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.898248][ T5226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.904762][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 139.927823][ T5226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.938576][ T5226] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 139.950254][ T5226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.971124][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 139.971141][ T29] audit: type=1800 audit(1727103959.171:204): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.247" name="/" dev="fuse" ino=1 res=0 errno=0 [ 140.023779][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.032576][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.059642][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.102629][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 140.115147][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.150529][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.157673][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.189874][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.189962][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.213935][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.222142][ T9] usb 4-1: SerialNumber: syz [ 140.278873][ T2535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.350593][ T6370] hsr_slave_0: entered promiscuous mode [ 140.358986][ T6370] hsr_slave_1: entered promiscuous mode [ 140.366229][ T6370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.379740][ T6370] Cannot create hsr debugfs directory [ 140.407495][ T2535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.553732][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 140.555586][ T2535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.672903][ T2535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.859039][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 141.037818][ T6458] chnl_net:caif_netlink_parms(): no params data found [ 141.211626][ T2535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.283466][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.283569][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.283806][ T6451] bridge_slave_0: entered allmulticast mode [ 141.288969][ T6451] bridge_slave_0: entered promiscuous mode [ 141.369429][ T2535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.443820][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.453587][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.453726][ T6451] bridge_slave_1: entered allmulticast mode [ 141.454490][ T6451] bridge_slave_1: entered promiscuous mode [ 141.504786][ T5226] Bluetooth: hci2: command tx timeout [ 141.526918][ T2535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.591206][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.607115][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.615255][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.622529][ T6458] bridge_slave_0: entered allmulticast mode [ 141.630332][ T6458] bridge_slave_0: entered promiscuous mode [ 141.672506][ T2535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.690719][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.712723][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.723663][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.732936][ T6458] bridge_slave_1: entered allmulticast mode [ 141.741331][ T6458] bridge_slave_1: entered promiscuous mode [ 141.747697][ T5226] Bluetooth: hci1: command tx timeout [ 141.806086][ T6458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.841855][ T6451] team0: Port device team_slave_0 added [ 141.861487][ T6451] team0: Port device team_slave_1 added [ 141.874330][ T6458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.977805][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.985020][ T5226] Bluetooth: hci4: command tx timeout [ 142.000561][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.035938][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.060935][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.077960][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.113767][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.139862][ T6458] team0: Port device team_slave_0 added [ 142.190080][ T6458] team0: Port device team_slave_1 added [ 142.198471][ T6370] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.245300][ T6370] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.283010][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.291692][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.328076][ T6458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.340216][ T6370] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.369624][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.380125][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.407398][ T6458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.419550][ T6370] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.440725][ T6451] hsr_slave_0: entered promiscuous mode [ 142.447436][ T6451] hsr_slave_1: entered promiscuous mode [ 142.453607][ T6451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.461302][ T6451] Cannot create hsr debugfs directory [ 142.467591][ T2535] bridge_slave_1: left allmulticast mode [ 142.473255][ T2535] bridge_slave_1: left promiscuous mode [ 142.479996][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.490138][ T2535] bridge_slave_0: left allmulticast mode [ 142.496309][ T2535] bridge_slave_0: left promiscuous mode [ 142.501999][ T2535] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.512307][ T2535] bridge_slave_1: left allmulticast mode [ 142.518309][ T2535] bridge_slave_1: left promiscuous mode [ 142.524012][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.533611][ T2535] bridge_slave_0: left allmulticast mode [ 142.540250][ T2535] bridge_slave_0: left promiscuous mode [ 142.555657][ T2535] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.576281][ T5283] usb 4-1: USB disconnect, device number 15 [ 143.164336][ T2535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.180587][ T2535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.193906][ T2535] bond0 (unregistering): Released all slaves [ 143.375104][ T2535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.394973][ T2535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.407345][ T2535] bond0 (unregistering): Released all slaves [ 143.584687][ T5226] Bluetooth: hci2: command tx timeout [ 143.767971][ T6458] hsr_slave_0: entered promiscuous mode [ 143.813284][ T6458] hsr_slave_1: entered promiscuous mode [ 143.844601][ T5226] Bluetooth: hci1: command tx timeout [ 143.855871][ T6458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.863617][ T6458] Cannot create hsr debugfs directory [ 144.064818][ T5226] Bluetooth: hci4: command tx timeout [ 144.216718][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.226274][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.241021][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.255596][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.273414][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.284881][ T5284] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 144.285563][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.466343][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 144.491357][ T5284] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 144.506219][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.514335][ T5284] usb 4-1: Product: syz [ 144.518930][ T5284] usb 4-1: Manufacturer: syz [ 144.524562][ T5284] usb 4-1: SerialNumber: syz [ 144.536013][ T5284] usb 4-1: config 0 descriptor?? [ 144.770885][ T5284] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.810504][ T2535] hsr_slave_0: left promiscuous mode [ 144.820233][ T2535] hsr_slave_1: left promiscuous mode [ 144.834099][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.841758][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.850529][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.858106][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.869909][ T2535] hsr_slave_0: left promiscuous mode [ 144.876421][ T2535] hsr_slave_1: left promiscuous mode [ 144.882529][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.890233][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.898195][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.906635][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.942561][ T2535] veth1_macvtap: left promiscuous mode [ 144.948301][ T2535] veth0_macvtap: left promiscuous mode [ 144.953951][ T2535] veth1_vlan: left promiscuous mode [ 144.959933][ T2535] veth0_vlan: left promiscuous mode [ 144.968546][ T2535] veth1_macvtap: left promiscuous mode [ 144.974114][ T2535] veth0_macvtap: left promiscuous mode [ 144.979860][ T2535] veth1_vlan: left promiscuous mode [ 144.985362][ T2535] veth0_vlan: left promiscuous mode [ 145.617421][ T2535] team0 (unregistering): Port device team_slave_1 removed [ 145.666815][ T2535] team0 (unregistering): Port device team_slave_0 removed [ 145.914936][ T5234] Bluetooth: hci1: command tx timeout [ 146.154813][ T5234] Bluetooth: hci4: command tx timeout [ 146.226729][ T5284] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 146.240014][ T5284] usb 4-1: USB disconnect, device number 16 [ 146.384918][ T5234] Bluetooth: hci3: command tx timeout [ 146.509792][ T2535] team0 (unregistering): Port device team_slave_1 removed [ 146.563005][ T2535] team0 (unregistering): Port device team_slave_0 removed [ 147.133238][ T6516] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 147.319662][ T6519] vlan2: entered promiscuous mode [ 147.326594][ T6519] vlan2: entered allmulticast mode [ 147.331767][ T6519] hsr_slave_1: entered allmulticast mode [ 147.351687][ T6519] hsr_slave_1: left allmulticast mode [ 147.389996][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.440264][ T6370] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.485724][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.492925][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.549943][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.557141][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.581584][ T6509] chnl_net:caif_netlink_parms(): no params data found [ 147.803991][ T6509] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.811914][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.821317][ T6509] bridge_slave_0: entered allmulticast mode [ 147.830525][ T6509] bridge_slave_0: entered promiscuous mode [ 147.844115][ T6458] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.856833][ T6458] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.885325][ T5285] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 147.953209][ T6509] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.965018][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.976014][ T6509] bridge_slave_1: entered allmulticast mode [ 147.983181][ T6509] bridge_slave_1: entered promiscuous mode [ 147.990651][ T5234] Bluetooth: hci1: command tx timeout [ 148.021735][ T6458] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.054589][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 148.069615][ T5285] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 148.099802][ T5285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.140331][ T5285] usb 4-1: config 0 has no interface number 0 [ 148.150779][ T6509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.170540][ T5285] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.185269][ T6458] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.200438][ T5285] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.217929][ T5285] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 148.234617][ T5234] Bluetooth: hci4: command tx timeout [ 148.269870][ T5285] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.275083][ T6509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.294080][ T5285] usb 4-1: config 0 interface 52 has no altsetting 0 [ 148.341872][ T5285] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 148.373319][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.395429][ T5285] usb 4-1: config 0 descriptor?? [ 148.407053][ T6509] team0: Port device team_slave_0 added [ 148.463292][ T6509] team0: Port device team_slave_1 added [ 148.465371][ T5234] Bluetooth: hci3: command tx timeout [ 148.478035][ T2535] IPVS: stop unused estimator thread 0... [ 148.480340][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.581446][ T6509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.589975][ T6509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.651192][ T6509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.729316][ T5285] usb 4-1: Can not set alternate setting to 1, error: -71 [ 148.753223][ T6509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.761135][ T5285] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 148.786150][ T6509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.794471][ T5285] usb 4-1: USB disconnect, device number 17 [ 148.821338][ T6509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.951738][ T6509] hsr_slave_0: entered promiscuous mode [ 148.970197][ T6509] hsr_slave_1: entered promiscuous mode [ 149.029335][ T2535] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.053591][ T6451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.094745][ T6451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.109787][ T6370] veth0_vlan: entered promiscuous mode [ 149.141581][ T2535] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.158868][ T6451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.185861][ T6451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.247777][ T2535] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.283302][ T6370] veth1_vlan: entered promiscuous mode [ 149.397090][ T2535] bond0: (slave netdevsim0): Releasing backup interface [ 149.408128][ T2535] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.516628][ T6458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.622233][ T6458] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.673129][ T6370] veth0_macvtap: entered promiscuous mode [ 149.722888][ T6370] veth1_macvtap: entered promiscuous mode [ 149.771088][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.778265][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.793901][ T2535] bridge_slave_1: left allmulticast mode [ 149.800630][ T2535] bridge_slave_1: left promiscuous mode [ 149.813995][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.823646][ T2535] bridge_slave_0: left allmulticast mode [ 149.832584][ T2535] bridge_slave_0: left promiscuous mode [ 149.838536][ T2535] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.365394][ T2535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.386107][ T2535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.404001][ T2535] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 150.421554][ T2535] veth1_vlan: left allmulticast mode [ 150.437699][ T2535] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 150.456687][ T2535] bond0 (unregistering): Released all slaves [ 150.544930][ T5234] Bluetooth: hci3: command tx timeout [ 150.586870][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.594052][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.654887][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.665619][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.683771][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.706374][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.752175][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.764055][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.779417][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.792454][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.803788][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.816327][ T6370] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.826649][ T6370] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.836184][ T6370] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.849682][ T6370] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.957987][ T2535] hsr_slave_0: left promiscuous mode [ 150.964033][ T2535] hsr_slave_1: left promiscuous mode [ 150.983033][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.999242][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.028108][ T2535] veth1_macvtap: left promiscuous mode [ 151.033701][ T2535] veth0_macvtap: left promiscuous mode [ 151.040106][ T2535] veth1_vlan: left promiscuous mode [ 151.045872][ T2535] veth0_vlan: left promiscuous mode [ 151.594560][ T2535] team0 (unregistering): Port device team_slave_1 removed [ 151.639353][ T2535] team0 (unregistering): Port device team_slave_0 removed [ 152.059298][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.094473][ T6458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.175642][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.183498][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.198108][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.205337][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.264464][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.271678][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.298089][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.307364][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.315807][ T6509] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.333082][ T6509] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.344078][ T6509] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.403613][ T6509] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.520081][ T6458] veth0_vlan: entered promiscuous mode [ 152.548822][ T6458] veth1_vlan: entered promiscuous mode [ 152.604107][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.625235][ T5234] Bluetooth: hci3: command tx timeout [ 152.720310][ T6458] veth0_macvtap: entered promiscuous mode [ 152.759533][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.227'. [ 152.780732][ T6458] veth1_macvtap: entered promiscuous mode [ 152.898246][ T6509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.988692][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.041587][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.053300][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.081066][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.121952][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.176505][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.230669][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.245295][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.275390][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.303483][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.331833][ T6451] veth0_vlan: entered promiscuous mode [ 153.350458][ T6458] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.364703][ T5231] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 153.388366][ T6458] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.400624][ T6458] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.454785][ T6458] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.471852][ T6509] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.510332][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.517667][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.535378][ T5231] usb 3-1: config 0 has no interfaces? [ 153.541013][ T5231] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.550610][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.570779][ T5231] usb 3-1: config 0 descriptor?? [ 153.582700][ T6451] veth1_vlan: entered promiscuous mode [ 153.626538][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.633677][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.741246][ T6451] veth0_macvtap: entered promiscuous mode [ 153.807439][ T6509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.824131][ T6509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.858458][ T6509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.932732][ T6451] veth1_macvtap: entered promiscuous mode [ 154.021630][ T5288] usb 3-1: USB disconnect, device number 10 [ 154.025753][ T6509] veth0_vlan: entered promiscuous mode [ 154.088413][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.097035][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.112528][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.128159][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.145519][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.165175][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.180519][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.196711][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.214263][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.232226][ T6509] veth1_vlan: entered promiscuous mode [ 154.277393][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.288306][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.300738][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.311804][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.343140][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.359825][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.377894][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.400714][ T6451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.411531][ T6451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.420459][ T6451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.430169][ T6451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.502326][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.527183][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.562788][ T6509] veth0_macvtap: entered promiscuous mode [ 154.609077][ T6509] veth1_macvtap: entered promiscuous mode [ 154.741524][ T29] audit: type=1326 audit(1727103973.941:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.2.258" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x0 [ 154.780342][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.820822][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.837585][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.849476][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.869854][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.917824][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.927910][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.938730][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.950310][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.962511][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.973038][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.983008][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.993996][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.004588][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.015412][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.025668][ T6509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.036218][ T6509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.047756][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.111754][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 155.125135][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 155.130181][ T2535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.141361][ T2535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.151134][ T6509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.159952][ T6509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.169311][ T6509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.180599][ T6509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.263716][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.282126][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.333566][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.359890][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.391047][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.411974][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.473752][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.493868][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.509569][ T2552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.524397][ T2552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.552699][ T8] usb 2-1: Product: syz [ 155.572182][ T8] usb 2-1: Manufacturer: syz [ 155.583604][ T2535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.612145][ T2535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.613201][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 155.634689][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 155.641521][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 155.651627][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 155.744685][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 155.873431][ T29] audit: type=1326 audit(1727103975.071:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.4.251" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x0 [ 155.917155][ T6651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.260'. [ 155.963772][ T6636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.981850][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 155.986633][ T25] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 156.000689][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.015466][ T6636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.023060][ T25] usb 1-1: config 0 descriptor?? [ 156.078303][ T25] gspca_main: spca508-2.14.0 probing 8086:0110 [ 156.108480][ T6636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.245'. [ 156.199461][ T5284] usb 2-1: USB disconnect, device number 11 [ 156.271499][ T25] gspca_spca508: reg_read err -32 [ 156.295241][ T25] gspca_spca508: reg_read err -32 [ 156.321464][ T25] gspca_spca508: reg_read err -32 [ 156.481002][ T6657] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 156.844042][ T25] gspca_spca508: reg_read err -71 [ 156.857745][ T25] gspca_spca508: reg_read err -71 [ 156.881372][ T25] gspca_spca508: reg write: error -71 [ 156.901368][ T25] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 156.934477][ T25] usb 1-1: USB disconnect, device number 16 [ 157.208075][ T6659] netlink: 'syz.2.262': attribute type 4 has an invalid length. [ 157.272405][ T6663] netlink: 'syz.1.264': attribute type 2 has an invalid length. [ 157.284168][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 157.469018][ T6669] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.265'. [ 157.547376][ T6663] bridge_slave_0: left allmulticast mode [ 157.556716][ T6663] bridge_slave_0: left promiscuous mode [ 157.566132][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.595358][ T6663] bridge_slave_1: left allmulticast mode [ 157.610258][ T6663] bridge_slave_1: left promiscuous mode [ 157.622675][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.659102][ T6663] bond0: (slave bond_slave_0): Releasing backup interface [ 157.704969][ T939] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.717841][ T6663] bond0: (slave bond_slave_1): Releasing backup interface [ 157.785039][ T6663] team0: Port device team_slave_0 removed [ 157.813883][ T6663] team0: Port device team_slave_1 removed [ 157.830297][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.849660][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.858849][ T939] usb 3-1: Using ep0 maxpacket: 8 [ 157.867041][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.878640][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.898602][ T939] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 157.900041][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.924707][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.948853][ T939] usb 3-1: config 0 descriptor?? [ 157.962104][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.357816][ T2535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.402550][ T939] playstation 0003:054C:0CE6.0006: unknown main item tag 0x0 [ 158.419272][ T939] playstation 0003:054C:0CE6.0006: unknown main item tag 0x0 [ 158.428684][ T939] playstation 0003:054C:0CE6.0006: unknown main item tag 0x0 [ 158.442528][ T939] playstation 0003:054C:0CE6.0006: unknown main item tag 0x0 [ 158.451650][ T939] playstation 0003:054C:0CE6.0006: unknown main item tag 0x0 [ 158.460091][ T939] playstation 0003:054C:0CE6.0006: unknown main item tag 0x0 [ 158.471497][ T939] playstation 0003:054C:0CE6.0006: unknown main item tag 0x0 [ 158.500809][ T939] playstation 0003:054C:0CE6.0006: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 158.504667][ T5285] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 158.574786][ T2535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.593301][ T939] playstation 0003:054C:0CE6.0006: Invalid reportID received, expected 9 got 0 [ 158.630687][ T939] playstation 0003:054C:0CE6.0006: Failed to retrieve DualSense pairing info: -22 [ 158.657516][ T939] playstation 0003:054C:0CE6.0006: Failed to get MAC address from DualSense [ 158.673221][ T939] playstation 0003:054C:0CE6.0006: Failed to create dualsense. [ 158.686763][ T939] playstation 0003:054C:0CE6.0006: probe with driver playstation failed with error -22 [ 158.712712][ T5285] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.743070][ T5285] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 158.759734][ T5285] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.782300][ T5285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 158.795520][ T2535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.834729][ T5285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 158.849121][ T5285] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.858533][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.867653][ T5285] usb 1-1: Product: syz [ 158.871947][ T5285] usb 1-1: Manufacturer: syz [ 158.895309][ T5285] cdc_wdm 1-1:1.0: skipping garbage [ 158.900564][ T5285] cdc_wdm 1-1:1.0: skipping garbage [ 158.924829][ T5285] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 158.930797][ T5285] cdc_wdm 1-1:1.0: Unknown control protocol [ 159.049426][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.083000][ T2535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.135004][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.221646][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.231600][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.240948][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.249170][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.263138][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.271673][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.461300][ T939] usb 3-1: USB disconnect, device number 11 [ 159.480920][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.496068][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.512309][ C1] wdm_int_callback: 169 callbacks suppressed [ 159.512331][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 159.521668][ T8] usb 1-1: USB disconnect, device number 17 [ 159.524932][ C1] wdm_int_callback: 169 callbacks suppressed [ 159.524951][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 159.524970][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 159.552302][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.573273][ T6675] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 159.604139][ T6691] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 159.620658][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.639889][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.656535][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.533948][ T2535] bond0 (unregistering): Released all slaves [ 161.144654][ T2535] hsr_slave_0: left promiscuous mode [ 161.175642][ T2535] hsr_slave_1: left promiscuous mode [ 161.325367][ T2535] veth1_macvtap: left promiscuous mode [ 161.350618][ T2535] veth0_macvtap: left promiscuous mode [ 161.369593][ T2535] veth1_vlan: left promiscuous mode [ 161.385799][ T2535] veth0_vlan: left promiscuous mode [ 161.424769][ T5234] Bluetooth: hci0: command tx timeout [ 161.747115][ T5234] Bluetooth: hci4: command tx timeout [ 162.710738][ T6729] netlink: 'syz.4.280': attribute type 12 has an invalid length. [ 162.719864][ T6729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.280'. [ 162.739077][ T6733] team0: Device ipvlan2 is already an upper device of the team interface [ 162.753899][ T6736] netlink: 'syz.0.281': attribute type 4 has an invalid length. [ 163.043335][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 163.104087][ T6749] syz_tun: entered promiscuous mode [ 163.129054][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 163.139569][ T6749] batadv_slave_1: entered promiscuous mode [ 163.195471][ T6749] fuse: Bad value for 'fd' [ 163.231075][ T6697] chnl_net:caif_netlink_parms(): no params data found [ 163.304750][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 163.312989][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.323798][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.332258][ T25] usb 1-1: Product: syz [ 163.336856][ T25] usb 1-1: Manufacturer: syz [ 163.341481][ T25] usb 1-1: SerialNumber: syz [ 163.358967][ T25] usb 1-1: config 0 descriptor?? [ 163.359476][ T12] tipc: Subscription rejected, illegal request [ 163.480005][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.494788][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.502066][ T6690] bridge_slave_0: entered allmulticast mode [ 163.508379][ T5234] Bluetooth: hci0: command tx timeout [ 163.515874][ T6690] bridge_slave_0: entered promiscuous mode [ 163.525211][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.532339][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.540282][ T6690] bridge_slave_1: entered allmulticast mode [ 163.547547][ T6690] bridge_slave_1: entered promiscuous mode [ 163.575845][ T25] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 163.618781][ T5285] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.635666][ T6697] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.643352][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.650880][ T6697] bridge_slave_0: entered allmulticast mode [ 163.658114][ T6697] bridge_slave_0: entered promiscuous mode [ 163.721863][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.740721][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.765445][ T6697] bridge_slave_1: entered allmulticast mode [ 163.787942][ T6697] bridge_slave_1: entered promiscuous mode [ 163.816608][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.826129][ T5234] Bluetooth: hci4: command tx timeout [ 163.834933][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 163.857709][ T5285] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.873268][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.884321][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.929925][ T5285] usb 5-1: Product: syz [ 163.959845][ T5285] usb 5-1: Manufacturer: syz [ 163.965715][ T5285] usb 5-1: SerialNumber: syz [ 163.991059][ T5285] r8152-cfgselector 5-1: Unknown version 0x0000 [ 164.004070][ T5285] r8152-cfgselector 5-1: config 0 descriptor?? [ 164.138855][ T2535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.269971][ T6697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.293116][ T6690] team0: Port device team_slave_0 added [ 164.306461][ T6690] team0: Port device team_slave_1 added [ 164.350038][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.362135][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.367453][ T2535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.386225][ T5226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.402558][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.406901][ T6697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.444621][ T5226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 164.452159][ T5226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.547969][ T2535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.588881][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.596218][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.624856][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.678042][ T2535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.692402][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.700426][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.727903][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.767881][ T6697] team0: Port device team_slave_0 added [ 164.807769][ T6697] team0: Port device team_slave_1 added [ 164.843917][ T6690] hsr_slave_0: entered promiscuous mode [ 164.851340][ T6690] hsr_slave_1: entered promiscuous mode [ 164.858469][ T6690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.866561][ T6690] Cannot create hsr debugfs directory [ 164.898269][ T6697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.907716][ T6697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.935134][ T6697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.019260][ T6697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.028143][ T6697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.048017][ T25] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 165.054389][ T6697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.137034][ T25] usb 1-1: USB disconnect, device number 18 [ 165.263040][ T6697] hsr_slave_0: entered promiscuous mode [ 165.285653][ T6697] hsr_slave_1: entered promiscuous mode [ 165.304900][ T6697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.312591][ T6697] Cannot create hsr debugfs directory [ 165.379935][ T2535] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.534000][ T2535] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.586740][ T5234] Bluetooth: hci0: command tx timeout [ 165.698961][ T2535] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.778202][ T6775] chnl_net:caif_netlink_parms(): no params data found [ 165.892091][ T2535] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.905099][ T5234] Bluetooth: hci4: command tx timeout [ 166.106583][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 166.173780][ T46] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 166.310764][ T25] usb 1-1: New USB device found, idVendor=0913, idProduct=0001, bcdDevice=3a.08 [ 166.331311][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 166.342980][ T25] usb 1-1: SerialNumber: syz [ 166.370099][ T25] usb 1-1: config 0 descriptor?? [ 166.500565][ T6801] sctp: [Deprecated]: syz.4.288 (pid 6801) Use of int in max_burst socket option. [ 166.500565][ T6801] Use struct sctp_assoc_value instead [ 166.528269][ T6801] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.288'. [ 166.545837][ T5234] Bluetooth: hci2: command tx timeout [ 166.561136][ T6801] netlink: 27492 bytes leftover after parsing attributes in process `syz.4.288'. [ 166.941089][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.962534][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.991393][ T6775] bridge_slave_0: entered allmulticast mode [ 166.999181][ T6775] bridge_slave_0: entered promiscuous mode [ 167.010044][ T2535] bridge_slave_1: left allmulticast mode [ 167.017313][ T2535] bridge_slave_1: left promiscuous mode [ 167.025444][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.035755][ T2535] bridge_slave_0: left allmulticast mode [ 167.041476][ T2535] bridge_slave_0: left promiscuous mode [ 167.048772][ T2535] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.058748][ T2535] bridge_slave_1: left allmulticast mode [ 167.064482][ T2535] bridge_slave_1: left promiscuous mode [ 167.072542][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.085875][ T2535] bridge_slave_0: left allmulticast mode [ 167.093940][ T2535] bridge_slave_0: left promiscuous mode [ 167.100259][ T2535] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.195526][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.223432][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.664841][ T5234] Bluetooth: hci0: command tx timeout [ 167.987102][ T5234] Bluetooth: hci4: command tx timeout [ 168.055218][ T2535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.073769][ T2535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.094655][ T2535] bond0 (unregistering): Released all slaves [ 168.254306][ T2535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.268578][ T2535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.284200][ T2535] bond0 (unregistering): Released all slaves [ 168.310503][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.322128][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.337733][ T6775] bridge_slave_1: entered allmulticast mode [ 168.352418][ T6775] bridge_slave_1: entered promiscuous mode [ 168.380308][ T6810] netlink: 'syz.4.290': attribute type 4 has an invalid length. [ 168.618978][ T6775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.635903][ T5234] Bluetooth: hci2: command tx timeout [ 168.660416][ T6815] netlink: 'syz.4.291': attribute type 4 has an invalid length. [ 168.837146][ T6775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.933366][ T25] usb 1-1: USB disconnect, device number 19 [ 169.033620][ T6775] team0: Port device team_slave_0 added [ 169.068325][ T6775] team0: Port device team_slave_1 added [ 169.079047][ T6690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.216701][ T6690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.271893][ T6690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.292551][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.304333][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.336047][ T6775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.398014][ T6690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.444006][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.454662][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.483241][ T6775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.611295][ T2535] hsr_slave_0: left promiscuous mode [ 169.623417][ T2535] hsr_slave_1: left promiscuous mode [ 169.638323][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.647451][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.656959][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.666154][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.689242][ T2535] hsr_slave_0: left promiscuous mode [ 169.709027][ T2535] hsr_slave_1: left promiscuous mode [ 169.723220][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.737620][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.760371][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.779988][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.867179][ T2535] veth1_macvtap: left promiscuous mode [ 169.883143][ T2535] veth0_macvtap: left promiscuous mode [ 169.890059][ T2535] veth1_vlan: left promiscuous mode [ 169.899414][ T2535] veth0_vlan: left promiscuous mode [ 169.925665][ T2535] veth1_macvtap: left promiscuous mode [ 169.938745][ T2535] veth0_macvtap: left promiscuous mode [ 169.954426][ T2535] veth1_vlan: left promiscuous mode [ 169.965161][ T2535] veth0_vlan: left promiscuous mode [ 170.714711][ T5234] Bluetooth: hci2: command tx timeout [ 170.742996][ T2535] team0 (unregistering): Port device team_slave_1 removed [ 170.800273][ T2535] team0 (unregistering): Port device team_slave_0 removed [ 171.639097][ T2535] team0 (unregistering): Port device team_slave_1 removed [ 171.691089][ T2535] team0 (unregistering): Port device team_slave_0 removed [ 172.196670][ T6775] hsr_slave_0: entered promiscuous mode [ 172.207684][ T6775] hsr_slave_1: entered promiscuous mode [ 172.213750][ T6775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.223163][ T6775] Cannot create hsr debugfs directory [ 172.599210][ T6697] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.653366][ T6841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.295'. [ 172.740044][ T6697] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.794551][ T5234] Bluetooth: hci2: command tx timeout [ 172.799742][ T6697] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.862624][ T6697] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.059772][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.082355][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.095196][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.114866][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.141457][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 173.149688][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.194385][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.317416][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.363128][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.370316][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.454628][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 173.501055][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.508243][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.617285][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 173.627661][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 173.640130][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 173.650836][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.659560][ T6690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.662630][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.684388][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.693624][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.883194][ T2535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.910770][ T6697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.919389][ T25] usb 5-1: usb_control_msg returned -32 [ 173.926110][ T25] usbtmc 5-1:16.0: can't read capabilities [ 173.933455][ T6775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.968003][ T6775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.007178][ T2535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.023608][ T6857] chnl_net:caif_netlink_parms(): no params data found [ 174.040031][ T6775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.067626][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.107285][ T2535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.128460][ T6775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.182373][ T6697] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.227263][ T2535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.301838][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 174.317182][ T6875] usbtmc 5-1:16.0: Unable to send data, error -71 [ 174.341907][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.342575][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 174.349058][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.440632][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.447812][ T2552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.489152][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.503455][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.511590][ T6857] bridge_slave_0: entered allmulticast mode [ 174.527310][ T6857] bridge_slave_0: entered promiscuous mode [ 174.560139][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.567917][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.578755][ T6857] bridge_slave_1: entered allmulticast mode [ 174.587702][ T6857] bridge_slave_1: entered promiscuous mode [ 174.639917][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.721736][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.861841][ T6857] team0: Port device team_slave_0 added [ 174.877983][ T6857] team0: Port device team_slave_1 added [ 174.886045][ T6690] veth0_vlan: entered promiscuous mode [ 174.895465][ T2535] bridge_slave_1: left allmulticast mode [ 174.908125][ T2535] bridge_slave_1: left promiscuous mode [ 174.918525][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.931822][ T2535] bridge_slave_0: left allmulticast mode [ 174.941934][ T2535] bridge_slave_0: left promiscuous mode [ 174.953207][ T2535] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.265383][ T5226] Bluetooth: hci1: command tx timeout [ 175.448707][ T2535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.461635][ T2535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.474268][ T2535] bond0 (unregistering): Released all slaves [ 175.582207][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.590651][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.623833][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.637876][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.645310][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.672726][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.712416][ T6690] veth1_vlan: entered promiscuous mode [ 175.756829][ T6857] hsr_slave_0: entered promiscuous mode [ 175.763291][ T6857] hsr_slave_1: entered promiscuous mode [ 175.769578][ T6857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.778615][ T6857] Cannot create hsr debugfs directory [ 175.802174][ T6775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.914436][ T6697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.960982][ T2535] hsr_slave_0: left promiscuous mode [ 175.969796][ T2535] hsr_slave_1: left promiscuous mode [ 175.979326][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.989587][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.001485][ T2535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.009553][ T2535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.030012][ T2535] veth1_macvtap: left promiscuous mode [ 176.036091][ T2535] veth0_macvtap: left promiscuous mode [ 176.041761][ T2535] veth1_vlan: left promiscuous mode [ 176.047224][ T2535] veth0_vlan: left promiscuous mode [ 176.112342][ T5287] usb 5-1: USB disconnect, device number 16 [ 176.547663][ T2535] team0 (unregistering): Port device team_slave_1 removed [ 176.585627][ T2535] team0 (unregistering): Port device team_slave_0 removed [ 176.624641][ T939] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 176.784907][ T939] usb 5-1: Using ep0 maxpacket: 8 [ 176.790710][ T939] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 176.840685][ T939] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 176.859124][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 176.879617][ T939] usb 5-1: Product: syz [ 176.883901][ T939] usb 5-1: Manufacturer: syz [ 176.889520][ T939] usb 5-1: SerialNumber: syz [ 176.909832][ T939] usb 5-1: config 0 descriptor?? [ 177.068950][ T6690] veth0_macvtap: entered promiscuous mode [ 177.081417][ T6690] veth1_macvtap: entered promiscuous mode [ 177.143088][ T6775] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.293498][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.300699][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.353623][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.354958][ T5226] Bluetooth: hci1: command tx timeout [ 177.386086][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.398067][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.417299][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.424701][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.458520][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.481638][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.496138][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.559055][ T6690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.570727][ T6690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.582726][ T6690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.594531][ T6690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.654168][ T6697] veth0_vlan: entered promiscuous mode [ 177.679319][ T939] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration [ 177.701733][ T939] usb 5-1: USB disconnect, device number 17 [ 177.742110][ T6697] veth1_vlan: entered promiscuous mode [ 177.911206][ T6929] netlink: 'syz.4.300': attribute type 4 has an invalid length. [ 177.930748][ T6775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.063838][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.081238][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.232793][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.237890][ T6697] veth0_macvtap: entered promiscuous mode [ 178.246874][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.289006][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.340334][ T6697] veth1_macvtap: entered promiscuous mode [ 178.352639][ T6857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.380335][ T6857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.402557][ T6857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.440370][ T6857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.490319][ T6697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.512810][ T6697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.527652][ T6697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.543389][ T6697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.572705][ T6697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.626770][ T6697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.639070][ T6697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.650576][ T6697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.661741][ T6697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.680087][ T6697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.717435][ T6697] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.727288][ T6697] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.736196][ T6697] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.746624][ T6697] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.763857][ T6775] veth0_vlan: entered promiscuous mode [ 178.794146][ T6775] veth1_vlan: entered promiscuous mode [ 178.844873][ T5284] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 178.923929][ T6775] veth0_macvtap: entered promiscuous mode [ 179.003759][ T6775] veth1_macvtap: entered promiscuous mode [ 179.009989][ T5284] usb 2-1: device descriptor read/64, error -71 [ 179.059983][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.114022][ T6954] netlink: 'syz.4.302': attribute type 6 has an invalid length. [ 179.138459][ T6954] netlink: 'syz.4.302': attribute type 8 has an invalid length. [ 179.155781][ T6957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.302'. [ 179.194112][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.212104][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.223880][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.240662][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.251389][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.265083][ T5284] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 179.269649][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.290984][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.304691][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.321264][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.346206][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.359641][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.374547][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.404628][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.414763][ T5284] usb 2-1: device descriptor read/64, error -71 [ 179.421848][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.443881][ T5226] Bluetooth: hci1: command tx timeout [ 179.461751][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.486405][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.502510][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.532694][ T6775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.542367][ T6775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.542434][ T5284] usb usb2-port1: attempt power cycle [ 179.551134][ T6775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.551170][ T6775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.611883][ T2552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.628347][ T2552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.697474][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.704756][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.822919][ T2535] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.830044][ T2535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.944926][ T5284] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.012129][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.058918][ T5284] usb 2-1: device descriptor read/8, error -71 [ 180.111510][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.124693][ T6978] netlink: 68 bytes leftover after parsing attributes in process `syz.3.273'. [ 180.289037][ T6975] can: request_module (can-proto-0) failed. [ 180.341893][ T6857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.343165][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.354071][ T6857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.360855][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.435912][ T5284] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.506216][ T5284] usb 2-1: device descriptor read/8, error -71 [ 180.625931][ T5284] usb usb2-port1: unable to enumerate USB device [ 180.630466][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.671563][ T6857] veth0_vlan: entered promiscuous mode [ 180.682905][ T6857] veth1_vlan: entered promiscuous mode [ 180.707555][ T6857] veth0_macvtap: entered promiscuous mode [ 180.720823][ T6857] veth1_macvtap: entered promiscuous mode [ 180.785779][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.797023][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.807468][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.818016][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.834040][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.844684][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.854646][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.865899][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.877143][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.981854][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.992682][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.034669][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.047921][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.068107][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.082882][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.111464][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.128878][ T7000] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 181.175308][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.201908][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.252051][ T6857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.287610][ T6857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.454558][ T6857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.463322][ T6857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.529782][ T5226] Bluetooth: hci1: command tx timeout [ 181.811120][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.855523][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.920707][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.941925][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.114631][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 182.294862][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 182.314449][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 182.325599][ T46] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 182.347346][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.369081][ T8] usb 4-1: Product: syz [ 182.373299][ T8] usb 4-1: Manufacturer: syz [ 182.389266][ T8] usb 4-1: SerialNumber: syz [ 182.410019][ T8] usb 4-1: config 0 descriptor?? [ 182.476155][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 182.500096][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.542827][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.563577][ T46] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 182.608041][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.668233][ T46] usb 1-1: config 0 descriptor?? [ 182.693741][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.384914][ T46] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 183.430449][ T46] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 183.504160][ T46] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 183.564650][ T46] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 183.590883][ T46] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 183.613392][ T46] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 183.654246][ T46] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 183.723540][ T46] playstation 0003:054C:0CE6.0007: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 183.824374][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.843133][ T46] playstation 0003:054C:0CE6.0007: Invalid reportID received, expected 9 got 0 [ 183.857535][ T46] playstation 0003:054C:0CE6.0007: Failed to retrieve DualSense pairing info: -22 [ 183.868557][ T46] playstation 0003:054C:0CE6.0007: Failed to get MAC address from DualSense [ 183.875116][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.877354][ T46] playstation 0003:054C:0CE6.0007: Failed to create dualsense. [ 183.895732][ T46] playstation 0003:054C:0CE6.0007: probe with driver playstation failed with error -22 [ 184.191556][ T5234] Bluetooth: Unexpected continuation frame (len 18) [ 184.212611][ T7048] input: syz0 as /devices/virtual/input/input8 [ 184.388919][ T5287] usb 1-1: USB disconnect, device number 20 [ 185.260618][ T8] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 185.292047][ T8] usb 4-1: USB disconnect, device number 18 [ 185.760967][ T7087] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 186.085184][ T5234] Bluetooth: hci1: command 0x0405 tx timeout [ 186.378983][ T7101] netlink: 'syz.0.319': attribute type 3 has an invalid length. [ 186.396778][ T7101] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.319'. [ 187.075071][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 187.253634][ T7113] mmap: syz.2.328 (7113) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.275591][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 187.284430][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 187.314645][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.322668][ T8] usb 5-1: Product: syz [ 187.371946][ T8] usb 5-1: Manufacturer: syz [ 187.391243][ T8] usb 5-1: SerialNumber: syz [ 187.425388][ T939] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 187.440033][ T8] usb 5-1: config 0 descriptor?? [ 187.631248][ T939] usb 1-1: Using ep0 maxpacket: 16 [ 187.656210][ T939] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 187.701941][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.728081][ T8] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.753565][ T939] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.773803][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.796528][ T939] usb 1-1: Product: syz [ 187.800769][ T939] usb 1-1: Manufacturer: syz [ 187.814742][ T939] usb 1-1: SerialNumber: syz [ 187.827826][ T939] usb 1-1: config 0 descriptor?? [ 187.843037][ T939] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 187.856388][ T939] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 188.004817][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 188.092741][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.125484][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.166075][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 188.191583][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 188.208174][ T939] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 188.211078][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.218624][ T939] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 188.228789][ T25] usb 4-1: Product: syz [ 188.233566][ T25] usb 4-1: Manufacturer: syz [ 188.238533][ T25] usb 4-1: SerialNumber: syz [ 188.250582][ T25] usb 4-1: config 0 descriptor?? [ 188.281783][ T939] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 188.305575][ T939] em28xx 1-1:0.0: No AC97 audio processor [ 188.334371][ T939] usb 1-1: USB disconnect, device number 21 [ 188.355493][ T939] em28xx 1-1:0.0: Disconnecting em28xx [ 188.413771][ T939] em28xx 1-1:0.0: Freeing device [ 188.477975][ T25] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.725785][ T5284] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 188.884583][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 188.901520][ T5284] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 188.920835][ T5284] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 188.933248][ T5284] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.956635][ T5284] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.992738][ T5284] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.002424][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.162690][ T8] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 189.215020][ T8] usb 5-1: USB disconnect, device number 18 [ 189.228853][ T5284] usb 2-1: usb_control_msg returned -32 [ 189.236240][ T5284] usbtmc 2-1:16.0: can't read capabilities [ 189.618269][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 189.638095][ T7136] usbtmc 2-1:16.0: Unable to send data, error -71 [ 189.662852][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 189.709565][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 189.860937][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 189.940052][ T25] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 189.951654][ T7142] syz_tun (unregistering): left promiscuous mode [ 189.978351][ T25] usb 4-1: USB disconnect, device number 19 [ 190.034832][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.178490][ T5284] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 190.188008][ T46] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.196970][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.207348][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.217488][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.230628][ T46] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.241117][ T46] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.249186][ T46] usb 3-1: Product: syz [ 190.253461][ T46] usb 3-1: Manufacturer: syz [ 190.265717][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 190.267621][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 190.280259][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 190.287063][ T46] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 190.293029][ T46] cdc_wdm 3-1:1.0: Unknown control protocol [ 190.338158][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.349399][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 190.363665][ T5284] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 190.372931][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.380985][ T5284] usb 5-1: Product: Й [ 190.387088][ T5284] usb 5-1: SerialNumber: 䝐꨺঱馱｝⅃ﳋ潙 [ 190.399035][ T5284] usb 5-1: config 0 descriptor?? [ 190.416860][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 190.429844][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 190.442578][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.456045][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.474539][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.494994][ T8] usb 1-1: config 0 descriptor?? [ 190.502299][ T7145] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 190.586776][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.622108][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.662231][ T7147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.336'. [ 190.840162][ T5231] usb 3-1: USB disconnect, device number 12 [ 190.943985][ T8] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 190.965140][ T8] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 191.008117][ T8] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 191.024784][ T5234] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 191.034244][ T5234] Bluetooth: hci0: Injecting HCI hardware error event [ 191.043518][ T5234] Bluetooth: hci0: hardware error 0x00 [ 191.186177][ T5284] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 191.220599][ T5284] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 191.241208][ T8] usb 1-1: USB disconnect, device number 22 [ 191.274383][ T5284] usb 5-1: USB disconnect, device number 19 [ 191.514253][ T5284] usb 2-1: USB disconnect, device number 16 [ 192.114820][ T5284] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 192.228943][ T7162] ------------[ cut here ]------------ [ 192.235464][ T7162] WARNING: CPU: 0 PID: 7162 at mm/huge_memory.c:1602 copy_huge_pmd+0x102c/0x1c60 [ 192.244709][ T7162] Modules linked in: [ 192.248623][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.1.342 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 192.259230][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 192.269672][ T7162] RIP: 0010:copy_huge_pmd+0x102c/0x1c60 [ 192.275313][ T7162] Code: ff 90 0f 0b 90 e9 2e f5 ff ff e8 cf a1 92 ff 48 ff cb e9 0f f7 ff ff e8 c2 a1 92 ff 48 ff cb e9 8a f7 ff ff e8 b5 a1 92 ff 90 <0f> 0b 90 e9 11 fd ff ff 4c 8d ac 24 00 01 00 00 48 b8 06 fe ff ff [ 192.295196][ T7162] RSP: 0018:ffffc900095e7140 EFLAGS: 00010283 [ 192.301300][ T7162] RAX: ffffffff820217fb RBX: ffff88806ca8ebc0 RCX: 0000000000040000 [ 192.303310][ T5284] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.309474][ T7162] RDX: ffffc90004091000 RSI: 0000000000004507 RDI: 0000000000004508 [ 192.327713][ T7162] RBP: ffffc900095e72c8 R08: ffffffff820216c6 R09: fffff520012bce18 [ 192.327908][ T5284] usb 1-1: New USB device found, idVendor=0463, idProduct=c537, bcdDevice=34.39 [ 192.335762][ T7162] R10: dffffc0000000000 R11: fffff520012bce18 R12: ffff88806d7328a0 [ 192.335788][ T7162] R13: d7ffe7fff4a3fe02 R14: 0000000000000020 R15: ffff88807d641d80 [ 192.335809][ T7162] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f56e6b40 [ 192.335834][ T7162] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 192.377316][ T7162] CR2: 0000000020600000 CR3: 000000007d45c000 CR4: 00000000003506f0 [ 192.385454][ T7162] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.393451][ T7162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.401489][ T7162] Call Trace: [ 192.404825][ T7162] [ 192.407773][ T7162] ? __warn+0x168/0x4e0 [ 192.411943][ T7162] ? copy_huge_pmd+0x102c/0x1c60 [ 192.416968][ T7162] ? report_bug+0x2b3/0x500 [ 192.421495][ T7162] ? copy_huge_pmd+0x102c/0x1c60 [ 192.426476][ T7162] ? handle_bug+0x60/0x90 [ 192.430818][ T7162] ? exc_invalid_op+0x1a/0x50 [ 192.435532][ T7162] ? asm_exc_invalid_op+0x1a/0x20 [ 192.440568][ T7162] ? copy_huge_pmd+0xef6/0x1c60 [ 192.445467][ T7162] ? copy_huge_pmd+0x102b/0x1c60 [ 192.450410][ T7162] ? copy_huge_pmd+0x102c/0x1c60 [ 192.455384][ T7162] ? __pfx_copy_huge_pmd+0x10/0x10 [ 192.460504][ T7162] ? _raw_spin_unlock+0x28/0x50 [ 192.466807][ T7162] ? __pmd_alloc+0x4ff/0x620 [ 192.471425][ T7162] ? __pfx___pmd_alloc+0x10/0x10 [ 192.477297][ T7162] ? look_up_lock_class+0x77/0x170 [ 192.482443][ T7162] copy_pmd_range+0x425/0x85f0 [ 192.487290][ T7162] ? __pfx_register_lock_class+0x10/0x10 [ 192.492942][ T7162] ? mark_lock+0x9a/0x360 [ 192.497330][ T7162] ? __lock_acquire+0x1384/0x2050 [ 192.502376][ T7162] ? __pfx_copy_pmd_range+0x10/0x10 [ 192.507662][ T7162] ? __pfx_lock_acquire+0x10/0x10 [ 192.512700][ T7162] ? __pud_alloc+0x389/0x4a0 [ 192.517395][ T7162] ? __pfx_lock_release+0x10/0x10 [ 192.522435][ T7162] ? do_raw_spin_lock+0x14f/0x370 [ 192.527512][ T7162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 192.532729][ T7162] ? _raw_spin_unlock+0x28/0x50 [ 192.537627][ T7162] ? __pud_alloc+0x389/0x4a0 [ 192.542249][ T7162] ? __pfx___pud_alloc+0x10/0x10 [ 192.547286][ T7162] copy_page_range+0x99f/0xe90 [ 192.552093][ T7162] ? __pfx_copy_page_range+0x10/0x10 [ 192.557418][ T7162] ? __pfx_up_write+0x10/0x10 [ 192.562108][ T7162] copy_mm+0x11fb/0x1f40 [ 192.566770][ T7162] ? __pfx_copy_mm+0x10/0x10 [ 192.571408][ T7162] ? __init_rwsem+0x122/0x160 [ 192.576401][ T7162] ? copy_signal+0x52a/0x650 [ 192.581029][ T7162] copy_process+0x1845/0x3d50 [ 192.585815][ T7162] ? copy_process+0x9fa/0x3d50 [ 192.590743][ T7162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 192.596018][ T7162] ? __pfx_copy_process+0x10/0x10 [ 192.601062][ T7162] ? futex_wait+0x285/0x360 [ 192.605624][ T7162] kernel_clone+0x226/0x8f0 [ 192.610143][ T7162] ? __mutex_unlock_slowpath+0x21d/0x750 [ 192.615830][ T7162] ? __pfx_kernel_clone+0x10/0x10 [ 192.620882][ T7162] ? up_write+0x1a9/0x590 [ 192.625415][ T7162] __ia32_compat_sys_ia32_clone+0x255/0x2a0 [ 192.631362][ T7162] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 192.637849][ T7162] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 192.644448][ T7162] ? lockdep_hardirqs_on+0x99/0x150 [ 192.649714][ T7162] __do_fast_syscall_32+0xb4/0x110 [ 192.654918][ T7162] ? exc_page_fault+0x590/0x8c0 [ 192.659789][ T7162] do_fast_syscall_32+0x34/0x80 [ 192.664717][ T7162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.671413][ T7162] RIP: 0023:0xf7f61579 [ 192.675854][ T7162] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.695591][ T7162] RSP: 002b:00000000f56e651c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 192.704036][ T7162] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 192.712074][ T7162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.720129][ T7162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.728242][ T7162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.736317][ T7162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.744403][ T7162] [ 192.747511][ T7162] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.754820][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.1.342 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 192.765054][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 192.775112][ T7162] Call Trace: [ 192.778388][ T7162] [ 192.781341][ T7162] dump_stack_lvl+0x241/0x360 [ 192.786040][ T7162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.791245][ T7162] ? __pfx__printk+0x10/0x10 [ 192.795847][ T7162] ? vscnprintf+0x5d/0x90 [ 192.800203][ T7162] panic+0x349/0x880 [ 192.804117][ T7162] ? __warn+0x177/0x4e0 [ 192.808277][ T7162] ? __pfx_panic+0x10/0x10 [ 192.812715][ T7162] __warn+0x34b/0x4e0 [ 192.816711][ T7162] ? copy_huge_pmd+0x102c/0x1c60 [ 192.821665][ T7162] report_bug+0x2b3/0x500 [ 192.825997][ T7162] ? copy_huge_pmd+0x102c/0x1c60 [ 192.830954][ T7162] handle_bug+0x60/0x90 [ 192.835123][ T7162] exc_invalid_op+0x1a/0x50 [ 192.839647][ T7162] asm_exc_invalid_op+0x1a/0x20 [ 192.844520][ T7162] RIP: 0010:copy_huge_pmd+0x102c/0x1c60 [ 192.850095][ T7162] Code: ff 90 0f 0b 90 e9 2e f5 ff ff e8 cf a1 92 ff 48 ff cb e9 0f f7 ff ff e8 c2 a1 92 ff 48 ff cb e9 8a f7 ff ff e8 b5 a1 92 ff 90 <0f> 0b 90 e9 11 fd ff ff 4c 8d ac 24 00 01 00 00 48 b8 06 fe ff ff [ 192.869699][ T7162] RSP: 0018:ffffc900095e7140 EFLAGS: 00010283 [ 192.875768][ T7162] RAX: ffffffff820217fb RBX: ffff88806ca8ebc0 RCX: 0000000000040000 [ 192.883760][ T7162] RDX: ffffc90004091000 RSI: 0000000000004507 RDI: 0000000000004508 [ 192.891761][ T7162] RBP: ffffc900095e72c8 R08: ffffffff820216c6 R09: fffff520012bce18 [ 192.899738][ T7162] R10: dffffc0000000000 R11: fffff520012bce18 R12: ffff88806d7328a0 [ 192.907714][ T7162] R13: d7ffe7fff4a3fe02 R14: 0000000000000020 R15: ffff88807d641d80 [ 192.915692][ T7162] ? copy_huge_pmd+0xef6/0x1c60 [ 192.920545][ T7162] ? copy_huge_pmd+0x102b/0x1c60 [ 192.925498][ T7162] ? __pfx_copy_huge_pmd+0x10/0x10 [ 192.930719][ T7162] ? _raw_spin_unlock+0x28/0x50 [ 192.935652][ T7162] ? __pmd_alloc+0x4ff/0x620 [ 192.940264][ T7162] ? __pfx___pmd_alloc+0x10/0x10 [ 192.945307][ T7162] ? look_up_lock_class+0x77/0x170 [ 192.950448][ T7162] copy_pmd_range+0x425/0x85f0 [ 192.955257][ T7162] ? __pfx_register_lock_class+0x10/0x10 [ 192.960924][ T7162] ? mark_lock+0x9a/0x360 [ 192.965278][ T7162] ? __lock_acquire+0x1384/0x2050 [ 192.970347][ T7162] ? __pfx_copy_pmd_range+0x10/0x10 [ 192.975568][ T7162] ? __pfx_lock_acquire+0x10/0x10 [ 192.980599][ T7162] ? __pud_alloc+0x389/0x4a0 [ 192.985201][ T7162] ? __pfx_lock_release+0x10/0x10 [ 192.990224][ T7162] ? do_raw_spin_lock+0x14f/0x370 [ 192.995257][ T7162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 193.000756][ T7162] ? _raw_spin_unlock+0x28/0x50 [ 193.005615][ T7162] ? __pud_alloc+0x389/0x4a0 [ 193.010214][ T7162] ? __pfx___pud_alloc+0x10/0x10 [ 193.015172][ T7162] copy_page_range+0x99f/0xe90 [ 193.019958][ T7162] ? __pfx_copy_page_range+0x10/0x10 [ 193.025268][ T7162] ? __pfx_up_write+0x10/0x10 [ 193.029964][ T7162] copy_mm+0x11fb/0x1f40 [ 193.034225][ T7162] ? __pfx_copy_mm+0x10/0x10 [ 193.038831][ T7162] ? __init_rwsem+0x122/0x160 [ 193.043524][ T7162] ? copy_signal+0x52a/0x650 [ 193.048124][ T7162] copy_process+0x1845/0x3d50 [ 193.052817][ T7162] ? copy_process+0x9fa/0x3d50 [ 193.057600][ T7162] ? do_raw_spin_unlock+0x13c/0x8b0 [ 193.062807][ T7162] ? __pfx_copy_process+0x10/0x10 [ 193.067843][ T7162] ? futex_wait+0x285/0x360 [ 193.072358][ T7162] kernel_clone+0x226/0x8f0 [ 193.076887][ T7162] ? __mutex_unlock_slowpath+0x21d/0x750 [ 193.082552][ T7162] ? __pfx_kernel_clone+0x10/0x10 [ 193.087585][ T7162] ? up_write+0x1a9/0x590 [ 193.091930][ T7162] __ia32_compat_sys_ia32_clone+0x255/0x2a0 [ 193.097834][ T7162] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 193.104267][ T7162] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 193.110866][ T7162] ? lockdep_hardirqs_on+0x99/0x150 [ 193.116111][ T7162] __do_fast_syscall_32+0xb4/0x110 [ 193.121242][ T7162] ? exc_page_fault+0x590/0x8c0 [ 193.126101][ T7162] do_fast_syscall_32+0x34/0x80 [ 193.130959][ T7162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.137325][ T7162] RIP: 0023:0xf7f61579 [ 193.141393][ T7162] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 193.160999][ T7162] RSP: 002b:00000000f56e651c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 193.169434][ T7162] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 193.177424][ T7162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.185399][ T7162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.193373][ T7162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.201348][ T7162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.209353][ T7162] [ 193.212715][ T7162] Kernel Offset: disabled [ 193.217428][ T7162] Rebooting in 86400 seconds..