last executing test programs: 28.483589867s ago: executing program 2 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), 0x4c, 0xfffffffffffffffc, &(0x7f0000000600)="fd026d6e8c7d4b8232398be4d8ab1fb3f7357c1094506013470098448866805968ba3387f5782010171d4f65cc2298be76206550a19ad6d473b591672b6e4b4c6745eb951dd39051188f50e6"}) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 25.244232561s ago: executing program 3 (id=2167): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000000100)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x0, &(0x7f00000001c0)}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000380)='./file0\x00') execveat(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan0\x00'}) sendto$packet(r5, &(0x7f0000000180)="0b031407640f02004803000000dba2d959c33c14fb", 0x15, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x10000061, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffffffffffb}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) 9.701063926s ago: executing program 4 (id=2200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000180)="a6", 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000080000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x40400, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'wg1\x00', @local}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060021000200000008000300ac1414aa"], 0x28}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000080)={@local}, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x200000c1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r9, &(0x7f0000000500)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, 0x4c, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000020c00fbdbdf2501000000080002000000000005000500000000000800030001"], 0x84}}, 0x0) 9.203032075s ago: executing program 1 (id=2204): socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x44004050}, 0x40084) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) 6.756794476s ago: executing program 2 (id=2159): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x0, 0x0, 0x8000000, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000010380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) 6.75487914s ago: executing program 4 (id=2212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000006340)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00'], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}, 0x45c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000140)=0xe4) socket$rxrpc(0x21, 0x2, 0xa) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x214400, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="2c726483746d6f64653d30303030303030303030303030303030303036303046302c8d7365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)) r8 = syz_open_pts(r7, 0x101040) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000400e8ff070000002500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000002000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TCSETS(r8, 0x5404, &(0x7f0000000040)={0x0, 0x100000, 0x3, 0x20000, 0x0, "0ea4fc7b9ff53acfc3b072570d9763d021c778"}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000040067000400cc0004000801060066"], 0x3c}}, 0x0) 6.724858786s ago: executing program 1 (id=2213): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0xb546915b97533d6b, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) r0 = syz_usbip_server_init(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) write$usbip_server(r0, &(0x7f0000002940)=ANY=[@ANYBLOB="00000003"], 0x22d0) r2 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x15, 0xfffffffa, @l2={'eth', 0x3a, 'caif0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x40004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x40, 0x100) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f00000000c0)=ANY=[]) 4.776125s ago: executing program 3 (id=2168): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x21, 0x5, 0x7fffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @mcast1, 0xd}, 0x1c) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaac7866264a4bd46da50a544aaaaaaaa0074d47f480086dd60000000"], 0x0) 4.774883394s ago: executing program 1 (id=2215): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x0, 0x0, 0x8000000, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000010380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) 4.773839008s ago: executing program 4 (id=2216): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x221, 0x8, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 3.785918676s ago: executing program 2 (id=2205): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x81, "a22095", "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"}}, 0x110) set_mempolicy(0x4005, 0x0, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r2}, 0x38) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r3, &(0x7f0000000180)="e455115a876d010000009b00", 0xc, 0x4040, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x21}, 0x3}, 0x1c) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000100)) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x9, 0x5, 0x7, 0xffffffff, 0xffff, 0x3b, 0x9}, 0x1c) 3.785148511s ago: executing program 4 (id=2206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000, 0x0, &(0x7f000046d000/0x4000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x4001, 0x3, 0x29c, 0x0, 0x0, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x8, @loopback, 0x0, 0x0, 'ip6gretap0\x00', 'wlan1\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x2}, @common=@unspec=@physdev={{0x64}, {'sit0\x00', {0xff}, 'erspan0\x00', {}, 0x0, 0x1c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x8, 0x6, 0x6, 0x0, 0x3], 0x0, 0x3}, {0x3, [0x1, 0x2, 0x4, 0x4, 0x3, 0x2], 0x6, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb, 0x46, "4fb9fc1d3f5b6d855e43e4ae6aedc7115412bb491e0605feccb8547ea0c5"}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2f8) ioctl$UFFDIO_REGISTER(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000048000), 0x3000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000000c40), 0x30, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x2000055, 0x8, 0x8, &(0x7f0000000d00)}}, 0xfffffffffffffed6) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0008000000008590fc231d8e13c8"], 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r6, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r7, &(0x7f000001aa80)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) syz_emit_ethernet(0x93, &(0x7f0000000540)={@local, @broadcast, @void, {@generic={0x88e7, "a5aaa5c37078ba111f67a72c70dfde4d5a91e460b102e73398a5f378eef49d277abcd51923d028707bf64ec01f68556eaab85f26df4b3a53377fc3c09419e20aa4ac85eea60beeb92f829d4216116d681c080f895a679284afb4029da071821463542d15b26ab179afe5a722ac73b1e905852f9f73f193226b630e4788f7f9e0e314293699"}}}, &(0x7f0000000100)={0x1, 0x4, [0x983, 0xd49, 0x28c, 0x58a]}) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000500000008000840000000000500050002000000050001000602000011000300686173683a6970"], 0x60}}, 0x0) 3.425518489s ago: executing program 4 (id=2208): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000003c0)={0x0, 0x5, 0x4, "c4a2f2bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000180), 0x14) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x7c}}, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x120) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x2f, 0x4, 0x7, 0x6, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8000, 0xfffffffc, 0x80}}) r9 = syz_io_uring_setup(0xec7, &(0x7f00000003c0)={0x0, 0x4bb6}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000280), 0x0, 0x6}) io_uring_enter(r9, 0x47fa, 0x0, 0x0, 0x0, 0x0) 3.100440179s ago: executing program 2 (id=2210): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x148}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000000)=[{r0, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io(r2, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x23, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) 3.099258007s ago: executing program 1 (id=2224): socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x44004050}, 0x40084) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) 2.722246663s ago: executing program 3 (id=2211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000180)="a6", 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000080000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x40400, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'wg1\x00', @local}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060021000200000008000300ac1414aa"], 0x28}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000080)={@local}, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x200000c1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r9, &(0x7f0000000500)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, 0x4c, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}}, 0x0) 2.721370014s ago: executing program 0 (id=2226): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) close(r1) 2.554450413s ago: executing program 3 (id=2214): socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) (async) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x1, 0xfff, 0xffff, 0x8, 0x10001, 0xa, 0xe24}, &(0x7f0000000100)={0x2, 0xb, 0x1b, 0xffffffff, 0x4, 0x5, 0x9, 0xfff}, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x1, 0x6, 0x9b8, 0x7, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x3, 0x3]}, 0x8}) nanosleep(&(0x7f0000000240), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc, 0x80, 0x0) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc, 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f0000000380)={{0x51, 0x1}, 'port1\x00', 0xa, 0x70002, 0x5, 0x2, 0x56, 0x1000, 0x9, 0x0, 0x4, 0xa}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40045}, 0x20000001) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000540)={[0x5, 0x2]}) fcntl$getown(r1, 0x9) openat$cuse(0xffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) r3 = openat$cuse(0xffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) r4 = openat$cuse(0xffffff9c, &(0x7f0000002600), 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r4, 0x4edb6000) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r4, 0x4edb6000) pselect6(0x40, &(0x7f0000002640)={0x3, 0x9, 0x5, 0x9, 0x7, 0x1, 0x9, 0x9}, &(0x7f0000002680)={0x800, 0x6, 0x6, 0xa, 0x3, 0x401, 0x7a1, 0x7ffe}, &(0x7f00000026c0)={0x3, 0xf582, 0x80000001, 0x8, 0x5366, 0x2a, 0x1, 0xffff}, &(0x7f0000002700)={0x77359400}, &(0x7f0000002780)={&(0x7f0000002740)={[0x8, 0x7]}, 0x8}) writev(r3, &(0x7f0000002840)=[{&(0x7f00000027c0)="dcb8d61b967dda1cdc098e8036ddeda6cdf1c326f784a6", 0x17}, {&(0x7f0000002800)}], 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = io_uring_setup(0x33d5, &(0x7f0000002880)={0x0, 0x79e1, 0x1000, 0x3, 0x3a1}) poll(&(0x7f0000002900)=[{r5, 0x20b}], 0x1, 0x1000) io_setup(0x1b21, &(0x7f0000002940)=0x0) io_pgetevents(r7, 0x5, 0x6, &(0x7f0000002980)=[{}, {}, {}, {}, {}, {}], &(0x7f0000002a40)={0x0, 0x989680}, &(0x7f0000002ac0)={&(0x7f0000002a80)={[0x9, 0xc753]}, 0x8}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat(0xffffffffffffffff, &(0x7f0000002b00)='./file0\x00', 0x0, 0x83) (async) r8 = openat(0xffffffffffffffff, &(0x7f0000002b00)='./file0\x00', 0x0, 0x83) close(r8) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000002b40)={0x1, 0x1, @raw_data=[0x5, 0xc4, 0x8000, 0x3, 0xbd, 0x0, 0x0, 0x4, 0x7fffffff, 0xffffffff, 0x7, 0x1, 0x7, 0x3, 0x101, 0x7]}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000002b40)={0x1, 0x1, @raw_data=[0x5, 0xc4, 0x8000, 0x3, 0xbd, 0x0, 0x0, 0x4, 0x7fffffff, 0xffffffff, 0x7, 0x1, 0x7, 0x3, 0x101, 0x7]}) r9 = openat$vsock(0xffffff9c, &(0x7f0000002c00), 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002c40)={&(0x7f0000002bc0)='neigh_create\x00', r9, 0x0, 0xef17}, 0x18) io_destroy(r7) (async) io_destroy(r7) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000003180)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000003140)={&(0x7f0000002f40)={0x1d8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x346, 0xf0, 0xe, 0x9}, {0x8000, 0x0, 0x10, 0x9}, {0x5, 0x5, 0x8, 0x9}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x1d8}}, 0x4000000) 2.551588084s ago: executing program 0 (id=2217): io_uring_setup(0x57ce, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16, @ANYRES16], 0x0) 2.41379071s ago: executing program 1 (id=2218): syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0x7, 0xa0, 0x9, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x2, 0x6, 0x0, 0xca, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x2, 0x8, 0x26}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xfffe, 0x8, 0x7, 0x6, 0x3, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xf2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x6, 0x62}, @mbim_extended={0x8, 0x24, 0x1c, 0x8db2, 0x9, 0xb}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x69, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x1df, 0x5, 0x10, 0x81}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x7, 0x62, 0x20, 0x6}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x5, 0xa}, @ptm_cap={0x3}]}, 0x3, [{0xc1, &(0x7f0000000100)=@string={0xc1, 0x3, "7c8a8cd7aba0b57cf3b1d66541e49c5810c0f1f4316fff26e6bbf1c52f9ef9344f2357a291b6f80e7df3b64fac810460719a8fd564027ed2486dc2eee5dcba082f03f04d8c6014e5b78d80c0b1410c31db34d728fd03242347c057886af084722aa63cfaf1a6ab7335e563d95660d76d2d47f6842d77dacfe683d468408169a5c7ad58c7fed74d7cb5c0a12288c6efa301a7c5006253b1dd534205a1ec454e155c30092a3e192051c840ca7010d63772f9580fb4089d89955ca22535424f71"}}, {0x88, &(0x7f0000000200)=@string={0x88, 0x3, "060671f965f0f1cc9e32dd881b83907268e3fccfe97ab674cd5da52eb3ab57031926beee09f1d29c23226f652bbc2fb98b01206f5332270f89263cd603efdef1400c4786673051131d63d3c1a934d4e02a109f0c42c8adf2b77879ba49162ad235bf6ed3462dc04d8128b5768b5016351e78b4b57885457fa4e9b6286b81c3ab446219a72cf9"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3c0a}}]}) 2.2322236s ago: executing program 3 (id=2219): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000025baf910450c03807a836a10af382c65a601020301090212000100000000090435c200"], 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x8, 0x70bd25, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) writev(r2, &(0x7f00000003c0), 0x100000000000022d) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snddsp(r5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a"], 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x0) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000400)="c5bbdace65c426b4dfe9d145ac6b8c02a63d2bfb8e9cacd2493f1897171021ad1d36860b636d233c5583fc252aeaf23fdde3cf39a375eb83c918478742a0a207d6b336d3be26957876e2bcd5105f625054b621a7d1e7737dbbc357f0cadf9fecfe543e1835", 0x65, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90624fc600a080a0006000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="0a00060008021100000100000c004300020015"], 0x34}}, 0x44) r10 = socket(0x10, 0x803, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='cgroup\x00') read(r11, &(0x7f0000001b00)=""/194, 0xc2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newqdisc={0x60, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x8000}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffeffff8}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xfff3}, {0xb}, {0x6, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_skbedit={0x38, 0x1f, 0x0, 0x0, {{0xc}, {0x4}, {0xa, 0x6, "6fbf84c10114"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x70}}, 0x0) 1.124687197s ago: executing program 0 (id=2220): add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="0451b7b83dba75a16e9e5b3c04f9ddda43957e4fdc0452995b729645ab6e1077ecad9bb378a87eaf4beac514eefea40caab3365179f8e5f07920042b435d87e9f20d52d4a9aa132c90be1fb526e71519a50a138a324d31166919f5ce31587c483595af92e970cb09299a2e45a4e1bb77e08c9f7caabc6454b5ccadeae581e9501bd12c1a2bd536a76c3b2e4219de5fbc91f13af1aca65e2fe9bb35062e3e54b76edb197e7362ea90b2c88e8969a95cd9d990171598446e04f6d7bd3d162c39957ec58996272c35aacf65b1b0b43423912480a94e98f8940778", 0xd9, 0xfffffffffffffffb) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000480)="e8", 0x1}, {0x0}], 0x2) r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="e0a6553dc17570c786297a4801bfe54f7f41d933004d646770aa4b6c10884c921fb90910e3191390adfcd4ce8eb1d80132a76897927f639687d15a80714fa2bbd7071ebe158c3986c7f1c904b6fd547abad157b93e19c23d4b93e732496a69e3c7032ec515d56a68d37df39480962e93e0bf44d4c833685244585b285a15c467ac0208df3817c39864f85dbc74f4c4a7b8516c03eb8ec39259b3b58778376b3b1197cee0b9a7f67170ffca12625c97fd58db02de68bbccc7", 0xb8, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)="11d527c81ef2f2b8395491ca547a68b827505ddaff3e5b15b7e5d6f460f0b16ce7ab14527f31accb356c29fed8f14826a33be87e56d8bf0d5d529f79584184f3b0deee4743891ea302d6a16a71d7b94dd38936b25c0ece37b52ff66af94edd5dc564f56c8aa56e75dd2fe70315a86f6faaa5558432335063849b0cf2ba01ba3646914d02d1d6497eec10b50a7f2d870abfa514d7361ba90144947b5cbfca02019d5ab037b579223ab4b6940141d4a1ae6fb98a36314ff6379c323bfc48cea60dace7c2a8372cacaf20da4248b44d498eb046ffacd565f2a410927d655b02909a6d468f042e7f5d27e55c15c311", 0xed, 0xfffffffffffffffd) syz_emit_ethernet(0x86, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) signalfd4(r3, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000500)={r2, r1, r1}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001600)={&(0x7f0000001540)={'ghash-clmulni\x00'}, &(0x7f0000001580)="9128c67dd471d2a58deedc3e277757b632bba09f7e23a785b9b18fbefbe1d483d66f3636df98b3efd984bca3afca8492c0dae2d90187b9d72e7d54675337709b6c18b65005b89475d92afc37eef71888a5a897963b628cf86dbaa674af55cb642bd41a34922764a04c4ba07cd22d8dec3481258773dc8a", 0x77}) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000078000000000001907864010100ac1414aa0b009078032c000047000000000000000089000000000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f0000017f000001e000000244080000000016000000003e385dec909cc74a0b988c569715a7885e65c2b1ab9ad94b526a28b6e2fac5307655d72e4a54dd03616f717d851e4ce66c17f2"], 0x0) r4 = add_key$fscrypt_v1(&(0x7f00000017c0), &(0x7f0000001800)={'fscrypt:', @auto=[0x55, 0x0, 0x5a, 0x34, 0x39, 0x61, 0x39, 0x37, 0x57, 0x39, 0x32, 0x30, 0x61, 0x32, 0x31, 0x62]}, &(0x7f0000001840)={0x0, "d4d3831897bb5005e53c0975af5ba2d0c8dd84a7118954175fac5eae04e796b9a63cd25be3853ea08ba6b533b704824c2432926f1ef1dd6dbd408210856e41b9", 0x31}, 0x48, 0x0) add_key$fscrypt_provisioning(&(0x7f0000001700), &(0x7f0000001740)={'syz', 0x0}, &(0x7f0000001780)={0x2, 0x0, @auto=[0x24, 0x32, 0x34, 0x2e, 0x30, 0x20]}, 0xe, r4) openat$vhost_vsock(0xffffff9c, &(0x7f00000016c0), 0x2, 0x0) 958.424192ms ago: executing program 1 (id=2221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x100000000000ae) getsockopt$sock_int(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) 903.590534ms ago: executing program 2 (id=2222): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x80) shutdown(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) ftruncate(0xffffffffffffffff, 0x40001) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffe4) close(0xffffffffffffffff) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 751.979535ms ago: executing program 0 (id=2223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000, 0x0, &(0x7f000046d000/0x4000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x4001, 0x3, 0x29c, 0x0, 0x0, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x8, @loopback, 0x0, 0x0, 'ip6gretap0\x00', 'wlan1\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x2}, @common=@unspec=@physdev={{0x64}, {'sit0\x00', {0xff}, 'erspan0\x00', {}, 0x0, 0x1c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x8, 0x6, 0x6, 0x0, 0x3], 0x0, 0x3}, {0x3, [0x1, 0x2, 0x4, 0x4, 0x3, 0x2], 0x6, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb, 0x46, "4fb9fc1d3f5b6d855e43e4ae6aedc7115412bb491e0605feccb8547ea0c5"}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2f8) ioctl$UFFDIO_REGISTER(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000048000), 0x3000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000000c40), 0x30, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x2000055, 0x8, 0x8, &(0x7f0000000d00)}}, 0xfffffffffffffed6) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0008000000008590fc231d8e13c8"], 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r6, @ANYBLOB="00042bbd7000fcdbdf250e00000000010680040005000800060007000000df000300677d6751c04b94e9109508f6175ebb66ec794826d9c913c1755435181ac02c43885bd12ec16cd46967c5e91e1994aa89086f74805d6d56f2b5f0939b6fe3262c7ea92dd821615280b9a2ca165c186f83fc612143964b5ec2831a20ea208e06e05c302d5cff6d069c03cab0792202c121fdf8dd1ee68d6250030bbc39250c2097fb012a27e00a19e560e31c6ae6a0c5749862a43555d7ecf33deca0e6348a4cb02b9efb946fe4c12f4fc4d505d6ccc735f5251ed56113ae0518ece2a4190d8f1fe8c2b72580e49d556bbfeddf2db39eac06119c110008000100de07000004000500040002001c000380080001000004000008000300fcffffff0800030009000000"], 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r7, &(0x7f000001aa80)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) syz_emit_ethernet(0x93, &(0x7f0000000540)={@local, @broadcast, @void, {@generic={0x88e7, "a5aaa5c37078ba111f67a72c70dfde4d5a91e460b102e73398a5f378eef49d277abcd51923d028707bf64ec01f68556eaab85f26df4b3a53377fc3c09419e20aa4ac85eea60beeb92f829d4216116d681c080f895a679284afb4029da071821463542d15b26ab179afe5a722ac73b1e905852f9f73f193226b630e4788f7f9e0e314293699"}}}, &(0x7f0000000100)={0x1, 0x4, [0x983, 0xd49, 0x28c, 0x58a]}) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000500000008000840000000000500050002000000050001000602000011000300686173683a6970"], 0x60}}, 0x0) 328.696176ms ago: executing program 0 (id=2225): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 311.599874ms ago: executing program 2 (id=2227): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x21, 0x5, 0x7fffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @mcast1, 0xd}, 0x1c) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaac7866264a4bd46da50a544aaaaaaaa0074d47f480086dd60000000"], 0x0) 78.831032ms ago: executing program 0 (id=2228): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x81, "a22095", "a053f56b7b46571427ddaaf0cc0e64b80fa69ddbf67611d38a9001c2d6d6dc47f7407a804373d1448ef9bba155b5ce29bf1d13a099a84f92d8a05c2c65c7bbf221a4bb87ace0fc0d50df2c0d469100718ce4ea390d9257f833cbca544e9ac7900e8bbbe6932c64de718ebd5dbecd66ccd137229d00d1e09f4c984865ce27545cf7eff0f429e1705f998d5430f0b91bbc6e8da2128645836b9d9843bd23f71e6bb7c792aff49774f6b30683f339b4c1e1f60e15fe7b192c3da6ffe8dda8c7451dc34f6f9a49e246bcf24d8d57d9798bc7878485a1c9b108626c8758b3a6d3dc37bc2453e70a9b24b1e3ba3e4d5ed500d451d97bff8c165572de86f64712298fa6"}}, 0x110) set_mempolicy(0x4005, 0x0, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r2}, 0x38) 20.503444ms ago: executing program 3 (id=2229): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) close(r1) 0s ago: executing program 4 (id=2230): socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x44004050}, 0x40084) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) kernel console output (not intermixed with test programs): ement() called with too large value -1319484247 (n: 0)! (syz.3.2039) [ 722.621489][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -400544663 (n: 0)! (syz.3.2039) [ 722.632859][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1704704 (n: 0)! (syz.3.2039) [ 722.643970][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 52035584 (n: 0)! (syz.3.2039) [ 722.655153][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 3276852 (n: 0)! (syz.3.2039) [ 722.666272][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 3276852 (n: 0)! (syz.3.2039) [ 722.677368][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 3276852 (n: 0)! (syz.3.2039) [ 722.688469][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 3276852 (n: 0)! (syz.3.2039) [ 722.699582][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 3276852 (n: 0)! (syz.3.2039) [ 722.710704][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 3276852 (n: 0)! (syz.3.2039) [ 722.721835][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 12 (n: 0)! (syz.3.2039) [ 722.732515][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 536871296 (n: 0)! (syz.3.2039) [ 722.743797][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 536871424 (n: 0)! (syz.3.2039) [ 722.755069][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 68096 (n: 0)! (syz.3.2039) [ 722.765990][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 262144 (n: 0)! (syz.3.2039) [ 722.777007][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 67584 (n: 0)! (syz.3.2039) [ 722.787930][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 131072 (n: 0)! (syz.3.2039) [ 722.798966][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 16 (n: 0)! (syz.3.2039) [ 722.809992][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 536872064 (n: 0)! (syz.3.2039) [ 722.821275][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 536871552 (n: 0)! (syz.3.2039) [ 722.832654][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 536871616 (n: 0)! (syz.3.2039) [ 722.843944][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 4129042 (n: 0)! (syz.3.2039) [ 722.855053][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1073741824 (n: 0)! (syz.3.2039) [ 722.866415][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -64385 (n: 0)! (syz.3.2039) [ 722.877429][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 34144512 (n: 0)! (syz.3.2039) [ 722.888616][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 65572 (n: 0)! (syz.3.2039) [ 722.899539][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 150994944 (n: 0)! (syz.3.2039) [ 722.910834][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 352321540 (n: 0)! (syz.3.2039) [ 722.922118][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 3 (n: 0)! (syz.3.2039) [ 722.932704][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 4202761 (n: 0)! (syz.3.2039) [ 722.943798][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 253886720 (n: 0)! (syz.3.2039) [ 722.955073][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -16447232 (n: 0)! (syz.3.2039) [ 722.966339][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1 (n: 0)! (syz.3.2039) [ 722.977014][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 16777215 (n: 0)! (syz.3.2039) [ 722.988201][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1879048180 (n: 0)! (syz.3.2039) [ 722.999647][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 13175616 (n: 0)! (syz.3.2039) [ 723.010835][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1910112256 (n: 0)! (syz.3.2039) [ 723.022189][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1526689366 (n: 0)! (syz.3.2039) [ 723.033552][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1273082259 (n: 0)! (syz.3.2039) [ 723.045001][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -230990600 (n: 0)! (syz.3.2039) [ 723.056360][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1549525490 (n: 0)! (syz.3.2039) [ 723.067751][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1106585555 (n: 0)! (syz.3.2039) [ 723.079206][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1619197342 (n: 0)! (syz.3.2039) [ 723.090651][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1109110811 (n: 0)! (syz.3.2039) [ 723.102011][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -393536333 (n: 0)! (syz.3.2039) [ 723.113388][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -782946677 (n: 0)! (syz.3.2039) [ 723.125003][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 2135540725 (n: 0)! (syz.3.2039) [ 723.136362][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 2146401577 (n: 0)! (syz.3.2039) [ 723.147745][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 732598411 (n: 0)! (syz.3.2039) [ 723.159028][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -906748029 (n: 0)! (syz.3.2039) [ 723.170399][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1549832106 (n: 0)! (syz.3.2039) [ 723.181775][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -401887371 (n: 0)! (syz.3.2039) [ 723.193128][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 116460639 (n: 0)! (syz.3.2039) [ 723.204400][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1767364070 (n: 0)! (syz.3.2039) [ 723.215759][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1790993411 (n: 0)! (syz.3.2039) [ 723.227208][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -839574784 (n: 0)! (syz.3.2039) [ 723.238571][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -194605051 (n: 0)! (syz.3.2039) [ 723.249929][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1896532684 (n: 0)! (syz.3.2039) [ 723.261387][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 94784691 (n: 0)! (syz.3.2039) [ 723.272584][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 67023176 (n: 0)! (syz.3.2039) [ 723.283770][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -935982677 (n: 0)! (syz.3.2039) [ 723.295127][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1379827230 (n: 0)! (syz.3.2039) [ 723.306573][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1564609569 (n: 0)! (syz.3.2039) [ 723.318035][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1097155771 (n: 0)! (syz.3.2039) [ 723.329393][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 201072787 (n: 0)! (syz.3.2039) [ 723.340674][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 542880671 (n: 0)! (syz.3.2039) [ 723.351946][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 934079584 (n: 0)! (syz.3.2039) [ 723.363215][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -2133185847 (n: 0)! (syz.3.2039) [ 723.374658][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1889652707 (n: 0)! (syz.3.2039) [ 723.386096][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1580753185 (n: 0)! (syz.3.2039) [ 723.397449][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1208441088 (n: 0)! (syz.3.2039) [ 723.408806][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 2145552404 (n: 0)! (syz.3.2039) [ 723.420165][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -435488305 (n: 0)! (syz.3.2039) [ 723.431523][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 473255718 (n: 0)! (syz.3.2039) [ 723.442791][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -2038837112 (n: 0)! (syz.3.2039) [ 723.454240][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1184941607 (n: 0)! (syz.3.2039) [ 723.465703][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1483513791 (n: 0)! (syz.3.2039) [ 723.477060][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -122238492 (n: 0)! (syz.3.2039) [ 723.488418][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value -1549036124 (n: 0)! (syz.3.2039) [ 723.499878][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1172754939 (n: 0)! (syz.3.2039) [ 723.511250][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1795166475 (n: 0)! (syz.3.2039) [ 723.522617][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1297445985 (n: 0)! (syz.3.2039) [ 723.533977][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1508826230 (n: 0)! (syz.3.2039) [ 723.545351][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 906684570 (n: 0)! (syz.3.2039) [ 723.556623][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1602785547 (n: 0)! (syz.3.2039) [ 723.567983][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 1249690676 (n: 0)! (syz.3.2039) [ 723.579344][T15749] plantronics 0003:047F:FFFF.0020: implement() called with too large value 114543 (n: 0)! (syz.3.2039) [ 723.590817][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.605541][ T6021] usb 1-1: SerialNumber: syz [ 723.776239][ T46] usb 4-1: reset high-speed USB device number 115 using dummy_hcd [ 723.903802][ T5288] usbhid 2-1:0.0: can't add hid device: -71 [ 723.912274][ T5288] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 723.936739][ T5288] usb 2-1: USB disconnect, device number 105 [ 724.057509][ T6021] usb 1-1: 0:2 : does not exist [ 724.154992][T15774] tipc: Started in network mode [ 724.166786][T15774] tipc: Node identity 7f000001, cluster identity 4711 [ 724.183644][T15774] tipc: Enabled bearer , priority 10 [ 724.592437][ T5254] usb 4-1: USB disconnect, device number 115 [ 724.710351][T15772] sctp: [Deprecated]: syz.0.2046 (pid 15772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.710351][T15772] Use struct sctp_sack_info instead [ 724.821986][ T6021] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 724.853335][ T6021] usb 1-1: USB disconnect, device number 4 [ 724.925841][ T46] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 724.969481][ T5254] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 725.085794][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 725.104344][ T46] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 725.113554][ T5254] usb 4-1: device descriptor read/64, error -71 [ 725.121065][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.132892][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.149245][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 725.158795][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.168080][ T46] usb 2-1: Product: syz [ 725.172493][ T46] usb 2-1: Manufacturer: syz [ 725.179194][ T46] usb 2-1: SerialNumber: syz [ 725.198287][ T6021] tipc: Node number set to 2130706433 [ 725.225452][ T1118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.402446][ T5254] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 725.475412][ T1118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.567670][ T5254] usb 4-1: device descriptor read/64, error -71 [ 725.677443][ T5254] usb usb4-port1: attempt power cycle [ 725.992851][ T1118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.045921][ T5254] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 726.117274][ T5254] usb 4-1: device descriptor read/8, error -71 [ 726.445900][ T5254] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 726.466564][ T5254] usb 4-1: device descriptor read/8, error -71 [ 726.484155][ T1118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.576556][ T5254] usb usb4-port1: unable to enumerate USB device [ 727.093386][ T1118] bridge_slave_1: left allmulticast mode [ 727.108916][ T1118] bridge_slave_1: left promiscuous mode [ 727.118522][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.127812][ T1118] bridge_slave_0: left allmulticast mode [ 727.133500][ T1118] bridge_slave_0: left promiscuous mode [ 727.142912][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.159976][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 727.219098][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 727.233525][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 727.257077][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 727.265830][ T937] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 727.276101][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 727.285001][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 727.296579][ T46] usb 2-1: 0:2 : does not exist [ 727.328682][T12892] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 727.350820][T12892] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 727.361355][T12892] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 727.365366][ T46] usb 2-1: USB disconnect, device number 106 [ 727.396358][T12892] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 727.408010][T12892] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 727.425319][T12892] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 727.455009][ T937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.466675][ T937] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 727.488415][ T937] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 727.503569][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.513457][ T937] usb 1-1: Product: syz [ 727.519280][ T937] usb 1-1: Manufacturer: syz [ 727.524012][ T937] usb 1-1: SerialNumber: syz [ 727.946028][ T937] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 728.145807][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 728.152822][ T937] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 728.183913][ T937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.196786][ T937] usb 4-1: config 0 has no interfaces? [ 728.206879][ T937] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 728.218709][ T937] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 728.230776][ T937] usb 4-1: Product: syz [ 728.235045][ T937] usb 4-1: SerialNumber: syz [ 728.242457][ T937] usb 4-1: config 0 descriptor?? [ 728.340220][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.359259][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.385235][ T1118] bond0 (unregistering): Released all slaves [ 728.445905][ T5288] usb 1-1: USB disconnect, device number 5 [ 728.531567][ T1118] tipc: Disabling bearer [ 728.540214][ T1118] tipc: Left network mode [ 728.958586][T12892] Bluetooth: hci0: command 0x0406 tx timeout [ 729.314465][T15798] chnl_net:caif_netlink_parms(): no params data found [ 729.356083][ T5245] Bluetooth: hci1: command tx timeout [ 729.396025][ T5288] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 729.410176][ T1118] hsr_slave_0: left promiscuous mode [ 729.424170][ T1118] hsr_slave_1: left promiscuous mode [ 729.433192][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.455819][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.475796][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.495824][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.515825][ T5245] Bluetooth: hci8: command tx timeout [ 729.546950][T15835] Cannot find del_set index 3 as target [ 729.551808][ T1118] veth1_macvtap: left promiscuous mode [ 729.559647][ T1118] veth0_macvtap: left promiscuous mode [ 729.560761][ T5288] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 729.565368][ T1118] veth1_vlan: left promiscuous mode [ 729.582676][ T1118] veth0_vlan: left promiscuous mode [ 729.633586][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 729.684264][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 729.738255][ T5288] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.777727][ T5288] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.822270][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.896514][ T5288] usb 1-1: config 0 descriptor?? [ 729.902527][T15828] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 730.333431][ T5288] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 730.352599][ T5288] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 730.382411][ T5288] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 730.635226][T15828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.677555][T15828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.731634][T15828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.764216][ T937] usb 4-1: USB disconnect, device number 120 [ 730.792896][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 730.846148][T15828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.928946][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 4 (n: 0)! (syz.0.2061) [ 730.939622][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 331525 (n: 0)! (syz.0.2061) [ 730.950696][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 8007744 (n: 0)! (syz.0.2061) [ 730.961847][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 578420736 (n: 0)! (syz.0.2061) [ 730.973250][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 500515914 (n: 0)! (syz.0.2061) [ 730.984564][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -51480251 (n: 0)! (syz.0.2061) [ 730.995859][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1918208297 (n: 0)! (syz.0.2061) [ 731.007340][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -173337792 (n: 0)! (syz.0.2061) [ 731.018734][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 434969649 (n: 0)! (syz.0.2061) [ 731.030024][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -422976202 (n: 0)! (syz.0.2061) [ 731.041393][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1805950075 (n: 0)! (syz.0.2061) [ 731.052849][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1217384845 (n: 0)! (syz.0.2061) [ 731.064306][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1918251972 (n: 0)! (syz.0.2061) [ 731.075685][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 2133159455 (n: 0)! (syz.0.2061) [ 731.087071][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1247605926 (n: 0)! (syz.0.2061) [ 731.098451][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 208209309 (n: 0)! (syz.0.2061) [ 731.109740][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 2137846634 (n: 0)! (syz.0.2061) [ 731.121109][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1637208745 (n: 0)! (syz.0.2061) [ 731.132479][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -340532198 (n: 0)! (syz.0.2061) [ 731.143853][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1821550507 (n: 0)! (syz.0.2061) [ 731.155236][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 676211771 (n: 0)! (syz.0.2061) [ 731.166520][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 28538691 (n: 0)! (syz.0.2061) [ 731.177735][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -556803649 (n: 0)! (syz.0.2061) [ 731.189122][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1999949919 (n: 0)! (syz.0.2061) [ 731.200596][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1090650993 (n: 0)! (syz.0.2061) [ 731.212058][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 297447779 (n: 0)! (syz.0.2061) [ 731.223345][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 159411040 (n: 0)! (syz.0.2061) [ 731.234631][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 185310760 (n: 0)! (syz.0.2061) [ 731.245945][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -301362776 (n: 0)! (syz.0.2061) [ 731.257319][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -574699157 (n: 0)! (syz.0.2061) [ 731.268695][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1825173006 (n: 0)! (syz.0.2061) [ 731.280171][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -49656941 (n: 0)! (syz.0.2061) [ 731.291464][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1319484247 (n: 0)! (syz.0.2061) [ 731.302920][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -400544663 (n: 0)! (syz.0.2061) [ 731.314290][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1704704 (n: 0)! (syz.0.2061) [ 731.325394][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 52035584 (n: 0)! (syz.0.2061) [ 731.336592][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 3276852 (n: 0)! (syz.0.2061) [ 731.347727][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 3276852 (n: 0)! (syz.0.2061) [ 731.358845][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 3276852 (n: 0)! (syz.0.2061) [ 731.369989][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 3276852 (n: 0)! (syz.0.2061) [ 731.381117][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 3276852 (n: 0)! (syz.0.2061) [ 731.392235][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 3276852 (n: 0)! (syz.0.2061) [ 731.403353][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 12 (n: 0)! (syz.0.2061) [ 731.414029][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 536871296 (n: 0)! (syz.0.2061) [ 731.425314][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 536871424 (n: 0)! (syz.0.2061) [ 731.436604][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 68096 (n: 0)! (syz.0.2061) [ 731.447548][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 262144 (n: 0)! (syz.0.2061) [ 731.458575][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 67584 (n: 0)! (syz.0.2061) [ 731.469521][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 131072 (n: 0)! (syz.0.2061) [ 731.480542][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 16 (n: 0)! (syz.0.2061) [ 731.491219][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 536872064 (n: 0)! (syz.0.2061) [ 731.502508][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 536871552 (n: 0)! (syz.0.2061) [ 731.513791][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 536871616 (n: 0)! (syz.0.2061) [ 731.525087][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 4129042 (n: 0)! (syz.0.2061) [ 731.536197][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1073741824 (n: 0)! (syz.0.2061) [ 731.547577][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -64385 (n: 0)! (syz.0.2061) [ 731.558603][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 34144512 (n: 0)! (syz.0.2061) [ 731.569800][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 65572 (n: 0)! (syz.0.2061) [ 731.580734][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 150994944 (n: 0)! (syz.0.2061) [ 731.592025][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 352321540 (n: 0)! (syz.0.2061) [ 731.603453][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 3 (n: 0)! (syz.0.2061) [ 731.614052][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 4202761 (n: 0)! (syz.0.2061) [ 731.625174][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 253886720 (n: 0)! (syz.0.2061) [ 731.636465][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -16447232 (n: 0)! (syz.0.2061) [ 731.647850][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1 (n: 0)! (syz.0.2061) [ 731.658534][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 16777215 (n: 0)! (syz.0.2061) [ 731.669765][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1879048180 (n: 0)! (syz.0.2061) [ 731.681229][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 13175616 (n: 0)! (syz.0.2061) [ 731.692445][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1910112256 (n: 0)! (syz.0.2061) [ 731.703824][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1526689366 (n: 0)! (syz.0.2061) [ 731.715196][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1273082259 (n: 0)! (syz.0.2061) [ 731.726651][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -230990600 (n: 0)! (syz.0.2061) [ 731.738020][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1549525490 (n: 0)! (syz.0.2061) [ 731.749392][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1106585555 (n: 0)! (syz.0.2061) [ 731.760859][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1619197342 (n: 0)! (syz.0.2061) [ 731.772340][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1109110811 (n: 0)! (syz.0.2061) [ 731.783729][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -393536333 (n: 0)! (syz.0.2061) [ 731.795117][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -782946677 (n: 0)! (syz.0.2061) [ 731.806536][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 2135540725 (n: 0)! (syz.0.2061) [ 731.817923][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 2146401577 (n: 0)! (syz.0.2061) [ 731.829310][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 732598411 (n: 0)! (syz.0.2061) [ 731.840606][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -906748029 (n: 0)! (syz.0.2061) [ 731.851990][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1549832106 (n: 0)! (syz.0.2061) [ 731.863372][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -401887371 (n: 0)! (syz.0.2061) [ 731.874747][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 116460639 (n: 0)! (syz.0.2061) [ 731.886037][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1767364070 (n: 0)! (syz.0.2061) [ 731.897433][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1790993411 (n: 0)! (syz.0.2061) [ 731.908831][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -839574784 (n: 0)! (syz.0.2061) [ 731.920209][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -194605051 (n: 0)! (syz.0.2061) [ 731.931594][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1896532684 (n: 0)! (syz.0.2061) [ 731.943051][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 94784691 (n: 0)! (syz.0.2061) [ 731.954248][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 67023176 (n: 0)! (syz.0.2061) [ 731.965439][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -935982677 (n: 0)! (syz.0.2061) [ 731.976812][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1379827230 (n: 0)! (syz.0.2061) [ 731.988271][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1564609569 (n: 0)! (syz.0.2061) [ 731.999733][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1097155771 (n: 0)! (syz.0.2061) [ 732.011106][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 201072787 (n: 0)! (syz.0.2061) [ 732.022396][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 542880671 (n: 0)! (syz.0.2061) [ 732.033702][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 934079584 (n: 0)! (syz.0.2061) [ 732.044986][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -2133185847 (n: 0)! (syz.0.2061) [ 732.056454][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1889652707 (n: 0)! (syz.0.2061) [ 732.067914][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1580753185 (n: 0)! (syz.0.2061) [ 732.079287][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1208441088 (n: 0)! (syz.0.2061) [ 732.090659][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 2145552404 (n: 0)! (syz.0.2061) [ 732.102035][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -435488305 (n: 0)! (syz.0.2061) [ 732.113411][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 473255718 (n: 0)! (syz.0.2061) [ 732.124700][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -2038837112 (n: 0)! (syz.0.2061) [ 732.136168][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1184941607 (n: 0)! (syz.0.2061) [ 732.147668][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1483513791 (n: 0)! (syz.0.2061) [ 732.159054][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -122238492 (n: 0)! (syz.0.2061) [ 732.170434][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value -1549036124 (n: 0)! (syz.0.2061) [ 732.181909][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1172754939 (n: 0)! (syz.0.2061) [ 732.193286][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1795166475 (n: 0)! (syz.0.2061) [ 732.204664][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1297445985 (n: 0)! (syz.0.2061) [ 732.216042][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1508826230 (n: 0)! (syz.0.2061) [ 732.227419][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 906684570 (n: 0)! (syz.0.2061) [ 732.238710][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1602785547 (n: 0)! (syz.0.2061) [ 732.250089][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 1249690676 (n: 0)! (syz.0.2061) [ 732.261464][T15828] plantronics 0003:047F:FFFF.0021: implement() called with too large value 114543 (n: 0)! (syz.0.2061) [ 732.305915][ T5245] Bluetooth: hci1: command tx timeout [ 732.311393][ T5245] Bluetooth: hci8: command tx timeout [ 732.369708][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 732.435820][ T46] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 732.525799][ T937] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 732.684025][ T937] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 732.697872][ T937] usb 4-1: config 0 has no interface number 0 [ 732.741890][ T937] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 732.756362][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.764415][ T937] usb 4-1: Product: syz [ 732.772894][ T937] usb 4-1: Manufacturer: syz [ 732.778566][ T937] usb 4-1: SerialNumber: syz [ 732.795962][ T937] usb 4-1: config 0 descriptor?? [ 733.030618][ T937] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 733.053481][ T937] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 733.084930][ T937] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 733.126869][ T937] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 733.146487][ T937] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 733.224393][ T6021] usb 1-1: USB disconnect, device number 6 [ 733.459348][ T6021] usb 4-1: USB disconnect, device number 121 [ 733.509084][ T6021] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 733.538404][ T6021] keyspan 4-1:0.133: device disconnected [ 733.994505][T15799] chnl_net:caif_netlink_parms(): no params data found [ 734.137670][T15798] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.155052][T15798] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.179655][T15798] bridge_slave_0: entered allmulticast mode [ 734.199480][T15798] bridge_slave_0: entered promiscuous mode [ 734.207551][ T5288] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 734.233765][T15798] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.243228][T15798] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.270108][T15798] bridge_slave_1: entered allmulticast mode [ 734.285484][T15798] bridge_slave_1: entered promiscuous mode [ 734.368624][ T937] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 734.397560][T12892] Bluetooth: hci8: command tx timeout [ 734.403151][T12892] Bluetooth: hci1: command tx timeout [ 734.408725][ T5288] usb 2-1: Using ep0 maxpacket: 8 [ 734.419111][ T5288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.432814][ T5288] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 734.444622][ T5288] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 734.465370][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.482368][ T5288] usb 2-1: config 0 descriptor?? [ 734.544115][T15798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.568980][ T937] usb 4-1: Using ep0 maxpacket: 16 [ 734.576662][ T937] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 734.588488][ T937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.625721][ T937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.627892][T15798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.675907][ T937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.685055][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.744314][ T937] usb 4-1: Product: syz [ 734.796701][ T937] usb 4-1: Manufacturer: syz [ 734.801366][ T937] usb 4-1: SerialNumber: syz [ 734.974180][T15799] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.982399][T15799] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.999543][T15799] bridge_slave_0: entered allmulticast mode [ 735.006988][T15799] bridge_slave_0: entered promiscuous mode [ 735.033921][ T6021] usb 2-1: USB disconnect, device number 107 [ 735.087330][T15798] team0: Port device team_slave_0 added [ 735.188064][T15798] team0: Port device team_slave_1 added [ 735.194317][T15799] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.206209][T15799] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.213452][T15799] bridge_slave_1: entered allmulticast mode [ 735.256938][T15799] bridge_slave_1: entered promiscuous mode [ 735.285998][ T5288] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 735.481582][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.493617][ T5288] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 735.502650][ T5288] usb 1-1: config 1 has no interface number 0 [ 735.509011][ T5288] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.529071][ T5288] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.531606][T15799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.538436][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.538468][ T5288] usb 1-1: Product: syz [ 735.538489][ T5288] usb 1-1: Manufacturer: syz [ 735.564549][ T5288] usb 1-1: SerialNumber: syz [ 735.581962][ T5288] cdc_ncm 1-1:1.1: skipping garbage [ 735.590910][ T5288] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 735.599135][ T5288] cdc_ncm 1-1:1.1: bind() failure [ 735.676794][T15798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.718008][T15798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.797563][T15798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.833284][T15799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.939341][ T6021] usb 1-1: USB disconnect, device number 7 [ 735.951730][T15798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.998146][T15798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.071731][T15798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.152955][T12892] Bluetooth: hci6: Malformed LE Event: 0x0d [ 736.478339][T12892] Bluetooth: hci1: command tx timeout [ 736.478367][ T5245] Bluetooth: hci8: command tx timeout [ 736.633955][T15799] team0: Port device team_slave_0 added [ 736.664168][T15799] team0: Port device team_slave_1 added [ 736.722555][T15798] hsr_slave_0: entered promiscuous mode [ 736.739277][T15798] hsr_slave_1: entered promiscuous mode [ 736.766121][T15798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.775794][T15798] Cannot create hsr debugfs directory [ 736.942563][T15799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.949984][T15799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.976563][T15799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.075159][T15799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.105881][T15799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.119401][T15883] input: syz0 as /devices/virtual/input/input40 [ 737.233332][T15799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.552678][ T937] usb 4-1: 0:2 : does not exist [ 737.662970][ T937] usb 4-1: USB disconnect, device number 122 [ 737.720543][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 737.775950][ T5287] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 737.782728][ T5251] udevd[5251]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.926008][ T5287] usb 1-1: Using ep0 maxpacket: 16 [ 737.951180][T15799] hsr_slave_0: entered promiscuous mode [ 737.969439][ T5287] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 737.985810][ T5287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.997871][ T5287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.014415][ T5287] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.025087][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.033205][ T5287] usb 1-1: Product: syz [ 738.039462][ T5287] usb 1-1: Manufacturer: syz [ 738.044114][ T5287] usb 1-1: SerialNumber: syz [ 738.044684][T15799] hsr_slave_1: entered promiscuous mode [ 738.148234][T15799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.190196][T15799] Cannot create hsr debugfs directory [ 738.422064][T15798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.780407][T15798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.886392][ T29] audit: type=1326 audit(1729556553.025:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 738.942017][ T29] audit: type=1326 audit(1729556553.025:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 738.979577][ T29] audit: type=1326 audit(1729556553.035:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=195 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 739.057517][ T29] audit: type=1326 audit(1729556553.035:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 739.059670][T15798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.081665][ T29] audit: type=1326 audit(1729556553.035:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 739.169242][ T29] audit: type=1326 audit(1729556553.055:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 739.223137][ T29] audit: type=1326 audit(1729556553.055:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 739.245551][ T29] audit: type=1326 audit(1729556553.055:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 739.270118][ T29] audit: type=1326 audit(1729556553.055:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 739.293245][ T29] audit: type=1326 audit(1729556553.055:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15910 comm="syz.1.2078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 739.905470][T15798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.814281][ T5287] usb 1-1: 0:2 : does not exist [ 740.897618][ T5287] usb 1-1: USB disconnect, device number 8 [ 740.947425][ T5251] udevd[5251]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 741.345921][ T5287] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 741.508685][ T5287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.629180][ T5287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 741.643574][ T5287] usb 1-1: config 1 has no interface number 0 [ 741.649943][ T5287] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 741.667761][ T5287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.679255][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.687925][ T5287] usb 1-1: Product: syz [ 741.692202][ T5287] usb 1-1: Manufacturer: syz [ 741.697053][ T5287] usb 1-1: SerialNumber: syz [ 741.713473][ T5287] cdc_ncm 1-1:1.1: skipping garbage [ 741.719137][ T5287] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 741.730586][ T5287] cdc_ncm 1-1:1.1: bind() failure [ 742.162917][ T6021] usb 1-1: USB disconnect, device number 9 [ 742.633221][T15799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 742.670655][T15799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 742.695822][ T6021] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 742.770346][T15799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 742.839099][T15799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 742.846194][ T6021] usb 4-1: device descriptor read/64, error -71 [ 742.985868][ T5289] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 743.080085][T15798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 743.096592][ T6021] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 743.126869][T15798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 743.145898][ T5289] usb 2-1: Using ep0 maxpacket: 16 [ 743.153550][ T5289] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 743.158064][T15798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 743.171207][ T5289] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.184458][ T5289] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 743.199386][ T5289] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 743.209648][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.217855][ T5289] usb 2-1: Product: syz [ 743.222058][ T5289] usb 2-1: Manufacturer: syz [ 743.227387][ T5289] usb 2-1: SerialNumber: syz [ 743.249277][T15798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 743.256542][ T6021] usb 4-1: device descriptor read/64, error -71 [ 743.323680][T15799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.365832][ T5254] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 743.389149][ T6021] usb usb4-port1: attempt power cycle [ 743.410690][T15799] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.470470][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.477645][ T7305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.537675][ T5254] usb 1-1: Using ep0 maxpacket: 32 [ 743.573344][ T5254] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.630011][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.637223][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.645093][ T5254] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.675156][ T5254] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 743.756280][ T6021] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 743.789911][ T6021] usb 4-1: device descriptor read/8, error -71 [ 743.863562][ T5254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.997538][ T5254] hub 1-1:4.0: USB hub found [ 744.156687][ T6021] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 744.192479][ T5254] hub 1-1:4.0: 2 ports detected [ 744.234431][ T5254] usb 1-1: selecting invalid altsetting 1 [ 744.244349][ T6021] usb 4-1: device descriptor read/8, error -71 [ 744.299253][ T5254] hub 1-1:4.0: Using single TT (err -22) [ 744.327370][ T5245] Bluetooth: hci5: command 0x0406 tx timeout [ 744.379882][T15798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.406251][ T6021] usb usb4-port1: unable to enumerate USB device [ 744.451614][T15966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.482036][T15798] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.562188][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.569400][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.615576][T15966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.732830][T15799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.831077][ T2532] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.838280][ T2532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.901852][ T5254] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 744.908554][ T5254] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 744.969550][ T5254] usb 1-1: USB disconnect, device number 10 [ 745.036631][T15798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 745.175490][T15798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 745.260984][ T5289] usb 2-1: 0:2 : does not exist [ 745.324220][ T5289] usb 2-1: USB disconnect, device number 108 [ 745.389155][ T5251] udevd[5251]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.409343][T15798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.447519][T15799] veth0_vlan: entered promiscuous mode [ 745.511912][T15799] veth1_vlan: entered promiscuous mode [ 745.543052][T15799] veth0_macvtap: entered promiscuous mode [ 745.552568][T15799] veth1_macvtap: entered promiscuous mode [ 745.572553][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.583365][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.593564][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.604281][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.614691][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.626408][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.637247][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.648080][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.658251][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.669303][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.679289][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.689987][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.699930][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.710507][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.723790][T15799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.781498][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.792986][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.813306][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.825516][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.836028][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.850924][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.860837][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.878927][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.976482][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.049545][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.136794][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.156663][ T25] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 746.163944][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.186984][T15799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.225901][ T6021] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 746.244696][T15799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.280060][T15799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.353301][T15798] veth0_vlan: entered promiscuous mode [ 746.399420][ T25] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 746.408721][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.420618][ T6021] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 746.428960][ T6021] usb 1-1: config 0 has no interface number 0 [ 746.453111][ T6021] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 746.469800][T15799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.498837][T15799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.509821][T15799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.515679][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.528636][ T25] usb 4-1: config 0 descriptor?? [ 746.533854][ T6021] usb 1-1: Product: syz [ 746.539488][T15799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.542269][ T6021] usb 1-1: Manufacturer: syz [ 746.552952][ T6021] usb 1-1: SerialNumber: syz [ 746.572244][ T6021] usb 1-1: config 0 descriptor?? [ 746.582546][T15798] veth1_vlan: entered promiscuous mode [ 746.772339][ T25] kaweth 4-1:0.0: Firmware present in device. [ 746.829409][ T6021] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 746.854104][T15798] veth0_macvtap: entered promiscuous mode [ 746.879108][ T6021] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 746.899953][ T6021] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 746.936963][ T6021] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 746.956797][ T25] kaweth 4-1:0.0: Statistics collection: 0 [ 746.969721][T15798] veth1_macvtap: entered promiscuous mode [ 746.977397][ T25] kaweth 4-1:0.0: Multicast filter limit: 0 [ 746.984479][ T25] kaweth 4-1:0.0: MTU: 0 [ 746.992487][ T25] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 747.004379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.006761][ T6021] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 747.056072][ T5254] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 747.058435][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.192015][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.206670][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.214537][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.229705][ T5254] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 747.242227][ T5254] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 747.247592][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.264086][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.275213][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.307328][ T5254] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 747.326797][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.352126][ T5288] usb 1-1: USB disconnect, device number 11 [ 747.364239][ T5254] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 747.374787][ T5254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.384670][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.391249][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.399502][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.417630][ T5254] usb 2-1: config 0 descriptor?? [ 747.424198][T15988] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 747.471577][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.493048][ T5288] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 747.502866][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.519013][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.531355][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.540828][ T5288] keyspan 1-1:0.133: device disconnected [ 747.552162][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.596602][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.607669][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.619549][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.630870][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.642661][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.656177][T15798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.668392][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.685304][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.696199][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.708445][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.718611][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.729342][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.739534][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.751151][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.762416][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.775472][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.802397][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.816151][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.826382][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.837099][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.847052][T15798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.858742][T15798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.872546][T15798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.920584][ T5254] plantronics 0003:047F:FFFF.0022: unbalanced delimiter at end of report description [ 747.970791][T15798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.997078][ T25] kaweth 4-1:0.0: kaweth interface created at eth1 [ 748.010469][ T5254] plantronics 0003:047F:FFFF.0022: parse failed [ 748.028287][ T25] usb 4-1: USB disconnect, device number 127 [ 748.036282][T15798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.038648][ T5254] plantronics 0003:047F:FFFF.0022: probe with driver plantronics failed with error -22 [ 748.066179][T15798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.105965][T15798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.141208][ T5254] usb 2-1: USB disconnect, device number 109 [ 748.493156][ T7305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.503937][ T7305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.658402][ T7305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.681056][ T7305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.818224][ T25] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 749.065741][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 749.080837][ T25] usb 3-1: config 5 has an invalid interface number: 35 but max is 1 [ 749.115926][ T25] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 749.139867][ T25] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 749.140865][ T5287] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 749.149845][ T25] usb 3-1: config 5 has no interface number 0 [ 749.162117][ T25] usb 3-1: config 5 has no interface number 1 [ 749.169192][ T25] usb 3-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.182611][ T25] usb 3-1: config 5 interface 4 altsetting 9 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 749.194832][ T25] usb 3-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 749.211887][ T25] usb 3-1: config 5 interface 35 has no altsetting 0 [ 749.218755][ T25] usb 3-1: config 5 interface 4 has no altsetting 0 [ 749.226126][ T25] usb 3-1: config 5 interface 4 has no altsetting 1 [ 749.237943][ T25] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 749.255801][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.263843][ T25] usb 3-1: Product: syz [ 749.264228][T16042] fuse: Bad value for 'user_id' [ 749.273774][ T25] usb 3-1: Manufacturer: syz [ 749.279829][ T25] usb 3-1: SerialNumber: syz [ 749.287158][ T5288] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 749.305804][ T6021] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 749.313784][T16042] fuse: Bad value for 'user_id' [ 749.340675][ T5287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.368119][ T5287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 749.382515][T16042] fuse: Bad value for 'group_id' [ 749.391754][T16042] fuse: Bad value for 'group_id' [ 749.408397][ T5287] usb 1-1: config 1 has no interface number 0 [ 749.424894][ T5287] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 749.455123][ T5287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.464687][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 749.476690][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.485103][ T5287] usb 1-1: Product: syz [ 749.489766][ T5287] usb 1-1: Manufacturer: syz [ 749.492489][ T6021] usb 2-1: Using ep0 maxpacket: 8 [ 749.494380][ T5287] usb 1-1: SerialNumber: syz [ 749.513315][ T6021] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 749.528768][ T5288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.544841][ T5288] usb 4-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 749.550484][ T6021] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.556264][ T5287] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 749.565709][ T6021] usb 2-1: config 0 has no interfaces? [ 749.571724][ T5287] cdc_ncm 1-1:1.1: bind() failure [ 749.584802][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.592994][ T5288] usb 4-1: Product: syz [ 749.597860][ T5288] usb 4-1: Manufacturer: syz [ 749.602507][ T5288] usb 4-1: SerialNumber: syz [ 749.621030][ T25] ttusbir 3-1:5.35: cannot find expected altsetting [ 749.633442][ T5288] usb 4-1: config 0 descriptor?? [ 749.652864][ T5288] usb 4-1: bad CDC descriptors [ 749.670839][ T25] ttusbir 3-1:5.4: cannot find expected altsetting [ 749.699078][ T6021] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 749.708769][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 749.718134][ T6021] usb 2-1: Product: syz [ 749.723038][ T6021] usb 2-1: SerialNumber: syz [ 749.756593][ T6021] usb 2-1: config 0 descriptor?? [ 749.765892][ T25] usb 3-1: USB disconnect, device number 79 [ 749.860540][T16025] i2c i2c-0: Invalid block write size 47 [ 749.890542][ T5287] usb 1-1: USB disconnect, device number 12 [ 749.892716][ T6021] usb 4-1: USB disconnect, device number 2 [ 750.846876][T16087] tipc: Enabling of bearer rejected, already enabled [ 750.919017][ T6021] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 751.052397][T16088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.096509][ T6021] usb 3-1: Using ep0 maxpacket: 16 [ 751.104175][ T6021] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 751.121380][ T6021] usb 3-1: config 0 has no interface number 0 [ 751.141435][T16088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.154279][ T6021] usb 3-1: config 0 interface 224 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 751.171137][ T6021] usb 3-1: config 0 interface 224 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 751.220127][ T6021] usb 3-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=ea.ac [ 751.235455][ T6021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.260338][ T6021] usb 3-1: Product: syz [ 751.266845][ T6021] usb 3-1: Manufacturer: syz [ 751.271597][ T6021] usb 3-1: SerialNumber: syz [ 751.290611][ T6021] usb 3-1: config 0 descriptor?? [ 751.306037][T16078] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 751.316549][T16078] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 751.360400][T16105] binder: 16104:16105 ioctl c0306201 0 returned -14 [ 751.449503][ T5254] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 751.543524][T16078] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 751.560910][T16078] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 751.595560][ T6021] cdc_subset 3-1:0.224 usb0: register 'cdc_subset' at usb-dummy_hcd.2-1, ALi M5632, be:0c:e8:b7:d0:f8 [ 751.635784][ T5254] usb 1-1: Using ep0 maxpacket: 32 [ 751.643103][ T5254] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.678002][ T5254] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 751.694142][ T5254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.710925][ T5254] usb 1-1: Product: syz [ 751.715357][ T5254] usb 1-1: Manufacturer: syz [ 751.732423][ T5254] usb 1-1: SerialNumber: syz [ 751.754945][ T5254] usb 1-1: config 0 descriptor?? [ 751.773396][ T5254] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 751.980145][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.990959][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.145963][ T5289] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 752.173652][ T5287] usb 2-1: USB disconnect, device number 110 [ 752.306168][ T5289] usb 4-1: Using ep0 maxpacket: 8 [ 752.319971][ T5289] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 752.331016][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.377390][ T5289] usb 4-1: Product: syz [ 752.385579][ T5289] usb 4-1: Manufacturer: syz [ 752.390544][ T5289] usb 4-1: SerialNumber: syz [ 752.429809][ T5289] usb 4-1: config 0 descriptor?? [ 752.432621][T16101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.458133][T16101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.643462][ T5289] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 752.652172][ T5287] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 752.849620][ T5287] usb 2-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 752.859775][ T5289] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 752.873369][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.890853][ T5289] usb 4-1: USB disconnect, device number 3 [ 752.901966][ T5287] usb 2-1: Product: syz [ 752.931006][ T5287] usb 2-1: Manufacturer: syz [ 752.960766][ T5287] usb 2-1: SerialNumber: syz [ 752.999125][ T5287] usb 2-1: config 0 descriptor?? [ 753.041845][T16138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.064444][T16138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.269246][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.327052][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.686783][T16147] binder: 16146:16147 ioctl 400454d1 20000000 returned -22 [ 753.838188][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 753.869935][ T5287] usb 3-1: USB disconnect, device number 80 [ 753.890837][ T5287] cdc_subset 3-1:0.224 usb0: unregister 'cdc_subset' usb-dummy_hcd.2-1, ALi M5632 [ 754.022031][ T5254] gspca_sunplus: reg_r err -110 [ 754.031177][ T5254] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 754.114597][T16157] : entered promiscuous mode [ 754.128784][ T9] usb 1-1: USB disconnect, device number 13 [ 754.885840][ T5287] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 755.065888][ T5287] usb 4-1: Using ep0 maxpacket: 8 [ 755.074120][ T5287] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 755.088778][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.102810][ T5287] usb 4-1: config 0 has no interfaces? [ 755.111653][ T5287] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 755.182165][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 755.283024][ T5287] usb 4-1: Product: syz [ 755.333924][ T5287] usb 4-1: SerialNumber: syz [ 755.363248][ T5287] usb 4-1: config 0 descriptor?? [ 755.525824][ T5289] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 755.619514][T16187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.654736][T16187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.685943][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 755.733215][ T5289] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 755.753246][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.764636][ T5289] usb 3-1: config 0 has no interfaces? [ 755.775414][ T5289] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 755.785082][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 755.793608][ T5289] usb 3-1: Product: syz [ 755.798029][ T5289] usb 3-1: SerialNumber: syz [ 755.804826][ T5289] usb 3-1: config 0 descriptor?? [ 755.807375][T16187] binder_alloc: 16186: pid 16186 spamming oneway? 1 buffers allocated for a total size of 4096 [ 755.956220][ T5235] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 756.131633][ T5235] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.143958][ T5235] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 756.155272][ T5235] usb 1-1: config 1 has no interface number 0 [ 756.167437][ T5235] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 756.183724][ T5235] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 756.194228][ T5235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.202722][ T5235] usb 1-1: Product: syz [ 756.207879][ T5235] usb 1-1: Manufacturer: syz [ 756.212602][ T5235] usb 1-1: SerialNumber: syz [ 756.247521][ T5235] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 756.255199][ T5235] cdc_ncm 1-1:1.1: bind() failure [ 756.388919][ T5235] usb 2-1: USB disconnect, device number 111 [ 756.525473][ T5287] usb 1-1: USB disconnect, device number 14 [ 756.680035][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 756.719065][T16199] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.824847][T16199] bridge_slave_0 (unregistering): left allmulticast mode [ 756.832757][T16199] bridge_slave_0 (unregistering): left promiscuous mode [ 756.841036][T16199] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.362269][T16216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.376507][T16216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.691051][ T5235] usb 4-1: USB disconnect, device number 4 [ 757.712469][T16219] Cannot find del_set index 3 as target [ 758.084046][ T5235] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 758.233062][ T5289] usb 3-1: USB disconnect, device number 81 [ 758.275690][ T5235] usb 4-1: Using ep0 maxpacket: 32 [ 758.298258][ T5235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.350216][ T5235] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 758.368446][ T5235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.377850][ T5235] usb 4-1: Product: syz [ 758.382127][ T5235] usb 4-1: Manufacturer: syz [ 758.388353][ T5235] usb 4-1: SerialNumber: syz [ 758.395142][ T5235] usb 4-1: config 0 descriptor?? [ 758.404826][ T5235] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 758.409211][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 758.425917][ T5254] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 758.577470][ T5254] usb 2-1: Using ep0 maxpacket: 32 [ 758.601418][T16236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.636198][ T5254] usb 2-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=5b.c2 [ 758.637203][T16236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.646590][ T5254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.663419][ T5254] usb 2-1: Product: syz [ 758.667925][ T5254] usb 2-1: Manufacturer: syz [ 758.672585][ T5254] usb 2-1: SerialNumber: syz [ 758.699047][ T5254] usb 2-1: config 0 descriptor?? [ 758.987069][ T5289] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 759.021955][T16230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.057456][T16230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.137164][ T5289] usb 3-1: device descriptor read/64, error -71 [ 759.218011][ T25] usb 2-1: USB disconnect, device number 112 [ 759.373699][T16243] tipc: Started in network mode [ 759.379944][T16243] tipc: Node identity 7f000001, cluster identity 4711 [ 759.388662][T16243] tipc: Enabled bearer , priority 10 [ 759.396209][ T5289] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 759.536757][ T5289] usb 3-1: device descriptor read/64, error -71 [ 759.650019][ T5289] usb usb3-port1: attempt power cycle [ 759.660263][ T5235] gspca_sunplus: reg_r err -71 [ 759.993264][ T25] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 760.007833][ T5289] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 760.037553][ T5289] usb 3-1: device descriptor read/8, error -71 [ 760.198178][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 760.207755][ T25] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 760.232482][T16249] Cannot find add_set index 0 as target [ 760.244126][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.268030][ T25] usb 2-1: config 0 has no interfaces? [ 760.281053][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 760.283166][ T5289] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 760.300271][ T25] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 760.312910][ T25] usb 2-1: Product: syz [ 760.319997][ T25] usb 2-1: SerialNumber: syz [ 760.326829][ T25] usb 2-1: config 0 descriptor?? [ 760.351192][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 760.357475][ T5289] usb 3-1: device descriptor read/8, error -71 [ 760.496034][ T5289] usb usb3-port1: unable to enumerate USB device [ 760.515715][ T5289] tipc: Node number set to 2130706433 [ 760.775955][ T5235] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 760.786534][ T5235] usb 4-1: USB disconnect, device number 5 [ 761.256019][T16257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 761.274867][T16257] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 761.582951][T16280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.626776][T16280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.698212][T16257] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 761.765494][T16257] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 761.962287][T16257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 762.002829][T16257] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 762.135773][ T5235] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 762.273687][T16257] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 762.287525][T16257] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 762.310078][ T5235] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 762.346883][ T5235] usb 3-1: config 0 has no interface number 0 [ 762.380117][ T5235] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 762.406490][ T5235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.428542][ T5235] usb 3-1: Product: syz [ 762.437629][ T5235] usb 3-1: Manufacturer: syz [ 762.443761][ T5235] usb 3-1: SerialNumber: syz [ 762.455097][ T5235] usb 3-1: config 0 descriptor?? [ 762.485348][T16257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 762.545808][T16257] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 762.687159][ T5235] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 762.702679][ T5235] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 762.710959][ T5235] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 762.725099][ T5235] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 762.737298][ T5235] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 762.826102][T16257] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 762.863318][T16257] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 762.891362][ T25] usb 2-1: USB disconnect, device number 113 [ 763.110249][ T5235] usb 3-1: USB disconnect, device number 86 [ 763.120215][ T5235] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 763.166872][ T5235] keyspan 3-1:0.133: device disconnected [ 763.341568][T16309] tipc: Enabling of bearer rejected, already enabled [ 763.375945][ T25] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 763.587418][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.600203][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 763.609333][ T25] usb 2-1: config 1 has no interface number 0 [ 763.615477][ T25] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.615926][T16257] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 763.634727][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.654479][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.671466][ T25] usb 2-1: Product: syz [ 763.706307][T16257] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 763.727183][ T25] usb 2-1: Manufacturer: syz [ 763.731853][ T25] usb 2-1: SerialNumber: syz [ 763.788040][ T25] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 763.817029][ T25] cdc_ncm 2-1:1.1: bind() failure [ 763.903158][T16257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 763.924206][T16257] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 763.938536][T16257] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 763.968043][T16257] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 764.011838][ T5288] usb 2-1: USB disconnect, device number 114 [ 764.210912][T16332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.297825][T16332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.354718][T16332] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 764.736093][T16341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2156'. [ 765.048039][T16348] Cannot find del_set index 3 as target [ 765.512659][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.590810][T16360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.648657][T16360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.859144][ T5245] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 765.870498][ T5245] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 765.881395][ T5245] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 765.898546][ T5245] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 765.910766][ T5245] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 765.971417][ T5245] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 766.025532][ T5238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 766.045584][ T5238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 766.056281][ T5238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 766.083375][ T5238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 766.103995][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 766.114273][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 766.210633][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.394033][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.542832][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.620997][T16397] input: syz0 as /devices/virtual/input/input43 [ 767.830232][T16343] syz.1.2156 (16343): drop_caches: 2 [ 767.888249][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 767.984284][ T5238] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 767.995584][ T5238] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 768.007572][ T5238] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 768.021653][ T5238] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 768.029388][ T5238] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 768.038054][ T5238] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 768.052528][T16372] chnl_net:caif_netlink_parms(): no params data found [ 768.156956][ T5238] Bluetooth: hci8: command tx timeout [ 768.492416][T16372] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.545994][T16372] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.602696][T16372] bridge_slave_0: entered allmulticast mode [ 768.616718][T16372] bridge_slave_0: entered promiscuous mode [ 768.659944][T16372] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.697480][T16372] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.704785][T16372] bridge_slave_1: entered allmulticast mode [ 768.757211][T16372] bridge_slave_1: entered promiscuous mode [ 768.943205][T16408] Cannot find del_set index 3 as target [ 768.963402][ T5245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 768.974176][ T5245] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 768.985551][ T5245] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 769.011762][ T5245] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 769.026229][ T5245] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 769.039426][ T5245] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 769.100119][T16372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.150234][T16372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.195274][ T52] bridge_slave_1: left allmulticast mode [ 769.217915][ T52] bridge_slave_1: left promiscuous mode [ 769.241338][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.277783][ T52] bridge_slave_0: left allmulticast mode [ 769.300472][ T52] bridge_slave_0: left promiscuous mode [ 769.318238][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.089620][ T5245] Bluetooth: hci9: command tx timeout [ 770.232266][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.241573][ T5245] Bluetooth: hci8: command tx timeout [ 770.262825][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.276455][ T52] bond0 (unregistering): Released all slaves [ 770.364481][ T52] : left promiscuous mode [ 770.459466][T16372] team0: Port device team_slave_0 added [ 770.474471][T16372] team0: Port device team_slave_1 added [ 770.620396][T16372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.643067][T16372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.692118][T16372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.819959][T16372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.835772][ T6021] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 770.845032][T16372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.897481][T16372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.008040][T16439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.045781][ T6021] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.057177][T16439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.075726][ T6021] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 771.123158][ T5245] Bluetooth: hci7: command tx timeout [ 771.129483][T16372] hsr_slave_0: entered promiscuous mode [ 771.133100][ T6021] usb 2-1: config 1 has no interface number 0 [ 771.146484][ T6021] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.161312][T16372] hsr_slave_1: entered promiscuous mode [ 771.176690][T16372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.191573][T16372] Cannot create hsr debugfs directory [ 771.202025][ T6021] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.244304][ T6021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.255503][ T6021] usb 2-1: Product: syz [ 771.260951][ T6021] usb 2-1: Manufacturer: syz [ 771.266124][ T6021] usb 2-1: SerialNumber: syz [ 771.318060][ T6021] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 771.325518][ T6021] cdc_ncm 2-1:1.1: bind() failure [ 771.594781][ T6021] usb 2-1: USB disconnect, device number 115 [ 771.666699][ T52] hsr_slave_0: left promiscuous mode [ 771.682789][ T52] hsr_slave_1: left promiscuous mode [ 771.699581][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.726662][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.747571][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.761555][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.777583][T16457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.804357][ T52] veth1_macvtap: left promiscuous mode [ 771.821145][ T52] veth0_macvtap: left promiscuous mode [ 771.835318][ T52] veth1_vlan: left promiscuous mode [ 771.842054][T16457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.847813][ T52] veth0_vlan: left promiscuous mode [ 771.978955][T16463] Cannot find del_set index 3 as target [ 772.166038][ T5245] Bluetooth: hci9: command tx timeout [ 772.202597][T16467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.225325][T16467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.318329][ T5245] Bluetooth: hci8: command tx timeout [ 773.079923][ T52] team0 (unregistering): Port device team_slave_1 removed [ 773.196678][ T5245] Bluetooth: hci7: command tx timeout [ 773.205419][ T52] team0 (unregistering): Port device team_slave_0 removed [ 774.231698][T16405] chnl_net:caif_netlink_parms(): no params data found [ 774.240420][ T5238] Bluetooth: hci9: command tx timeout [ 774.428013][ T5238] Bluetooth: hci8: command tx timeout [ 774.559615][T16479] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 774.613798][T16411] chnl_net:caif_netlink_parms(): no params data found [ 774.959943][T16405] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.986075][T16405] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.018692][T16405] bridge_slave_0: entered allmulticast mode [ 775.038192][T16405] bridge_slave_0: entered promiscuous mode [ 775.128308][T16405] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.136781][T16405] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.154298][T16405] bridge_slave_1: entered allmulticast mode [ 775.184545][T16405] bridge_slave_1: entered promiscuous mode [ 775.283453][ T5238] Bluetooth: hci7: command tx timeout [ 775.301663][T16504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.335044][T16504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.546276][T16508] Cannot find del_set index 3 as target [ 775.631762][T16405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.709726][T16411] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.722291][T16411] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.732038][T16411] bridge_slave_0: entered allmulticast mode [ 775.740394][T16411] bridge_slave_0: entered promiscuous mode [ 775.755589][T16405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.779613][T16411] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.806315][T16411] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.831659][T16411] bridge_slave_1: entered allmulticast mode [ 775.839839][T16411] bridge_slave_1: entered promiscuous mode [ 775.917010][T16405] team0: Port device team_slave_0 added [ 775.926693][ T5289] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 775.956728][T16405] team0: Port device team_slave_1 added [ 776.009016][T16411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.042332][T16411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.117911][ T5289] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 776.139528][ T5289] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 776.166018][ T5289] usb 2-1: config 1 has no interface number 0 [ 776.172276][ T5289] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.189508][ T5289] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 776.201377][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.210779][ T5289] usb 2-1: Product: syz [ 776.215008][ T5289] usb 2-1: Manufacturer: syz [ 776.220086][ T5289] usb 2-1: SerialNumber: syz [ 776.232801][ T5289] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 776.242279][ T5289] cdc_ncm 2-1:1.1: bind() failure [ 776.315806][ T5238] Bluetooth: hci9: command tx timeout [ 776.364978][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.441468][T16405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.460680][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.490234][T16405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.512465][T16411] team0: Port device team_slave_0 added [ 776.519752][T16405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.521366][ T5289] usb 2-1: USB disconnect, device number 116 [ 776.535170][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.629434][T16405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.783180][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.830065][T16411] team0: Port device team_slave_1 added [ 777.041571][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.243587][T16411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.270561][T16411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.316141][T16411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.355914][ T5238] Bluetooth: hci7: command tx timeout [ 777.429906][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.516778][T16405] hsr_slave_0: entered promiscuous mode [ 777.518484][T16543] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2192'. [ 777.535039][T16405] hsr_slave_1: entered promiscuous mode [ 777.568529][T16405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.596791][T16405] Cannot create hsr debugfs directory [ 777.623458][T16372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 777.647252][T16411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.654392][T16411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.681290][T16411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.807371][T16372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 777.833422][T16372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 777.889579][T16372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 778.016737][T16411] hsr_slave_0: entered promiscuous mode [ 778.033724][T16411] hsr_slave_1: entered promiscuous mode [ 778.041142][T16411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.049425][T16411] Cannot create hsr debugfs directory [ 778.379793][ T52] bridge_slave_1: left allmulticast mode [ 778.385485][ T52] bridge_slave_1: left promiscuous mode [ 778.406260][ T5288] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 778.421739][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.452449][ T52] bridge_slave_0: left allmulticast mode [ 778.467462][ T52] bridge_slave_0: left promiscuous mode [ 778.473350][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.565795][ T5288] usb 2-1: Using ep0 maxpacket: 8 [ 778.572992][ T5288] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 778.583764][ T5288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.623961][ T5288] usb 2-1: config 0 has no interfaces? [ 778.661771][ T5288] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 778.707196][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 778.730570][ T5288] usb 2-1: Product: syz [ 778.734799][ T5288] usb 2-1: SerialNumber: syz [ 778.760764][ T5288] usb 2-1: config 0 descriptor?? [ 779.223879][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.239598][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.258260][ T52] bond0 (unregistering): Released all slaves [ 779.654443][T16405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.883408][T16405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.004035][T16405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.064269][ T52] hsr_slave_0: left promiscuous mode [ 780.087944][ T52] hsr_slave_1: left promiscuous mode [ 780.127205][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.138652][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.188400][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.199834][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.239792][ T52] veth1_macvtap: left promiscuous mode [ 780.245388][ T52] veth0_macvtap: left promiscuous mode [ 780.276869][ T52] veth1_vlan: left promiscuous mode [ 780.282248][ T52] veth0_vlan: left promiscuous mode [ 781.191323][ T6021] usb 2-1: USB disconnect, device number 117 [ 781.256973][T16581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.276506][T16581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.773678][ T52] team0 (unregistering): Port device team_slave_1 removed [ 781.865571][ T52] team0 (unregistering): Port device team_slave_0 removed [ 782.215966][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 782.222119][T16592] Cannot find del_set index 3 as target [ 782.385961][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 782.399915][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 782.417977][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.427237][ T9] usb 2-1: Product: syz [ 782.431444][ T9] usb 2-1: Manufacturer: syz [ 782.436528][ T9] usb 2-1: SerialNumber: syz [ 782.452168][ T9] usb 2-1: config 0 descriptor?? [ 782.549146][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.579989][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.627173][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.658239][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.678637][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 782.926426][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 782.945459][ T9] usb 2-1: USB disconnect, device number 118 [ 783.028333][T16372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.065246][T16405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.243739][T16372] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.303793][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.310986][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.461195][ T2532] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.468366][ T2532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.590048][T16405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 783.819901][T16405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 783.860311][T16405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 783.897203][T16405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 784.060386][T16612] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2200'. [ 784.618081][T16411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 784.661583][T16372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.681353][T16411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 784.737162][T16411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 784.754124][T16411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 784.821889][T16405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.863118][T16405] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.887876][T16372] veth0_vlan: entered promiscuous mode [ 784.972666][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.979886][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.010641][T16372] veth1_vlan: entered promiscuous mode [ 785.121737][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.128928][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.168442][T16411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.208188][T16411] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.307941][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.315101][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.431075][T16372] veth0_macvtap: entered promiscuous mode [ 785.443648][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.450868][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.478891][T16372] veth1_macvtap: entered promiscuous mode [ 785.545538][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.581069][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.605736][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.618080][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.638014][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.649077][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.659854][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.676123][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.695163][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.706379][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.718611][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.729483][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.746838][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.760508][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.777678][T16372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.809740][T16411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 785.821173][T16411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 785.922398][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.940688][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.952073][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.962963][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.973838][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.985538][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.003504][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.015097][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.025352][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.039204][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.049894][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.060556][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.071228][T16372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.083651][T16372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.104410][T16372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.115529][T16372] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.124412][T16372] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.133384][T16372] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.143108][T16372] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.222400][T16405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.355163][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.403194][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.452417][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.489627][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.532418][T16411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.668176][T16411] veth0_vlan: entered promiscuous mode [ 786.681170][T16411] veth1_vlan: entered promiscuous mode [ 786.711677][T16411] veth0_macvtap: entered promiscuous mode [ 786.721596][T16411] veth1_macvtap: entered promiscuous mode [ 786.742500][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.765975][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.784452][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.805816][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.815913][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.826600][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.836853][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.848974][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.859021][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.869567][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.880114][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.890764][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.900865][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.911448][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.921341][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.925757][T16662] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 786.931958][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.938293][T16662] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 786.957990][T16411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.968813][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.979653][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.990107][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.001038][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.010956][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.021515][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.031448][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.042348][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.043988][T16662] vhci_hcd vhci_hcd.0: Device attached [ 787.052373][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.052399][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.052419][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.052437][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.052460][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.052478][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.052499][T16411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.052517][T16411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.054437][T16411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.186443][T16405] veth0_vlan: entered promiscuous mode [ 787.200163][T16411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.209620][T16411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.219345][T16411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.228595][T16411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.250242][T16405] veth1_vlan: entered promiscuous mode [ 787.305819][ T6021] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 787.414313][T16663] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 787.432027][ T2532] vhci_hcd: stop threads [ 787.437115][ T2532] vhci_hcd: release socket [ 787.442671][ T2532] vhci_hcd: disconnect device [ 787.569681][T16405] veth0_macvtap: entered promiscuous mode [ 787.639390][T16405] veth1_macvtap: entered promiscuous mode [ 787.670906][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.689291][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.818465][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.829185][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.839198][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.849777][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.859679][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.870226][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.880274][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.890790][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.900686][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.911501][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.921768][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.932310][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.942323][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.953740][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.964476][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.975801][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.986171][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.996879][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.008310][T16405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.053438][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.064331][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.074507][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.098323][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.109313][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.121369][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.133110][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.144900][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.155999][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.167208][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.177103][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.188579][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.199644][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.212078][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.223675][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.235451][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.246561][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.258387][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.272189][T16405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.284513][T16405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.293524][T16405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.303329][T16405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.312329][T16405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.335161][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.385928][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.645922][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.653813][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.740096][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.750114][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.317656][T16682] tipc: Started in network mode [ 789.345793][T16682] tipc: Node identity 7f000001, cluster identity 4711 [ 789.353203][T16682] tipc: Enabled bearer , priority 10 [ 789.824361][T16688] Cannot find del_set index 3 as target [ 790.083152][T16694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.164773][T16694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.467805][ T5235] tipc: Node number set to 2130706433 [ 790.995869][ T5235] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 791.145834][ T5235] usb 3-1: Using ep0 maxpacket: 8 [ 791.156170][ T5254] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 791.187914][ T5235] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 791.213847][ T5235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.264215][ T5235] usb 3-1: Product: syz [ 791.268965][ T5235] usb 3-1: Manufacturer: syz [ 791.273849][ T5235] usb 3-1: SerialNumber: syz [ 791.281624][ T5235] usb 3-1: config 0 descriptor?? [ 791.326083][ T5288] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 791.339461][ T5254] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.361208][ T5254] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 791.413005][ T5254] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 791.424165][ T5254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 791.434019][ T5254] usb 1-1: SerialNumber: syz [ 791.485844][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 791.497522][ T5235] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 791.513649][ T5288] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 791.542075][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.545909][T15970] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 791.560456][ T5288] usb 2-1: Product: syz [ 791.574987][ T5288] usb 2-1: Manufacturer: syz [ 791.616501][ T5288] usb 2-1: SerialNumber: syz [ 791.640579][ T5288] usb 2-1: config 0 descriptor?? [ 791.665583][ T5254] usb 1-1: 0:2 : does not exist [ 791.680003][ T5254] usb 1-1: unit 255 not found! [ 791.708567][ T5235] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 791.726476][T15970] usb 4-1: Using ep0 maxpacket: 16 [ 791.742369][T15970] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 791.766381][ T5254] usb 1-1: USB disconnect, device number 15 [ 791.773081][ T5235] usb 3-1: USB disconnect, device number 87 [ 791.799107][T15970] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 791.814960][T15970] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 791.861282][T15970] usb 4-1: config 0 interface 0 has no altsetting 0 [ 791.871839][T15970] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 791.881226][T15970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.891370][T15970] usb 4-1: Product: syz [ 791.895556][T15970] usb 4-1: Manufacturer: syz [ 791.900530][T15970] usb 4-1: SerialNumber: syz [ 791.907753][T15970] usb 4-1: config 0 descriptor?? [ 791.954449][ T5247] udevd[5247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.013190][ T5288] rtl8150 2-1:0.0: couldn't reset the device [ 792.024501][ T5288] rtl8150 2-1:0.0: probe with driver rtl8150 failed with error -5 [ 792.062013][ T5288] usb 2-1: USB disconnect, device number 119 [ 792.119601][T16717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.144739][T16717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.179391][T15970] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input44 [ 792.191233][ T4670] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 792.228976][ T4670] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 792.258142][ T4670] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 792.352000][ T4670] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 792.404677][T16719] misc userio: Invalid payload size [ 792.457359][T16717] netlink: 'syz.3.2219': attribute type 10 has an invalid length. [ 792.479204][ T5247] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 792.481696][ T6021] vhci_hcd: vhci_device speed not set [ 792.498379][T16717] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.2219'. [ 792.549695][ T4670] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 792.607704][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 792.643476][ T5289] usb 4-1: USB disconnect, device number 6 [ 792.718085][T16723] tipc: Started in network mode [ 792.783939][T16723] tipc: Node identity 7f000001, cluster identity 4711 [ 792.859708][T16723] tipc: Enabled bearer , priority 10 [ 792.872828][T16728] Cannot find add_set index 0 as target [ 793.469060][ T30] INFO: task syz.1.1792:14564 blocked for more than 144 seconds. [ 793.477972][ T30] Not tainted 6.12.0-rc4-syzkaller #0 [ 793.483992][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 793.497229][ T30] task:syz.1.1792 state:D stack:28576 pid:14564 tgid:14558 ppid:13739 flags:0x20000004 [ 793.507581][ T30] Call Trace: [ 793.510903][ T30] [ 793.513870][ T30] __schedule+0x18af/0x4bd0 [ 793.519141][ T30] ? __pfx___schedule+0x10/0x10 [ 793.524369][ T30] ? __pfx_lock_release+0x10/0x10 [ 793.529579][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 793.535721][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 793.542501][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 793.548145][ T30] ? schedule+0x90/0x320 [ 793.553266][ T30] schedule+0x14b/0x320 [ 793.557554][ T30] schedule_preempt_disabled+0x13/0x30 [ 793.563062][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 793.569070][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 793.575746][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 793.581967][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 793.587141][ T30] down_write+0x1d7/0x220 [ 793.591514][ T30] ? __pfx_down_write+0x10/0x10 [ 793.596959][ T30] ? __pfx___might_resched+0x10/0x10 [ 793.602354][ T30] blkdev_fallocate+0x20e/0x490 [ 793.607473][ T30] vfs_fallocate+0x569/0x6e0 [ 793.612126][ T30] __se_compat_sys_ioctl+0x9c3/0xc90 [ 793.617610][ T30] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 793.623481][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 793.629611][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 793.636064][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 793.643465][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 793.648862][ T30] __do_fast_syscall_32+0xb4/0x110 [ 793.654034][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 793.659125][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 793.664376][ T30] do_fast_syscall_32+0x34/0x80 [ 793.669388][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.676030][ T30] RIP: 0023:0xf742d579 [ 793.680149][ T30] RSP: 002b:00000000f56d456c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 793.688699][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000402c5839 [ 793.696795][ T30] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.704817][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.715828][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 793.723937][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.796824][ T30] [ 793.810141][ T30] [ 793.810141][ T30] Showing all locks held in the system: [ 793.913475][ T30] 1 lock held by khungtaskd/30: [ 793.974936][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 793.985221][ T9] tipc: Node number set to 2130706433 [ 794.034945][ T30] 3 locks held by kworker/u8:2/35: [ 794.040303][ T30] 2 locks held by kworker/u8:3/52: [ 794.045436][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 794.057675][ T30] #1: ffffc90000bd7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 794.072560][ T30] 2 locks held by getty/4983: [ 794.077657][ T30] #0: ffff88814baf10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 794.087913][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 794.098216][ T30] 1 lock held by syz.4.1743/14186: [ 794.103376][ T30] 1 lock held by syz.1.1792/14564: [ 794.108630][ T30] #0: ffff888148c96540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 794.120361][ T30] 1 lock held by syz.3.1819/14748: [ 794.125518][ T30] #0: ffff888148c96540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 794.136433][ T30] 1 lock held by syz.4.2014/15690: [ 794.141595][ T30] #0: ffff888148c96540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 794.154629][ T30] 1 lock held by syz.0.2127/16210: [ 794.159899][ T30] #0: ffff888148c96540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 794.171328][ T30] 1 lock held by syz.0.2127/16212: [ 794.176566][ T30] #0: ffff888148c96540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 794.216257][ T30] 2 locks held by syz.1.2221/16721: [ 794.221506][ T30] #0: ffff88805acb3808 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 794.242385][ T30] #1: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 794.305833][ T30] 1 lock held by syz.1.2221/16724: [ 794.322207][ T30] 1 lock held by syz.2.2227/16734: [ 794.340246][ T30] 2 locks held by syz.3.2229/16742: [ 794.363221][ T30] #0: ffff88807df88808 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 794.403831][ T30] #1: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 794.461494][ T30] [ 794.475911][ T30] ============================================= [ 794.475911][ T30] [ 794.512872][ T30] NMI backtrace for cpu 0 [ 794.517254][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller #0 [ 794.526017][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 794.536071][ T30] Call Trace: [ 794.539347][ T30] [ 794.542273][ T30] dump_stack_lvl+0x241/0x360 [ 794.546952][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.552148][ T30] ? __pfx__printk+0x10/0x10 [ 794.556776][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 794.561718][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 794.567180][ T30] ? _printk+0xd5/0x120 [ 794.571335][ T30] ? __pfx__printk+0x10/0x10 [ 794.575931][ T30] ? __wake_up_klogd+0xcc/0x110 [ 794.580787][ T30] ? __pfx__printk+0x10/0x10 [ 794.585372][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 794.590403][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 794.596397][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 794.602405][ T30] watchdog+0xff4/0x1040 [ 794.606653][ T30] ? watchdog+0x1ea/0x1040 [ 794.611101][ T30] ? __pfx_watchdog+0x10/0x10 [ 794.615789][ T30] kthread+0x2f0/0x390 [ 794.619856][ T30] ? __pfx_watchdog+0x10/0x10 [ 794.624532][ T30] ? __pfx_kthread+0x10/0x10 [ 794.629127][ T30] ret_from_fork+0x4b/0x80 [ 794.633576][ T30] ? __pfx_kthread+0x10/0x10 [ 794.638189][ T30] ret_from_fork_asm+0x1a/0x30 [ 794.642985][ T30] [ 794.646604][ T30] Sending NMI from CPU 0 to CPUs 1: [ 794.651861][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 794.791713][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 794.798633][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller #0 [ 794.807440][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 794.817512][ T30] Call Trace: [ 794.820805][ T30] [ 794.823747][ T30] dump_stack_lvl+0x241/0x360 [ 794.828452][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.833665][ T30] ? __pfx__printk+0x10/0x10 [ 794.838265][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 794.844274][ T30] ? vscnprintf+0x5d/0x90 [ 794.848623][ T30] panic+0x349/0x880 [ 794.852530][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 794.858700][ T30] ? __pfx_panic+0x10/0x10 [ 794.863122][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 794.868508][ T30] ? __irq_work_queue_local+0x137/0x410 [ 794.874076][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 794.879467][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 794.885641][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 794.891816][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 794.897993][ T30] watchdog+0x1033/0x1040 [ 794.902345][ T30] ? watchdog+0x1ea/0x1040 [ 794.906796][ T30] ? __pfx_watchdog+0x10/0x10 [ 794.911488][ T30] kthread+0x2f0/0x390 [ 794.915561][ T30] ? __pfx_watchdog+0x10/0x10 [ 794.920250][ T30] ? __pfx_kthread+0x10/0x10 [ 794.924852][ T30] ret_from_fork+0x4b/0x80 [ 794.929292][ T30] ? __pfx_kthread+0x10/0x10 [ 794.933889][ T30] ret_from_fork_asm+0x1a/0x30 [ 794.938678][ T30] [ 794.942092][ T30] Kernel Offset: disabled [ 794.946421][ T30] Rebooting in 86400 seconds..