last executing test programs: 6m12.887511484s ago: executing program 3 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000005740)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x80, 0x0}}], 0x1, 0x803) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) connect$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x3}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b48, &(0x7f0000002340)) 6m12.038812951s ago: executing program 3 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x0, 0x80, &(0x7f0000000680)=""/128}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) 6m10.432300889s ago: executing program 3 (id=56): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9f67, 0x228082) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'team_slave_1\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x6, "f23ace349d21"}}) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0xb00) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080)=0x10, 0x2) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) 6m10.159516897s ago: executing program 3 (id=57): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x4000010, 0xffffffffffffffff, 0x377b8000) syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x165c00) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000140)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, 0x0, 0x0) listen(r0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xd, {"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", 0x1000}}, 0x1006) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xe, 0x0, "00120dd608f500001e2a000080c90a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000040)=0xd) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) unshare(0x22020400) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0/../file0/file0\x00', 0x89901) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x1) 6m9.957178544s ago: executing program 3 (id=58): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000200000000000000000000200180100002020702500000000002020207b1a90ce2c4078ff86c720b2cecfd5eb128898faf6c8fe1100c067b9ae25edc3fcd3f2478bfdeb8b30bb9d2716f21416a4b162161699f9323e093473c57e3517d1b6c6e1926ceffddf01bd4d737df239013dccf139bfba57ef"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x80, 0x1, @mcast1, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x4008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000e8ffd5a454a8c94a880f60ec44ada2ab20266c77140794d86d460211bcf26499ff189e55c1a817658dc448f3d80ec3040dc559725b3e8afefc871802ff3c208d7c95162a091866fdaed69b400b9213ae0fed05fa7177f78193d7945086621363db5a8c617449f2ffe28a6b600e20473df66121d47846d4ce9441982a0cae5efc43df4e48edac676092f27878eb6fb48889e0b2c4aa47c29ca7fdb1d375ba8791e6c102eedf18e4d26a601695b58e611bd2ccb8585b53f4528966f9040f6dedfed01153c58767aeb0b8a980d535195981238ad2ee915537797a1ba81f97e84d8", @ANYRES16=r8, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) 6m9.594093869s ago: executing program 3 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x0, 0xa5dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8890}, 0x80c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x80, 0xfcd, 0x401, 0x0, 0x9d, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x30}}, 0x0) 6m8.967256618s ago: executing program 32 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x0, 0xa5dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8890}, 0x80c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x80, 0xfcd, 0x401, 0x0, 0x9d, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x30}}, 0x0) 5m39.282160866s ago: executing program 0 (id=128): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) socket$inet(0xa, 0x801, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 5m37.314610311s ago: executing program 0 (id=133): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ff7f1500000000100f00"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='ecryptfs\x00', 0x4002, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) unshare(0x80) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x4cba538f9cc97b1a}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x8], 0x0, [0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffe], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53c, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1800088, &(0x7f0000000340)={[], [{@smackfsdef={'smackfsdef', 0x3d, '-}'}}], 0x2f}) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000680)={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0xfed}, {0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffff}, 0xffffffffffffffff, {[0x9, 0x5d, 0x4, 0x10, 0x591, 0x5d57, 0x2, 0x3]}}, 0x5c) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, [@alu={0x4, 0x1, 0x9, 0x3, 0x3, 0x10}, @ldst={0x2, 0x2, 0x3, 0x5, 0x7, 0x20, 0x10}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xd0, &(0x7f00000002c0)=""/208, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1, r1, r1, r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='ext4_es_insert_delayed_block\x00', r8, 0x0, 0x2}, 0x18) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 5m36.037035125s ago: executing program 0 (id=139): mkdir(&(0x7f0000000400)='./file1\x00', 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000021c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, {0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in=@empty}}, @sadb_x_nat_t_port={0x0, 0x16, 0x4e23}, @sadb_x_sa2={0x0, 0x13, 0x6, 0x0, 0x0, 0x70bd28, 0x3501}]}, 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 5m34.654982045s ago: executing program 0 (id=141): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x4000010, 0xffffffffffffffff, 0x377b8000) syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x165c00) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000140)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, 0x0, 0x0) listen(r0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xd, {"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", 0x1000}}, 0x1006) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xe, 0x0, "00120dd608f500001e2a000080c90a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000040)=0xd) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0/../file0/file0\x00', 0x89901) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x1) 5m33.045256263s ago: executing program 0 (id=145): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c798"], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="07000000000000000000020000000c0001800500020001000000f84293458d27c97efd35000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5m31.632392875s ago: executing program 0 (id=148): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}]}}}}}}}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, 0x0, 0x680822d7e3b5f37d}, 0x14}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x3014, 0x0, 0x3, 0x0, 0x3, 0x300}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5m28.47242147s ago: executing program 33 (id=148): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}]}}}}}}}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, 0x0, 0x680822d7e3b5f37d}, 0x14}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x3014, 0x0, 0x3, 0x0, 0x3, 0x300}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2m33.258904203s ago: executing program 2 (id=184): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x900, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 2m10.462514002s ago: executing program 2 (id=184): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x900, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 1m42.682489998s ago: executing program 2 (id=184): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x900, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 1m19.78723137s ago: executing program 2 (id=184): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x900, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 58.114244049s ago: executing program 2 (id=184): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x900, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 25.417293484s ago: executing program 2 (id=184): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x900, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 18.914688005s ago: executing program 1 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.221003456s ago: executing program 1 (id=816): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f00000002c0)="b9ff0b076859268cb89e14f088a8472103148f7e364fee80", 0x0, 0x18, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 17.939191701s ago: executing program 1 (id=817): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x200, 0x37, 0x0, 0x42, 0x5c}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 17.329254293s ago: executing program 1 (id=819): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200) 16.872690322s ago: executing program 1 (id=820): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x118e) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x8000001, 0x7}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x6, 0x0, 0x1ff, 0xe05, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x4, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="ffff110000008baaaaaaaa360806000186dd06100004000000000000ff010000070000000000000000000001aaaaaaaaaaaafe80000000000000000000000000093b"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0xfffffff7, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="4a0000001300fc000000001000000000070000008465a63ee758c45e54407ec766df457b7f25f6032c9104d211", @ANYRESDEC=0x0, @ANYBLOB="000000000000000014001a80100005800c0007800800010000000000"], 0x34}}, 0x0) r8 = openat$cgroup_int(r5, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x40000000000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 12.426873913s ago: executing program 1 (id=831): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) 11.831742367s ago: executing program 34 (id=831): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) 10.811011595s ago: executing program 6 (id=838): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.188368671s ago: executing program 6 (id=841): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006e383a10d00701415ca70102130109022400010000"], 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc71c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x30, 0x58, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0xf4, 0x2, 0x1, {0x22, 0x8ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x23, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000200)={0x20, 0x30, 0xd, "3ba80704f90c6441cba3b64291"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000200)={0xc, "7954bbc8e800000000000000"}) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r2, 0x40305829, &(0x7f0000000140)={0xd, "7954bbc8aae250bd23544617d5"}) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 7.991241776s ago: executing program 6 (id=845): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000280)={0x20, 0x1, 0x6, "68f7e1487209"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb0, 0xa8, 0x3f, 0x8, 0x572, 0x320, 0x9cbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8b, 0x7d, 0x21}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000900), 0x4, 0x600) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000940)=[0x10001, 0xf0]) 6.161225436s ago: executing program 4 (id=849): r0 = semget$private(0x0, 0x4000, 0x764) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) semctl$SEM_STAT(r0, 0x1, 0x12, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, r3}, 0x38) socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r5) connect$unix(r5, 0x0, 0x0) connect$vsock_stream(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) sendmsg$can_bcm(r4, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @empty, @private1, 0x0, 0x6, 0x0, 0x0, 0x1, 0x4400046}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 5.791315712s ago: executing program 6 (id=850): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_io_uring_setup(0x16a1, &(0x7f0000000480)={0x0, 0xacab, 0x0, 0x4, 0x113}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.981189888s ago: executing program 5 (id=851): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpid() r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x80c5}, 0x44850) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x63) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.890116582s ago: executing program 4 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x8, 0x0, 0x0}}, 0x10) 4.681203458s ago: executing program 4 (id=853): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000015c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000001940)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000d80)) read$hidraw(r0, 0x0, 0x49) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x1068) 4.501194601s ago: executing program 6 (id=854): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000340)=0x5, r1, &(0x7f0000000380)=0x6e1, 0x0, 0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x3, 0x48, 0x9, 0x4, 0x4, 0x9, 0x0, 0x0, 0x100, 0x8}}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, 0x0, 0x80) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) r5 = socket(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x2000009) 4.283478565s ago: executing program 5 (id=855): syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000002600)=0x2b, 0x4) 3.456979121s ago: executing program 4 (id=856): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2d46, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x1}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000150001030000000000000000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x78, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') chroot(&(0x7f0000000040)='./file1\x00') syz_io_uring_setup(0x6918, &(0x7f0000000300)={0x0, 0x3035, 0x0, 0xfffffffe, 0xffdffffc, 0x0, r4}, &(0x7f0000000380), &(0x7f0000000180)) 1.872685545s ago: executing program 5 (id=857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) 1.853203731s ago: executing program 4 (id=858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f0000000040)="8eb3e18bc512c3cc9b2062e089", 0xd, 0x0, &(0x7f0000000180)={0x11, 0xf5}, 0x14) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) 1.566874083s ago: executing program 5 (id=859): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) 1.553804198s ago: executing program 6 (id=860): r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004240200090581031000000000090582"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002020000402505a1a4400001020301090241000101fb00060904000903020600010b24060000612852ea98e6b52691ee000d240f01100000000700040081"], 0x0) syz_open_dev$evdev(0x0, 0x3, 0x862b01) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7, 0x0, 0x1, 0xff, 0x6}, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000080)={0x14, 0x0, 0x0}, &(0x7f0000000580)={0x44, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000440)={0x20, 0x81, 0x1, 'X'}, &(0x7f0000000480)={0x20, 0x82, 0x1, "8e"}, 0x0, &(0x7f0000000500)={0x20, 0x84, 0x1, 'R'}, &(0x7f0000000540)={0x20, 0x85, 0x3, "ab6d99"}}) 347.410131ms ago: executing program 5 (id=861): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@bridge_setlink={0x54, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x48}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x31}]}, @IFLA_MAP={0x24, 0xe, {0x67f2, 0x100, 0x2, 0x404, 0x8, 0x7f}}]}, 0x54}}, 0x0) 301.248136ms ago: executing program 4 (id=862): socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000000)='./control\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = io_uring_setup(0x1de0, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x1000}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xfffffffe}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07000514"], 0xa) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x801, 0x6, 0x8000, 0xc, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x4800) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x3}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r5, 0x1) 0s ago: executing program 5 (id=863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) kernel console output (not intermixed with test programs): ddresses unique to avoid problems! [ 335.356669][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.371763][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.390757][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.487750][ T8715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.681420][ T5875] usb 6-1: IRDA class descriptor not found, device not bound [ 335.768752][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.251838][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.321739][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.376577][ T8536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.448880][ T8536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.455443][ T5877] usb 6-1: USB disconnect, device number 35 [ 336.462750][ T8536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.482689][ T8536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.498434][ T8536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.585419][ T5911] usb 2-1: USB disconnect, device number 25 [ 336.806221][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.901291][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.119618][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.452405][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.145455][ T5929] kernel write not supported for file /sysvipc/msg (pid: 5929 comm: kworker/0:8) [ 338.365737][ T8742] Device name cannot be null; rc = [-22] [ 339.302859][ T8750] netlink: 40 bytes leftover after parsing attributes in process `syz.6.547'. [ 339.459739][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.231232][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.789521][ T8768] netlink: 'syz.1.555': attribute type 3 has an invalid length. [ 340.812873][ T8768] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 340.822744][ T5929] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 340.835249][ T8768] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.555'. [ 340.984463][ T5960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.051847][ T5929] usb 7-1: not running at top speed; connect to a high speed hub [ 341.077218][ T5929] usb 7-1: config 1 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.112384][ T5929] usb 7-1: config 1 interface 0 has no altsetting 0 [ 341.132405][ T5929] usb 7-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40 [ 341.160851][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.212645][ T5929] usb 7-1: Product: syz [ 341.216890][ T5929] usb 7-1: Manufacturer: syz [ 341.221546][ T5929] usb 7-1: SerialNumber: syz [ 341.344739][ T5960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.507231][ T5960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.519506][ T5929] usbhid 7-1:1.0: can't add hid device: -71 [ 341.536977][ T5929] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 341.564928][ T5929] usb 7-1: USB disconnect, device number 17 [ 341.677921][ T29] audit: type=1800 audit(1737400698.951:9): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.554" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 341.750299][ T5960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.948525][ T8759] delete_channel: no stack [ 342.021622][ T5960] bridge_slave_1: left allmulticast mode [ 342.036744][ T5960] bridge_slave_1: left promiscuous mode [ 342.053790][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.080585][ T5960] bridge_slave_0: left allmulticast mode [ 342.091299][ T5960] bridge_slave_0: left promiscuous mode [ 342.107220][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.339074][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.558'. [ 343.593971][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 343.802897][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 343.827882][ T8] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 343.872522][ T8803] Device name cannot be null; rc = [-22] [ 344.120843][ T8] usb 2-1: config 0 has no interface number 0 [ 344.128201][ T8] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 65282, setting to 64 [ 344.141884][ T8] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 344.151550][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.161029][ T8] usb 2-1: Product: syz [ 344.165307][ T8] usb 2-1: Manufacturer: syz [ 344.169953][ T8] usb 2-1: SerialNumber: syz [ 344.187723][ T8] usb 2-1: config 0 descriptor?? [ 345.011264][ T8] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 345.023293][ T2907] usb 2-1: Failed to submit usb control message: -71 [ 345.030499][ T2907] usb 2-1: unable to send the bmi data to the device: -71 [ 345.079256][ T8] usb 2-1: USB disconnect, device number 26 [ 345.085486][ T2907] usb 2-1: unable to get target info from device [ 345.092311][ T2907] usb 2-1: could not get target info (-71) [ 345.132960][ T2907] usb 2-1: could not probe fw (-71) [ 345.442779][ T46] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 345.471122][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.486222][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.499525][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.526032][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.545326][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.555101][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.662678][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 345.713132][ T46] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 345.721600][ T46] usb 7-1: config 0 has no interface number 0 [ 345.728364][ T46] usb 7-1: config 0 interface 12 has no altsetting 0 [ 345.746851][ T46] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 345.756430][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.764609][ T46] usb 7-1: Product: syz [ 345.769631][ T46] usb 7-1: Manufacturer: syz [ 345.774560][ T46] usb 7-1: SerialNumber: syz [ 345.821157][ T46] usb 7-1: config 0 descriptor?? [ 346.655821][ T8831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.716466][ T5833] Bluetooth: hci4: command tx timeout [ 347.786429][ T8049] kernel write not supported for file /sysvipc/msg (pid: 8049 comm: kworker/1:8) [ 347.816549][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.829205][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.847020][ T5960] bond0 (unregistering): Released all slaves [ 348.459182][ T46] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 348.472732][ T46] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 348.480107][ T46] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 348.488007][ T46] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 348.507466][ T46] usb 7-1: USB disconnect, device number 18 [ 348.785324][ T8820] chnl_net:caif_netlink_parms(): no params data found [ 349.026482][ T5960] hsr_slave_0: left promiscuous mode [ 349.283590][ T5960] hsr_slave_1: left promiscuous mode [ 349.420773][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 349.592446][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.783906][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.805484][ T5833] Bluetooth: hci4: command tx timeout [ 350.033905][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.103575][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.294353][ T5960] veth1_macvtap: left promiscuous mode [ 350.306024][ T5960] veth0_macvtap: left promiscuous mode [ 350.311906][ T5960] veth1_vlan: left promiscuous mode [ 350.325153][ T5960] veth0_vlan: left promiscuous mode [ 351.227206][ T5916] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 351.431654][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.483384][ T5916] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 351.497563][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.509858][ T5916] usb 6-1: config 0 descriptor?? [ 351.884687][ T5833] Bluetooth: hci4: command tx timeout [ 352.033132][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 352.101282][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 352.164790][ T5916] usbhid 6-1:0.0: can't add hid device: -71 [ 352.180243][ T5916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 352.217921][ T5916] usb 6-1: USB disconnect, device number 36 [ 353.959768][ T5833] Bluetooth: hci4: command tx timeout [ 354.023490][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.047397][ T5879] kernel write not supported for file /sysvipc/msg (pid: 5879 comm: kworker/1:7) [ 354.066562][ T5916] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 354.081588][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.124878][ T8820] bridge_slave_0: entered allmulticast mode [ 354.206724][ T8820] bridge_slave_0: entered promiscuous mode [ 354.243402][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.247205][ T5916] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 354.250552][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.273696][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.298834][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 354.324162][ T5916] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.346144][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.362960][ T8820] bridge_slave_1: entered allmulticast mode [ 354.370278][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 354.370287][ T8820] bridge_slave_1: entered promiscuous mode [ 354.372229][ T5916] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.442604][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.461136][ T5916] usb 5-1: Product: syz [ 354.471297][ T5916] usb 5-1: Manufacturer: syz [ 354.491990][ T8901] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.504675][ T5916] cdc_wdm 5-1:1.0: skipping garbage [ 354.505020][ T8820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.509926][ T5916] cdc_wdm 5-1:1.0: skipping garbage [ 354.548688][ T5916] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 354.566636][ T5916] cdc_wdm 5-1:1.0: Unknown control protocol [ 354.576813][ T8820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.622952][ T5879] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 354.696698][ T8820] team0: Port device team_slave_0 added [ 354.725968][ T8820] team0: Port device team_slave_1 added [ 354.802718][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 354.806547][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.814758][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 354.822534][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.829210][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 354.836796][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.843458][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 354.850583][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.850677][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.868235][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 354.875239][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.881903][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 354.888855][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.895527][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 354.898991][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.902638][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.918000][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 354.930396][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.937059][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 354.943564][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.950248][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 354.956588][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 354.959558][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 354.963219][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 355.004169][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.012031][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.040811][ T8049] usb 5-1: USB disconnect, device number 29 [ 355.073059][ T5879] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 355.082281][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.084875][ T8820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.122968][ T5879] usb 2-1: config 0 descriptor?? [ 355.166352][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.197428][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.250779][ T8820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.262757][ T46] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 355.418250][ T8820] hsr_slave_0: entered promiscuous mode [ 355.436982][ T8820] hsr_slave_1: entered promiscuous mode [ 355.457863][ T46] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 355.472925][ T8820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.490098][ T46] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.501873][ T8820] Cannot create hsr debugfs directory [ 355.532769][ T46] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 355.643371][ T46] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.679343][ T5879] HID 045e:07da: Invalid code 65791 type 1 [ 356.551572][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.567541][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.589588][ T5879] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input11 [ 356.601457][ T46] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.610790][ T46] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.621724][ T5879] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 356.634603][ T46] usb 7-1: Product: syz [ 356.638828][ T46] usb 7-1: Manufacturer: syz [ 356.678672][ T5879] usb 2-1: USB disconnect, device number 27 [ 356.685898][ T8931] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 356.750459][ T46] cdc_wdm 7-1:1.0: skipping garbage [ 356.760278][ T46] cdc_wdm 7-1:1.0: skipping garbage [ 357.020089][ T46] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 357.034624][ T46] cdc_wdm 7-1:1.0: Unknown control protocol [ 357.047355][ T46] usb 7-1: USB disconnect, device number 19 [ 357.140356][ T8951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.252963][ T5929] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 358.333739][ T46] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 358.724146][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 358.997361][ T46] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 359.151235][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.183737][ T46] usb 5-1: Product: syz [ 359.189070][ T46] usb 5-1: Manufacturer: syz [ 359.194524][ T46] usb 5-1: SerialNumber: syz [ 359.209665][ T46] usb 5-1: config 0 descriptor?? [ 359.224549][ T46] s2255 5-1:0.0: Could not find bulk-in endpoint [ 359.225393][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 359.236332][ T46] Sensoray 2255 driver load failed: 0xfffffff4 [ 359.243442][ T46] s2255 5-1:0.0: probe with driver s2255 failed with error -12 [ 359.278567][ T5929] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 359.304439][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.355848][ T29] audit: type=1804 audit(1737400716.631:10): pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.590" name="/newroot/95/file0/file1" dev="ramfs" ino=23738 res=1 errno=0 [ 359.378219][ T5929] usb 2-1: config 0 descriptor?? [ 359.447112][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.460795][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.591317][ T5916] usb 5-1: USB disconnect, device number 30 [ 359.790573][ T8820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.821032][ T8820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.905744][ T8820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.945693][ T8980] netlink: 'syz.5.593': attribute type 29 has an invalid length. [ 359.955863][ T8820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.976558][ T8980] netlink: 'syz.5.593': attribute type 29 has an invalid length. [ 359.998766][ T8980] netlink: 'syz.5.593': attribute type 29 has an invalid length. [ 360.019896][ T8980] netlink: 'syz.5.593': attribute type 29 has an invalid length. [ 360.060449][ T8980] netlink: 'syz.5.593': attribute type 29 has an invalid length. [ 360.077621][ T8980] netlink: 'syz.5.593': attribute type 29 has an invalid length. [ 360.113273][ T8980] netlink: 'syz.5.593': attribute type 29 has an invalid length. [ 360.159849][ T8980] netlink: 'syz.5.593': attribute type 29 has an invalid length. [ 360.349217][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.416846][ T8820] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.450950][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.458218][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.474545][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.481785][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.843132][ T8998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.809622][ T5929] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 361.836891][ T5929] asix 2-1:0.0: probe with driver asix failed with error -71 [ 361.867261][ T5929] usb 2-1: USB disconnect, device number 28 [ 361.886697][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.594748][ T8820] veth0_vlan: entered promiscuous mode [ 362.779992][ T8820] veth1_vlan: entered promiscuous mode [ 362.934582][ T8820] veth0_macvtap: entered promiscuous mode [ 362.960875][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 363.036053][ T8820] veth1_macvtap: entered promiscuous mode [ 363.140724][ T9028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.607416][ T9046] syz.4.606 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 365.915769][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.222232][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.238412][ T5911] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 366.252513][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.263136][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.273029][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.283938][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.294900][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.315924][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.349363][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.376318][ T5911] usb 7-1: device descriptor read/64, error -71 [ 366.383076][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.449948][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.475017][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.487151][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.500894][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.662685][ T5911] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 366.702710][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.756987][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.767867][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.777817][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.789176][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.799091][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.877620][ T9074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.216884][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.483990][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.549053][ T8820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.632665][ T5911] usb 7-1: device descriptor read/64, error -71 [ 367.643317][ T8820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.698666][ T8820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.723840][ T8820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.756382][ T5911] usb usb7-port1: attempt power cycle [ 367.955276][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.985276][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.002954][ T5875] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 368.071009][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.089546][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.143134][ T5911] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 368.177072][ T5911] usb 7-1: unable to get BOS descriptor or descriptor too short [ 368.193796][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 368.203811][ T5911] usb 7-1: not running at top speed; connect to a high speed hub [ 368.242780][ T5875] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 368.243079][ T5911] usb 7-1: config 1 interface 0 altsetting 129 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.272679][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.300644][ T5875] usb 2-1: config 0 descriptor?? [ 368.318922][ T5911] usb 7-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.363502][ T5911] usb 7-1: config 1 interface 0 has no altsetting 0 [ 368.425361][ T5911] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.443159][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.473217][ T5911] usb 7-1: Product: syz [ 368.495796][ T5911] usb 7-1: Manufacturer: 줥뫪ﾅ勧뼕ⱶ틑럠漈셥㝡뀖瞅欳瀌ⲮԆ漅ꏱ데퐛첗隣䏐ꙭᦇ닚ฤ䱺邲ꘃꈹ嵒䴊獣ﳰ⡶㤚Ցz [ 368.536972][ T5875] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 368.544098][ T5911] usb 7-1: SerialNumber: syz [ 368.562881][ T5875] asix 2-1:0.0: probe with driver asix failed with error -32 [ 368.713244][ T5879] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 368.771855][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.810085][ T9083] bond0: option arp_validate: invalid value (18446744073397666561) [ 368.882900][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 368.904323][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 368.925764][ T5879] usb 5-1: config 151 has an invalid interface number: 193 but max is 0 [ 368.949251][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.952857][ T5879] usb 5-1: config 151 has no interface number 0 [ 368.976777][ T9106] netlink: 'syz.6.611': attribute type 10 has an invalid length. [ 369.006747][ T5879] usb 5-1: config 151 interface 193 has no altsetting 0 [ 369.041688][ T9083] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 369.047805][ T5879] usb 5-1: New USB device found, idVendor=0499, idProduct=101c, bcdDevice=7c.77 [ 369.052123][ T9083] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 369.093007][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.101096][ T5879] usb 5-1: Product: syz [ 369.136404][ T5879] usb 5-1: Manufacturer: 긕涥囎౏嬮탤㴽誗嵀ቂ좷ૄ뇾୧賥詎ᄷ쭔婦䅫崭㶮⬵횢⯘㗰횽ⶽ௘凅߅⧷⾭౑掦Ⓟ꼩鼦뾱鋫ㅍく쌲⏅璘ᡜ힂㔃㿼㞑䃣㫋뒹茸▼﷍褃䴲녔鋇秔󌁢䁪貱⽰⼎ [ 369.244247][ T5879] usb 5-1: SerialNumber: syz [ 369.293096][ T9087] delete_channel: no stack [ 369.359367][ T5911] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 369.391000][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.418136][ T5911] usb 7-1: USB disconnect, device number 22 [ 369.494808][ T5879] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.556757][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.569920][ T5879] snd-usb-audio 5-1:151.193: probe with driver snd-usb-audio failed with error -2 [ 369.646602][ T5879] usb 5-1: USB disconnect, device number 31 [ 369.858605][ T6137] udevd[6137]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:151.193/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.892940][ T12] bridge_slave_1: left allmulticast mode [ 369.901206][ T12] bridge_slave_1: left promiscuous mode [ 369.913792][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.995578][ T12] bridge_slave_0: left allmulticast mode [ 370.001345][ T12] bridge_slave_0: left promiscuous mode [ 370.030237][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.831570][ T5929] usb 2-1: USB disconnect, device number 29 [ 370.979363][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.993253][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.001764][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.011872][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.067409][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 371.082503][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.292748][ T5929] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 371.495167][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 371.532684][ T5929] usb 2-1: not running at top speed; connect to a high speed hub [ 371.545446][ T5929] usb 2-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 371.562020][ T5929] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.575616][ T5929] usb 2-1: config 1 interface 0 has no altsetting 0 [ 371.587231][ T5929] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.602603][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.610757][ T5929] usb 2-1: Product: syz [ 371.623091][ T5929] usb 2-1: Manufacturer: 婊씛喂岾젅듊鎀⍴畄벊ꢕ拞ኗ듆ꎽ⢗㘳쎚䳠叮鈺♍꾊⃵띀변䌖䝸﷓ⱃ܁吗ᄯ䁨ৰू栕裯焵穅쓖㳺䁥ↁ觕験췟鯗ꐽ쑶̭櫘쫇좻㌓鼇ꏳ훂阯㊹喜龀 [ 371.671443][ T5929] usb 2-1: SerialNumber: syz [ 371.907474][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.929020][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.951388][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.963253][ T12] bond0 (unregistering): Released all slaves [ 371.983303][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.010041][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.020308][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.064101][ T5929] usb 2-1: bad CDC descriptors [ 372.092157][ T5929] usb 2-1: USB disconnect, device number 30 [ 372.572268][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.622'. [ 373.390428][ T5833] Bluetooth: hci4: command tx timeout [ 374.026333][ T12] hsr_slave_0: left promiscuous mode [ 374.039958][ T8049] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 374.573225][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.628'. [ 374.912888][ T12] hsr_slave_1: left promiscuous mode [ 374.952898][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.979446][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.006001][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.023617][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.198786][ T8049] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 375.208513][ T8049] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.216764][ T8049] usb 6-1: Product: syz [ 375.221188][ T8049] usb 6-1: Manufacturer: syz [ 375.225931][ T8049] usb 6-1: SerialNumber: syz [ 375.233988][ T8049] usb 6-1: config 0 descriptor?? [ 375.967376][ T9187] dlm: no local IP address has been set [ 375.973297][ T9187] dlm: cannot start dlm midcomms -107 [ 376.150190][ T5833] Bluetooth: hci4: command tx timeout [ 376.277281][ T12] veth1_macvtap: left promiscuous mode [ 376.297911][ T12] veth0_macvtap: left promiscuous mode [ 376.319598][ T12] veth1_vlan: left promiscuous mode [ 376.346516][ T12] veth0_vlan: left promiscuous mode [ 376.414051][ T8049] usb 6-1: Firmware version (0.0) predates our first public release. [ 376.422316][ T8049] usb 6-1: Please update to version 0.2 or newer [ 376.562833][ T5877] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 376.752868][ T5877] usb 7-1: Using ep0 maxpacket: 8 [ 376.764583][ T5877] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 376.774357][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.784766][ T5877] usb 7-1: config 0 descriptor?? [ 377.001910][ T5877] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 377.026758][ T5877] asix 7-1:0.0: probe with driver asix failed with error -32 [ 377.046015][ T9199] netlink: 20 bytes leftover after parsing attributes in process `syz.5.624'. [ 377.354647][ T12] team0 (unregistering): Port device team_slave_1 removed [ 377.424635][ T12] team0 (unregistering): Port device team_slave_0 removed [ 378.148472][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.624'. [ 378.179357][ T9147] chnl_net:caif_netlink_parms(): no params data found [ 378.195475][ T5833] Bluetooth: hci4: command tx timeout [ 378.333789][ T8049] usb 6-1: USB disconnect, device number 37 [ 378.636295][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.771003][ T5916] usb 7-1: USB disconnect, device number 23 [ 379.852937][ T5929] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 379.861752][ T5911] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 380.036314][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 380.042488][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 380.042981][ T9147] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.064466][ T5929] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 380.082063][ T5911] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 380.100936][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.109616][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.116453][ T9147] bridge_slave_0: entered allmulticast mode [ 380.126368][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.127982][ T9147] bridge_slave_0: entered promiscuous mode [ 380.159789][ T5929] usb 5-1: Product: syz [ 380.168492][ T5911] usb 2-1: Product: syz [ 380.177601][ T5929] usb 5-1: Manufacturer: syz [ 380.181967][ T9147] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.183068][ T5911] usb 2-1: Manufacturer: syz [ 380.192186][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.202722][ T5929] usb 5-1: SerialNumber: syz [ 380.204250][ T9147] bridge_slave_1: entered allmulticast mode [ 380.212723][ T5929] usb 5-1: config 0 descriptor?? [ 380.219066][ T9147] bridge_slave_1: entered promiscuous mode [ 380.225597][ T5911] usb 2-1: SerialNumber: syz [ 380.241161][ T5911] usb 2-1: config 0 descriptor?? [ 380.249884][ T5929] s2255 5-1:0.0: Could not find bulk-in endpoint [ 380.265163][ T5929] Sensoray 2255 driver load failed: 0xfffffff4 [ 380.269230][ T9147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.275906][ T5911] s2255 2-1:0.0: Could not find bulk-in endpoint [ 380.281645][ T5875] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 380.288708][ T5833] Bluetooth: hci4: command tx timeout [ 380.306144][ T5929] s2255 5-1:0.0: probe with driver s2255 failed with error -12 [ 380.314935][ T5911] Sensoray 2255 driver load failed: 0xfffffff4 [ 380.317983][ T9147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.321251][ T5911] s2255 2-1:0.0: probe with driver s2255 failed with error -12 [ 380.387409][ T9147] team0: Port device team_slave_0 added [ 380.394900][ T8] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 380.408480][ T9147] team0: Port device team_slave_1 added [ 380.438289][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.445743][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 380.462675][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.507203][ T5875] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 380.516433][ T5875] usb 7-1: config 0 has no interface number 0 [ 380.523620][ T5875] usb 7-1: config 0 interface 184 has no altsetting 0 [ 380.533415][ T5875] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 380.544272][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.552492][ T5875] usb 7-1: Product: syz [ 380.560015][ T5875] usb 7-1: Manufacturer: syz [ 380.566519][ T9147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.579841][ T5875] usb 7-1: SerialNumber: syz [ 380.585567][ T7099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.590734][ T7099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.611662][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.617452][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.627317][ T5875] usb 7-1: config 0 descriptor?? [ 380.633774][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.636750][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.647434][ T5875] smsc75xx v1.0.0 [ 380.682484][ T9147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.698505][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.721317][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.740994][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 380.750433][ T8] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 380.776389][ T5911] usb 5-1: USB disconnect, device number 32 [ 380.791650][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 380.808125][ T5929] usb 2-1: USB disconnect, device number 31 [ 380.828218][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 380.844647][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 380.858687][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 380.867469][ T8] usb 6-1: Product: syz [ 380.882880][ T8] usb 6-1: Manufacturer: syz [ 380.893125][ T9237] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 380.906271][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 380.911596][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 380.929074][ T9147] hsr_slave_0: entered promiscuous mode [ 380.935855][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 380.942086][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 380.951373][ T9147] hsr_slave_1: entered promiscuous mode [ 380.960827][ T9147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.978194][ T9147] Cannot create hsr debugfs directory [ 381.138792][ C0] wdm_int_callback: 218 callbacks suppressed [ 381.138822][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.151527][ C0] wdm_int_callback: 218 callbacks suppressed [ 381.151549][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.164402][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.171067][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.177433][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.184155][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.190720][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.197553][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.204134][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.210843][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.217627][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.224585][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.232823][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.239524][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.246137][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.253587][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.254296][ T5875] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 381.261583][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.277304][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.283981][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 381.290670][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 381.307385][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 381.314001][ T5875] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 381.330976][ T8049] usb 6-1: USB disconnect, device number 38 [ 381.385832][ T5875] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 381.443118][ T5875] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 382.404579][ T5875] usb 7-1: USB disconnect, device number 24 [ 384.394084][ T5879] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 385.027344][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 385.072138][ T5879] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 385.102808][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.139146][ T9147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.169902][ T5879] usb 5-1: config 0 descriptor?? [ 385.174687][ T9147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.220488][ T9147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.270791][ T9147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.313048][ T8] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 385.435623][ T5879] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 385.473804][ T5879] asix 5-1:0.0: probe with driver asix failed with error -32 [ 385.502462][ T8] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 385.529572][ T8] usb 7-1: config 0 has no interface number 0 [ 385.551848][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.572624][ T8] usb 7-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 385.596047][ T9147] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.616777][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.624212][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.629928][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.650729][ T8] usb 7-1: Product: syz [ 385.655774][ T8] usb 7-1: Manufacturer: syz [ 385.660439][ T8] usb 7-1: SerialNumber: syz [ 385.671445][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.678702][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.687267][ T9273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.651'. [ 385.689928][ T8] usb 7-1: config 0 descriptor?? [ 385.769561][ T9147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.796931][ T9147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.943289][ T5875] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 386.091697][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.652'. [ 386.341478][ T5875] usb 2-1: config 1 interface 0 altsetting 28 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.695131][ T5875] usb 2-1: config 1 interface 0 has no altsetting 0 [ 386.726565][ T5875] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.40 [ 386.777058][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.802827][ T5875] usb 2-1: Product: ᒌ㎒꺱孤췫謢跛烕䍱粓᫯됇屷槇忠䓠굈ꄏ苟졾骥ⱈ꿦쮛ꔥ院ퟎ쒫풍謚셏䵖ꕝ쑥榆疇忞篂駕뺲쵘탥쳫唜좑Ⰵ㟖뜰įႝҎ똢冡鸍蟊銱헭펷飥꾼놦腦嘴휮ꗐ쇥쥘꿕ﴨ蠻휣슾혧⹃諶餅㙘嘰Ꚁᖕ맔ҁ卜漈ቸ稜縁귪 [ 386.845389][ T8] snd_usb_variax 7-1:0.113: Line 6 Variax Workbench found [ 386.858658][ T8] usb 7-1: selecting invalid altsetting 1 [ 386.864581][ T8] snd_usb_variax 7-1:0.113: set_interface failed [ 386.871240][ T8] snd_usb_variax 7-1:0.113: Line 6 Variax Workbench now disconnected [ 386.881812][ T8] snd_usb_variax 7-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 386.919109][ T8] usb 7-1: USB disconnect, device number 25 [ 386.948582][ T5875] usb 2-1: Manufacturer: ᰁ [ 386.973166][ T5875] usb 2-1: SerialNumber: 񱱼㳩衚䌕귣፺̑쏅厐ꈁ륛혾ᄓ꥛츑㋆洛䎽ꗀ黜꤈￧㚺觏餸丹烓궱쉺繖Ǿ謡ȗ逷⒯ဎ瓒᛾劘嶂1鑎嶁 [ 386.992045][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.095790][ T9147] veth0_vlan: entered promiscuous mode [ 387.138187][ T9147] veth1_vlan: entered promiscuous mode [ 387.285611][ T8] usb 5-1: USB disconnect, device number 33 [ 387.298018][ T9147] veth0_macvtap: entered promiscuous mode [ 387.350303][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.404449][ T9147] veth1_macvtap: entered promiscuous mode [ 387.413908][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.173769][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.277314][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.280276][ T9297] netlink: 'syz.1.651': attribute type 2 has an invalid length. [ 388.288375][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.308052][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.319352][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.331084][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.341899][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.377111][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.387499][ T9297] netlink: 'syz.1.651': attribute type 8 has an invalid length. [ 388.405397][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.417013][ T9297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.651'. [ 388.442301][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.474211][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.633006][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.647274][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.659049][ T5876] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 388.729218][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.764810][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.777371][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.795762][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.809833][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.822416][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.883536][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 388.904506][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.946824][ T5876] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 388.971059][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.026783][ T5876] usb 7-1: config 0 has no interface number 0 [ 389.051261][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.072829][ T5876] usb 7-1: config 0 interface 184 has no altsetting 0 [ 389.178404][ T9147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.195258][ T5876] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 389.232701][ T9147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.241685][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.260848][ T9147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.270065][ T5876] usb 7-1: Product: syz [ 389.280162][ T5876] usb 7-1: Manufacturer: syz [ 389.290343][ T9147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.299241][ T5876] usb 7-1: SerialNumber: syz [ 389.311446][ T5876] usb 7-1: config 0 descriptor?? [ 389.341555][ T5876] smsc75xx v1.0.0 [ 389.372120][ T5875] usbhid 2-1:1.0: can't add hid device: -71 [ 389.398449][ T5875] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 389.441467][ T5875] usb 2-1: USB disconnect, device number 32 [ 389.483234][ T7099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.513474][ T7099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.557098][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.573130][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.954131][ T5876] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 389.983460][ T5876] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 389.999642][ T5876] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 390.012421][ T5876] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 390.026469][ T5876] usb 7-1: USB disconnect, device number 26 [ 390.420738][ T9304] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 390.447370][ T9304] team0: Port device team_slave_1 removed [ 390.737092][ T5875] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 390.858057][ T9313] dlm: no local IP address has been set [ 390.863906][ T9313] dlm: cannot start dlm midcomms -107 [ 391.812822][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 391.823936][ T5875] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 391.829441][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.833482][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.857157][ T5875] usb 6-1: config 0 descriptor?? [ 391.859268][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 392.024181][ T8] usb 2-1: device descriptor read/64, error -71 [ 392.091125][ T5875] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 392.147259][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.210408][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.284116][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.302847][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 392.428629][ T12] bridge_slave_1: left allmulticast mode [ 392.434913][ T12] bridge_slave_1: left promiscuous mode [ 392.441090][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.452198][ T12] bridge_slave_0: left allmulticast mode [ 392.453768][ T8] usb 2-1: device descriptor read/64, error -71 [ 392.458915][ T12] bridge_slave_0: left promiscuous mode [ 392.470809][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.583467][ T8] usb usb2-port1: attempt power cycle [ 392.952790][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 392.993608][ T8] usb 2-1: device descriptor read/8, error -71 [ 393.001678][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.020681][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.034781][ T12] bond0 (unregistering): Released all slaves [ 393.244003][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 393.293110][ T8] usb 2-1: device descriptor read/8, error -71 [ 393.326882][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.342755][ T5876] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 393.351401][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.384002][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'. [ 393.400788][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.658'. [ 393.424857][ T5875] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 393.435795][ T8] usb usb2-port1: unable to enumerate USB device [ 393.455675][ T5875] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 393.472422][ T5875] asix 6-1:0.0: probe with driver asix failed with error -71 [ 393.511271][ T5875] usb 6-1: USB disconnect, device number 39 [ 393.522735][ T5876] usb 7-1: Using ep0 maxpacket: 8 [ 393.530077][ T5876] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 393.551570][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.621606][ T5876] usb 7-1: config 0 descriptor?? [ 393.627952][ T12] hsr_slave_0: left promiscuous mode [ 393.645574][ T12] hsr_slave_1: left promiscuous mode [ 393.657185][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.672666][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.698209][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.709476][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.723516][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.735601][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.737383][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.760134][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.778473][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 393.786350][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.831392][ T12] veth1_macvtap: left promiscuous mode [ 393.842351][ T12] veth0_macvtap: left promiscuous mode [ 393.855842][ T5876] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 393.866926][ T12] veth1_vlan: left promiscuous mode [ 393.872263][ T12] veth0_vlan: left promiscuous mode [ 393.882758][ T5876] asix 7-1:0.0: probe with driver asix failed with error -32 [ 395.232830][ T8] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 395.387123][ T8] usb 6-1: device descriptor read/64, error -71 [ 395.498229][ T5876] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 395.587629][ T12] team0 (unregistering): Port device team_slave_1 removed [ 395.638249][ T8] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 395.657986][ T12] team0 (unregistering): Port device team_slave_0 removed [ 395.665813][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 395.674397][ T5876] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 395.682959][ T5876] usb 5-1: config 0 has no interface number 0 [ 395.689172][ T5876] usb 5-1: config 0 interface 184 has no altsetting 0 [ 395.718084][ T5876] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 395.727790][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.736472][ T5876] usb 5-1: Product: syz [ 395.740700][ T5876] usb 5-1: Manufacturer: syz [ 395.745475][ T5876] usb 5-1: SerialNumber: syz [ 395.761722][ T5876] usb 5-1: config 0 descriptor?? [ 395.773724][ T5876] smsc75xx v1.0.0 [ 395.783307][ T8] usb 6-1: device descriptor read/64, error -71 [ 395.872910][ T5830] Bluetooth: hci4: command tx timeout [ 395.910551][ T8] usb usb6-port1: attempt power cycle [ 396.179232][ T5916] usb 7-1: USB disconnect, device number 27 [ 396.262881][ T8] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 396.311807][ T8] usb 6-1: device descriptor read/8, error -71 [ 396.430279][ T5876] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 396.446962][ T5876] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 396.457939][ T5876] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 396.475167][ T5876] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 396.497122][ T5876] usb 5-1: USB disconnect, device number 34 [ 396.575252][ T8] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 396.592724][ T5916] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 396.621042][ T8] usb 6-1: device descriptor read/8, error -71 [ 396.743043][ T8] usb usb6-port1: unable to enumerate USB device [ 396.777836][ T5916] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 396.789406][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.828244][ T5916] usb 7-1: config 0 descriptor?? [ 397.140751][ T9333] chnl_net:caif_netlink_parms(): no params data found [ 398.100312][ T5830] Bluetooth: hci4: command tx timeout [ 398.111441][ T5916] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 398.156129][ T5916] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 398.282289][ T5916] [drm:udl_init] *ERROR* Selecting channel failed [ 398.309358][ T5916] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 398.324583][ T5916] [drm] Initialized udl on minor 2 [ 398.334325][ T5916] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.348865][ T5916] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 398.397284][ T5911] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.423098][ T5916] usb 7-1: USB disconnect, device number 28 [ 398.510668][ T5911] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 398.553173][ T9333] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.578617][ T9333] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.599921][ T9333] bridge_slave_0: entered allmulticast mode [ 399.308106][ T9333] bridge_slave_0: entered promiscuous mode [ 399.703498][ T9333] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.711612][ T9381] overlay: Unknown parameter 'hash' [ 399.760106][ T9333] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.897912][ T9333] bridge_slave_1: entered allmulticast mode [ 400.069812][ T9333] bridge_slave_1: entered promiscuous mode [ 400.113105][ T5830] Bluetooth: hci4: command tx timeout [ 400.256214][ T9333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.295649][ T9333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.361545][ T5916] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 400.392888][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.680'. [ 400.713247][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 400.732465][ T5916] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 400.744986][ T9333] team0: Port device team_slave_0 added [ 401.127899][ T9397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.308718][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.322344][ T5916] usb 5-1: config 0 descriptor?? [ 401.372735][ T8] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 401.525917][ T9333] team0: Port device team_slave_1 added [ 401.545179][ T5916] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 401.923001][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.975860][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.020695][ T9333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.244181][ T5830] Bluetooth: hci4: command tx timeout [ 402.285033][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 402.291603][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.311561][ T8] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 402.318430][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.331849][ T8] usb 6-1: config 0 interface 0 has no altsetting 1 [ 402.354994][ T8] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 402.364924][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.384191][ T8] usb 6-1: config 0 descriptor?? [ 402.396949][ T9333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.511225][ T9333] hsr_slave_0: entered promiscuous mode [ 402.537850][ T9333] hsr_slave_1: entered promiscuous mode [ 402.560126][ T9333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.580775][ T9333] Cannot create hsr debugfs directory [ 402.917147][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.952177][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.973679][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 402.994815][ T9386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.679'. [ 403.044540][ T5916] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 403.082082][ T5916] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 403.111325][ T5916] asix 5-1:0.0: probe with driver asix failed with error -71 [ 403.141882][ T5916] usb 5-1: USB disconnect, device number 35 [ 404.805765][ T9421] netlink: 4140 bytes leftover after parsing attributes in process `syz.1.687'. [ 404.842096][ T9421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.850064][ T9421] IPv6: NLM_F_CREATE should be set when creating new route [ 404.857420][ T9421] IPv6: NLM_F_CREATE should be set when creating new route [ 406.116855][ T8] Bluetooth: Can't get state to change to load ram patch err [ 406.393924][ T8] Bluetooth: Loading patch file failed [ 406.399489][ T8] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 406.501390][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 406.510609][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 407.168320][ T8] usb 6-1: USB disconnect, device number 44 [ 408.138076][ T9333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 408.295648][ T9333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 408.446715][ T9333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 408.461040][ T9333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.321357][ T8] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 409.417367][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.470351][ T9333] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.493545][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 409.532947][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.592684][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.594099][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.610159][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.612707][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.652118][ T8] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 409.708523][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.758182][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.765726][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.823279][ T8] usb 6-1: config 0 descriptor?? [ 409.893826][ T8049] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 410.118467][ T8049] usb 5-1: Using ep0 maxpacket: 8 [ 410.206294][ T8049] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 410.232873][ T8049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.254153][ T8049] usb 5-1: config 0 descriptor?? [ 410.287508][ T8] ryos 0003:1E7D:31CE.0006: unbalanced delimiter at end of report description [ 410.315890][ T8] ryos 0003:1E7D:31CE.0006: parse failed [ 410.321972][ T8] ryos 0003:1E7D:31CE.0006: probe with driver ryos failed with error -22 [ 410.467329][ T8049] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 410.538424][ T8] usb 6-1: USB disconnect, device number 45 [ 410.694801][ T9333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.746780][ T9333] veth0_vlan: entered promiscuous mode [ 410.775110][ T9333] veth1_vlan: entered promiscuous mode [ 410.811548][ T9333] veth0_macvtap: entered promiscuous mode [ 410.825976][ T9333] veth1_macvtap: entered promiscuous mode [ 410.842835][ T5879] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 410.860567][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.871483][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.883107][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.893831][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.903897][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.914533][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.925876][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.936905][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.947235][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.957915][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.969647][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.988634][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.002018][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.012268][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.023951][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.034331][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.047519][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.057599][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.068661][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.079287][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.090208][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.102003][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.115401][ T5879] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 411.126613][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.139908][ T9333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.149570][ T5879] usb 2-1: Product: syz [ 411.158842][ T5879] usb 2-1: Manufacturer: syz [ 411.163997][ T9333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.173229][ T5879] usb 2-1: SerialNumber: syz [ 411.178605][ T9333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.191027][ T5879] usb 2-1: config 0 descriptor?? [ 411.196131][ T9333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.405720][ T7099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.426136][ T7099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.493378][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.510594][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.712838][ T9454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.780388][ T9454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.823802][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 411.853699][ T5879] usb 2-1: Firmware version (0.0) predates our first public release. [ 411.861912][ T5879] usb 2-1: Please update to version 0.2 or newer [ 411.881234][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.699'. [ 412.227806][ T8049] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 412.483178][ T8049] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 412.508820][ T9477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.700'. [ 412.530627][ T8049] asix 5-1:0.0: probe with driver asix failed with error -71 [ 412.693375][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 413.174921][ T8049] usb 5-1: USB disconnect, device number 36 [ 413.387615][ T9487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.395160][ T9487] IPv6: NLM_F_CREATE should be set when creating new route [ 413.402411][ T9487] IPv6: NLM_F_CREATE should be set when creating new route [ 413.478144][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.723168][ T5879] usb 2-1: USB disconnect, device number 37 [ 414.040815][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.154087][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.230264][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.355869][ T11] bridge_slave_1: left allmulticast mode [ 414.361613][ T11] bridge_slave_1: left promiscuous mode [ 414.367926][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.380068][ T11] bridge_slave_0: left allmulticast mode [ 414.386223][ T11] bridge_slave_0: left promiscuous mode [ 414.392373][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.740282][ T9494] netlink: 44 bytes leftover after parsing attributes in process `syz.1.709'. [ 414.781249][ T9495] Device name cannot be null; rc = [-22] [ 416.668457][ T5911] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 416.865873][ T5911] usb 2-1: config 1 interface 0 altsetting 28 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.901444][ T5911] usb 2-1: config 1 interface 0 has no altsetting 0 [ 416.910678][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.933915][ T5911] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.40 [ 416.948336][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.959048][ T5911] usb 2-1: Product: ᒌ㎒꺱孤췫謢跛烕䍱粓᫯됇屷槇忠䓠굈ꄏ苟졾骥ⱈ꿦쮛ꔥ院ퟎ쒫풍謚셏䵖ꕝ쑥榆疇忞篂駕뺲쵘탥쳫唜좑Ⰵ㟖뜰įႝҎ똢冡鸍蟊銱헭펷飥꾼놦腦嘴휮ꗐ쇥쥘꿕ﴨ蠻휣슾혧⹃諶餅㙘嘰Ꚁᖕ맔ҁ卜漈ቸ稜縁귪 [ 416.995472][ T5911] usb 2-1: Manufacturer: ᰁ [ 417.000232][ T5911] usb 2-1: SerialNumber: 񱱼㳩衚䌕귣፺̑쏅厐ꈁ륛혾ᄓ꥛츑㋆洛䎽ꗀ黜꤈￧㚺觏餸丹烓궱쉺繖Ǿ謡ȗ逷⒯ဎ瓒᛾劘嶂1鑎嶁 [ 417.020244][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.043629][ T11] bond0 (unregistering): Released all slaves [ 417.404578][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.413897][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 417.424271][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 417.442473][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 417.450247][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.468557][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 417.479287][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 417.496833][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.883804][ T9515] netlink: 'syz.1.709': attribute type 2 has an invalid length. [ 417.893198][ T9515] netlink: 'syz.1.709': attribute type 8 has an invalid length. [ 417.901104][ T9515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.709'. [ 418.623233][ T5911] usbhid 2-1:1.0: can't add hid device: -71 [ 418.630061][ T5911] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 418.671898][ T5911] usb 2-1: USB disconnect, device number 38 [ 418.898078][ T11] hsr_slave_0: left promiscuous mode [ 418.906858][ T11] hsr_slave_1: left promiscuous mode [ 418.922828][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.940680][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.951830][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.972441][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.029158][ T11] veth1_macvtap: left promiscuous mode [ 419.035085][ T11] veth0_macvtap: left promiscuous mode [ 419.040789][ T11] veth1_vlan: left promiscuous mode [ 419.061813][ T11] veth0_vlan: left promiscuous mode [ 419.560986][ T5830] Bluetooth: hci4: command tx timeout [ 419.919204][ T9538] support for the xor transformation has been removed. [ 420.156720][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.174836][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.185622][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.211091][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.219495][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 420.237579][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 420.254371][ T5911] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 420.432804][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 420.484733][ T5911] usb 7-1: config 11 has an invalid interface number: 95 but max is 0 [ 420.504962][ T5911] usb 7-1: config 11 has no interface number 0 [ 420.512427][ T5911] usb 7-1: config 11 interface 95 has no altsetting 0 [ 420.531844][ T5911] usb 7-1: language id specifier not provided by device, defaulting to English [ 420.552653][ T5911] usb 7-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 420.569679][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.581589][ T5911] usb 7-1: Product: syz [ 420.586365][ T5911] usb 7-1: SerialNumber: syz [ 420.856253][ T5911] usb 7-1: USB disconnect, device number 29 [ 420.975366][ T11] team0 (unregistering): Port device team_slave_1 removed [ 421.084890][ T11] team0 (unregistering): Port device team_slave_0 removed [ 421.654695][ T5830] Bluetooth: hci4: command tx timeout [ 422.277201][ T5830] Bluetooth: hci3: command tx timeout [ 422.342374][ T5916] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 422.504378][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 422.511824][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.537599][ T5916] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 422.559526][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.584963][ T5916] usb 7-1: config 0 descriptor?? [ 422.819837][ T5916] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 423.041332][ T5916] usb 7-1: USB disconnect, device number 30 [ 423.365377][ T9509] chnl_net:caif_netlink_parms(): no params data found [ 423.557113][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 423.713031][ T5830] Bluetooth: hci4: command tx timeout [ 423.734548][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.801424][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.818842][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.844725][ T9509] bridge_slave_0: entered allmulticast mode [ 423.886962][ T9509] bridge_slave_0: entered promiscuous mode [ 423.921883][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.003474][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.038090][ T9509] bridge_slave_1: entered allmulticast mode [ 424.158071][ T9509] bridge_slave_1: entered promiscuous mode [ 424.337227][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.368082][ T5830] Bluetooth: hci3: command tx timeout [ 424.772850][ T29] audit: type=1326 audit(1737400782.041:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 424.812740][ T29] audit: type=1326 audit(1737400782.041:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 424.835433][ T29] audit: type=1326 audit(1737400782.061:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 424.858514][ T29] audit: type=1326 audit(1737400782.061:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 424.894246][ T29] audit: type=1326 audit(1737400782.061:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 424.930545][ T29] audit: type=1326 audit(1737400782.061:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 424.977149][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.001565][ T29] audit: type=1326 audit(1737400782.061:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 425.040470][ T29] audit: type=1326 audit(1737400782.061:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 425.074287][ T29] audit: type=1326 audit(1737400782.061:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 425.097122][ T29] audit: type=1326 audit(1737400782.061:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9601 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cc785d29 code=0x7ffc0000 [ 425.130708][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.158159][ T9602] tipc: Started in network mode [ 425.185202][ T9602] tipc: Node identity ac14140f, cluster identity 4711 [ 425.193869][ T9602] tipc: New replicast peer: 255.255.255.255 [ 425.205758][ T9602] tipc: Enabled bearer , priority 10 [ 425.270110][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.371129][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.394067][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.421960][ T9541] bridge_slave_0: entered allmulticast mode [ 425.443659][ T9541] bridge_slave_0: entered promiscuous mode [ 425.476870][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.507008][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.533336][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.540681][ T9541] bridge_slave_1: entered allmulticast mode [ 425.577438][ T9541] bridge_slave_1: entered promiscuous mode [ 425.696769][ T9509] team0: Port device team_slave_0 added [ 425.803129][ T5830] Bluetooth: hci4: command tx timeout [ 425.989159][ T9509] team0: Port device team_slave_1 added [ 426.002994][ T9619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.748'. [ 426.013468][ T9619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.748'. [ 426.316400][ T5879] tipc: Node number set to 2886997007 [ 426.465411][ T5830] Bluetooth: hci3: command tx timeout [ 426.979716][ T9618] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 426.989444][ T9618] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 427.000160][ T9618] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 427.011090][ T9618] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 427.113333][ T9618] geneve2: entered promiscuous mode [ 427.126606][ T9618] geneve2: entered allmulticast mode [ 427.243609][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.351448][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.503526][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.531409][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.568880][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.668104][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.688369][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.736918][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.846206][ T9541] team0: Port device team_slave_0 added [ 427.852812][ T5879] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 427.910348][ T9541] team0: Port device team_slave_1 added [ 428.003634][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 428.015090][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.102381][ T11] bridge_slave_1: left allmulticast mode [ 428.116113][ T11] bridge_slave_1: left promiscuous mode [ 428.123270][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.171020][ T11] bridge_slave_0: left allmulticast mode [ 428.189084][ T11] bridge_slave_0: left promiscuous mode [ 428.210071][ T5879] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.211461][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.242624][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.253257][ T5879] usb 7-1: config 0 descriptor?? [ 428.494218][ T5879] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 428.514322][ T5830] Bluetooth: hci3: command tx timeout [ 429.307579][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.325427][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.372859][ T11] bond0 (unregistering): Released all slaves [ 429.399428][ T11] bond1 (unregistering): Released all slaves [ 429.425536][ T11] bond2 (unregistering): Released all slaves [ 429.449995][ T11] bond3 (unregistering): Released all slaves [ 429.495370][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.515057][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.550586][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.571846][ T5877] usb 7-1: USB disconnect, device number 31 [ 429.600750][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.608059][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.634055][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.640361][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.393924][ T9509] hsr_slave_0: entered promiscuous mode [ 430.410109][ T9509] hsr_slave_1: entered promiscuous mode [ 430.440533][ T9509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.467002][ T9509] Cannot create hsr debugfs directory [ 430.801792][ T9541] hsr_slave_0: entered promiscuous mode [ 430.810762][ T9541] hsr_slave_1: entered promiscuous mode [ 430.828230][ T9541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.839911][ T9541] Cannot create hsr debugfs directory [ 431.614921][ T11] hsr_slave_0: left promiscuous mode [ 431.632940][ T11] hsr_slave_1: left promiscuous mode [ 431.654489][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.676866][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.712126][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.728872][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.814906][ T11] veth1_macvtap: left promiscuous mode [ 431.820579][ T11] veth0_macvtap: left promiscuous mode [ 431.850089][ T11] veth1_vlan: left promiscuous mode [ 431.871770][ T11] veth0_vlan: left promiscuous mode [ 432.013920][ T9668] Bluetooth: MGMT ver 1.23 [ 434.748027][ T11] team0 (unregistering): Port device team_slave_1 removed [ 434.826085][ T11] team0 (unregistering): Port device team_slave_0 removed [ 436.329374][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.772'. [ 437.052600][ T5877] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 437.075449][ T9541] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.096574][ T9541] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.117080][ T9541] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.172339][ T9541] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.233259][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 437.247599][ T9509] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 437.255928][ T5877] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 437.285027][ T5877] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 437.296661][ T5877] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 437.307983][ T5877] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 437.315641][ T9509] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 437.322096][ T5877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 437.337661][ T5877] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 437.347555][ T5877] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 437.365446][ T5877] usb 2-1: Product: syz [ 437.369697][ T5877] usb 2-1: Manufacturer: syz [ 437.382637][ T5877] usb 2-1: SerialNumber: syz [ 437.388069][ T9509] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 437.390793][ T5877] usb 2-1: config 0 descriptor?? [ 437.416103][ T5877] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 437.433181][ T9509] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 437.436608][ T5877] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 437.576546][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.696629][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.730705][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.781776][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.788997][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.821029][ T9710] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 437.840153][ T5876] usb 2-1: USB disconnect, device number 39 [ 437.846224][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 437.868695][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.889243][ T5876] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 437.924003][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.931120][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.017647][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.024873][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.110029][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.117239][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.284042][ T9541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 438.296903][ T9541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.660132][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.837097][ T9509] veth0_vlan: entered promiscuous mode [ 438.843678][ T9744] overlay: Unknown parameter '/' [ 438.927700][ T9509] veth1_vlan: entered promiscuous mode [ 438.958774][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.051798][ T9509] veth0_macvtap: entered promiscuous mode [ 439.089121][ T9509] veth1_macvtap: entered promiscuous mode [ 439.374330][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.401177][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.613697][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.747294][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.909773][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.076807][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.098322][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.132364][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.167767][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.208577][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.335778][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.376603][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.387470][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.405071][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.462775][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.500473][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.534042][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.558784][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.580912][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.675978][ T9509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.730719][ T9509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.038299][ T9509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.049705][ T9509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.798195][ T9769] bond0: entered promiscuous mode [ 442.803431][ T9769] bond_slave_0: entered promiscuous mode [ 442.809367][ T9769] bond_slave_1: entered promiscuous mode [ 443.384294][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 443.384431][ T29] audit: type=1800 audit(1737400800.651:42): pid=9778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.787" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 443.459612][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.527892][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.825303][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.848350][ T9541] veth0_vlan: entered promiscuous mode [ 443.861451][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.946351][ T9541] veth1_vlan: entered promiscuous mode [ 444.143763][ T9541] veth0_macvtap: entered promiscuous mode [ 444.154917][ T9541] veth1_macvtap: entered promiscuous mode [ 444.173917][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.202798][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.232732][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.262678][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.309089][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.333880][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.371238][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.398313][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.425350][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.496573][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.527747][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.389991][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.409927][ T9788] block device autoloading is deprecated and will be removed. [ 445.472888][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.507317][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.545286][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.555817][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.566395][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.576355][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.586900][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.596781][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.607323][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.623822][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.831345][ T9541] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.922746][ T9541] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.958193][ T9541] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.968706][ T9541] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.541043][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.744987][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.842873][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.851259][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.922854][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.978968][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.987001][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.028102][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.159879][ T12] bridge_slave_1: left allmulticast mode [ 447.168261][ T12] bridge_slave_1: left promiscuous mode [ 447.178426][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.188620][ T12] bridge_slave_0: left allmulticast mode [ 447.194851][ T12] bridge_slave_0: left promiscuous mode [ 447.202817][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.727159][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.739277][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.751902][ T12] bond0 (unregistering): Released all slaves [ 448.452795][ T12] hsr_slave_0: left promiscuous mode [ 449.768801][ T12] hsr_slave_1: left promiscuous mode [ 449.797828][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.858737][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.033694][ T9828] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.804'. [ 450.073702][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.096060][ T9828] netlink: zone id is out of range [ 450.106750][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.133506][ T9828] netlink: zone id is out of range [ 450.162933][ T9828] netlink: get zone limit has 8 unknown bytes [ 451.258467][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.275881][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 451.288547][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 451.321695][ T12] veth1_macvtap: left promiscuous mode [ 451.472046][ T12] veth0_macvtap: left promiscuous mode [ 451.483572][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 451.501478][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 451.514526][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.524896][ T12] veth1_vlan: left promiscuous mode [ 451.530305][ T12] veth0_vlan: left promiscuous mode [ 453.406348][ T9843] kexec: Could not allocate control_code_buffer [ 453.633070][ T5833] Bluetooth: hci4: command tx timeout [ 454.865001][ T9865] slcan: can't register candev [ 454.884178][ T9865] Falling back ldisc for ttyS3. [ 455.021539][ T12] team0 (unregistering): Port device team_slave_1 removed [ 456.452484][ T5833] Bluetooth: hci4: command tx timeout [ 457.401530][ T12] team0 (unregistering): Port device team_slave_0 removed [ 457.501354][ T9889] netlink: 16 bytes leftover after parsing attributes in process `syz.6.824'. [ 458.519971][ T5833] Bluetooth: hci4: command tx timeout [ 458.839411][ T9907] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 458.846582][ T9907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 458.964308][ T9907] vhci_hcd vhci_hcd.0: Device attached [ 459.192671][ T5916] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 459.282714][ T94] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 459.473696][ T94] usb 6-1: Using ep0 maxpacket: 16 [ 459.490079][ T94] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 459.512761][ T94] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.523291][ T94] usb 6-1: Product: syz [ 459.528517][ T94] usb 6-1: Manufacturer: syz [ 459.533898][ T94] usb 6-1: SerialNumber: syz [ 459.548756][ T94] usb 6-1: config 0 descriptor?? [ 459.577200][ T94] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 459.589302][ T94] usb 6-1: Detected FT232H [ 459.778208][ T94] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 459.785448][ T9908] vhci_hcd: connection closed [ 459.786579][ T9832] chnl_net:caif_netlink_parms(): no params data found [ 459.807949][ T94] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 459.815021][ T5975] vhci_hcd: stop threads [ 459.824944][ T94] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 459.861632][ T5975] vhci_hcd: release socket [ 459.872294][ T94] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 459.883893][ T5975] vhci_hcd: disconnect device [ 459.909460][ T94] usb 6-1: USB disconnect, device number 46 [ 459.934051][ T5916] usb 43-1: device descriptor read/64, error -71 [ 459.974519][ T94] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 460.001158][ T94] ftdi_sio 6-1:0.0: device disconnected [ 460.132802][ T5916] vhci_hcd: vhci_device speed not set [ 460.154740][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.172976][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.191708][ T9832] bridge_slave_0: entered allmulticast mode [ 460.214645][ T9832] bridge_slave_0: entered promiscuous mode [ 460.291011][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.301033][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.304420][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.320087][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.335980][ T9832] bridge_slave_1: entered allmulticast mode [ 460.352850][ T9832] bridge_slave_1: entered promiscuous mode [ 460.383547][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.409980][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.423738][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 460.432050][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.593523][ T5830] Bluetooth: hci4: command tx timeout [ 460.804735][ T5876] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 460.882233][ T9832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.897549][ T9832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.014284][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 461.032907][ T9832] team0: Port device team_slave_0 added [ 461.044813][ T5876] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 461.056846][ T9832] team0: Port device team_slave_1 added [ 461.070680][ T5876] usb 6-1: config 0 has no interface number 0 [ 461.086249][ T5876] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 461.115959][ T5876] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 461.135334][ T5876] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 461.166261][ T5876] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 255 [ 461.193589][ T5876] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 461.211414][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.230275][ T5876] usb 6-1: Product: syz [ 461.235052][ T5876] usb 6-1: Manufacturer: syz [ 461.239890][ T5876] usb 6-1: SerialNumber: syz [ 461.247811][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.271350][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.303599][ T5876] usb 6-1: config 0 descriptor?? [ 461.309406][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 461.321022][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 461.339425][ T9832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.377866][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.395885][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.469605][ T9832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.512748][ T5916] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 461.558235][ T5876] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 461.701896][ T9948] netlink: 'syz.4.843': attribute type 4 has an invalid length. [ 461.723473][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 461.731288][ T5916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.744647][ T5916] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 461.754116][ T5876] etas_es58x 6-1:0.219: could not parse product info: '424242424242' [ 461.757178][ T9832] hsr_slave_0: entered promiscuous mode [ 461.765773][ T5916] usb 7-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=a7.5c [ 461.781572][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 461.784483][ T9949] netlink: 'syz.4.843': attribute type 4 has an invalid length. [ 461.790038][ T5916] usb 7-1: Product: syz [ 461.801761][ T5916] usb 7-1: Manufacturer: syz [ 461.807849][ T5916] usb 7-1: SerialNumber: syz [ 461.813868][ T9832] hsr_slave_1: entered promiscuous mode [ 461.815993][ T5916] usb 7-1: config 0 descriptor?? [ 461.827089][ T9832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.839173][ T9832] Cannot create hsr debugfs directory [ 461.989871][ T9927] chnl_net:caif_netlink_parms(): no params data found [ 462.040964][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.061213][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.080592][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.103682][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.269150][ T9927] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.281130][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.290965][ T9927] bridge_slave_0: entered allmulticast mode [ 462.298591][ T9927] bridge_slave_0: entered promiscuous mode [ 462.302759][ T8049] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 462.360569][ T9927] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.371832][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.379832][ T9927] bridge_slave_1: entered allmulticast mode [ 462.389016][ T9927] bridge_slave_1: entered promiscuous mode [ 462.463378][ T8049] usb 5-1: Using ep0 maxpacket: 32 [ 462.467484][ T9927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.476905][ T8049] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 462.489838][ T9927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.501330][ T8049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.515251][ T5830] Bluetooth: hci2: command tx timeout [ 462.524559][ T8049] usb 5-1: Product: syz [ 462.529696][ T8049] usb 5-1: Manufacturer: syz [ 462.535432][ T8049] usb 5-1: SerialNumber: syz [ 462.547548][ T8049] usb 5-1: config 0 descriptor?? [ 462.565163][ T8049] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 462.586558][ T9927] team0: Port device team_slave_0 added [ 462.606243][ T9927] team0: Port device team_slave_1 added [ 462.658307][ T5879] usb 7-1: USB disconnect, device number 32 [ 462.669873][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.695460][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.729921][ T9927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.790823][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.801547][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.835901][ T9927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.936292][ T9927] hsr_slave_0: entered promiscuous mode [ 462.945939][ T9927] hsr_slave_1: entered promiscuous mode [ 462.953121][ T9927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.960841][ T9927] Cannot create hsr debugfs directory [ 463.018875][ T9832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 463.053693][ T9832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 463.068409][ T9832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 463.086766][ T9832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 463.168592][ T8049] gspca_ov534_9: reg_w failed -71 [ 463.316824][ T9927] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 463.335162][ T9927] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 463.359945][ T9927] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 463.371752][ T9927] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 463.418844][ T9832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.463097][ T8049] gspca_ov534_9: Unknown sensor 0000 [ 463.463185][ T8049] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 463.482043][ T9832] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.496670][ T8049] usb 5-1: USB disconnect, device number 37 [ 463.503214][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.510473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.536271][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.543938][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.583336][ T5916] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 463.611312][ T5875] usb 6-1: USB disconnect, device number 47 [ 463.626714][ T5875] etas_es58x 6-1:0.219: Disconnecting syz syz [ 463.651338][ T9927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.752831][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 463.765920][ T9927] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.784049][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.813127][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.829964][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.837655][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.861694][ T5916] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 463.888119][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.913678][ T5916] usb 7-1: config 0 descriptor?? [ 463.944602][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.951852][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.299917][ T9960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.441226][ T9960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.598067][ T5830] Bluetooth: hci2: command tx timeout [ 464.733141][ T46] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 465.032697][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 465.064837][ T46] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 465.113805][ T46] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 465.133937][ T5916] usbhid 7-1:0.0: can't add hid device: -71 [ 465.145175][ T5916] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 465.167388][ T5916] usb 7-1: USB disconnect, device number 33 [ 465.182399][ T9927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.189961][ T46] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 465.221622][ T46] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.261981][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 465.299077][ T46] usb 6-1: SerialNumber: syz [ 465.351809][ T9967] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 465.553130][ T9832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.649176][ T46] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 465.677816][ T46] usb 6-1: USB disconnect, device number 48 [ 465.909885][ T9832] veth0_vlan: entered promiscuous mode [ 465.954306][ T9832] veth1_vlan: entered promiscuous mode [ 466.171394][ T9832] veth0_macvtap: entered promiscuous mode [ 466.234028][ T9832] veth1_macvtap: entered promiscuous mode [ 466.294591][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.308062][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.319388][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.347919][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.379795][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.403419][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.437693][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.459462][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.472822][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.490980][ T9989] netlink: 'syz.5.851': attribute type 1 has an invalid length. [ 466.492638][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.528205][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.555883][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.582878][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.607559][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.652952][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.673514][ T5830] Bluetooth: hci2: command tx timeout [ 466.697659][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.723945][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.755349][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.768372][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.802822][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.822649][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.862164][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.961553][ T9832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.977661][ T9832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.992466][ T9832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.008419][ T9832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.234169][T10000] nbd6: detected capacity change from 0 to 67108882 [ 467.688761][ T6137] block nbd6: Send control failed (result -89) [ 467.746303][ T6137] block nbd6: Request send failed, requeueing [ 467.751344][ T9927] veth0_vlan: entered promiscuous mode [ 467.796269][ T5830] block nbd6: Receive control failed (result -32) [ 467.829212][ T9816] block nbd6: Dead connection, failed to find a fallback [ 467.837815][ T9816] block nbd6: shutting down sockets [ 467.844182][ T9816] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 467.866395][ T9816] buffer_io_error: 150 callbacks suppressed [ 467.866420][ T9816] Buffer I/O error on dev nbd6, logical block 0, async page read [ 467.903088][ T9927] veth1_vlan: entered promiscuous mode [ 467.903088][ T6137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 467.943405][ T6137] Buffer I/O error on dev nbd6, logical block 0, async page read [ 467.959697][ T6137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 467.969806][ T6137] Buffer I/O error on dev nbd6, logical block 0, async page read [ 467.979258][ T6137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 467.989139][ T6137] Buffer I/O error on dev nbd6, logical block 0, async page read [ 468.033985][ T6137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.045375][ T6137] Buffer I/O error on dev nbd6, logical block 0, async page read [ 468.054748][ T6137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.066079][ T6137] Buffer I/O error on dev nbd6, logical block 0, async page read [ 468.082746][ T6137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.102311][ T6137] Buffer I/O error on dev nbd6, logical block 0, async page read [ 468.133560][ T6137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.212629][ T6137] Buffer I/O error on dev nbd6, logical block 0, async page read [ 468.273539][ T6137] ldm_validate_partition_table(): Disk read failed. [ 468.280436][ T6137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.361018][ T6137] Buffer I/O error on dev nbd6, logical block 0, async page read [ 468.379972][ T9927] veth0_macvtap: entered promiscuous mode [ 468.405349][ T6137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 468.753041][ T5830] Bluetooth: hci2: command tx timeout [ 469.312758][ T6137] Buffer I/O error on dev nbd6, logical block 0, async page read [ 469.367321][ T9927] veth1_macvtap: entered promiscuous mode [ 469.394106][ T6137] Dev nbd6: unable to read RDB block 0 [ 469.400387][ T6137] nbd6: unable to read partition table [ 469.472078][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.492392][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.507478][ T6137] ldm_validate_partition_table(): Disk read failed. [ 469.533154][ T6137] Dev nbd6: unable to read RDB block 0 [ 469.568083][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.572959][ T6137] nbd6: unable to read partition table [ 469.613044][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.668308][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.727126][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.769755][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.926495][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.942695][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.988658][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.013174][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.154361][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.420437][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.736586][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.800140][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.837297][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.851144][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.862032][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.899797][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.956067][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.990206][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.001219][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.013672][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.024914][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.039218][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.051295][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.063767][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.083049][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.106252][T10020] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.115867][T10020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.122910][ T46] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 471.155776][ T5975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.155834][ T9927] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.189883][ T5975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.201993][ T9927] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.214741][ T9927] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.226006][ T9927] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.304305][ T46] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.327388][ T46] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 471.353512][T10025] [ 471.354762][ T46] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.355880][T10025] ====================================================== [ 471.355892][T10025] WARNING: possible circular locking dependency detected [ 471.365375][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.372018][T10025] 6.13.0-syzkaller #0 Not tainted [ 471.390333][ T46] usb 7-1: Product: syz [ 471.392423][T10025] ------------------------------------------------------ [ 471.392434][T10025] syz.4.862/10025 is trying to acquire lock: [ 471.398149][ T46] usb 7-1: Manufacturer: syz [ 471.403801][T10025] ffff88807d1d27e0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 471.403881][T10025] [ 471.403881][T10025] but task is already holding lock: [ 471.403891][T10025] ffff888025a76ae8 (&q->debugfs_mutex){+.+.}-{4:4} [ 471.411531][ T46] usb 7-1: SerialNumber: syz [ 471.414695][T10025] , at: blk_trace_setup+0xb0/0x1e0 [ 471.414727][T10025] [ 471.414727][T10025] which lock already depends on the new lock. [ 471.414727][T10025] [ 471.414736][T10025] [ 471.414736][T10025] the existing dependency chain (in reverse order) is: [ 471.414745][T10025] [ 471.414745][T10025] -> #6 (&q->debugfs_mutex){+.+.}-{4:4}: [ 471.414782][T10025] lock_acquire+0x1ed/0x550 [ 471.480081][T10025] __mutex_lock+0x1ac/0xee0 [ 471.485181][T10025] blk_mq_init_sched+0x3fa/0x830 [ 471.490673][T10025] elevator_init_mq+0x20e/0x320 [ 471.496075][T10025] add_disk_fwnode+0x10d/0xf80 [ 471.501525][T10025] sd_probe+0xba6/0x1100 [ 471.506772][T10025] really_probe+0x2b8/0xad0 [ 471.511862][T10025] __driver_probe_device+0x1a2/0x390 [ 471.517712][T10025] driver_probe_device+0x50/0x430 [ 471.523629][T10025] __device_attach_driver+0x2d6/0x530 [ 471.529975][T10025] bus_for_each_drv+0x24e/0x2e0 [ 471.535413][T10025] __device_attach_async_helper+0x22d/0x300 [ 471.541941][T10025] async_run_entry_fn+0xa8/0x420 [ 471.547586][T10025] process_scheduled_works+0xa66/0x1840 [ 471.553762][T10025] worker_thread+0x870/0xd30 [ 471.558948][T10025] kthread+0x2f0/0x390 [ 471.563597][T10025] ret_from_fork+0x4b/0x80 [ 471.568600][T10025] ret_from_fork_asm+0x1a/0x30 [ 471.573939][T10025] [ 471.573939][T10025] -> #5 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 471.582887][T10025] lock_acquire+0x1ed/0x550 [ 471.588190][T10025] blk_queue_enter+0xe1/0x600 [ 471.593523][T10025] blk_mq_alloc_request+0x4fa/0xaa0 [ 471.599998][T10025] scsi_execute_cmd+0x16c/0x10e0 [ 471.605994][T10025] read_capacity_16+0x2b4/0x1450 [ 471.612317][T10025] sd_revalidate_disk+0x1013/0xbce0 [ 471.618102][T10025] sd_probe+0x9fa/0x1100 [ 471.623049][T10025] really_probe+0x2b8/0xad0 [ 471.628254][T10025] __driver_probe_device+0x1a2/0x390 [ 471.634109][T10025] driver_probe_device+0x50/0x430 [ 471.639800][T10025] __device_attach_driver+0x2d6/0x530 [ 471.645764][T10025] bus_for_each_drv+0x24e/0x2e0 [ 471.651201][T10025] __device_attach_async_helper+0x22d/0x300 [ 471.657891][T10025] async_run_entry_fn+0xa8/0x420 [ 471.660976][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.663392][T10025] process_scheduled_works+0xa66/0x1840 [ 471.663437][T10025] worker_thread+0x870/0xd30 [ 471.663465][T10025] kthread+0x2f0/0x390 [ 471.663490][T10025] ret_from_fork+0x4b/0x80 [ 471.663512][T10025] ret_from_fork_asm+0x1a/0x30 [ 471.680768][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.683164][T10025] [ 471.683164][T10025] -> #4 ( [ 471.704232][ T46] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 471.706906][T10025] &q->limits_lock){+.+.}-{4:4}: [ 471.706942][T10025] lock_acquire+0x1ed/0x550 [ 471.730813][ T46] usb 7-1: USB disconnect, device number 34 [ 471.732227][T10025] __mutex_lock+0x1ac/0xee0 [ 471.747984][T10025] nbd_set_size+0x2e0/0x8f0 [ 471.755162][T10025] nbd_ioctl+0x5dc/0xf40 [ 471.760652][T10025] blkdev_ioctl+0x57d/0x6a0 [ 471.766476][T10025] __se_sys_ioctl+0xf5/0x170 [ 471.771821][T10025] do_syscall_64+0xf3/0x230 [ 471.776921][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.784004][T10025] [ 471.784004][T10025] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 471.792868][T10025] lock_acquire+0x1ed/0x550 [ 471.797998][T10025] blk_mq_submit_bio+0x1536/0x2390 [ 471.804037][T10025] __submit_bio+0x2c6/0x560 [ 471.809368][T10025] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 471.815640][T10025] block_read_full_folio+0x9b3/0xae0 [ 471.822134][T10025] filemap_read_folio+0x148/0x3b0 [ 471.828254][T10025] filemap_get_pages+0x18ca/0x2080 [ 471.833920][T10025] filemap_read+0x452/0xf50 [ 471.839057][T10025] blkdev_read_iter+0x2d8/0x430 [ 471.845014][T10025] vfs_read+0x991/0xb70 [ 471.849755][T10025] ksys_read+0x18f/0x2b0 [ 471.854553][T10025] do_syscall_64+0xf3/0x230 [ 471.859641][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.866394][T10025] [ 471.866394][T10025] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 471.875276][T10025] lock_acquire+0x1ed/0x550 [ 471.880481][T10025] down_read+0xb1/0xa40 [ 471.885210][T10025] filemap_fault+0xb3e/0x1490 [ 471.890451][T10025] __do_fault+0x135/0x390 [ 471.895701][T10025] handle_pte_fault+0xfcf/0x5ed0 [ 471.902439][T10025] handle_mm_fault+0x1053/0x1ad0 [ 471.907935][T10025] exc_page_fault+0x459/0x8b0 [ 471.913524][T10025] asm_exc_page_fault+0x26/0x30 [ 471.919846][T10025] [ 471.919846][T10025] -> #1 (&vma->vm_lock->lock){++++}-{4:4}: [ 471.927924][T10025] lock_acquire+0x1ed/0x550 [ 471.933005][T10025] down_write+0x99/0x220 [ 471.938401][T10025] vma_link+0x28c/0x500 [ 471.943569][T10025] insert_vm_struct+0x2f7/0x410 [ 471.949359][T10025] alloc_bprm+0x5a6/0xa30 [ 471.954265][T10025] kernel_execve+0x99/0xa50 [ 471.959539][T10025] kernel_init+0xed/0x2b0 [ 471.964454][T10025] ret_from_fork+0x4b/0x80 [ 471.969444][T10025] ret_from_fork_asm+0x1a/0x30 [ 471.974971][T10025] [ 471.974971][T10025] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 471.983135][T10025] validate_chain+0x18ef/0x5920 [ 471.988601][T10025] __lock_acquire+0x1397/0x2100 [ 471.994015][T10025] lock_acquire+0x1ed/0x550 [ 471.999581][T10025] __might_fault+0xc6/0x120 [ 472.005280][T10025] _copy_from_user+0x2a/0xc0 [ 472.010497][T10025] blk_trace_setup+0xd2/0x1e0 [ 472.015741][T10025] sg_ioctl+0xa46/0x2e80 [ 472.020528][T10025] __se_sys_ioctl+0xf5/0x170 [ 472.026007][T10025] do_syscall_64+0xf3/0x230 [ 472.031075][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.037525][T10025] [ 472.037525][T10025] other info that might help us debug this: [ 472.037525][T10025] [ 472.047860][T10025] Chain exists of: [ 472.047860][T10025] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 472.047860][T10025] [ 472.062258][T10025] Possible unsafe locking scenario: [ 472.062258][T10025] [ 472.069728][T10025] CPU0 CPU1 [ 472.075214][T10025] ---- ---- [ 472.080604][T10025] lock(&q->debugfs_mutex); [ 472.085227][T10025] lock(&q->q_usage_counter(queue)#50); [ 472.093536][T10025] lock(&q->debugfs_mutex); [ 472.101009][T10025] rlock(&mm->mmap_lock); [ 472.105527][T10025] [ 472.105527][T10025] *** DEADLOCK *** [ 472.105527][T10025] [ 472.113708][T10025] 1 lock held by syz.4.862/10025: [ 472.118867][T10025] #0: ffff888025a76ae8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xb0/0x1e0 [ 472.128824][T10025] [ 472.128824][T10025] stack backtrace: [ 472.134735][T10025] CPU: 0 UID: 0 PID: 10025 Comm: syz.4.862 Not tainted 6.13.0-syzkaller #0 [ 472.143614][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 472.154408][T10025] Call Trace: [ 472.158048][T10025] [ 472.161251][T10025] dump_stack_lvl+0x241/0x360 [ 472.166699][T10025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.172025][T10025] ? __pfx__printk+0x10/0x10 [ 472.176644][T10025] print_circular_bug+0x13a/0x1b0 [ 472.182093][T10025] check_noncircular+0x36a/0x4a0 [ 472.187201][T10025] ? __pfx_check_noncircular+0x10/0x10 [ 472.192699][T10025] ? lockdep_lock+0x123/0x2b0 [ 472.192752][ T46] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 472.198807][T10025] validate_chain+0x18ef/0x5920 [ 472.212477][T10025] ? __pfx_lock_release+0x10/0x10 [ 472.217667][T10025] ? __pfx_validate_chain+0x10/0x10 [ 472.223268][T10025] ? __pfx_lock_acquire+0x10/0x10 [ 472.228615][T10025] ? bpf_trace_run2+0x1fc/0x540 [ 472.233525][T10025] ? __pfx_lock_release+0x10/0x10 [ 472.238760][T10025] ? mark_lock+0x9a/0x360 [ 472.243267][T10025] __lock_acquire+0x1397/0x2100 [ 472.250448][T10025] lock_acquire+0x1ed/0x550 [ 472.255013][T10025] ? __might_fault+0xaa/0x120 [ 472.259847][T10025] ? __pfx_lock_acquire+0x10/0x10 [ 472.264896][T10025] ? __pfx___might_resched+0x10/0x10 [ 472.270382][T10025] ? blk_trace_setup+0xb0/0x1e0 [ 472.275388][T10025] ? __pfx___mutex_lock+0x10/0x10 [ 472.280466][T10025] ? __pfx_lock_release+0x10/0x10 [ 472.285519][T10025] ? __might_fault+0xaa/0x120 [ 472.290210][T10025] __might_fault+0xc6/0x120 [ 472.294765][T10025] ? __might_fault+0xaa/0x120 [ 472.299669][T10025] _copy_from_user+0x2a/0xc0 [ 472.304490][T10025] blk_trace_setup+0xd2/0x1e0 [ 472.309193][T10025] ? __lock_acquire+0x1397/0x2100 [ 472.314249][T10025] ? __pfx_blk_trace_setup+0x10/0x10 [ 472.319751][T10025] ? smack_log+0x123/0x540 [ 472.324627][T10025] ? __pfx_smack_log+0x10/0x10 [ 472.329616][T10025] ? smk_access+0x4ab/0x4e0 [ 472.334181][T10025] sg_ioctl+0xa46/0x2e80 [ 472.338575][T10025] ? smk_tskacc+0x300/0x370 [ 472.343242][T10025] ? __pfx_sg_ioctl+0x10/0x10 [ 472.347964][T10025] ? __fget_files+0x2a/0x410 [ 472.352588][T10025] ? __fget_files+0x2a/0x410 [ 472.357236][T10025] ? __pfx_sg_ioctl+0x10/0x10 [ 472.361937][T10025] __se_sys_ioctl+0xf5/0x170 [ 472.362637][ T46] usb 7-1: Using ep0 maxpacket: 8 [ 472.366549][T10025] do_syscall_64+0xf3/0x230 [ 472.377233][T10025] ? clear_bhb_loop+0x35/0x90 [ 472.377693][ T46] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 472.382122][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.390514][ T46] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 472.396693][T10025] RIP: 0033:0x7f9ac3785d29 [ 472.396729][T10025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.396748][T10025] RSP: 002b:00007f9ac45ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.396772][T10025] RAX: ffffffffffffffda RBX: 00007f9ac3976080 RCX: 00007f9ac3785d29 [ 472.396789][T10025] RDX: 00000000200001c0 RSI: 00000000c0481273 RDI: 0000000000000007 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 472.396804][T10025] RBP: 00007f9ac3801b08 R08: 0000000000000000 R09: 0000000000000000 [ 472.396819][T10025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.396834][T10025] R13: 0000000000000000 R14: 00007f9ac3976080 R15: 00007ffc52bd7e68 [ 472.396860][T10025] [ 472.396992][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.411535][ T46] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.722564][ T46] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 472.762761][ T46] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 472.785026][ T46] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.804367][ T46] usb 7-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.819442][ T46] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 472.948824][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.018820][T10018] bond0: (slave syz_tun): Releasing backup interface [ 473.078968][ T5960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.109404][ T46] usb 7-1: can't set config #16, error -71 [ 473.210410][ T46] usb 7-1: USB disconnect, device number 35 [ 473.243005][ T5960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.318663][ T5960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.387668][ T5960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.516755][ T5960] bridge_slave_1: left allmulticast mode [ 473.525837][ T5960] bridge_slave_1: left promiscuous mode [ 473.531613][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.540690][ T5960] bridge_slave_0: left allmulticast mode [ 473.550724][ T5960] bridge_slave_0: left promiscuous mode [ 473.559755][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.702103][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.714185][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.726709][ T5960] bond0 (unregistering): Released all slaves [ 473.933755][ T5960] hsr_slave_0: left promiscuous mode [ 473.940802][ T5960] hsr_slave_1: left promiscuous mode [ 473.947518][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.956350][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.965811][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.974054][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.985197][ T5960] veth1_macvtap: left promiscuous mode [ 473.990912][ T5960] veth0_macvtap: left promiscuous mode [ 473.996606][ T5960] veth1_vlan: left promiscuous mode [ 474.002724][ T5960] veth0_vlan: left promiscuous mode [ 474.201933][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 474.234303][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 474.591036][ T5960] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.647399][ T5960] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.699031][ T5960] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.777855][ T5960] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.890814][ T5960] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.957555][ T5960] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.997420][ T5960] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.058945][ T5960] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.151575][ T5960] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.197383][ T5960] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.257786][ T5960] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.317640][ T5960] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.403665][ T5960] bridge_slave_1: left allmulticast mode [ 475.411237][ T5960] bridge_slave_1: left promiscuous mode [ 475.417610][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.427724][ T5960] bridge_slave_0: left allmulticast mode [ 475.436383][ T5960] bridge_slave_0: left promiscuous mode [ 475.443998][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.456003][ T5960] bridge_slave_1: left allmulticast mode [ 475.464514][ T5960] bridge_slave_1: left promiscuous mode [ 475.473596][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.483562][ T5960] bridge_slave_0: left allmulticast mode [ 475.489538][ T5960] bridge_slave_0: left promiscuous mode [ 475.497097][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.509113][ T5960] bridge_slave_1: left allmulticast mode [ 475.515851][ T5960] bridge_slave_1: left promiscuous mode [ 475.524560][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.536820][ T5960] bridge_slave_0: left allmulticast mode [ 475.544834][ T5960] bridge_slave_0: left promiscuous mode [ 475.553939][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.880849][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.895214][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.917537][ T5960] bond0 (unregistering): Released all slaves [ 475.943489][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.960756][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.975913][ T5960] bond0 (unregistering): Released all slaves [ 476.159057][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.169349][ T5960] bond_slave_0: left promiscuous mode [ 476.178336][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.187817][ T5960] bond_slave_1: left promiscuous mode [ 476.194294][ T5960] bond0 (unregistering): Released all slaves [ 476.205412][ T5960] bond1 (unregistering): Released all slaves [ 476.216167][ T5960] bond2 (unregistering): Released all slaves [ 476.568986][ T5960] hsr_slave_0: left promiscuous mode [ 476.575600][ T5960] hsr_slave_1: left promiscuous mode [ 476.582310][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.589968][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.598686][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.606874][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.618639][ T5960] hsr_slave_0: left promiscuous mode [ 476.629688][ T5960] hsr_slave_1: left promiscuous mode [ 476.636769][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.644518][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.654083][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.663551][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.675229][ T5960] hsr_slave_0: left promiscuous mode [ 476.681932][ T5960] hsr_slave_1: left promiscuous mode [ 476.691093][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.700526][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.711899][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.720188][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.733866][ T5960] veth1_macvtap: left promiscuous mode [ 476.740141][ T5960] veth0_macvtap: left promiscuous mode [ 476.748168][ T5960] veth1_vlan: left promiscuous mode [ 476.753792][ T5960] veth0_vlan: left promiscuous mode [ 476.760069][ T5960] veth1_macvtap: left promiscuous mode [ 476.766034][ T5960] veth0_macvtap: left promiscuous mode [ 476.773376][ T5960] veth1_vlan: left promiscuous mode [ 476.779851][ T5960] veth0_vlan: left promiscuous mode [ 476.786052][ T5960] veth1_macvtap: left promiscuous mode [ 476.791682][ T5960] veth0_macvtap: left promiscuous mode [ 476.797444][ T5960] veth1_vlan: left promiscuous mode [ 476.804674][ T5960] veth0_vlan: left promiscuous mode [ 477.098993][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 477.133810][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 477.409540][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 477.446878][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 477.758144][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 477.801920][ T5960] team0 (unregistering): Port device team_slave_0 removed