last executing test programs: 10.540385776s ago: executing program 2 (id=799): listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) preadv(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0) r2 = socket(0x1a, 0x3, 0x2) recvmmsg(r2, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x10000}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000000580)=""/64, 0x40}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x5, &(0x7f0000001a00)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000700)=@caif=@dbg, 0x80, &(0x7f0000000780)=[{&(0x7f0000001840)=""/193, 0xc1}], 0x1, &(0x7f00000007c0)=""/1, 0x1}, 0xb}], 0x3, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000200)=0x2, 0x4) r3 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x40800}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0}) r5 = socket$alg(0x26, 0x5, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000001e00)=""/4108, 0x210) r6 = dup3(r5, r4, 0x80000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x7}) mount$fuse(0x20000000, 0x0, 0x0, 0x223216, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000280)={0x4}) 10.448386309s ago: executing program 1 (id=800): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b40)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYBLOB="000000000000000014001a80100005800c00018008000100009bea6b7fada5b2000000b6e783cb551c262de3058aafa2bfefd9a141b8bd00b133ecc7016615e1debc43b5345245a8e132b1f64d6804608e62c9ba33ca1452779f670089b7bc078044d8637efca88418ad82aea941a39592627b6e0d7eb5ce250c9ea81cfc5a92d6c2f3a9f40da65b340f8c4221794daaeaadaa04e1517f5af8ae7122c88e7d5c9d2d8bac3ffd95901045e84a3ba653db51ff6288f06fbfcec57330"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={&(0x7f00000000c0)="c461f9134200c482f5293b66262465f2c543aaaa676666420fadf4c461dd6b651dc4a12966dbc461fc1069e468859a71a4000092663b663b", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x9, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[]) socket$inet6_dccp(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010011000000060003400000200014000180080001007f00000108000200000000000c"], 0x54}}, 0x0) 9.996288562s ago: executing program 2 (id=803): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x4, 0x0, {0xffffffffffffffff}, {}, 0x72, 0x18}) sched_setaffinity(0x0, 0x6e3754f8c93de59f, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x0, 0x0) syz_io_uring_setup(0x7ade, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x80, 0x0, r2}, 0x0, &(0x7f0000000300)) r4 = socket(0x15, 0x1, 0x3fffffd) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000280)={0x1d, r6}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, r6, 0x0, {0x0, 0x0, 0x3}, 0xfe}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="de7d10ee999d97c06077bde99694858521b2d582e47fe9d3b5ac1468638a8ef124a9c9b68a71086942b120c3d0fc1a3b676e4beaff00f5220e1b1df999a8728a7c3292142745d8bb65d2c013a368cc0732e569e87c0082c42e0776128fa24b722ada0f2f002732333c3e5fcfde401d2383fc8fb54540e6370d5249ef16b03700f089d1c25fbb8c3bdc6782c3afa691aee257ab91a3f5e88399e4949f3930c2896707f104775c89bd1d1aa28f5f6006126fbb6d8d637f2927f4e5bc76c9acf9699704c32d85b151cf9eda58d8d6e2d9be6cec217f40", @ANYRESDEC=r9, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x802}, 0xc040) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r11, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f00000083c0)={{0x3}}) 9.930776011s ago: executing program 1 (id=804): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)="8fc51ea43bc38fdc672ff8a38c366bb16b506f6b0a9054452a7000538d993be36813c4d7ed5cf342504aab2192e5e9ede74ddeb93cc59ec6ff6fce6466a68433b79ac0c778d805cfff9bc09c7d7b7cbc7c77db378a8b572e5336a1a8936789c4694807f9c1d426c2fb9a8999f8dbf6c923be405a2920d2d866d69e11161d7e632359cc3b69be59a6b3d32c3ca818b2f2e5acb0925815d7ea48ccb7536c48481f4d76b35e7f3a9988c44f4c118e3dfb03943ef583d29c1c6f02a7d652a17e1ffb3ff69cac5f3f6dfcf9399d054fe8cca2a46a1d73a52b149f238d3fd0ed0d8bdba7fef94d59217c3271770853", 0xec}, {&(0x7f0000000040)="dc", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001f80)}, {&(0x7f0000002200)="c0ad27f445e63ff2a01471046193", 0xe}], 0x2}}], 0x2, 0x0) 8.495830035s ago: executing program 0 (id=806): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2cdfee011b51b9e4f2f8726f70746d6f64653d3030303030936df0d25ff6293030303030303030303030303130301030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=queue1\x00,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,\x00']) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x80585414, &(0x7f00000001c0)) truncate(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000002340)=""/229) mount_setattr(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0xa0, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d5b6c108701801009fe60010030109028e00010000800009041902030a000000082402010000000009058d", @ANYRES16], 0x0) 8.495123614s ago: executing program 1 (id=807): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000072000040"]) socket$kcm(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='jbd2_handle_stats\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0xffffff40}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_tracing={0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x10, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x3}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@ifindex, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000700)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @local}, &(0x7f00000001c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x30}, 0x3d, r9}) 7.304402159s ago: executing program 1 (id=808): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='net_prio.prioidx\x00', 0x0, 0x0) r3 = open_tree(r2, &(0x7f0000000200)='./file0\x00', 0x80801) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000b40)={{r1}, r0, 0x0, @unused=[0xfff, 0x1, 0x807f, 0x9], @subvolid=0x5}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0), 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12011001a0b4c41058044a70553a0102030109025100010000000009040000070304c00009050c00000000000000000009050903000000000009050200000000000009050600000000000009050400000000000009050b030000000000000000000700"], 0x0) setregid(0x0, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1a8, 0x0, 0x0, @private2, @local, {[], "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"}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000001400078008001140030000000500150000000000050005000a000000050001000700000005000400000000000900020073797a31000000000c000300686973683a697000"], 0x58}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030077e4216a0466a2945d0102030109021b00010908b006099a05090184435f079c090500004200b5050795904d57cc2bd0edcf53"], &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0}) 7.274042689s ago: executing program 2 (id=809): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000002100)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902240001000010000904140002a024260009050602ff0300000009058202080000000038e00dc942d90e8dcaa97299f9ab49a878462e8dc2df4b325ee567739ee52d"], 0x0) r1 = timerfd_create(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000004c0)={@pppoe={0x18, 0x0, {0x0, @local, 'team0\x00'}}, {0x0}, &(0x7f0000000280), 0x20}, 0xa0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) fchmod(0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') close(r1) read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020) syz_usb_control_io(r0, 0x0, 0x0) 6.101750668s ago: executing program 0 (id=812): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\f\x00\x00N\a\x00'], 0x94}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000100000000000000000000a1ffff", @ANYRES32=r3, @ANYBLOB="0000000019"], 0x2c}}, 0x0) 5.828354575s ago: executing program 0 (id=814): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b40)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYBLOB="000000000000000014001a80100005800c00018008000100009bea6b7fada5b2000000b6e783cb551c262de3058aafa2bfefd9a141b8bd00b133ecc7016615e1debc43b5345245a8e132b1f64d6804608e62c9ba33ca1452779f670089b7bc078044d8637efca88418ad82aea941a39592627b6e0d7eb5ce250c9ea81cfc5a92d6c2f3a9f40da65b340f8c4221794daaeaadaa04e1517f5af8ae7122c88e7d5c9d2d8bac3ffd95901045e84a3ba653db51ff6288f06fbfcec57330"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={&(0x7f00000000c0)="c461f9134200c482f5293b66262465f2c543aaaa676666420fadf4c461dd6b651dc4a12966dbc461fc1069e468859a71a4000092663b663b", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x9, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[]) socket$inet6_dccp(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010011000000060003400000200014000180080001007f00000108000200000000000c"], 0x54}}, 0x0) 5.827504323s ago: executing program 3 (id=815): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private, 0x0, 0x1}]}]}, 0xfc}}, 0x0) madvise(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x80000000e) mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0x68}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x3, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff00"/126]}, 0xf6) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f00000004c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x65, 0x3d, 0x72, 0x10, 0x572, 0x41, 0xd524, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc1, 0x69, 0xdd}}]}}]}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x100021, 0x800000000004, @tid=r3}, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x8, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x7, 0x8, 0xd6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x7, 0x81, 0x94}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x7, 0x8e}}}}}]}}]}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x3fc}, 0x0, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) 5.599935121s ago: executing program 1 (id=816): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100008, 0x20, 0xe2a4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003200010000000000000000000a00806e08000000e0000001140001"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000bbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter, 0x48) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f00000003a8407a730bf85edacab3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000000)={0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000400000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x541b, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88101) unshare(0x22020400) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r7 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) 5.536345896s ago: executing program 0 (id=817): socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x5, 0xffff843d, {}, {0xee01}, 0xffffffffffffffff, 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r2, 0x0, &(0x7f0000000140)) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) dup(0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x20000010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04230d00c9001a004cf8eb0831bff1911bf2611d76d3309077234b78b82604d7de14af5b56050ced3cc3bc00db487f0697"], 0x10) r4 = socket(0x0, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a0013070000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]]}, 0x2c}}, 0x0) 5.468169194s ago: executing program 2 (id=818): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000400000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000017", @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="26003300d0000000080211000001080211000000505050505050000008"], 0x44}}, 0x0) 4.57614588s ago: executing program 0 (id=820): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0xf, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000080), &(0x7f0000000200), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x41) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) dup(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x61, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x53, 0x68, 0x0, 0xb, 0x21, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3b}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0x5, 0x5, "e6e6e6", 0x1, "80896a"}, "97b2f3372ab231e09435b9c31a917810753e2c52d66d88f75a79fb830874110e1c139ba7603ae7231c41f921d7dba8"}}}}}, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000280)=""/239, 0xef) syz_usb_disconnect(r4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r6) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000400b060a70000000000001090224000100000000090400000103000000092100000001220500090581030000000000459d68a0fe00fd1fc5d33f719befce0242f103f2e5c7f9c6cc99fa5f9fd13f999115adc5d0d3787336e5a3367172909c39adf9fe2795732b25bd9d383fb26d2f26900c1c111750c6f4ff7be6cddd0e6069ad5a741e7e3988b150d40916b886ce4bdec6337f2227ebafc8c6df7e67cb58e66ac07e667003fd9b6df3f1e89d"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0xf6, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x7, 0x1, 0x6, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x73, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x2, 0x40, 0x1, 0xff, 0x38}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44a}}, {0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "c3620c41bd6bb7f29f79105e12362649aee2d5a19a0ca466ec2f4514c6175cee03318ca92b211a3d91aec714a0981cafbffa68da3d10bcd78df0222dd260f7409c10e4a0627ccc05d640698c955acceccd78046b38a0cdb038c82396f834b69e587abfbcf1dec25b1d795d6100567cf964b8dbf14324c0b877b6bfe6c2eeec3b9658e68e524e37aad4e040c0d2e8c7672a7be655a77ac9a490d2b0cc045c5ccfe31d67426a4ca59593649428698a2927f6"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x37, &(0x7f00000004c0)=@string={0x37, 0x3, "a0b4936c8e444c1b51d9b2b4f3480508c6f69cf9182bf2a974928f2d088cb0fea9e50709dedf8c6c1e3501bfa1e2e06e5cecd0430a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x409}}, {0x3a, &(0x7f00000003c0)=@string={0x3a, 0x3, "7f3f18864817efa0e9cf4e534dde6eb987a15cc34f43267712e72f6d9e8756eb9a5a1769ce5793c96f77b392f1890877ad9c62684c0cb918"}}]}) syz_usb_control_io(r8, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0400050000bef0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.095534257s ago: executing program 3 (id=822): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2cdfee011b51b9e4f2f8726f70746d6f64653d3030303030936df0d25ff6293030303030303030303030303130301030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=queue1\x00,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,\x00']) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x80585414, &(0x7f00000001c0)) truncate(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000002340)=""/229) mount_setattr(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0xa0, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d5b6c108701801009fe60010030109028e00010000800009041902030a000000082402010000000009058d", @ANYRES16], 0x0) 3.803377315s ago: executing program 2 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c) listen(r2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x35dc, @remote, 0xffffffc1}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xcc51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) read$watch_queue(r3, &(0x7f0000000100)=""/33, 0x21) r4 = signalfd(0xffffffffffffffff, &(0x7f00000039c0), 0x8) fgetxattr(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="73656375720d52906974792e5c7b28212d2f5b2b7b5e7d2400cedad19c3894bb61435fde5bfb51e6117b4cac16bf3a0140022c1511d368b5986fcfb508432631abfc9f668da1f12f995f77e431f6291fedf4d2d9444f6560f33319f6e5b2aa5de985462db63a9e86217d310214a722acbe358680cfe64f037c2f5074873f030ec0ae6b7a95659f226e6e8308283652da3103"], 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7584, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g']) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000008e03"]) fsmount(0xffffffffffffffff, 0x0, 0x0) 3.706097961s ago: executing program 4 (id=825): syz_usb_connect(0x2, 0x41e, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0xd, 0xee, 0x67, 0x8, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x1, 0x6, 0x2, [@generic={0x51, 0x30, "ad0a37a3cae6e74ee09421988d5f44b67b74e7c0a1bddf9893023d03fc45cc3e6a6c9e66792794543588d89641ce50fc653243775f8ec2f4784cabb6bd35d5f91d8662fef64bddd1c61b995746817b"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xd, 0x22, "7ec49825018dab42f693cf"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x8, 0x8}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x3, 0x3, 0x0, [@generic={0x4f, 0x6, "064eacf84511cbd0d1095588a9af91510ed7c2f2b6934c57597d95b5a87723b0858ed4ff00d73e16ef90bfae8dfc83e78f177c7fcde6ca53384bca4e543073a57b43e6ab23c2a82e9f2234e63b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x0, 0x55, [@generic={0x97, 0x30, "856fcd013a9838cb88a907c23eff534cce773cf371164ea2975b3530fe91c3dba007e64fad13cbe21a49f545c97f45c0bc7e0c04d05f2dd9474a6720cc64bbdc42a0a63460fb625206bdfac9e3298dd218a24f1d39b18fe72d4b3e02ac283d7d0c7929c1e7080b80fa7f382640023658fef442977a76c96e6903d81cad0e3371b9f01c40155f1fc3d98da02fa5b0f4b8b1aaa8d5e1"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x3, 0x1, 0x3, [@generic={0x93, 0x1, "a21834c4fd8719cded8525a4662f0d8e9a4df736525c834bb68ddff62ebbafe1b9b3b248f4fbdf15820cbb27e0ea6ce06eb736b41e988a5c6540016e21f175ab398862200ac9524e2349f5297bb92a5dcf621d4585221688d3797f4c14c5390a696a67537cf4c7d1c48b9f41d14fad8163e870d7f433090617c74c24bc23e459f4422243a601875e54f7f7f61e5e37f8c1"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x3, 0x8, 0xc2, [@generic={0xd9, 0x3e, "204baf4d4289ab3aa8711ffe1a8535c6224f4b4cc896e00dfa48f588f224e11ae0ed3a04254716460cad71af070dd273373889b4813ff825596cf72919e591d05f56276d98069e4cd08700ae456e0ee7db6413503b060d16e2856e980af86e6f6dba0bd00d2090645ae8b62304af8a71931dae16fb392a850615ba05615faf0fd64cacb7af834a46bc33de0fece7302718a595bc839d84e7ea79b346baa73a846a45db8da6a345a1903e1076ad6c360ed53c74209885502d2bb50417467ba46aebdfac4e83eb529994d81735ea4426456ca0e2223faf81"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x7ff, 0x2, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x7790}]}}, {{0x9, 0x5, 0xb671a988d1c4d84e, 0x2, 0x400, 0xea, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x6, 0x6, 0x2, [@generic={0x92, 0x2, "cb8af644be51a6c0c4f0a0f9cc891820b3c1c59bbe1511f803d12bc13abb3e7227a7a0bf7da41de546b02ff121c39ef309dcef5e7f43095a8f339829b1ef996f1d49696e45108a7b94f853fcf412059d41f0ef0e80b0e2f7e7dfa77e130f8b936be3859898d2b4fd3a9faae83a07fba5e718402f9080cff0abb094db2139647ca4f01fb6603c348178ed7c0d54f79253"}]}}, {{0x9, 0x5, 0xf, 0xa, 0x400, 0x6, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xd, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x100}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xa5, 0x0, 0x10, [@generic={0x27, 0x22, "467b08d236fcb43590ec20bd63fad6bdac377980d65eb54380b0e71a7c4e0466ae39480049"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xfb, 0x40, 0x1}}]}}]}}]}}, 0x0) epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) syz_usb_connect(0x0, 0x4ce, &(0x7f00000011c0)={{0x12, 0x1, 0x200, 0xcd, 0xf0, 0x8c, 0x40, 0x5c6, 0x9070, 0x111c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4bc, 0x4, 0x92, 0x3, 0x120, 0x7, [{{0x9, 0x4, 0x4, 0xda, 0x8, 0xe2, 0x55, 0x72, 0x4, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x7, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd5, 0xa}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x81, 0x4, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x1ff}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x1, 0x1, 0x9, [@generic={0xc8, 0x21, "ab91427c60cbac2212601e21bfa4f461a4486938fd6d569b9c2e041ec44c2826564235068c56bfe52568f53d19781691feddecb58bc29d4c2e358a50fd5f6ca78c669ac2f64c59fd77702b7317a7311e75dcfdc5d315b7edf95dc6ab43427ace4c0ce4efcf9ec3ab16ec989f421f50a55514c58aad7e5ef5041fb01621ee83ec276d61d63c0d29c5840e7e0a136aeb8c027bf4f190c2eb31b4ceeb0f04c152d2ddcc5f8082d3fca69bac443d7c7554748386f7df7171385553ff5378ca0173b6dfbded990ca0"}, @generic={0xb2, 0x11, "b3e877cbb473f95cc40cec49d3cdf7301d2a7997329929dc6097837611bcd3e655fd61d6797e24a8ec30e624d6ee0fc624a131af89a59f8c7de2d850060ca8d9e65eed376d610a716cf958aee760c0f8c6f06d3f45ef423b902ec759d3b4ced492a7a25919ef123b258bdc1bcdda1f2f6cfd1d5fa326f59e90cc394447d5d54f6ae77a98c3b57d55291a7d19b2d7db1a8ff0bacccb0c20a54a84899e6d0ce468fe1a95162a9739be34ba409a4ef1726f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x3, 0x9, 0x9, [@generic={0x6d, 0xa, "34d30e83f55c710b9d6180e347aa62a6e3d311b46f3426753a72a91ad58279c83bd0558dc500c96d49ee6ce858168d5e0147d43f0d63e3acd7e1a7bb01f4d791fc04a8fa3fefb6eb5cb17c6a30d62d0834c5c46bfdfc44c94c96d3a9943e8d43d48ebd2d2d012ac3115dfa"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x8f, 0xef, 0x6}}, {{0x9, 0x5, 0x8, 0xe, 0x3ff, 0x3, 0x0, 0xf6, [@generic={0x44, 0xc, "7b2d11327ab79d9cf8054e4827040e8801b789f20d170de52af207f5d93b9340b18272197f03547681cf510166b4a7dbcc4a6507b35751b3971bec39efd09081f37d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0xfe, 0xe, 0x1, [@generic={0x5e, 0x23, "f664e796906d596ddd9fff3804e5b527765d00ff0146867954cb7bcc9da329804a9292c3cf77f8753f67dd7c24fa0ecc27778242fb39a6a2f9c21fb9de0f4948c3b1a645ed07ffad38f386f4488a9a888ba0f06859d148d3e38334ca"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x6, 0x4, 0x5}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x5, 0xa8, 0x71, 0xc9, 0x8, [], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x7f, 0x7, 0x6a}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0x1, 0x0, 0x81}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x6, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x6, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x77, 0x8, 0x8e}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x8, 0x3b, 0x6}}]}}, {{0x9, 0x4, 0xb0, 0xf7, 0x0, 0x3, 0x81, 0x54, 0x9a}}, {{0x9, 0x4, 0x6, 0x79, 0xc, 0x40, 0x7c, 0xfe, 0x8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a83a"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xe00, 0x7, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0xfe, 0x4, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x73, 0x8001}]}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0x4, 0xd5}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x81, 0x6, 0x5, [@generic={0x76, 0xf, "fecea5ccbacdc1d4a74120b1dd998301d7af958e2f69898f6a7e113d524f316bb552dcdb1107d36097ca12f060b5f89481aa08104a6f8d0cc675832c13f9196366bb10f9ea9f2a2a56fbdd8e04c1c1148d64062390707b3795837f294f7003c219d020755557274f59251d25e172af99586add6f"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x4, 0x7, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x0, 0x9, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x7ca}]}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x2, 0x0, 0x3}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x6, 0x57, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x5, 0x10}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x2, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x40}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x3, 0x1e, 0x2, [@generic={0x38, 0x21, "cfa5d9f69610987fc32ee5bef666be8194a1d38ef67782af922fb977cf29c60a7595c11906e279a68e4419d6cd45d52b61bcc66977b5"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xf8, 0x35, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x8}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x6, 0x78, 0xb}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x2, 0x1, 0x6, [@generic={0x2, 0xd}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0x2f, 0xff, 0x2}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x7, 0x1}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xbc, &(0x7f0000000300)=@string={0xbc, 0x3, "3c9c3d93f90f5be18b47b8f1c25e55c362e7356fde0c5dd3b6eacfd7cc66462345afcf24252bfdf6b2ba391b708074e7be36f2943df42afac20653531434d0cab53b1cdd652c0b17c3a7af31bce10708d2b1376d6ff719c4ad04c389c26c3a5440dffa15152239f15e776ce6b734272dfcac515d0aa9dcbcebff30d8e5e61ae5e532c5cb8fbb1779989595710daa47cabdd1b259b36f463b58e334bbddc14729a14277c986af65f0cc554ad3cb201328eb403842fdc42eb87a1d"}}]}) socket(0x10, 0x3, 0x0) 3.142044083s ago: executing program 2 (id=826): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x401064d0, &(0x7f0000000000)={0x5, 0x2}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = getpgid(0xffffffffffffffff) get_robust_list(r5, &(0x7f0000000400)=&(0x7f00000003c0)={&(0x7f0000000280)={&(0x7f0000000040)}, 0x0, &(0x7f0000000380)={&(0x7f0000000340)}}, &(0x7f0000000480)=0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x804, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae000a5000003000500001e001e02"], 0x80}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000020c0)={'syztnl0\x00', r8, 0x0, 0x80, 0x0, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0xa, 0x5, {0x5, 0x22, "68fc42"}}, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xa, 0x2, 0x5}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x9, 0x9, "2b01ca3e", "7b617fac"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x4, 0xc, 0x6, 0x48, 0xf6, 0x9}}}, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x7f, "6e301c26ca136b241dea02d2b7213ee03bdb0dab6c8be537a90ec01adcbf41594a8cf7402d4e7f040369387cb5978ea7cb12461165bc7b34080dbfe2a9d5779ab14b60c9d20c7c877f81553876ac60e5ff3f3ae21363441d10ce72c80fb90e23da062b2d0e457989e9344fed855febae61d066ac41a27c9b27e4dc1571d814"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x120, 0x10, [0xff]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x50}, &(0x7f0000000580)={0x40, 0xb, 0x2, "fcba"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f0000000680)={0x40, 0x19, 0x2, 'd@'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x4}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xd6}, 0x0}) 2.452462644s ago: executing program 3 (id=827): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b40)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={&(0x7f00000000c0)="c461f9134200c482f5293b66262465f2c543aaaa676666420fadf4c461dd6b651dc4a12966dbc461fc1069e468859a71a4000092663b663b", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x9, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[]) socket$inet6_dccp(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010011000000060003400000200014000180080001007f00000108000200000000000c"], 0x54}}, 0x0) 2.143499392s ago: executing program 1 (id=828): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000002100)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902240001000010000904140002a024260009050602ff0300000009058202080000000038e00dc942d90e8dcaa97299f9ab49a878462e8dc2df4b325ee567739ee52d"], 0x0) r1 = timerfd_create(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000004c0)={@pppoe={0x18, 0x0, {0x0, @local, 'team0\x00'}}, {0x0}, &(0x7f0000000280), 0x20}, 0xa0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) fchmod(0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') close(r1) read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020) syz_usb_control_io(r0, 0x0, 0x0) 2.00120902s ago: executing program 3 (id=829): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x0, 0x148, 0x140, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cluster={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth0_to_bond\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x0, 0x364441e9, 0x100000}) 1.880372396s ago: executing program 4 (id=830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x4, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "23a8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "fb"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x0) 1.625788761s ago: executing program 4 (id=831): syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0xd}, @multicast, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x8, 0x73, 0x0, @private, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0xd, [{@local, 0x8}, {@loopback, 0x5}, {@local, 0x8}]}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x2, 0x12) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x468, 0x338, 0x0, 0x2a0, 0x2a0, 0x2a0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x78, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e22}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x1, 0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4a14, 0x2, @rand_addr=0x64010101, 0x800}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff, 'syzkaller1\x00', 'wg1\x00', {0xff}, {}, 0x29, 0x2, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x83, &(0x7f00000000c0), 0x8) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 1.569752661s ago: executing program 3 (id=832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private, 0x0, 0x1}]}]}, 0xfc}}, 0x0) madvise(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x80000000e) mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0x68}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x3, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff00"/126]}, 0xf6) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f00000004c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x65, 0x3d, 0x72, 0x10, 0x572, 0x41, 0xd524, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc1, 0x69, 0xdd}}]}}]}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x100021, 0x800000000004, @tid=r3}, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x8, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x7, 0x8, 0xd6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x7, 0x81, 0x94}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x7, 0x8e}}}}}]}}]}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x3fc}, 0x0, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) 596.165162ms ago: executing program 4 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x24}}, 0x8014) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd(0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000008c0)={0xc9, 0x0, 0xc}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) (async) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth1_virt_wifi\x00'}, 0x6, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip6tnl0\x00', {}, 'macvtap0\x00', {}, 0x0, 0x1b}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'team_slave_0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(0xffffffffffffffff) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x4}) (async, rerun: 32) dup(r6) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800, 0xffffffffffffff7f, &(0x7f00000000c0)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) getitimer(0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8001, 0xff, &(0x7f0000000000)) 421.451261ms ago: executing program 4 (id=834): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\f\x00\x00N\a\x00'], 0x94}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000019"], 0x2c}}, 0x0) 279.822625ms ago: executing program 0 (id=835): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6d9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x90) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="000404000000df0000000000000000000000000000000001220100000000000000190037ad"], 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x5ce62f04) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6d9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x90) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="000404000000df0000000000000000000000000000000001220100000000000000190037ad"], 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r6, 0x5ce62f04) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x40}}, 0x0) (async) 40.142014ms ago: executing program 4 (id=836): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x8010, r0, 0x9c0f000) clock_getres(0x4, &(0x7f0000000000)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x100, &(0x7f0000000040)=0xd, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x1000, 0x3, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@generic={0x89, 0x3, "85"}, @timestamp_addr={0x44, 0x3c, 0xf4, 0x1, 0xa, [{@broadcast, 0x1}, {@loopback, 0x7}, {@empty}, {@empty, 0x2}, {@loopback, 0x6}, {@loopback, 0x2}, {@remote, 0x8ac}]}, @timestamp_prespec={0x44, 0x3c, 0x68, 0x3, 0x0, [{@rand_addr=0x64010102, 0x6b}, {@empty, 0x40}, {@multicast1, 0x3}, {@local, 0x4}, {@multicast2, 0x40}, {@private=0xa010100, 0x3b}, {@local, 0xffffff81}]}, @timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0xa, [{@multicast2, 0xfffffffa}, {@multicast2, 0xce}]}]}}}}}) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r8 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000080)=@raw=[@exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x9, 0x0, 0xd, 0xb, 0x9, 0xfffffffffffffff4, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x38, &(0x7f0000000100)=""/56, 0x1f00, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r4, r5, r6, r7, r8, r9, r10, r12], &(0x7f0000000600)=[{0x2, 0x3, 0xd, 0xb}, {0x1, 0x4, 0x7, 0x9}, {0x0, 0x4, 0x9, 0xa}, {0x1, 0x2, 0xb, 0x2}, {0x3, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x9, 0x4}], 0x10, 0xf4e}, 0x90) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000740)={{0x0, 0x1ff, 0x1, 0x5, 0x24000000, 0xc1e5, 0x80, 0x8, 0x8, 0x4, 0x7f, 0xfffffffffffffff8, 0x4, 0x7, 0xc2eb}, 0x18, [0x0, 0x0, 0x0]}) ioctl$VIDIOC_QUERYBUF_DMABUF(r11, 0xc0585609, &(0x7f0000000800)={0x401, 0x1, 0x4, 0x2, 0x5, {}, {0x2, 0x1, 0xff, 0x5, 0x0, 0x2, "5907801c"}, 0x2, 0x4, {0xffffffffffffffff}, 0x4, 0x0, r12}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r14, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000c80)=[0x38d], 0x2) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000cc0)=""/171) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000d80)=0x4) ioctl$AUTOFS_IOC_READY(r13, 0x9360, 0x86) io_uring_enter(r4, 0x2d21, 0x514b, 0x7, &(0x7f0000000dc0)={[0x10]}, 0x8) syz_usb_connect(0x0, 0x383, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x87, 0xf7, 0xc3, 0x8, 0x17cc, 0x41c, 0x66d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x371, 0x2, 0x8, 0x3, 0x10, 0x4, [{{0x9, 0x4, 0x5a, 0x24, 0x1, 0x69, 0x58, 0x15, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x8, 0xe6, "782e9a"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x4, 0x4, [0xa, 0x5, 0x7, 0x8], 0xb2}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x8, 0x8, "4d828e1e05"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x2, 0xff, 0x8, 0x7f, 0x3}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "9a1a4fcf97"}, {0x5, 0x24, 0x0, 0xa4e}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7, 0xf8f8, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x8001}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x800, 0x5, 0xa, 0x5, 0x9}]}], [{{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x0, 0x7, 0x1, [@generic={0xfa, 0x8, "4e534909a404841e0201f31418a87a102941cfe3fffeb619bc1388195aa767eb2e78abd589a688152bdae51b200404519cba84c2272bb73a8748af8ad06af958bd5d060a4281e8906cd3cd3e5cae5a20b5e32e6da58ef2b1283286d845ec92eb94559aa4122403f8814eac457d26f25b4df3152ef25e74c65672511c4f661f928474363fda702ffbd548fd799efdab7af6ae952c0fff6fb926ec9f83683038bf16252c98d1a3c22cdd6748acd5d11e74a3fe781694dc361b85f89ce4867a067b0fb85bdd2825a247ee145ed3cdea8818ec12f812c2b6d187cf8233764deceef83e2ef7bba867155ecb3fd8f0b29e800a6f76e7c7f506c6e1"}]}}]}}, {{0x9, 0x4, 0x94, 0xa, 0xa, 0x60, 0xad, 0xff, 0x5, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "116545"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6, 0xf08b}, {0x6, 0x24, 0x1a, 0x0, 0x32}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "68de"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xd729, 0xf091, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0xffff, 0x2, 0x0, 0x400, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x8, 0xb, 0x28}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0x8}]}}, {{0x9, 0x5, 0xb, 0xc, 0x7df, 0x1, 0x2, 0xc}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xd, 0x6, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x7, 0xa, 0x82, [@generic={0x98, 0x6, "c6b4a08c48a7c1329d72b0c908378c2fbef55b105a85843b2f80d6a684f5878bf4bfa7284fad8ff36d65d59e428b1c80dd1eb81ec63a64d6771e6cb1e25593bdddd3542508ea9a4ae61ef06d8f583eb516dd362e25e8f95a8c94beb1e3cf1ef296a692a0fd72c539488637ef5547c2e1f5a64c0a68d2915a92e461ce279dd7b9aa570dce80f26d1955e146aa5f0c600fddf9a16d05ec"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x6b, 0x0, 0x8, [@generic={0xa1, 0x1f, "4e3fd02477821d1945f2d575ad7a75ddd47831be8e1e806c343ffdb741b3a1cb21f091f6ce9b9351c8e1f0c3360a8c9606a22bd9c628ae07e9b0fae6b69d7ae7305a7ce9174d94c650e7dc8b7f00b5616ab184e0cf3dcf4ef9d6b6d80b37ecb66273f04fc626affafbdf61cc4c8a30d3d6ef04a63ada02589f97c1efee297ebb9e9cac550dc0e4c56a2fcbc0597abbf44c1bd837b0febd87f428d7272a8157"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0xe2, 0x81, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x5, 0x55, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x8, 0x6, 0xa6}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7, 0x1, 0xb2}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x250, 0xeb, 0xff, 0x0, 0x20, 0x2}, 0x33, &(0x7f0000001200)={0x5, 0xf, 0x33, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xa, 0x6, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0xdfc2, 0xf000, 0x4, [0xff0000, 0xc030, 0x0, 0x0, 0xc0, 0xff0000]}]}, 0x2, [{0x4, &(0x7f0000001240)=@lang_id={0x4}}, {0xd1, &(0x7f0000001280)=@string={0xd1, 0x3, "c831601f18b0f64dca8efde8f5baa5a892467364a20d6341b2fbc3d6ea9c2f1cb629e8306562edc1f7a3819868bb5861fc03eb837141991a716f3862887046740708e421ddc6e96e2cca292902c1e566aed6a35948dcc891bee7f0dc2bbe18556e5a342919057194b4014e23c577ef1263184e9848dfaa2887bdaf704bfea25736556a18047a26f5fed2fe9d830fee9c85cfd84878892aed74acfa95ad9e643fc4230e6400b793a14be52aa67c979b32eb667829801ba5b3d925907080d5f3b1692151adafb60545ae8e015e5d88f6"}}]}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000001400)=0x0) getgroups(0x6, &(0x7f0000001440)=[0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0x0]) lchown(&(0x7f00000013c0)='./file0\x00', r15, r16) openat$nullb(0xffffffffffffff9c, &(0x7f0000001480), 0x2800, 0x0) socket$kcm(0x29, 0x2, 0x0) 0s ago: executing program 3 (id=837): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2cdfee011b51b9e4f2f8726f70746d6f64653d3030303030936df0d25ff6293030303030303030303030303130301030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=queue1\x00,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,\x00']) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x80585414, &(0x7f00000001c0)) truncate(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000002340)=""/229) mount_setattr(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0xa0, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d5b6c108701801009fe60010030109028e00010000800009041902030a000000082402010000000009058d", @ANYRES16], 0x0) kernel console output (not intermixed with test programs): t [ 285.440596][ T8989] team0: Port device team_slave_1 added [ 285.572063][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.581943][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.611040][ T8989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.699160][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.706991][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.707427][ T9067] dccp_invalid_packet: P.Data Offset(4) too small [ 285.737217][ T8989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.767019][ T8872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.808488][ T8872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.834321][ T8872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.875200][ T8872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.008824][ T9021] chnl_net:caif_netlink_parms(): no params data found [ 286.063830][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 286.099165][ T8989] hsr_slave_0: entered promiscuous mode [ 286.112212][ T8989] hsr_slave_1: entered promiscuous mode [ 286.127857][ T8989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.141460][ T8989] Cannot create hsr debugfs directory [ 286.263578][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 286.276773][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 286.290362][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 286.303933][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.317923][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.331754][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 286.345727][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 286.380458][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 286.465229][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.500639][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.529843][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 286.573128][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 286.593831][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 286.606250][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.608073][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.620147][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.634620][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.640490][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 286.653114][ T9021] bridge_slave_0: entered allmulticast mode [ 286.662863][ T9] usb 2-1: string descriptor 0 read error: -22 [ 286.667059][ T9021] bridge_slave_0: entered promiscuous mode [ 286.680285][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.687584][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.692293][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 286.694903][ T9021] bridge_slave_1: entered allmulticast mode [ 286.721261][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.725659][ T9021] bridge_slave_1: entered promiscuous mode [ 286.761991][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 286.783548][ T5251] Bluetooth: hci4: command tx timeout [ 287.026257][ T9021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.060471][ T9] usb 2-1: USB disconnect, device number 34 [ 287.078308][ T9021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.172860][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.435263][ T5251] Bluetooth: hci0: command tx timeout [ 287.436884][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.539766][ T9021] team0: Port device team_slave_0 added [ 287.622915][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.668890][ T9021] team0: Port device team_slave_1 added [ 287.713523][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 287.753151][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.904443][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.955176][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.972666][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.989436][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 287.999413][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.036824][ T9] usb 2-1: config 0 descriptor?? [ 288.193996][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.230308][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.257926][ T9021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.274187][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.281183][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.311659][ T9021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.409825][ T8872] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.474107][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.484606][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.540981][ T9021] hsr_slave_0: entered promiscuous mode [ 288.569185][ T9021] hsr_slave_1: entered promiscuous mode [ 288.589186][ T9021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.603579][ T9021] Cannot create hsr debugfs directory [ 288.729176][ T2523] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.736378][ T2523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.859726][ T2523] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.866870][ T2523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.020561][ T12] bridge_slave_1: left allmulticast mode [ 289.030848][ T12] bridge_slave_1: left promiscuous mode [ 289.044060][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.070401][ T12] bridge_slave_0: left allmulticast mode [ 289.083906][ T12] bridge_slave_0: left promiscuous mode [ 289.096146][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.504341][ T5251] Bluetooth: hci0: command tx timeout [ 289.844928][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 289.861290][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 289.902718][ T9] usb 2-1: USB disconnect, device number 35 [ 290.040195][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.074557][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.108005][ T9105] netlink: 'syz.3.656': attribute type 21 has an invalid length. [ 290.122699][ T12] bond0 (unregistering): Released all slaves [ 290.170420][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'. [ 290.366395][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 290.385379][ T8989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.400817][ T8989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.426179][ T8989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.464130][ T9109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.657'. [ 290.554399][ T9] usb 2-1: device descriptor read/64, error -71 [ 290.579951][ T8872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.605353][ T8989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.786197][ T12] hsr_slave_0: left promiscuous mode [ 290.796593][ T12] hsr_slave_1: left promiscuous mode [ 290.807521][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.817167][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.826153][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 290.858165][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.872249][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.914717][ T12] veth1_macvtap: left promiscuous mode [ 290.920580][ T12] veth0_macvtap: left promiscuous mode [ 290.932870][ T12] veth1_vlan: left promiscuous mode [ 290.939577][ T12] veth0_vlan: left promiscuous mode [ 290.994020][ T9] usb 2-1: device descriptor read/64, error -71 [ 291.139689][ T9] usb usb2-port1: attempt power cycle [ 291.583518][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 291.635441][ T9] usb 2-1: device descriptor read/8, error -71 [ 291.719036][ T12] team0 (unregistering): Port device team_slave_1 removed [ 291.771356][ T12] team0 (unregistering): Port device team_slave_0 removed [ 291.923641][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 291.986628][ T9] usb 2-1: device descriptor read/8, error -71 [ 292.120526][ T9] usb usb2-port1: unable to enumerate USB device [ 292.519555][ T8872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.769576][ T8989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.834633][ T5306] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 292.850857][ T8989] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.865615][ T8872] veth0_vlan: entered promiscuous mode [ 292.883596][ T9021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.910759][ T9021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.936269][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.943487][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.004874][ T9021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.023264][ T9021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.033721][ T5306] usb 4-1: Using ep0 maxpacket: 16 [ 293.052330][ T5306] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 293.078976][ T5306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.094821][ T5306] usb 4-1: Product: syz [ 293.107872][ T5306] usb 4-1: Manufacturer: syz [ 293.125335][ T8872] veth1_vlan: entered promiscuous mode [ 293.142862][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.143522][ T5306] usb 4-1: SerialNumber: syz [ 293.150066][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.181428][ T5306] usb 4-1: config 0 descriptor?? [ 293.200008][ T5306] gspca_main: conex-2.14.0 probing 0572:0041 [ 293.245326][ T9129] trusted_key: encrypted_key: keyword 'upZate' not recognized [ 293.318591][ T8872] veth0_macvtap: entered promiscuous mode [ 293.341773][ T8872] veth1_macvtap: entered promiscuous mode [ 293.576994][ T5306] usb 4-1: USB disconnect, device number 40 [ 293.623375][ T8872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.664685][ T8872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.683911][ T8872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.704113][ T8872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.728548][ T8872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.748985][ T8872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.765068][ T8872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.776902][ T8872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.788979][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.836124][ T8989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.865506][ T8872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.887232][ T8872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.913899][ T8872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.936300][ T8872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.956592][ T8872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.982320][ T8872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.005117][ T8872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.023714][ T8872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.061102][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.095427][ T8872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.122205][ T8872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.147271][ T8872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.173470][ T8872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.245283][ T9021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.373253][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.441749][ T2523] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.448901][ T2523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.532064][ T8989] veth0_vlan: entered promiscuous mode [ 294.553614][ T2523] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.560713][ T2523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.575961][ T9155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.664'. [ 294.635090][ T8989] veth1_vlan: entered promiscuous mode [ 294.708756][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.775925][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.815794][ T8989] veth0_macvtap: entered promiscuous mode [ 294.847585][ T9160] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 294.854135][ T9160] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 294.884332][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.887188][ T9160] vhci_hcd vhci_hcd.0: Device attached [ 294.921114][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.930440][ T8989] veth1_macvtap: entered promiscuous mode [ 295.070832][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.083548][ T5290] vhci_hcd: vhci_device speed not set [ 295.124090][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.141918][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.161737][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.172382][ T5290] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 295.203885][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.224883][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.267535][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.297911][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.310998][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.324519][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.352760][ T9162] vhci_hcd: connection reset by peer [ 295.369839][ T12] vhci_hcd: stop threads [ 295.382042][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.389791][ T12] vhci_hcd: release socket [ 295.402985][ T12] vhci_hcd: disconnect device [ 295.468977][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.531462][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.569566][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.616401][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.662187][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.690931][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.706660][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.722626][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.738773][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.753571][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.819844][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.867589][ T9021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.895493][ T8989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.906684][ T8989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.916844][ T8989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.926215][ T8989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.432480][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.482677][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.575129][ T9021] veth0_vlan: entered promiscuous mode [ 296.824500][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.911246][ T9021] veth1_vlan: entered promiscuous mode [ 296.957070][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.980498][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.074981][ T5292] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 297.106764][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.293702][ T5292] usb 5-1: Using ep0 maxpacket: 16 [ 297.329477][ T5292] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 297.353713][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.383270][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.407509][ T5292] usb 5-1: Product: syz [ 297.427299][ T5292] usb 5-1: Manufacturer: syz [ 297.453295][ T5292] usb 5-1: SerialNumber: syz [ 297.489752][ T5292] usb 5-1: config 0 descriptor?? [ 297.549740][ T5292] gspca_main: conex-2.14.0 probing 0572:0041 [ 297.550055][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.702319][ T9021] veth0_macvtap: entered promiscuous mode [ 297.747784][ T9021] veth1_macvtap: entered promiscuous mode [ 297.994833][ T5292] usb 5-1: USB disconnect, device number 37 [ 298.011302][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.080895][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.124459][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.165783][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.196701][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.211396][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.222163][ T4631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.243955][ T4631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.248285][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.262322][ T4631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.272365][ T4631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.283685][ T4631] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 298.293774][ T4631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.302453][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.314700][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.393123][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.417248][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.483592][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.530102][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.632727][ T9239] netlink: 48 bytes leftover after parsing attributes in process `syz.2.674'. [ 298.706632][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.731891][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.779874][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.791402][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.791453][ T9239] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 298.807729][ T9239] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 298.816403][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.842355][ T9239] vhci_hcd vhci_hcd.0: Device attached [ 298.865806][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.879273][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.890897][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.901526][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.912070][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.922052][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.933755][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 298.947452][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.965620][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.980459][ T63] bridge_slave_1: left allmulticast mode [ 299.044227][ T8] vhci_hcd: vhci_device speed not set [ 299.078087][ T63] bridge_slave_1: left promiscuous mode [ 299.096341][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.129727][ T63] bridge_slave_0: left allmulticast mode [ 299.143517][ T8] usb 13-1: new full-speed USB device number 6 using vhci_hcd [ 299.150618][ T63] bridge_slave_0: left promiscuous mode [ 299.154724][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.159401][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.179126][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 299.193508][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 299.210989][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17703, setting to 1024 [ 299.225863][ T9253] vhci_hcd: connection reset by peer [ 299.233335][ T11] vhci_hcd: stop threads [ 299.233887][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 32 [ 299.269982][ T11] vhci_hcd: release socket [ 299.272461][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.282458][ T11] vhci_hcd: disconnect device [ 299.284794][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.323528][ T9] usb 5-1: Product: syz [ 299.333279][ T9] usb 5-1: Manufacturer: syz [ 299.365553][ T9] usb 5-1: SerialNumber: syz [ 299.376670][ T9248] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 299.597404][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 299.637555][ T9] usb 5-1: USB disconnect, device number 38 [ 300.132804][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.145711][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.160179][ T63] bond0 (unregistering): Released all slaves [ 300.314943][ T5290] vhci_hcd: vhci_device speed not set [ 300.334749][ T9021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.351587][ T9021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.360790][ T9021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.370287][ T9021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.384522][ T5251] Bluetooth: hci3: command tx timeout [ 301.087998][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.149662][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.305032][ T4631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.316698][ T4631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.325048][ T4631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.333938][ T4631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.341741][ T4631] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 301.349611][ T4631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.422214][ T63] hsr_slave_0: left promiscuous mode [ 301.460726][ T63] hsr_slave_1: left promiscuous mode [ 301.484590][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.524090][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.570519][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.601046][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.647226][ T4631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.653214][ T63] veth1_macvtap: left promiscuous mode [ 301.666674][ T4631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.671578][ T63] veth0_macvtap: left promiscuous mode [ 301.680640][ T4631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.681736][ T63] veth1_vlan: left promiscuous mode [ 301.702926][ T4631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.711375][ T4631] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 301.717022][ T63] veth0_vlan: left promiscuous mode [ 301.727539][ T4631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.464632][ T5251] Bluetooth: hci3: command tx timeout [ 302.986761][ T63] team0 (unregistering): Port device team_slave_1 removed [ 303.047930][ T63] team0 (unregistering): Port device team_slave_0 removed [ 303.423595][ T5251] Bluetooth: hci1: command tx timeout [ 303.527795][ T9301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.683'. [ 303.823730][ T5251] Bluetooth: hci4: command tx timeout [ 303.860944][ T2523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.877047][ T2523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.119987][ T9237] chnl_net:caif_netlink_parms(): no params data found [ 304.323700][ T8] vhci_hcd: vhci_device speed not set [ 304.398474][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'. [ 304.544450][ T5251] Bluetooth: hci3: command tx timeout [ 304.646550][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.668617][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.681427][ T9237] bridge_slave_0: entered allmulticast mode [ 304.689652][ T9237] bridge_slave_0: entered promiscuous mode [ 304.718645][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.738524][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.757288][ T9237] bridge_slave_1: entered allmulticast mode [ 304.765343][ T9237] bridge_slave_1: entered promiscuous mode [ 304.978965][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.022687][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.089922][ T9340] usb usb8: usbfs: process 9340 (syz.0.686) did not claim interface 0 before use [ 305.092454][ T9281] chnl_net:caif_netlink_parms(): no params data found [ 305.261060][ T9237] team0: Port device team_slave_0 added [ 305.271700][ T9237] team0: Port device team_slave_1 added [ 305.368495][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.392041][ T9349] netlink: 'syz.4.690': attribute type 1 has an invalid length. [ 305.405200][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 305.423757][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 305.463278][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.476759][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.484439][ T9349] fuse: Bad value for 'fd' [ 305.506778][ T5251] Bluetooth: hci1: command tx timeout [ 305.516704][ T9237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.566567][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.597551][ T9274] chnl_net:caif_netlink_parms(): no params data found [ 305.616090][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 305.616543][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.628098][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.632857][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.660289][ T9] usb 1-1: config 0 descriptor?? [ 305.674991][ T9237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.765871][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.843140][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.691'. [ 305.877665][ T9237] hsr_slave_0: entered promiscuous mode [ 305.908734][ T5251] Bluetooth: hci4: command tx timeout [ 305.919818][ T9237] hsr_slave_1: entered promiscuous mode [ 305.942223][ T9237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.957467][ T9237] Cannot create hsr debugfs directory [ 306.002973][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.039652][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.089122][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.190517][ T9281] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.202462][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.202754][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 306.211108][ T9281] bridge_slave_0: entered allmulticast mode [ 306.229913][ T9281] bridge_slave_0: entered promiscuous mode [ 306.239399][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 306.257239][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 306.284997][ T9281] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.310459][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.311081][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 306.329893][ T9] [drm] Initialized udl on minor 2 [ 306.348610][ T9281] bridge_slave_1: entered allmulticast mode [ 306.350473][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 306.379032][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 306.401647][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 306.413549][ T9281] bridge_slave_1: entered promiscuous mode [ 306.420690][ T9] usb 1-1: USB disconnect, device number 33 [ 306.445875][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 306.577943][ T9281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.624030][ T5251] Bluetooth: hci3: command tx timeout [ 306.641175][ T9281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.886981][ T9281] team0: Port device team_slave_0 added [ 306.903188][ T9281] team0: Port device team_slave_1 added [ 306.947164][ T9274] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.984723][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.995622][ T9274] bridge_slave_0: entered allmulticast mode [ 307.025194][ T9274] bridge_slave_0: entered promiscuous mode [ 307.059052][ T9274] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.074945][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.093739][ T9274] bridge_slave_1: entered allmulticast mode [ 307.101107][ T9274] bridge_slave_1: entered promiscuous mode [ 307.190351][ T5292] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 307.300787][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.320175][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.368851][ T9281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.375605][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.400170][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.418067][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.443229][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.444009][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.461902][ T5292] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 307.471336][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.481250][ T9281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.493207][ T5292] usb 1-1: config 0 descriptor?? [ 307.583574][ T5251] Bluetooth: hci1: command tx timeout [ 307.585659][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.629015][ T9274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.697463][ T9274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.785632][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.967738][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.983776][ T5251] Bluetooth: hci4: command tx timeout [ 308.001158][ T9274] team0: Port device team_slave_0 added [ 308.041407][ T9281] hsr_slave_0: entered promiscuous mode [ 308.059197][ T9281] hsr_slave_1: entered promiscuous mode [ 308.084859][ T9281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.095817][ T9281] Cannot create hsr debugfs directory [ 308.166514][ T9274] team0: Port device team_slave_1 added [ 308.205738][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.310751][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.333429][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.344563][ T9386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.359344][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.360024][ T9274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.386969][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.394229][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.420754][ T9274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.455337][ T9386] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 308.522405][ T9386] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 308.566197][ T9386] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 308.576908][ T9386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.582997][ T9386] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 308.612435][ T9386] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 308.649847][ T9386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.660312][ T9386] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 308.686639][ T9386] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 308.696562][ T9274] hsr_slave_0: entered promiscuous mode [ 308.718357][ T9386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.735065][ T9274] hsr_slave_1: entered promiscuous mode [ 308.742853][ T9386] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 308.762734][ T9274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.771514][ T9274] Cannot create hsr debugfs directory [ 308.781713][ T9386] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 308.796490][ T9386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.802609][ T9386] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 308.837485][ T9386] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 308.904233][ T5292] kone 0003:1E7D:2CED.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 309.101063][ T5292] usb 1-1: USB disconnect, device number 34 [ 309.309221][ T63] bridge_slave_1: left allmulticast mode [ 309.317692][ T63] bridge_slave_1: left promiscuous mode [ 309.324245][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.354810][ T63] bridge_slave_0: left allmulticast mode [ 309.360529][ T63] bridge_slave_0: left promiscuous mode [ 309.376045][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.400336][ T63] bridge_slave_1: left allmulticast mode [ 309.406468][ T63] bridge_slave_1: left promiscuous mode [ 309.412310][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.423005][ T63] bridge_slave_0: left allmulticast mode [ 309.431157][ T63] bridge_slave_0: left promiscuous mode [ 309.437914][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.744298][ T5251] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.363521][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 310.466589][ T5251] Bluetooth: hci5: command 0x0c1a tx timeout [ 310.585540][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.604418][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.615022][ T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 310.625271][ T5251] Bluetooth: hci0: command 0x0c1a tx timeout [ 310.633711][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.649892][ T9] usb 1-1: config 0 descriptor?? [ 310.714200][ T5251] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.729877][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.742763][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.755675][ T63] bond0 (unregistering): Released all slaves [ 310.788940][ T5251] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.864367][ T5251] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.980219][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.991816][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.006623][ T63] bond0 (unregistering): Released all slaves [ 311.098166][ T9] stadia 0003:18D1:9400.0017: unbalanced collection at end of report description [ 311.131173][ T9] stadia 0003:18D1:9400.0017: parse failed [ 311.155094][ T9] stadia 0003:18D1:9400.0017: probe with driver stadia failed with error -22 [ 311.181943][ T9237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.310201][ T9237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.356458][ T9237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.378026][ T9434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.419356][ T9434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.439352][ T8] usb 1-1: USB disconnect, device number 35 [ 311.515358][ T9237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.716065][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 311.735693][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 311.934828][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 312.119459][ T63] hsr_slave_0: left promiscuous mode [ 312.133303][ T63] hsr_slave_1: left promiscuous mode [ 312.140335][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.150432][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 312.160297][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.162267][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 312.180911][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.181357][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.203006][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.210354][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.222604][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.243345][ T9] usb 5-1: config 0 descriptor?? [ 312.249375][ T9468] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 312.259732][ T63] hsr_slave_0: left promiscuous mode [ 312.308183][ T63] hsr_slave_1: left promiscuous mode [ 312.328070][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.338869][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.354096][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.367762][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.435835][ T63] veth1_macvtap: left promiscuous mode [ 312.441396][ T63] veth0_macvtap: left promiscuous mode [ 312.447386][ T63] veth1_vlan: left promiscuous mode [ 312.452714][ T63] veth0_vlan: left promiscuous mode [ 312.462301][ T63] veth1_macvtap: left promiscuous mode [ 312.469502][ T63] veth0_macvtap: left promiscuous mode [ 312.475600][ T63] veth1_vlan: left promiscuous mode [ 312.481045][ T63] veth0_vlan: left promiscuous mode [ 312.544155][ T5251] Bluetooth: hci5: command 0x0c1a tx timeout [ 312.681617][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 312.700142][ T9] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 312.708460][ T5251] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.719587][ T9] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 312.784021][ T5251] Bluetooth: hci3: command 0x0c1a tx timeout [ 312.873799][ T5251] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.954930][ T5251] Bluetooth: hci4: command 0x0c1a tx timeout [ 313.263118][ T63] team0 (unregistering): Port device team_slave_1 removed [ 313.329979][ T63] team0 (unregistering): Port device team_slave_0 removed [ 314.153845][ T5292] usb 5-1: reset high-speed USB device number 39 using dummy_hcd [ 314.319990][ T5292] usb 5-1: device descriptor read/64, error -32 [ 314.359690][ T63] team0 (unregistering): Port device team_slave_1 removed [ 314.410516][ T63] team0 (unregistering): Port device team_slave_0 removed [ 314.606940][ T5292] usb 5-1: reset high-speed USB device number 39 using dummy_hcd [ 314.630583][ T4631] Bluetooth: hci5: command 0x0c1a tx timeout [ 314.789769][ T4631] Bluetooth: hci0: command 0x0c1a tx timeout [ 314.866879][ T4631] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.948508][ T4631] Bluetooth: hci1: command 0x0c1a tx timeout [ 315.033697][ T4631] Bluetooth: hci4: command 0x0c1a tx timeout [ 315.465466][ T5246] usb 5-1: USB disconnect, device number 39 [ 315.509020][ T9281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.544880][ T9281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.570727][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.602862][ T9281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.637411][ T9281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.674003][ T9237] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.737973][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.745132][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.925009][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.932149][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.984129][ T5246] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 316.196302][ T5246] usb 5-1: Using ep0 maxpacket: 16 [ 316.224025][ T5246] usb 5-1: config 1 has an invalid descriptor of length 35, skipping remainder of the config [ 316.252916][ T5246] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 316.296465][ T5246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.308342][ T5246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 316.317078][ T5246] usb 5-1: SerialNumber: syz [ 316.317438][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.329971][ T5246] cdc_acm 5-1:1.0: skipping garbage [ 316.343671][ T5246] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 316.379100][ T5246] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 316.408271][ T5246] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 316.557684][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 316.557702][ T29] audit: type=1326 audit(1725343524.240:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.4.706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc894f79eb9 code=0x0 [ 316.600653][ T9274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.616977][ T9274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.720793][ T9274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.749539][ T9274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.798639][ T9281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.831578][ T9237] veth0_vlan: entered promiscuous mode [ 316.875236][ T9281] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.910659][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.917862][ T2576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.931599][ T2576] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.938765][ T2576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.952700][ T9237] veth1_vlan: entered promiscuous mode [ 316.963689][ T8] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 317.067849][ T9274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.082755][ T9237] veth0_macvtap: entered promiscuous mode [ 317.106708][ T9237] veth1_macvtap: entered promiscuous mode [ 317.128291][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.136353][ T8] usb 1-1: device descriptor read/64, error -71 [ 317.159107][ T9274] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.197300][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.208352][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.219128][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.229743][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.240074][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.253071][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.267080][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.278395][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.291090][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.301425][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.308606][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.337889][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.350058][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.361398][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.372636][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.383043][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.394828][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.405574][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.416230][ T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 317.427898][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.434294][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.442815][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.455328][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.466389][ T9237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.475948][ T9237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.485132][ T9237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.493972][ T9237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.516097][ T9281] veth0_vlan: entered promiscuous mode [ 317.535239][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.542386][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.560753][ T9281] veth1_vlan: entered promiscuous mode [ 317.603770][ T8] usb 1-1: device descriptor read/64, error -71 [ 317.692152][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.718245][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.726481][ T8] usb usb1-port1: attempt power cycle [ 317.770970][ T2576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.776325][ T9274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.791487][ T2576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.815573][ T9281] veth0_macvtap: entered promiscuous mode [ 317.845911][ T9281] veth1_macvtap: entered promiscuous mode [ 317.909207][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.940179][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.952811][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.966172][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.976585][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.988249][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.000505][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.012275][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.022593][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.034434][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.046423][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.089806][ T9274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.135168][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.154673][ T8] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 318.173933][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.195877][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.206833][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.218192][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.225039][ T8] usb 1-1: device descriptor read/8, error -71 [ 318.243899][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.265734][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.278788][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.300343][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.328538][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.362703][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.404751][ T9] usb 5-1: USB disconnect, device number 40 [ 318.475537][ T9281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.506377][ T9281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.516003][ T9281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.524852][ T8] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 318.533014][ T9281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.578239][ T8] usb 1-1: device descriptor read/8, error -71 [ 318.720567][ T8] usb usb1-port1: unable to enumerate USB device [ 318.761724][ T9274] veth0_vlan: entered promiscuous mode [ 318.814243][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.835687][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.858776][ T9274] veth1_vlan: entered promiscuous mode [ 318.900891][ T9548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.711'. [ 318.921050][ T9548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.711'. [ 319.041142][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.088561][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.159491][ T9274] veth0_macvtap: entered promiscuous mode [ 319.203817][ T8] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 319.215663][ T9274] veth1_macvtap: entered promiscuous mode [ 319.358304][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.379849][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.392148][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.409654][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.421893][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 319.444436][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.455417][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 319.474588][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.491713][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.512716][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.523860][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.535375][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.544598][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.551088][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.565966][ T8] usb 5-1: config 0 descriptor?? [ 319.571188][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.579171][ T5307] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 319.581582][ T9550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.598150][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.609445][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.628980][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.651914][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.662654][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.675071][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.686380][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.696464][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.707882][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.718218][ T5292] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 319.719673][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.739334][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.749361][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.760086][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.770050][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.774136][ T5307] usb 4-1: Using ep0 maxpacket: 32 [ 319.780693][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.798188][ T5307] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 319.799340][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.813822][ T5307] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 319.837577][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.859761][ T5307] usb 4-1: Product: syz [ 319.868988][ T5307] usb 4-1: Manufacturer: syz [ 319.888198][ T5307] usb 4-1: SerialNumber: syz [ 319.901212][ T5307] usb 4-1: config 0 descriptor?? [ 319.910319][ T5292] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 319.929095][ T5292] usb 2-1: config 0 has no interface number 0 [ 319.951496][ T9563] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 319.956745][ T9274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.974105][ T5307] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.981246][ T5292] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 319.982216][ T9274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.012278][ T9274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.023004][ T9274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.048682][ T8] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 320.057007][ T5292] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 320.102634][ T8] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 320.103686][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.142808][ T8] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 320.160041][ T5292] usb 2-1: Product: syz [ 320.165996][ T5292] usb 2-1: Manufacturer: syz [ 320.170666][ T5292] usb 2-1: SerialNumber: syz [ 320.217486][ T5292] usb 2-1: config 0 descriptor?? [ 320.245867][ T9568] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 320.291990][ T5292] usb-storage 2-1:0.20: USB Mass Storage device detected [ 320.380539][ T5292] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 320.399925][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.424987][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.545712][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.577023][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.667865][ T5292] scsi host1: usb-storage 2-1:0.20 [ 320.831113][ T2547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.862752][ T2547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.921284][ T5292] usb 2-1: USB disconnect, device number 40 [ 321.536474][ T5306] usb 5-1: reset high-speed USB device number 41 using dummy_hcd [ 321.574403][ T5292] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 321.713737][ T5306] usb 5-1: device descriptor read/64, error -32 [ 321.776800][ T5292] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 321.796961][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.832133][ T5292] usb 1-1: config 0 descriptor?? [ 322.282437][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.300806][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.303129][ T5292] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 322.303308][ T5292] asix 1-1:0.0: probe with driver asix failed with error -71 [ 322.316143][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.719'. [ 322.329441][ T5292] usb 1-1: USB disconnect, device number 40 [ 322.471520][ T5246] usb 4-1: USB disconnect, device number 41 [ 322.665513][ T58] usb 5-1: USB disconnect, device number 41 [ 322.736274][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.720'. [ 322.780635][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.720'. [ 323.383571][ T942] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 323.493604][ T58] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 323.553481][ T5246] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 323.592247][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 323.625746][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 323.651257][ T942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.673524][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 323.687337][ T942] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.714889][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.724493][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.741478][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.762655][ T5292] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 323.766682][ T2948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.780874][ T5246] usb 5-1: Using ep0 maxpacket: 16 [ 323.792306][ T5246] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.794447][ T942] usb 4-1: config 0 descriptor?? [ 323.807580][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.849205][ T5246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 323.849852][ T9610] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.870613][ T58] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 323.883636][ T5246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 323.904902][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.914130][ T5246] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.946823][ T58] usb 2-1: config 0 descriptor?? [ 323.970210][ T5246] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 323.981844][ T5292] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 323.993541][ T5246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.001711][ T5292] usb 1-1: config 0 has no interface number 0 [ 324.017869][ T2948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.021949][ T5292] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 324.045592][ T5246] usb 5-1: Product: syz [ 324.049818][ T5246] usb 5-1: Manufacturer: syz [ 324.054713][ T5246] usb 5-1: SerialNumber: syz [ 324.062228][ T5246] usb 5-1: config 0 descriptor?? [ 324.076620][ T5292] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 324.087975][ T5246] imon_raw 5-1:0.0: IR endpoint missing [ 324.107514][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.127655][ T5292] usb 1-1: Product: syz [ 324.137738][ T5292] usb 1-1: Manufacturer: syz [ 324.142418][ T5292] usb 1-1: SerialNumber: syz [ 324.193665][ T5292] usb 1-1: config 0 descriptor?? [ 324.200291][ T9628] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 324.215489][ T5292] usb-storage 1-1:0.20: USB Mass Storage device detected [ 324.216344][ T2948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.255890][ T5292] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 324.358774][ T2948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.402120][ T942] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 324.410461][ T942] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 324.431896][ T942] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 324.506353][ T942] usb 5-1: USB disconnect, device number 42 [ 324.585283][ T58] usbhid 2-1:0.0: can't add hid device: -71 [ 324.601642][ T58] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 324.624466][ T5292] scsi host1: usb-storage 1-1:0.20 [ 324.630596][ T5251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.642159][ T58] usb 2-1: USB disconnect, device number 41 [ 324.642292][ T5251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.662348][ T5251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.680218][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.688465][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 324.696178][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.830652][ T2948] bridge_slave_1: left allmulticast mode [ 324.837052][ T2948] bridge_slave_1: left promiscuous mode [ 324.845310][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.858177][ T2948] bridge_slave_0: left allmulticast mode [ 324.861410][ T5292] usb 1-1: USB disconnect, device number 41 [ 324.863971][ T2948] bridge_slave_0: left promiscuous mode [ 324.864183][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.486708][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 325.489942][ T5292] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 325.576676][ T29] audit: type=1326 audit(1725343533.260:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.1.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f1fd79eb9 code=0x0 [ 325.629527][ T9645] input: syz0 as /devices/virtual/input/input31 [ 325.707573][ T5292] usb 5-1: Using ep0 maxpacket: 32 [ 325.731892][ T5292] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 325.777944][ T5292] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 325.798933][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.817080][ T5292] usb 5-1: Product: syz [ 325.821471][ T5292] usb 5-1: Manufacturer: syz [ 325.827269][ T5292] usb 5-1: SerialNumber: syz [ 325.848868][ T5292] usb 5-1: config 0 descriptor?? [ 325.868265][ T9639] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 325.882182][ T5292] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.969269][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.993788][ T5246] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 326.042165][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.051575][ T9650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.734'. [ 326.093768][ T2948] bond0 (unregistering): Released all slaves [ 326.163666][ T5246] usb 4-1: device descriptor read/64, error -32 [ 326.233256][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.269730][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.446682][ T5246] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 326.785184][ T5251] Bluetooth: hci1: command tx timeout [ 326.804017][ T5292] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 326.901533][ T2948] hsr_slave_0: left promiscuous mode [ 326.920943][ T2948] hsr_slave_1: left promiscuous mode [ 326.963525][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.993838][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.008117][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.027896][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.035422][ T5306] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 327.053530][ T5292] usb 2-1: Using ep0 maxpacket: 32 [ 327.061015][ T5292] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 327.074133][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.124634][ T5292] usb 2-1: config 0 descriptor?? [ 327.136231][ T2948] veth1_macvtap: left promiscuous mode [ 327.165405][ T5292] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 327.175491][ T2948] veth0_macvtap: left promiscuous mode [ 327.187117][ T2948] veth1_vlan: left promiscuous mode [ 327.201379][ T2948] veth0_vlan: left promiscuous mode [ 327.223573][ T5306] usb 1-1: Using ep0 maxpacket: 16 [ 327.243313][ T5306] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 327.266779][ T5306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.297793][ T5306] usb 1-1: Product: syz [ 327.326563][ T5306] usb 1-1: Manufacturer: syz [ 327.334900][ T5306] usb 1-1: SerialNumber: syz [ 327.348373][ T58] usb 4-1: USB disconnect, device number 42 [ 327.365415][ T5306] usb 1-1: config 0 descriptor?? [ 327.392072][ T5306] gspca_main: conex-2.14.0 probing 0572:0041 [ 328.143751][ T5292] gspca_sunplus: reg_w_riv err -110 [ 328.154287][ T5292] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 328.245375][ T8] usb 5-1: USB disconnect, device number 43 [ 328.671831][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 328.759545][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 328.871249][ T5251] Bluetooth: hci1: command tx timeout [ 329.650902][ T9710] netlink: 'syz.4.741': attribute type 7 has an invalid length. [ 329.715041][ T9710] netlink: 'syz.4.741': attribute type 39 has an invalid length. [ 329.829054][ T5306] usb 1-1: USB disconnect, device number 42 [ 329.848985][ T9713] netlink: 'syz.4.741': attribute type 7 has an invalid length. [ 329.857176][ T9713] netlink: 'syz.4.741': attribute type 39 has an invalid length. [ 329.864542][ T5290] usb 2-1: USB disconnect, device number 42 [ 330.039287][ T5292] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 330.078885][ T9636] chnl_net:caif_netlink_parms(): no params data found [ 330.210441][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 330.265253][ T5292] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 330.278696][ T5292] usb 4-1: config 0 has no interface number 0 [ 330.288406][ T5292] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 330.309703][ T5292] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 330.323579][ T5292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.334752][ T5292] usb 4-1: Product: syz [ 330.339018][ T5292] usb 4-1: Manufacturer: syz [ 330.343894][ T5292] usb 4-1: SerialNumber: syz [ 330.351105][ T5292] usb 4-1: config 0 descriptor?? [ 330.357120][ T9716] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 330.374339][ T5292] usb-storage 4-1:0.20: USB Mass Storage device detected [ 330.554582][ T5292] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 330.672501][ T9636] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.690202][ T5292] scsi host1: usb-storage 4-1:0.20 [ 330.702332][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.740388][ T9636] bridge_slave_0: entered allmulticast mode [ 330.754927][ T9636] bridge_slave_0: entered promiscuous mode [ 330.825766][ T9636] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.832887][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.844361][ T58] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 330.852738][ T9636] bridge_slave_1: entered allmulticast mode [ 330.865322][ T9636] bridge_slave_1: entered promiscuous mode [ 330.953880][ T5251] Bluetooth: hci1: command tx timeout [ 330.987513][ T5290] usb 4-1: USB disconnect, device number 43 [ 330.994634][ T8] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 331.005439][ T9636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.035987][ T9636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.056214][ T58] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 331.072065][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.091805][ T58] usb 2-1: config 0 has no interface number 0 [ 331.101048][ T58] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 331.119324][ T58] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.138628][ T58] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 331.150138][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.158123][ T9636] team0: Port device team_slave_0 added [ 331.166521][ T58] usb 2-1: Product: syz [ 331.170717][ T58] usb 2-1: Manufacturer: syz [ 331.175926][ T58] usb 2-1: SerialNumber: syz [ 331.176105][ T9636] team0: Port device team_slave_1 added [ 331.182823][ T58] usb 2-1: config 0 descriptor?? [ 331.217585][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 331.227822][ T8] usb 1-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 331.238308][ T8] usb 1-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 331.253537][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 331.264545][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=fb40, bcdDevice= 0.40 [ 331.282000][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.290772][ T8] usb 1-1: Product: syz [ 331.295254][ T942] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 331.304426][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.304842][ T8] usb 1-1: Manufacturer: syz [ 331.317472][ T8] usb 1-1: SerialNumber: syz [ 331.323348][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.358881][ T9636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.373247][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.380685][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.411959][ T9636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.499119][ T9636] hsr_slave_0: entered promiscuous mode [ 331.514811][ T942] usb 5-1: Using ep0 maxpacket: 32 [ 331.521627][ T9636] hsr_slave_1: entered promiscuous mode [ 331.522414][ T942] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 331.556539][ T942] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 331.571836][ T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.580054][ T942] usb 5-1: Product: syz [ 331.584812][ T942] usb 5-1: Manufacturer: syz [ 331.589455][ T942] usb 5-1: SerialNumber: syz [ 331.599108][ T942] usb 5-1: config 0 descriptor?? [ 331.610904][ T9757] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 331.622195][ T942] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.639372][ T8] cdc_ether 1-1:1.0: skipping garbage [ 331.656399][ T8] usb 1-1: bad CDC descriptors [ 331.683898][ T8] usb 1-1: USB disconnect, device number 43 [ 331.982073][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 332.004163][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.016936][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.031618][ T9744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.045948][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.066419][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.077545][ T9744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.153153][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 333.023657][ T5251] Bluetooth: hci1: command tx timeout [ 333.100180][ T5292] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 333.219195][ T9636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.243464][ T9636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.306072][ T9636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.338787][ T9636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.352105][ T5292] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 333.364083][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.380608][ T5292] usb 4-1: config 0 descriptor?? [ 333.409110][ T5292] cp210x 4-1:0.0: cp210x converter detected [ 333.420537][ T8] usb 2-1: USB disconnect, device number 43 [ 333.472798][ T9787] kvm: kvm [9784]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x0 [ 333.725826][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.788142][ T9636] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.831006][ T2523] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.838178][ T2523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.943027][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.944057][ T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 333.950271][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.045797][ T5292] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 334.076756][ T5291] usb 5-1: USB disconnect, device number 44 [ 334.129577][ T5292] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 334.158590][ T5292] usb 4-1: cp210x converter now attached to ttyUSB0 [ 334.174490][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 334.203564][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 334.208308][ T5292] usb 4-1: USB disconnect, device number 44 [ 334.254632][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.262958][ T5292] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 334.287452][ T9636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.323479][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.335648][ T5292] cp210x 4-1:0.0: device disconnected [ 334.371142][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 334.444617][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 334.490626][ T9636] veth0_vlan: entered promiscuous mode [ 334.496850][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.510655][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 334.527252][ T8] usb 2-1: config 0 descriptor?? [ 334.535970][ T9636] veth1_vlan: entered promiscuous mode [ 334.751518][ T9636] veth0_macvtap: entered promiscuous mode [ 334.766933][ T9636] veth1_macvtap: entered promiscuous mode [ 334.792203][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.803209][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.841200][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.871223][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.909070][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.933420][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.963027][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.980442][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.005537][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.017034][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.052257][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.064203][ T8] kye 0003:0458:5011.001B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 335.102080][ T8] kye 0003:0458:5011.001B: unknown main item tag 0x0 [ 335.114082][ T8] kye 0003:0458:5011.001B: unknown main item tag 0x0 [ 335.129140][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.151152][ T8] kye 0003:0458:5011.001B: unknown main item tag 0x0 [ 335.158517][ T942] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 335.172031][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.185257][ T8] kye 0003:0458:5011.001B: unknown main item tag 0x0 [ 335.195513][ T8] kye 0003:0458:5011.001B: unknown main item tag 0x0 [ 335.203460][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.226083][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.237548][ T8] kye 0003:0458:5011.001B: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 335.262921][ T8] kye 0003:0458:5011.001B: tablet-enabling feature report not found [ 335.273138][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.286144][ T8] kye 0003:0458:5011.001B: tablet enabling failed [ 335.298920][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.325488][ T8] usb 2-1: USB disconnect, device number 44 [ 335.361174][ T942] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 335.369707][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.384856][ T942] usb 1-1: config 0 has no interface number 0 [ 335.391974][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.403790][ T5290] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 335.414364][ T942] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 335.432802][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.451267][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.458177][ T942] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 335.483042][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.491722][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.561031][ T942] usb 1-1: Product: syz [ 335.571208][ T942] usb 1-1: Manufacturer: syz [ 335.595589][ T942] usb 1-1: SerialNumber: syz [ 335.603516][ T5290] usb 5-1: Invalid ep0 maxpacket: 9 [ 335.635684][ T942] usb 1-1: config 0 descriptor?? [ 335.641403][ T9816] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 335.666245][ T942] usb-storage 1-1:0.20: USB Mass Storage device detected [ 335.717552][ T942] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 335.722585][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.766611][ T5290] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 335.900274][ T9636] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.922329][ T9636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.938671][ T9636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.964314][ T5290] usb 5-1: Invalid ep0 maxpacket: 9 [ 335.974745][ T942] scsi host1: usb-storage 1-1:0.20 [ 335.983028][ T5290] usb usb5-port1: attempt power cycle [ 336.001333][ T9636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.174712][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.198925][ T5291] usb 1-1: USB disconnect, device number 44 [ 336.443546][ T5290] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 336.483088][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.494391][ T5290] usb 5-1: Invalid ep0 maxpacket: 9 [ 336.505097][ T4631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.516482][ T4631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.526287][ T4631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.537105][ T4631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.548904][ T4631] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.559128][ T4631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.733644][ T5290] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 336.781841][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.813799][ T5290] usb 5-1: Invalid ep0 maxpacket: 9 [ 336.823877][ T5290] usb usb5-port1: unable to enumerate USB device [ 337.222313][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.293852][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.523340][ T63] bridge_slave_1: left allmulticast mode [ 337.546601][ T63] bridge_slave_1: left promiscuous mode [ 337.554780][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.573854][ T5290] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 337.582580][ T63] bridge_slave_0: left allmulticast mode [ 337.600338][ T63] bridge_slave_0: left promiscuous mode [ 337.619342][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.667279][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 337.950570][ T5290] usb 1-1: Using ep0 maxpacket: 8 [ 337.970267][ T5290] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.980153][ T5290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.015857][ T5290] usb 1-1: Product: syz [ 338.022202][ T5290] usb 1-1: Manufacturer: syz [ 338.033936][ T5290] usb 1-1: SerialNumber: syz [ 338.069758][ T5290] usb 1-1: config 0 descriptor?? [ 338.302563][ T5290] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 338.624201][ T4631] Bluetooth: hci4: command tx timeout [ 338.651862][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.673095][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.688936][ T63] bond0 (unregistering): Released all slaves [ 338.730283][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.781539][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.381274][ T9847] chnl_net:caif_netlink_parms(): no params data found [ 339.467029][ T5306] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 339.561715][ T63] hsr_slave_0: left promiscuous mode [ 339.585048][ T63] hsr_slave_1: left promiscuous mode [ 339.642877][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.651750][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.661847][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.669644][ T5306] usb 3-1: Using ep0 maxpacket: 8 [ 339.677920][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.686341][ T5306] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 339.695274][ T5306] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.721703][ T5306] usb 3-1: config 0 has no interface number 0 [ 339.738341][ T5306] usb 3-1: config 0 interface 25 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.766450][ T63] veth1_macvtap: left promiscuous mode [ 339.773308][ T63] veth0_macvtap: left promiscuous mode [ 339.785351][ T5306] usb 3-1: config 0 interface 25 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 339.801738][ T63] veth1_vlan: left promiscuous mode [ 339.817385][ T63] veth0_vlan: left promiscuous mode [ 339.828667][ T5306] usb 3-1: config 0 interface 25 has no altsetting 0 [ 339.866268][ T5306] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.9f [ 339.893794][ T942] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 339.898872][ T5306] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=3 [ 339.945024][ T5306] usb 3-1: Product: syz [ 339.955209][ T5306] usb 3-1: SerialNumber: syz [ 339.991359][ T5306] usb 3-1: config 0 descriptor?? [ 340.134973][ T942] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 340.163500][ T942] usb 5-1: config 0 has no interface number 0 [ 340.169710][ T942] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 340.220319][ T942] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 340.239465][ T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.248910][ T5306] usb 3-1: USB disconnect, device number 23 [ 340.272650][ T942] usb 5-1: Product: syz [ 340.300740][ T942] usb 5-1: Manufacturer: syz [ 340.326910][ T942] usb 5-1: SerialNumber: syz [ 340.362202][ T942] usb 5-1: config 0 descriptor?? [ 340.384782][ T9909] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 340.397314][ T942] usb-storage 5-1:0.20: USB Mass Storage device detected [ 340.426606][ T942] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 340.719384][ T4631] Bluetooth: hci4: command tx timeout [ 340.753882][ T942] scsi host1: usb-storage 5-1:0.20 [ 340.813480][ T5290] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 340.832395][ T5290] usb 1-1: USB disconnect, device number 45 [ 341.080630][ T63] team0 (unregistering): Port device team_slave_1 removed [ 341.139862][ T63] team0 (unregistering): Port device team_slave_0 removed [ 341.724791][ T5290] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 341.803151][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'. [ 342.046378][ T5290] usb 1-1: Using ep0 maxpacket: 16 [ 342.061281][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.084226][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.094542][ T9932] usb 5-1: reset full-speed USB device number 49 using dummy_hcd [ 342.100145][ T9847] bridge_slave_0: entered allmulticast mode [ 342.113301][ T5290] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 342.123657][ T5290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.130448][ T9847] bridge_slave_0: entered promiscuous mode [ 342.132049][ T5290] usb 1-1: Product: syz [ 342.142416][ T5290] usb 1-1: Manufacturer: syz [ 342.148956][ T5290] usb 1-1: SerialNumber: syz [ 342.159034][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.179446][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.181241][ T5290] usb 1-1: config 0 descriptor?? [ 342.207512][ T9847] bridge_slave_1: entered allmulticast mode [ 342.208902][ T5290] gspca_main: conex-2.14.0 probing 0572:0041 [ 342.225318][ T9847] bridge_slave_1: entered promiscuous mode [ 342.390162][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.418156][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.580776][ T9847] team0: Port device team_slave_0 added [ 342.659334][ T5290] usb 1-1: USB disconnect, device number 46 [ 342.686033][ T9847] team0: Port device team_slave_1 added [ 342.783823][ T4631] Bluetooth: hci4: command tx timeout [ 342.941195][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.951961][ T9] usb 5-1: USB disconnect, device number 49 [ 342.963887][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.999227][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.012302][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.019507][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.090041][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.278444][ T9847] hsr_slave_0: entered promiscuous mode [ 343.344072][ T9847] hsr_slave_1: entered promiscuous mode [ 343.394574][ T9847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.421806][ T9847] Cannot create hsr debugfs directory [ 344.093635][ T9989] dccp_close: ABORT with 32 bytes unread [ 344.523903][ T8] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 344.562498][ T9847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.590766][ T9847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.625395][ T9847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.647842][ T9847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.719382][ T8] usb 1-1: device descriptor read/64, error -71 [ 344.745219][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 344.948554][ T4631] Bluetooth: hci4: command tx timeout [ 345.103783][ T8] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 345.118602][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.223675][ T9847] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.265590][ T2523] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.272785][ T2523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.323561][ T8] usb 1-1: device descriptor read/64, error -71 [ 345.337593][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.344876][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.486847][ T8] usb usb1-port1: attempt power cycle [ 345.523770][ T5291] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 345.572888][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.724083][ T5291] usb 2-1: Using ep0 maxpacket: 8 [ 345.738723][ T5291] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 345.767551][ T9847] veth0_vlan: entered promiscuous mode [ 345.777053][ T5291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.787550][ T58] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 345.811836][ T9847] veth1_vlan: entered promiscuous mode [ 345.849972][ T5291] usb 2-1: config 0 has no interface number 0 [ 345.863094][ T5291] usb 2-1: config 0 interface 25 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.882004][ T5291] usb 2-1: config 0 interface 25 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 345.895448][ T5291] usb 2-1: config 0 interface 25 has no altsetting 0 [ 345.923518][ T8] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 345.946288][ T5291] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.9f [ 345.971724][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=3 [ 345.990319][ T5291] usb 2-1: Product: syz [ 345.995822][ T8] usb 1-1: device descriptor read/8, error -71 [ 345.999079][ T5291] usb 2-1: SerialNumber: syz [ 346.017571][ T9847] veth0_macvtap: entered promiscuous mode [ 346.026290][ T58] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 346.035975][ T5291] usb 2-1: config 0 descriptor?? [ 346.054982][ T58] usb 3-1: config 0 has no interface number 0 [ 346.072258][ T9847] veth1_macvtap: entered promiscuous mode [ 346.096039][ T58] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 346.138542][ T58] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 346.155765][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.168450][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.181199][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.193464][ T58] usb 3-1: Product: syz [ 346.197663][ T58] usb 3-1: Manufacturer: syz [ 346.205878][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.229776][ T58] usb 3-1: SerialNumber: syz [ 346.245923][ T58] usb 3-1: config 0 descriptor?? [ 346.253782][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.273757][ T8] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 346.276954][ T5291] usb 2-1: USB disconnect, device number 45 [ 346.288081][T10011] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 346.288769][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.328867][ T58] usb-storage 3-1:0.20: USB Mass Storage device detected [ 346.344647][ T8] usb 1-1: device descriptor read/8, error -71 [ 346.347572][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.370826][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.383886][ T58] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 346.401697][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.418199][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.439360][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.464564][ T8] usb usb1-port1: unable to enumerate USB device [ 346.486516][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.612280][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.719597][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.744530][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.758787][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.781174][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.792684][ T58] scsi host1: usb-storage 3-1:0.20 [ 346.826297][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.873460][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.897471][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.912634][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.927180][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.990996][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.132674][ T9847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.181815][ T9847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.216183][ T9847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.248134][ T9847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.297214][ T9] usb 3-1: USB disconnect, device number 24 [ 347.626980][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.665986][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.727163][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.744550][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.826417][ T5291] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 348.037839][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 348.054052][ T5291] usb 5-1: Using ep0 maxpacket: 16 [ 348.070600][ T5291] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 348.084032][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.092186][ T5291] usb 5-1: Product: syz [ 348.100079][ T5291] usb 5-1: Manufacturer: syz [ 348.107395][ T5291] usb 5-1: SerialNumber: syz [ 348.120208][ T5291] usb 5-1: config 0 descriptor?? [ 348.128584][ T5291] gspca_main: conex-2.14.0 probing 0572:0041 [ 348.243630][ T58] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 348.453780][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 348.472655][ T58] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 348.501536][ T58] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 348.524176][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.563912][ T5291] usb 5-1: USB disconnect, device number 50 [ 348.577613][ T58] usb 4-1: Product: syz [ 348.598846][ T58] usb 4-1: Manufacturer: syz [ 348.619786][ T58] usb 4-1: SerialNumber: syz [ 348.688376][ T58] usb 4-1: config 0 descriptor?? [ 349.575941][T10058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 349.585325][ T58] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.685856][T10083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.708261][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 350.718910][T10083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.764990][T10090] fuse: Bad value for 'fd' [ 351.013785][ T5291] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 351.075973][ T58] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 351.294855][ T5291] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 351.307557][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 351.313555][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.323912][ T58] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 351.336128][ T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.353092][ T5291] usb 5-1: config 0 descriptor?? [ 351.375313][ T5291] cp210x 5-1:0.0: cp210x converter detected [ 351.386112][ T58] usb 1-1: config 0 has no interface number 0 [ 351.398658][ T58] usb 1-1: config 0 interface 25 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.413241][ T58] usb 1-1: config 0 interface 25 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 351.426553][ T5246] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 351.434323][ T58] usb 1-1: config 0 interface 25 has no altsetting 0 [ 351.443342][ T58] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.9f [ 351.454546][ T58] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=3 [ 351.462730][ T58] usb 1-1: Product: syz [ 351.468941][ T58] usb 1-1: SerialNumber: syz [ 351.480073][ T5292] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 351.491361][ T58] usb 1-1: config 0 descriptor?? [ 351.633635][ T5246] usb 2-1: Using ep0 maxpacket: 16 [ 351.644717][ T5246] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.658897][ T5246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 351.669425][ T5246] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 351.688570][ T5292] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 351.697688][ T5292] usb 3-1: config 0 has no interface number 0 [ 351.708937][ T5292] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 351.721943][ T5246] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 351.736941][ T58] usb 1-1: USB disconnect, device number 51 [ 351.748071][ T5292] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 351.758993][ T5246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.768298][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.779139][ T5246] usb 2-1: Product: syz [ 351.797502][ T5246] usb 2-1: Manufacturer: syz [ 351.812637][ T5292] usb 3-1: Product: syz [ 351.817273][ T5291] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 351.825205][ T5246] usb 2-1: SerialNumber: syz [ 351.829848][ T5292] usb 3-1: Manufacturer: syz [ 351.838039][ T5292] usb 3-1: SerialNumber: syz [ 351.846487][ T5246] usb 2-1: config 0 descriptor?? [ 351.853341][ T9] usb 4-1: USB disconnect, device number 45 [ 351.854323][ T5292] usb 3-1: config 0 descriptor?? [ 351.874052][ T5246] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 351.881646][T10097] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 351.896706][ T5292] usb-storage 3-1:0.20: USB Mass Storage device detected [ 351.921466][ T5292] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 352.023104][T10082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.032103][T10082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.104254][T10095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.121884][T10095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.142609][ T5246] gspca_sn9c20x: Write register 1000 failed -71 [ 352.150604][ T5292] scsi host1: usb-storage 3-1:0.20 [ 352.178462][ T5246] gspca_sn9c20x: Device initialization failed [ 352.202409][ T5246] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 352.233155][ T5246] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 352.247430][ T5246] usb 2-1: USB disconnect, device number 46 [ 352.267353][ T5291] usb 5-1: cp210x converter now attached to ttyUSB0 [ 352.357631][ T5291] usb 3-1: USB disconnect, device number 25 [ 352.393033][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 352.424316][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.432142][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.516456][ T9] usb 5-1: USB disconnect, device number 51 [ 352.529380][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 352.566475][ T9] cp210x 5-1:0.0: device disconnected [ 352.641510][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 352.835122][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 352.885094][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 353.121792][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 353.132649][ T5291] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 353.154356][T10127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.817'. [ 353.233658][ T5292] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 353.350227][ T5291] usb 4-1: Using ep0 maxpacket: 16 [ 353.367108][ T5291] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 353.376347][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.389731][ T5291] usb 4-1: Product: syz [ 353.396360][ T5291] usb 4-1: Manufacturer: syz [ 353.406429][ T5291] usb 4-1: SerialNumber: syz [ 353.436392][ T5291] usb 4-1: config 0 descriptor?? [ 353.446092][ T5291] gspca_main: conex-2.14.0 probing 0572:0041 [ 353.455231][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 353.471312][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 353.484149][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.498687][ T5292] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.510846][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.554356][ T5292] usb 2-1: config 0 descriptor?? [ 353.574632][T10123] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.858050][ T5291] usb 4-1: USB disconnect, device number 46 [ 354.126757][ T5292] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 354.167145][ T5292] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 354.211041][ T5292] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 354.318986][ T58] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 354.454278][T10153] fuse: Bad value for 'fd' [ 354.514152][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 354.537720][ T58] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 354.551761][ T58] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 354.565562][ T58] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.582197][ T58] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.597119][ T58] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 354.615734][ T58] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 354.628398][ T58] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 354.665935][ T58] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.739815][ T58] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.764716][ T5292] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 354.774580][ T58] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 354.792221][ T58] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 354.801384][ T58] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 354.830124][ T58] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.864433][ T58] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.876054][ T58] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 354.897011][ T58] usb 1-1: string descriptor 0 read error: -22 [ 354.904976][ T58] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 354.914353][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.941972][ T58] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 354.963632][ T5292] usb 4-1: Using ep0 maxpacket: 8 [ 354.989181][ T5292] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 355.012139][ T5292] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.032616][ T5292] usb 4-1: config 0 has no interface number 0 [ 355.039001][ T5292] usb 4-1: config 0 interface 25 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.054453][ T5292] usb 4-1: config 0 interface 25 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 355.072325][ T5292] usb 4-1: config 0 interface 25 has no altsetting 0 [ 355.083715][ T9] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 355.093146][ T5292] usb 4-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.9f [ 355.103668][ T4631] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 355.105592][ T5251] Bluetooth: hci1: command 0x206a tx timeout [ 355.116234][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=3 [ 355.125339][ T5292] usb 4-1: Product: syz [ 355.133534][ T5292] usb 4-1: SerialNumber: syz [ 355.158848][ T5292] usb 4-1: config 0 descriptor?? [ 355.236375][ T5292] usb 1-1: USB disconnect, device number 52 [ 355.276871][ T9] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 355.302253][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 355.314134][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 355.326677][ T9] usb 5-1: config 0 has no interface number 0 [ 355.335889][ T9] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 355.348934][ T9] usb 5-1: config 0 interface 112 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.360568][ T9] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 355.374905][ T9] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 355.388635][ T9] usb 5-1: config 0 interface 112 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 355.392763][ T58] usb 4-1: USB disconnect, device number 47 [ 355.399863][ T9] usb 5-1: config 0 interface 112 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 355.419795][ T9] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 355.432825][ T9] usb 5-1: config 0 interface 112 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.447808][ T9] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 355.460060][ T9] usb 5-1: config 0 interface 112 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 355.485315][ T9] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 355.496097][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.504933][ T9] usb 5-1: Product: syz [ 355.509358][ T9] usb 5-1: Manufacturer: syz [ 355.516114][ T9] usb 5-1: SerialNumber: syz [ 355.528904][ T9] usb 5-1: config 0 descriptor?? [ 355.539852][T10163] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 355.547946][T10163] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 355.556234][T10163] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 355.568115][T10163] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 355.584946][ T5291] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 355.605056][ T9] mvusb_mdio 5-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 355.683524][ T5246] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 355.785068][ T5291] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 355.801114][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.806867][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.812474][ T5291] usb 3-1: Product: syz [ 355.822343][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.836901][ T5246] usb 2-1: device descriptor read/64, error -32 [ 355.842696][ T9] usb 5-1: USB disconnect, device number 52 [ 355.843830][ T5291] usb 3-1: Manufacturer: syz [ 355.873824][ T5291] usb 3-1: SerialNumber: syz [ 355.890718][ T5291] usb 3-1: config 0 descriptor?? [ 355.896139][ T5292] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 356.024169][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 356.088596][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.116909][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.132554][ T5292] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 356.142868][ T5246] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 356.159980][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.191042][ T5292] usb 1-1: config 0 descriptor?? [ 356.506752][ T5291] usb 3-1: Firmware: major: 110, minor: 48, hardware type: UNKNOWN (28) [ 356.609289][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.652893][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.868018][ T5307] usb 2-1: USB disconnect, device number 47 [ 357.083746][ T5307] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 357.263919][ T945] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 357.277898][ T5307] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 357.291401][ T5307] usb 2-1: config 0 has no interface number 0 [ 357.319274][ T5307] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 357.343852][ T5307] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 357.365126][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.373216][ T5307] usb 2-1: Product: syz [ 357.378968][ T5307] usb 2-1: Manufacturer: syz [ 357.386088][ T5307] usb 2-1: SerialNumber: syz [ 357.397697][ T5307] usb 2-1: config 0 descriptor?? [ 357.412458][T10171] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 357.436916][ T5307] usb-storage 2-1:0.20: USB Mass Storage device detected [ 357.453738][ T945] usb 4-1: Using ep0 maxpacket: 16 [ 357.472964][ T945] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 357.477045][ T5307] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 357.485996][ T945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.507143][ T945] usb 4-1: Product: syz [ 357.512114][ T945] usb 4-1: Manufacturer: syz [ 357.529343][ T945] usb 4-1: SerialNumber: syz [ 357.543575][ T945] usb 4-1: config 0 descriptor?? [ 357.552394][ T945] gspca_main: conex-2.14.0 probing 0572:0041 [ 357.624608][ T5291] usb 3-1: failed to fetch extended address, random address set [ 357.632540][ T5291] usb 3-1: atusb_probe: initialization failed, error = -524 [ 357.681642][ T5307] scsi host1: usb-storage 2-1:0.20 [ 357.692483][ T5291] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 357.905856][ T5291] usb 2-1: USB disconnect, device number 48 [ 358.081017][ T945] usb 4-1: USB disconnect, device number 48 [ 358.098318][ T5292] usbhid 1-1:0.0: can't add hid device: -71 [ 358.120034][ T5292] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 358.147375][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 358.175000][ T5292] usb 1-1: USB disconnect, device number 53 [ 358.193802][T10198] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.201514][T10198] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.300314][T10200] geneve0: entered promiscuous mode [ 358.324563][T10200] geneve0: left promiscuous mode [ 358.386971][ T30] INFO: task syz.2.470:7885 blocked for more than 143 seconds. [ 358.404292][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 358.426836][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.450656][ T30] task:syz.2.470 state:D stack:26624 pid:7885 tgid:7885 ppid:7347 flags:0x00004004 [ 358.476851][ T30] Call Trace: [ 358.483575][ T30] [ 358.494213][ T30] __schedule+0x1800/0x4a60 [ 358.511786][ T30] ? __pfx___schedule+0x10/0x10 [ 358.528191][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.533309][ T30] ? irqentry_exit+0x63/0x90 [ 358.545982][T10207] fuse: Bad value for 'fd' [ 358.551594][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 358.557455][ T30] ? schedule+0x90/0x320 [ 358.572370][ T30] schedule+0x14b/0x320 [ 358.576703][ T30] io_schedule+0x8d/0x110 [ 358.581072][ T30] folio_wait_bit_common+0x882/0x12b0 [ 358.593492][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 358.603449][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 358.609151][ T30] ? _raw_spin_unlock+0x28/0x50 [ 358.614266][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 358.620122][ T30] __filemap_get_folio+0xb7/0xc10 [ 358.625286][ T30] hugetlb_fault+0x1b72/0x3770 [ 358.630110][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 358.635448][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 358.640843][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 358.647336][ T30] handle_mm_fault+0x1901/0x1bc0 [ 358.652319][ T30] ? mtree_range_walk+0x6fd/0x8e0 [ 358.658280][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.663337][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 358.668710][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 358.674959][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 358.680290][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 358.685578][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 358.691219][ T30] ? exc_page_fault+0x113/0x8c0 [ 358.696242][ T30] exc_page_fault+0x459/0x8c0 [ 358.701018][ T30] asm_exc_page_fault+0x26/0x30 [ 358.706123][ T30] RIP: 0033:0x7f24e8f4193c [ 358.710563][ T30] RSP: 002b:00007f24e923fb88 EFLAGS: 00010246 [ 358.716781][ T30] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010 [ 358.724889][ T945] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 358.732503][ T30] RDX: 0000000000000010 RSI: 00007f24e8a005d5 RDI: 0000000020000d00 [ 358.740730][ T30] RBP: 00007f24e9117a80 R08: 00007f24e8e00000 R09: 0000000000000001 [ 358.750312][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000000336f3 [ 358.758973][ T30] R13: 00007f24e923fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 358.767109][ T30] [ 358.770201][ T30] INFO: task syz.2.470:7886 blocked for more than 143 seconds. [ 358.781831][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 358.792507][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.795863][ T5292] usb 3-1: USB disconnect, device number 26 [ 358.804830][ T30] task:syz.2.470 state:D stack:23736 pid:7886 tgid:7885 ppid:7347 flags:0x00004006 [ 358.817793][ T30] Call Trace: [ 358.821101][ T30] [ 358.824169][ T8] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 358.834926][ T30] __schedule+0x1800/0x4a60 [ 358.839627][ T30] ? __pfx___schedule+0x10/0x10 [ 358.854086][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.861709][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 358.867276][ T30] ? schedule+0x90/0x320 [ 358.871612][ T30] schedule+0x14b/0x320 [ 358.875894][ T30] schedule_preempt_disabled+0x13/0x30 [ 358.881368][ T30] __mutex_lock+0x6a4/0xd70 [ 358.885995][ T30] ? __mutex_lock+0x527/0xd70 [ 358.890685][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 358.895642][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 358.900913][ T30] ? __pfx_up_write+0x10/0x10 [ 358.905659][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 358.910966][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 358.917045][ T30] hugetlb_wp+0x104d/0x3a90 [ 358.921610][ T30] ? mark_lock+0x9a/0x350 [ 358.926039][ T945] usb 5-1: Using ep0 maxpacket: 8 [ 358.931169][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 358.937278][ T30] ? __pfx___might_resched+0x10/0x10 [ 358.943148][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 358.949583][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 358.954986][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.960701][ T30] ? __filemap_get_folio+0x769/0xc10 [ 358.966784][ T30] hugetlb_fault+0x27b2/0x3770 [ 358.971720][ T945] usb 5-1: config 8 has an invalid interface number: 90 but max is 1 [ 358.980009][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 358.985278][ T30] ? mt_find+0x226/0x850 [ 358.989537][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.994741][ T945] usb 5-1: config 8 has an invalid interface number: 148 but max is 1 [ 359.002992][ T945] usb 5-1: config 8 has no interface number 0 [ 359.009337][ T30] handle_mm_fault+0x1901/0x1bc0 [ 359.014650][ T30] ? mt_find+0x62d/0x850 [ 359.018912][ T30] ? mt_find+0x226/0x850 [ 359.023254][ T30] ? __pfx_mt_find+0x10/0x10 [ 359.030046][ T945] usb 5-1: config 8 has no interface number 1 [ 359.036283][ T945] usb 5-1: config 8 interface 90 altsetting 36 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 359.047443][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 359.053487][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 359.061664][ T945] usb 5-1: config 8 interface 148 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 359.063535][ T30] ? find_vma+0xf9/0x170 [ 359.073094][ T945] usb 5-1: config 8 interface 148 altsetting 10 endpoint 0xB has invalid maxpacket 2015, setting to 64 [ 359.084915][ T30] ? __pfx_find_vma+0x10/0x10 [ 359.088683][ T945] usb 5-1: config 8 interface 148 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 359.092703][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.112249][ T8] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 359.120518][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.121138][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 359.131038][ T8] usb 4-1: config 0 has no interface number 0 [ 359.142400][ T945] usb 5-1: config 8 interface 148 altsetting 10 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 359.142625][ T30] exc_page_fault+0x2b9/0x8c0 [ 359.154647][ T8] usb 4-1: config 0 interface 25 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.154680][ T8] usb 4-1: config 0 interface 25 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 359.154708][ T8] usb 4-1: config 0 interface 25 has no altsetting 0 [ 359.154853][ T945] usb 5-1: config 8 interface 148 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 359.184537][ T30] asm_exc_page_fault+0x26/0x30 [ 359.203643][ T945] usb 5-1: config 8 interface 148 altsetting 10 endpoint 0x1 has an invalid bInterval 226, changing to 11 [ 359.217529][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 359.217567][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 359.217585][ T30] RSP: 0018:ffffc90009cb7ad0 EFLAGS: 00050246 [ 359.217607][ T30] RAX: ffffffff84b28901 RBX: 000000002001ddc0 RCX: 0000000000000040 [ 359.217624][ T30] RDX: 0000000000000000 RSI: ffffc90009cb7b60 RDI: 000000002001dd80 [ 359.217639][ T30] RBP: ffffc90009cb7c10 R08: ffffc90009cb7b9f R09: 1ffff92001396f73 [ 359.217654][ T30] R10: dffffc0000000000 R11: fffff52001396f74 R12: 0000000000000040 [ 359.217670][ T30] R13: 000000000001d740 R14: 000000002001dd80 R15: ffffc90009cb7b60 [ 359.217692][ T30] ? _copy_to_user+0x51/0xb0 [ 359.217723][ T30] _copy_to_user+0x86/0xb0 [ 359.217748][ T30] rng_dev_read+0x3be/0x6d0 [ 359.217778][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 359.217810][ T30] ? security_file_permission+0x7f/0xa0 [ 359.230868][ T8] usb 4-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.9f [ 359.265570][ T30] ? rw_verify_area+0x52a/0x6b0 [ 359.267690][ T945] usb 5-1: config 8 interface 148 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 359.278828][ T30] vfs_readv+0x6c2/0xa90 [ 359.282659][ T8] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=3 [ 359.290880][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 359.301097][ T8] usb 4-1: Product: syz [ 359.305420][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 359.309491][ T945] usb 5-1: config 8 interface 90 has no altsetting 0 [ 359.315571][ T30] ? __fget_files+0x29/0x470 [ 359.334333][ T8] usb 4-1: SerialNumber: syz [ 359.340319][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 359.352377][ T945] usb 5-1: config 8 interface 148 has no altsetting 0 [ 359.366501][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 359.388575][ T8] usb 4-1: config 0 descriptor?? [ 359.402015][ T30] ? do_syscall_64+0x100/0x230 [ 359.410349][ T30] ? do_syscall_64+0xb6/0x230 [ 359.416545][ T30] do_syscall_64+0xf3/0x230 [ 359.421299][ T30] ? clear_bhb_loop+0x35/0x90 [ 359.426726][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.432849][ T30] RIP: 0033:0x7f24e8f79eb9 [ 359.436378][ T945] usb 5-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=66.d8 [ 359.438302][ T30] RSP: 002b:00007f24e9cf5038 EFLAGS: 00000246 [ 359.447185][ T945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.454938][ T30] ORIG_RAX: 0000000000000127 [ 359.462701][ T945] usb 5-1: Product: syz [ 359.479098][ T945] usb 5-1: Manufacturer: ㇈ὠ뀘䷶車뫵ꢥ䚒摳ජ䅣﮲훃鳪ᰯ⦶ヨ扥쇭ꏷ颁뭨慘ϼ菫䅱᪙潱戸炈瑆ࠇ⇤웝滩쨬⤩섂曥횮妣釈븫唘婮⤴ԙ鑱ƴ⍎矅ዯᡣ顎⢪붇炯﹋垢唶ᡪ稄틾鷾ྃ鳮쾅䣘襸건闺麭㽤⏄搎뜀ꆓꘪ靼㊛曫⥸ᮀ뎥◙炐햀뇳Ⅹ굑뚯䔅躮币衝 [ 359.482042][ T30] RAX: ffffffffffffffda RBX: 00007f24e9115f80 RCX: 00007f24e8f79eb9 [ 359.509292][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.515699][ T945] usb 5-1: SerialNumber: syz [ 359.519053][ T30] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005 [ 359.544010][ T30] RBP: 00007f24e8fe793e R08: 0000000000000000 R09: 0000000000000000 [ 359.552099][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.565576][ T30] R13: 0000000000000000 R14: 00007f24e9115f80 R15: 00007f24e923fa28 [ 359.578515][ T30] [ 359.582272][ T30] [ 359.582272][ T30] Showing all locks held in the system: [ 359.607805][ T30] 1 lock held by khungtaskd/30: [ 359.613758][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 359.625069][ T30] 4 locks held by kworker/0:3/945: [ 359.630338][ T30] #0: ffff8880222c1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 359.642344][ T30] #1: ffffc9000439fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 359.643952][ T8] usb 4-1: USB disconnect, device number 49 [ 359.678442][ T30] #2: ffff888029aa5190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 359.705408][ T30] #3: ffff888079cba190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 359.717168][ T30] 2 locks held by getty/4989: [ 359.722254][ T30] #0: ffff8880311210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 359.732592][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 359.744731][ T30] 3 locks held by syz.2.470/7885: [ 359.749783][ T30] #0: ffff888025f7cd18 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 359.757616][ T945] snd-usb-caiaq 5-1:8.90: can't set alt interface. [ 359.772965][ T30] #1: ffff8880212b0068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 359.781632][ T945] usb 5-1: unable to init card! (ret=-5) [ 359.784640][ T30] #2: ffff88807d8b90e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 359.803020][ T30] 2 locks held by syz.2.470/7886: [ 359.808506][ T30] #0: ffff888011a84d98 (&mm->mmap_lock [ 359.808549][ T945] snd-usb-caiaq 5-1:8.90: probe with driver snd-usb-caiaq failed with error -5 [ 359.808556][ T30] ){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 359.826221][ T945] snd-usb-caiaq 5-1:8.148: can't set alt interface. [ 359.832796][ T30] #1: ffff8880212b0068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 359.842993][ T945] usb 5-1: unable to init card! (ret=-5) [ 359.849617][ T30] 1 lock held by syz.3.837/10206: [ 359.855825][ T945] snd-usb-caiaq 5-1:8.148: probe with driver snd-usb-caiaq failed with error -5 [ 359.866943][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 359.876677][ T945] usb 5-1: USB disconnect, device number 53 [ 359.892668][ T30] 2 locks held by dhcpcd/10208: [ 359.897784][ T30] #0: ffff88807efec408 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 359.931037][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 359.942091][ T30] [ 359.947603][ T30] ============================================= [ 359.947603][ T30] [ 359.967263][ T30] NMI backtrace for cpu 1 [ 359.971639][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 359.982156][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 359.992205][ T30] Call Trace: [ 359.995475][ T30] [ 359.998393][ T30] dump_stack_lvl+0x241/0x360 [ 360.003064][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.008258][ T30] ? __pfx__printk+0x10/0x10 [ 360.012831][ T30] ? vprintk_emit+0x667/0x7c0 [ 360.017502][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 360.022532][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 360.027483][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 360.032952][ T30] ? _printk+0xd5/0x120 [ 360.037114][ T30] ? __pfx__printk+0x10/0x10 [ 360.041708][ T30] ? __wake_up_klogd+0xcc/0x110 [ 360.046544][ T30] ? __pfx__printk+0x10/0x10 [ 360.051153][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 360.056164][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.062143][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 360.068115][ T30] watchdog+0xff4/0x1040 [ 360.072350][ T30] ? watchdog+0x1ea/0x1040 [ 360.076766][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.081442][ T30] kthread+0x2f0/0x390 [ 360.085501][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.090171][ T30] ? __pfx_kthread+0x10/0x10 [ 360.094747][ T30] ret_from_fork+0x4b/0x80 [ 360.099153][ T30] ? __pfx_kthread+0x10/0x10 [ 360.103729][ T30] ret_from_fork_asm+0x1a/0x30 [ 360.108497][ T30] [ 360.111519][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.119429][ T30] Sending NMI from CPU 1 to CPUs 0: [ 360.125818][ C0] NMI backtrace for cpu 0 [ 360.125831][ C0] CPU: 0 UID: 0 PID: 2523 Comm: kworker/u8:7 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 360.125851][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 360.125862][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 360.125887][ C0] RIP: 0010:unwind_next_frame+0x259/0x2a00 [ 360.125912][ C0] Code: d6 e8 0c 00 44 0f 45 e9 41 8d 5d ff 89 df 89 ee e8 dc 64 52 00 39 eb 0f 86 02 1e 00 00 89 e8 48 8d 1c 85 70 73 45 91 48 89 d8 <48> c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f [ 360.125939][ C0] RSP: 0018:ffffc90009fd66a8 EFLAGS: 00000216 [ 360.125953][ C0] RAX: ffffffff9146ed24 RBX: ffffffff9146ed24 RCX: 00000000000b0001 [ 360.125965][ C0] RDX: ffff88802ff58000 RSI: 0000000000005e6d RDI: 00000000000b0000 [ 360.125977][ C0] RBP: 0000000000005e6d R08: ffffffff81412994 R09: ffffc90009fd6870 [ 360.125989][ C0] R10: 0000000000000003 R11: ffffffff817f2f80 R12: ffffc90009fd6780 [ 360.126001][ C0] R13: 00000000000b0001 R14: ffffffff8c000000 R15: ffffffff815e6d0c [ 360.126013][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 360.126027][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.126039][ C0] CR2: 00005616c5f9a600 CR3: 000000007bb52000 CR4: 00000000003506f0 [ 360.126053][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.126063][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.126074][ C0] Call Trace: [ 360.126081][ C0] [ 360.126088][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 360.126108][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 360.126129][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 360.126147][ C0] ? nmi_handle+0x2a/0x5a0 [ 360.126170][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 360.126188][ C0] ? nmi_handle+0x14f/0x5a0 [ 360.126203][ C0] ? nmi_handle+0x2a/0x5a0 [ 360.126219][ C0] ? unwind_next_frame+0x259/0x2a00 [ 360.126239][ C0] ? default_do_nmi+0x63/0x160 [ 360.126258][ C0] ? exc_nmi+0x123/0x1f0 [ 360.126275][ C0] ? end_repeat_nmi+0xf/0x53 [ 360.126293][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 360.126319][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.126339][ C0] ? unwind_next_frame+0x244/0x2a00 [ 360.126361][ C0] ? unwind_next_frame+0x259/0x2a00 [ 360.126381][ C0] ? unwind_next_frame+0x259/0x2a00 [ 360.126401][ C0] ? unwind_next_frame+0x259/0x2a00 [ 360.126421][ C0] [ 360.126427][ C0] [ 360.126436][ C0] ? process_scheduled_works+0xa2b/0x1830 [ 360.126455][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 360.126473][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 360.126491][ C0] ? __kernel_text_address+0xd/0x40 [ 360.126507][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 360.126525][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.126543][ C0] arch_stack_walk+0x151/0x1b0 [ 360.126565][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 360.126587][ C0] stack_trace_save+0x118/0x1d0 [ 360.126606][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 360.126627][ C0] ? __pfx_validate_chain+0x10/0x10 [ 360.126645][ C0] kasan_save_track+0x3f/0x80 [ 360.126664][ C0] ? kasan_save_track+0x3f/0x80 [ 360.126681][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 360.126699][ C0] ? __kmalloc_noprof+0x1fc/0x400 [ 360.126714][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 360.126734][ C0] ? ieee80211_inform_bss+0x15f/0x1080 [ 360.126753][ C0] ? cfg80211_inform_single_bss_data+0xe93/0x2030 [ 360.126769][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 360.126785][ C0] ? cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 360.126801][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 360.126820][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 360.126839][ C0] ? ieee80211_iface_work+0x8a5/0xf20 [ 360.126858][ C0] ? cfg80211_wiphy_work+0x2db/0x490 [ 360.126875][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 360.126913][ C0] ? __kmalloc_noprof+0x355/0x400 [ 360.126930][ C0] __kasan_kmalloc+0x98/0xb0 [ 360.126949][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 360.126968][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 360.126988][ C0] __kmalloc_noprof+0x1fc/0x400 [ 360.127006][ C0] ieee802_11_parse_elems_full+0xdb/0x2880 [ 360.127029][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.127052][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 360.127072][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 360.127093][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 360.127113][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 360.127139][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 360.127159][ C0] ? kvfree_call_rcu+0x48c/0x790 [ 360.127182][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 360.127207][ C0] ? cfg80211_update_known_bss+0xb95/0x1500 [ 360.127228][ C0] ieee80211_inform_bss+0x15f/0x1080 [ 360.127249][ C0] ? __cfg80211_bss_update+0x1202/0x2170 [ 360.127268][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 360.127291][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 360.127307][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 360.127328][ C0] ? cfg80211_inform_single_bss_data+0xd3d/0x2030 [ 360.127346][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 360.127367][ C0] cfg80211_inform_single_bss_data+0xe93/0x2030 [ 360.127384][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 360.127408][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 360.127428][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 360.127455][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 360.127475][ C0] ? __kernel_text_address+0xd/0x40 [ 360.127490][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 360.127509][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 360.127529][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 360.127558][ C0] ? __pfx_validate_chain+0x10/0x10 [ 360.127588][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 360.127609][ C0] ? mark_lock+0x9a/0x350 [ 360.127630][ C0] ? __lock_acquire+0x137a/0x2040 [ 360.127663][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 360.127682][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 360.127705][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 360.127727][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 360.127747][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 360.127770][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 360.127791][ C0] ? __pfx_lock_release+0x10/0x10 [ 360.127818][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 360.127846][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 360.127866][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 360.127891][ C0] ? mark_lock+0x9a/0x350 [ 360.127912][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.127933][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.127952][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 360.127977][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 360.128002][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 360.128023][ C0] ? process_scheduled_works+0x945/0x1830 [ 360.128041][ C0] process_scheduled_works+0xa2c/0x1830 [ 360.128072][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.128096][ C0] ? assign_work+0x364/0x3d0 [ 360.128116][ C0] worker_thread+0x86d/0xd10 [ 360.128142][ C0] ? __kthread_parkme+0x169/0x1d0 [ 360.128163][ C0] ? __pfx_worker_thread+0x10/0x10 [ 360.128181][ C0] kthread+0x2f0/0x390 [ 360.128195][ C0] ? __pfx_worker_thread+0x10/0x10 [ 360.128214][ C0] ? __pfx_kthread+0x10/0x10 [ 360.128229][ C0] ret_from_fork+0x4b/0x80 [ 360.128247][ C0] ? __pfx_kthread+0x10/0x10 [ 360.128261][ C0] ret_from_fork_asm+0x1a/0x30 [ 360.128288][ C0] [ 360.133644][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 360.133659][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 360.133681][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 360.133692][ T30] Call Trace: [ 360.133700][ T30] [ 360.133708][ T30] dump_stack_lvl+0x241/0x360 [ 360.133734][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.133753][ T30] ? __pfx__printk+0x10/0x10 [ 360.133768][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.133797][ T30] ? vscnprintf+0x5d/0x90 [ 360.133819][ T30] panic+0x349/0x860 [ 360.133838][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 360.133861][ T30] ? __pfx_panic+0x10/0x10 [ 360.133875][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 360.133895][ T30] ? __irq_work_queue_local+0x137/0x410 [ 360.133919][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 360.133938][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 360.133958][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 360.133981][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 360.134005][ T30] watchdog+0x1033/0x1040 [ 360.134029][ T30] ? watchdog+0x1ea/0x1040 [ 360.134056][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.134084][ T30] kthread+0x2f0/0x390 [ 360.134101][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.134122][ T30] ? __pfx_kthread+0x10/0x10 [ 360.134139][ T30] ret_from_fork+0x4b/0x80 [ 360.134161][ T30] ? __pfx_kthread+0x10/0x10 [ 360.134178][ T30] ret_from_fork_asm+0x1a/0x30 [ 360.134211][ T30] [ 360.137925][ T30] Kernel Offset: disabled [ 361.016787][ T30] Rebooting in 86400 seconds..