last executing test programs: 2.023652216s ago: executing program 4 (id=5): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000004740)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044002, 0x0) 1.802084686s ago: executing program 4 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="18005a801400018005000100300000000500020000000000"], 0x34}}, 0x0) 1.638335629s ago: executing program 4 (id=7): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008ef17626000000000000109022400010000300009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0006b2000000b2055ea1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.24571593s ago: executing program 1 (id=2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000007fc0)='./bus\x00', 0x60342, 0x2a) pwritev2(r1, &(0x7f0000000680)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x8000, 0x20400036, 0x30) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc9f}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x100) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@local}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@dev}}, @migrate={0x50, 0x11, [{@in=@multicast2, @in=@empty, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xbc}}, 0x0) 1.086417442s ago: executing program 0 (id=1): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) fcntl$addseals(r0, 0x409, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xffffffffffffffe0}, &(0x7f0000000080)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0x76}}], 0x48, 0x8010}, 0x0) 885.296217ms ago: executing program 1 (id=8): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x3c}}, 0x40008c4) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000001000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = fcntl$dupfd(r3, 0x406, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "6994bc41fb66fc5c", "97bd1c98eb3a686c3748c2da320d4ed4", "ea7da195", "1d887df19a8ed662"}, 0x28) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_clone3(&(0x7f0000000000)={0x80000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x58) 885.142534ms ago: executing program 2 (id=3): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120101002f0c81087f180002ad6b0102030109022400010000100009040000023c7f98000905fdffffffffffff0805020000000057f5dd442d6b432c8f478b764694ce9d6782ecaffbce0036c38d85b4e17c3c66000071e669b0f6391c"], 0x0) 764.687745ms ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x31d9, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x3, 0x2}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000000900)=""/141, 0x8d}, {&(0x7f00000009c0)=""/66, 0x42}, {&(0x7f0000000a40)=""/129, 0x81}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000bc0)=""/198, 0xc6}, {&(0x7f0000000cc0)=""/66, 0x42}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/248, 0xf8}], 0xa) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x86, 0x30dd}) io_uring_enter(r1, 0x5f11, 0x0, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x5}, 0x10) write(r6, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r6, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x4000, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x1, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100001c53c308b3040140100100000001090212006790a6cb3c3b93ca1679fde2f435ae0100"], 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x20013, r7, 0x0) syz_io_uring_setup(0x1bc1, &(0x7f0000000300)={0x0, 0x1221, 0x8000, 0x3, 0x6a}, &(0x7f0000000200), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000440)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, r7, 0x0, &(0x7f0000000400)='./file0\x00', 0x82, 0x0, 0x1}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r12, &(0x7f0000000140)={0x1d, r13, 0x0, {}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x410, &(0x7f0000001880)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsname={'fsname', 0x3d, '(](#(\xb2e\xce!\x18\xc2\\\xb9\xc5\xb3\xbb\xf6\fZ\xd1\xbf\xb9z\xc1\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xd6*\x15\xf0\x82\xf0\xee\xd0\xe6\x80\x1c\xc7Z\xefP\xc0 :%;\xc7\x87\xf1\r\x1f\xe6\xf1\xad\xcc\xe1\x93!w7M\b*\xaeG\x93\xb38\xe1\x93\xfa\xd1\xa9\nP\xf6\a9\xcfA\x9b\x8b5\x1a\f5\x01\xc8VP\x90\xaa\xeb4\xaf\x1d\x0f:d\xb1X\x10\x82\xcc\x10\xcd\xd5\xa0\x8bm\x87\x85\x8d~\x8d\xfc'}}]}}) sendmsg$nl_xfrm(r7, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0100001600010028bd7000ffdbdf25fc020000000000000000000000000000fc0000000000000000000000000000014e2300094e2200000200002004000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r14, {0x6, 0x4}, {0xfff3, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe4, 0xb7, 0x56, 0x10, 0x423, 0xc, 0x8551, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x0, 0x6a, 0xd5, 0x6a}}]}}]}}, 0x0) 700.604646ms ago: executing program 0 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080)=0xf3, 0x4) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0x7f, 0x20, 0x0, 0xdd, 0xa, 0x6, 0x1, 0x1, 0x8, 0x2, 0x6, 0x0, 0x9, 0x9, 0x9, 0x80, 0x7, 0x6, '\x00', 0x7, 0xba}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28040000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 449.290029ms ago: executing program 0 (id=10): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)={0x40, 0xe, 0xa0, {0xa0, 0x21, "da4c3666ac83117b253fea84586b7c375fca137e7cfc0a7cf90bb396a752a50d5159f195ed355f14fec9aaa235c1114d33fe340000000000006d7a025449bdb131ba50ae5597436a0b437d810a58415bbd1cea44970fa95654fe6cca1d6bd0080c0f2f52a9bb746d4d2f9b16a9b570fc96cecc11c0d990077b8435cbf691eaf2ced7d896f559742a043bb90e0d88ba25ad765a40ffdd531c55dde7f67aeb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)={0x40, 0xe, 0xa0, {0xa0, 0x21, "da4c3666ac83117b253fea84586b7c375fca137e7cfc0a7cf90bb396a752a50d5159f195ed355f14fec9aaa235c1114d33fe340000000000006d7a025449bdb131ba50ae5597436a0b437d810a58415bbd1cea44970fa95654fe6cca1d6bd0080c0f2f52a9bb746d4d2f9b16a9b570fc96cecc11c0d990077b8435cbf691eaf2ced7d896f559742a043bb90e0d88ba25ad765a40ffdd531c55dde7f67aeb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 246.630069ms ago: executing program 1 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r2, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80)=ANY=[], 0x10}}], 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffff, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x0) 0s ago: executing program 1 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x76e2, 0x10100}, &(0x7f0000000640)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x4, 0x2007, @fd_index=0x1, 0x7f7, &(0x7f0000000180)="9366a26d8eeaaaf51b8bba06319f21352bf5420d9d70f049bc52e45cd75c4a23d048f44238b7834244af60007f894a9faca87f5c208fa3a975397f4e4dfe95ff9fa783e3372e85b6a873f34d399027362c4636ef76922ba30ba2", 0x5a, 0x18}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000000000000000000971d4a14000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRES32=r6, @ANYBLOB], 0x38}}, 0x0) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32) (async) read(r1, &(0x7f00000019c0)=""/4107, 0x100b) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x380, 0x1c0, 0x0, 0x1c0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private, 0x21}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x520}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x11, 0x800000003, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe) write$binfmt_script(r10, &(0x7f0000000040), 0x4) close(r10) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000010800450000280000000000059078ac1e00010a0101000000000066db54092059084206565d0f", @ANYRESOCT=r9, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780008"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 65.208505][ T5824] cgroup: Unknown subsys name 'net' [ 65.302865][ T5824] cgroup: Unknown subsys name 'cpuset' [ 65.311360][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.583063][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.829905][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.838205][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.846244][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.856691][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.865462][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.865496][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.881364][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.881988][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.889733][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.897730][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.903613][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.913572][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.917199][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.925444][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.932127][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.937487][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.949704][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.958053][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.966033][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.966067][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.975537][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.981353][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.989212][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.008485][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.019712][ T5145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.027012][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.034647][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.042604][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.050311][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.065226][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.507590][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 69.593504][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 69.647862][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 69.662366][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 69.680829][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 69.807993][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.816286][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.824755][ T5853] bridge_slave_0: entered allmulticast mode [ 69.832477][ T5853] bridge_slave_0: entered promiscuous mode [ 69.860894][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.868120][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.875671][ T5857] bridge_slave_0: entered allmulticast mode [ 69.882420][ T5857] bridge_slave_0: entered promiscuous mode [ 69.891314][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.898422][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.905982][ T5857] bridge_slave_1: entered allmulticast mode [ 69.913101][ T5857] bridge_slave_1: entered promiscuous mode [ 69.938509][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.946138][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.953521][ T5853] bridge_slave_1: entered allmulticast mode [ 69.960876][ T5853] bridge_slave_1: entered promiscuous mode [ 69.978675][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.985921][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.993723][ T5856] bridge_slave_0: entered allmulticast mode [ 70.000606][ T5856] bridge_slave_0: entered promiscuous mode [ 70.053922][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.061268][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.068465][ T5856] bridge_slave_1: entered allmulticast mode [ 70.076378][ T5856] bridge_slave_1: entered promiscuous mode [ 70.093389][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.102830][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.110245][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.117472][ T5858] bridge_slave_0: entered allmulticast mode [ 70.124592][ T5858] bridge_slave_0: entered promiscuous mode [ 70.132328][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.140356][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.147551][ T5858] bridge_slave_1: entered allmulticast mode [ 70.155070][ T5858] bridge_slave_1: entered promiscuous mode [ 70.202798][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.217074][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.228106][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.246346][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.253869][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.263809][ T5855] bridge_slave_0: entered allmulticast mode [ 70.271831][ T5855] bridge_slave_0: entered promiscuous mode [ 70.280244][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.287346][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.294878][ T5855] bridge_slave_1: entered allmulticast mode [ 70.301878][ T5855] bridge_slave_1: entered promiscuous mode [ 70.310567][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.361763][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.392446][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.403943][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.420164][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.432399][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.461192][ T5857] team0: Port device team_slave_0 added [ 70.471347][ T5853] team0: Port device team_slave_0 added [ 70.494183][ T5856] team0: Port device team_slave_0 added [ 70.504459][ T5857] team0: Port device team_slave_1 added [ 70.522763][ T5853] team0: Port device team_slave_1 added [ 70.546453][ T5856] team0: Port device team_slave_1 added [ 70.562325][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.570832][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.598107][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.621349][ T5858] team0: Port device team_slave_0 added [ 70.632207][ T5855] team0: Port device team_slave_0 added [ 70.656393][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.663755][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.690809][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.716011][ T5858] team0: Port device team_slave_1 added [ 70.732846][ T5855] team0: Port device team_slave_1 added [ 70.747437][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.755267][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.781748][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.794051][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.801114][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.827090][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.840217][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.847294][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.873614][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.901479][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.908570][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.934927][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.952698][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.961822][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.988293][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.006961][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.014022][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.040288][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.058636][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.066122][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.072768][ T5846] Bluetooth: hci3: command tx timeout [ 71.093157][ T5145] Bluetooth: hci0: command tx timeout [ 71.098214][ T5845] Bluetooth: hci1: command tx timeout [ 71.104428][ T5145] Bluetooth: hci2: command tx timeout [ 71.109973][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.132815][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.140084][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.166702][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.177235][ T5145] Bluetooth: hci4: command tx timeout [ 71.200387][ T5857] hsr_slave_0: entered promiscuous mode [ 71.207385][ T5857] hsr_slave_1: entered promiscuous mode [ 71.285964][ T5855] hsr_slave_0: entered promiscuous mode [ 71.293135][ T5855] hsr_slave_1: entered promiscuous mode [ 71.302884][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.311693][ T5855] Cannot create hsr debugfs directory [ 71.326417][ T5856] hsr_slave_0: entered promiscuous mode [ 71.333075][ T5856] hsr_slave_1: entered promiscuous mode [ 71.339622][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.347317][ T5856] Cannot create hsr debugfs directory [ 71.365899][ T5853] hsr_slave_0: entered promiscuous mode [ 71.373509][ T5853] hsr_slave_1: entered promiscuous mode [ 71.380473][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.388059][ T5853] Cannot create hsr debugfs directory [ 71.436393][ T5858] hsr_slave_0: entered promiscuous mode [ 71.443204][ T5858] hsr_slave_1: entered promiscuous mode [ 71.449734][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.457399][ T5858] Cannot create hsr debugfs directory [ 71.798634][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.811682][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.823702][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.843624][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.875856][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.884801][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.906279][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.925467][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.938749][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.959278][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.024491][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.045467][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.060375][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.072253][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.134010][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.143917][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.179879][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.193140][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.206208][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.282787][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.298775][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.321523][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.340710][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.362404][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.375141][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.383211][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.398135][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.405324][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.425496][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.500727][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.542281][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.584234][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.593409][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.600682][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.621854][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.629073][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.668152][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.678664][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.685824][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.718306][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.725711][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.763624][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.780223][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.798191][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.826746][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.833981][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.871325][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.878431][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.937369][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.954532][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.993110][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.013581][ T5857] veth0_vlan: entered promiscuous mode [ 73.034701][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.041902][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.068534][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.075723][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.092796][ T5857] veth1_vlan: entered promiscuous mode [ 73.124040][ T5853] veth0_vlan: entered promiscuous mode [ 73.150749][ T5145] Bluetooth: hci3: command tx timeout [ 73.153675][ T5846] Bluetooth: hci1: command tx timeout [ 73.156211][ T5145] Bluetooth: hci0: command tx timeout [ 73.162511][ T5845] Bluetooth: hci2: command tx timeout [ 73.183661][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.213100][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.231762][ T5857] veth0_macvtap: entered promiscuous mode [ 73.243232][ T5845] Bluetooth: hci4: command tx timeout [ 73.251095][ T5853] veth1_vlan: entered promiscuous mode [ 73.266868][ T5857] veth1_macvtap: entered promiscuous mode [ 73.313942][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.326749][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.353603][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.364108][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.373335][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.382441][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.418594][ T5855] veth0_vlan: entered promiscuous mode [ 73.430264][ T5858] veth0_vlan: entered promiscuous mode [ 73.446080][ T5853] veth0_macvtap: entered promiscuous mode [ 73.483858][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.496009][ T5853] veth1_macvtap: entered promiscuous mode [ 73.506346][ T5855] veth1_vlan: entered promiscuous mode [ 73.515399][ T5858] veth1_vlan: entered promiscuous mode [ 73.617333][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.634759][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.648595][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.663202][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.676688][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.720680][ T5855] veth0_macvtap: entered promiscuous mode [ 73.732920][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.745038][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.756774][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.771973][ T5856] veth0_vlan: entered promiscuous mode [ 73.780531][ T5855] veth1_macvtap: entered promiscuous mode [ 73.800752][ T5858] veth0_macvtap: entered promiscuous mode [ 73.810182][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.811526][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.818917][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.836354][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.838916][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.853263][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.870982][ T5858] veth1_macvtap: entered promiscuous mode [ 73.889661][ T5856] veth1_vlan: entered promiscuous mode [ 73.904125][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.917000][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.927030][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.938542][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.951705][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.966812][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.980461][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.991952][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.002561][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.013377][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.019477][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.023978][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.051567][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.072659][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.087932][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.098561][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.110527][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.127916][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.137792][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.148571][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.158526][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.169217][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.179210][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.189975][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.201103][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.211371][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.220193][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.229442][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.238271][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.283397][ T5856] veth0_macvtap: entered promiscuous mode [ 74.331630][ T5856] veth1_macvtap: entered promiscuous mode [ 74.346134][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.357074][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.367111][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.377741][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.387647][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.398466][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.408534][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.419190][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.431818][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.457009][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.466066][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.474891][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.483696][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.535350][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.546650][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.549695][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.570588][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.582530][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.606842][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.617969][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.630912][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.643407][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.657652][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.670259][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.703005][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.713428][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.722348][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731292][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.796181][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.808042][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.848639][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.857625][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.880317][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.893465][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.908851][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.938143][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.948836][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.017722][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.025840][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.071103][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 75.111418][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.135108][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.167420][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.176535][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.215121][ T5894] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 75.241104][ T5845] Bluetooth: hci2: command tx timeout [ 75.244647][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.247342][ T5846] Bluetooth: hci1: command tx timeout [ 75.260653][ T5846] Bluetooth: hci0: command tx timeout [ 75.263496][ T5845] Bluetooth: hci3: command tx timeout [ 75.282391][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.292903][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.327512][ T5894] usb 5-1: config 0 descriptor?? [ 75.336727][ T5845] Bluetooth: hci4: command tx timeout [ 75.659714][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.776976][ T5894] lenovo 0003:17EF:6062.0001: unbalanced collection at end of report description [ 75.810316][ T5894] lenovo 0003:17EF:6062.0001: hid_parse failed [ 75.816721][ T5894] lenovo 0003:17EF:6062.0001: probe with driver lenovo failed with error -22 [ 75.831243][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 75.844497][ T25] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 75.852124][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 75.880141][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 75.892892][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 75.918483][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.920951][ T5893] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 75.934277][ T25] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 75.972810][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.987707][ T29] audit: type=1326 audit(1737047967.073:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.4.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2a385d29 code=0x7ffc0000 [ 76.030019][ T25] usb 3-1: Product: syz [ 76.034693][ T25] usb 3-1: Manufacturer: syz [ 76.044805][ T29] audit: type=1326 audit(1737047967.113:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.4.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fad2a385d29 code=0x7ffc0000 [ 76.049153][ T25] usb 3-1: SerialNumber: syz [ 76.082975][ T973] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.083501][ T29] audit: type=1326 audit(1737047967.173:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad2a3b85e5 code=0x7ffc0000 [ 76.117521][ T29] audit: type=1326 audit(1737047967.203:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.4.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2a385d29 code=0x7ffc0000 [ 76.143716][ T25] usb 3-1: config 0 descriptor?? [ 76.144262][ T5893] usb 4-1: config 144 has too many interfaces: 103, using maximum allowed: 32 [ 76.160243][ T5893] usb 4-1: config 144 has an invalid descriptor of length 59, skipping remainder of the config [ 76.171718][ T5893] usb 4-1: config 144 has 0 interfaces, different from the descriptor's value: 103 [ 76.175781][ T5908] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.181914][ T29] audit: type=1326 audit(1737047967.203:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.4.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2a385d29 code=0x7ffc0000 [ 76.212974][ T5893] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 76.223085][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.261357][ T25] smsusb:smsusb_probe: board id=2, interface number 0 [ 76.273702][ T29] audit: type=1326 audit(1737047967.323:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.4.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fad2a385d29 code=0x7ffc0000 [ 76.320111][ T25] smsusb:siano_media_device_register: media controller created [ 76.333830][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.340443][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.363793][ T25] ------------[ cut here ]------------ [ 76.369500][ T25] usb 3-1: BOGUS urb xfer, pipe 3 != type 1 [ 76.387021][ T25] WARNING: CPU: 1 PID: 25 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x1930 [ 76.396849][ T25] Modules linked in: [ 76.400917][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 76.411790][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.422025][ T25] Workqueue: usb_hub_wq hub_event [ 76.427124][ T25] RIP: 0010:usb_submit_urb+0xc4e/0x1930 [ 76.432931][ T25] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 ee 08 00 00 45 8b 07 48 c7 c7 60 9f af 8c 48 8b 34 24 4c 89 e2 89 e9 e8 33 75 1e fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 90 67 59 8f [ 76.454153][ T25] RSP: 0018:ffffc900001f6ae8 EFLAGS: 00010246 [ 76.460681][ T25] RAX: 713592fcea4ced00 RBX: dffffc0000000000 RCX: 0000000000100000 [ 76.468797][ T25] RDX: ffffc90019f06000 RSI: 00000000000d7245 RDI: 00000000000d7246 [ 76.477956][ T25] RBP: 0000000000000003 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 76.486041][ T25] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88807a2841c0 [ 76.494187][ T25] R13: ffff8880203e4d00 R14: 0000000000000001 R15: ffffffff8caf9d4c [ 76.502294][ T25] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 76.511742][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.518465][ T25] CR2: 000055555eecb808 CR3: 0000000074a98000 CR4: 00000000003526f0 [ 76.526692][ T25] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.534785][ T25] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.542886][ T25] Call Trace: [ 76.546506][ T25] [ 76.549914][ T25] ? __warn+0x165/0x4d0 [ 76.554214][ T25] ? usb_submit_urb+0xc4e/0x1930 [ 76.559254][ T25] ? report_bug+0x2b3/0x500 [ 76.563799][ T25] ? usb_submit_urb+0xc4e/0x1930 [ 76.568789][ T25] ? handle_bug+0x60/0x90 [ 76.573368][ T25] ? exc_invalid_op+0x1a/0x50 [ 76.578082][ T25] ? asm_exc_invalid_op+0x1a/0x20 [ 76.583210][ T25] ? __warn_printk+0x292/0x360 [ 76.588027][ T25] ? usb_submit_urb+0xc4e/0x1930 [ 76.593794][ T25] ? usb_submit_urb+0xc4d/0x1930 [ 76.598804][ T25] smsusb_start_streaming+0x22/0x340 [ 76.604230][ T25] smsusb_probe+0x1c54/0x2410 [ 76.608973][ T25] ? __pfx_smsusb_probe+0x10/0x10 [ 76.614093][ T25] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 76.619729][ T25] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 76.625670][ T25] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.632096][ T25] ? __pm_runtime_set_status+0x6c1/0xa10 [ 76.637786][ T25] usb_probe_interface+0x641/0xbb0 [ 76.643020][ T25] ? __pfx_usb_probe_interface+0x10/0x10 [ 76.649145][ T25] really_probe+0x2b8/0xad0 [ 76.653793][ T25] __driver_probe_device+0x1a2/0x390 [ 76.659557][ T25] driver_probe_device+0x50/0x430 [ 76.664638][ T25] __device_attach_driver+0x2d6/0x530 [ 76.670800][ T25] bus_for_each_drv+0x24e/0x2e0 [ 76.675701][ T25] ? __pfx___device_attach_driver+0x10/0x10 [ 76.682132][ T25] ? __pfx_bus_for_each_drv+0x10/0x10 [ 76.687560][ T25] __device_attach+0x333/0x520 [ 76.692482][ T25] ? __pfx_lock_release+0x10/0x10 [ 76.697549][ T25] ? __pfx___device_attach+0x10/0x10 [ 76.702956][ T25] ? do_raw_spin_unlock+0x13c/0x8b0 [ 76.708198][ T25] bus_probe_device+0x189/0x260 [ 76.713139][ T25] device_add+0x856/0xbf0 [ 76.717505][ T25] usb_set_configuration+0x1976/0x1fb0 [ 76.723253][ T25] usb_generic_driver_probe+0x88/0x140 [ 76.728754][ T25] usb_probe_device+0x1b8/0x380 [ 76.733775][ T25] ? __pfx_usb_probe_device+0x10/0x10 [ 76.739220][ T25] really_probe+0x2b8/0xad0 [ 76.743774][ T25] __driver_probe_device+0x1a2/0x390 [ 76.750635][ T25] driver_probe_device+0x50/0x430 [ 76.755720][ T25] __device_attach_driver+0x2d6/0x530 [ 76.761458][ T25] bus_for_each_drv+0x24e/0x2e0 [ 76.766362][ T25] ? __pfx___device_attach_driver+0x10/0x10 [ 76.772359][ T25] ? __pfx_bus_for_each_drv+0x10/0x10 [ 76.777788][ T25] __device_attach+0x333/0x520 [ 76.782700][ T25] ? __pfx___device_attach+0x10/0x10 [ 76.788045][ T25] bus_probe_device+0x189/0x260 [ 76.793090][ T25] device_add+0x856/0xbf0 [ 76.797463][ T25] usb_new_device+0x104a/0x19a0 [ 76.802474][ T25] ? __pfx_usb_new_device+0x10/0x10 [ 76.807726][ T25] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.810491][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.813015][ T25] ? lockdep_hardirqs_on+0x99/0x150 [ 76.826842][ T25] hub_event+0x2d6d/0x5150 [ 76.831662][ T25] ? __pfx_hub_event+0x10/0x10 [ 76.836489][ T25] ? __pfx_lock_acquire+0x10/0x10 [ 76.841639][ T25] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.847666][ T25] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.854401][ T25] ? process_scheduled_works+0x976/0x1840 [ 76.861486][ T25] process_scheduled_works+0xa66/0x1840 [ 76.867167][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.873319][ T25] ? assign_work+0x364/0x3d0 [ 76.877973][ T25] worker_thread+0x870/0xd30 [ 76.882675][ T25] ? __kthread_parkme+0x169/0x1d0 [ 76.883531][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.887728][ T25] ? __pfx_worker_thread+0x10/0x10 [ 76.887763][ T25] kthread+0x2f0/0x390 [ 76.887788][ T25] ? __pfx_worker_thread+0x10/0x10 [ 76.887808][ T25] ? __pfx_kthread+0x10/0x10 [ 76.915683][ T25] ret_from_fork+0x4b/0x80 [ 76.920204][ T25] ? __pfx_kthread+0x10/0x10 [ 76.924847][ T25] ret_from_fork_asm+0x1a/0x30 [ 76.929787][ T25] [ 76.932863][ T25] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.940188][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 76.950822][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.960915][ T25] Workqueue: usb_hub_wq hub_event [ 76.965998][ T25] Call Trace: [ 76.969662][ T25] [ 76.972616][ T25] dump_stack_lvl+0x241/0x360 [ 76.977326][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.982546][ T25] ? __pfx__printk+0x10/0x10 [ 76.987246][ T25] ? _printk+0xd5/0x120 [ 76.991527][ T25] ? __init_begin+0x41000/0x41000 [ 76.996579][ T25] ? vscnprintf+0x5d/0x90 [ 77.000934][ T25] panic+0x349/0x880 [ 77.004903][ T25] ? __warn+0x174/0x4d0 [ 77.009091][ T25] ? __pfx_panic+0x10/0x10 [ 77.013545][ T25] ? ret_from_fork_asm+0x1a/0x30 [ 77.018516][ T25] __warn+0x344/0x4d0 [ 77.022520][ T25] ? usb_submit_urb+0xc4e/0x1930 [ 77.027491][ T25] report_bug+0x2b3/0x500 [ 77.031844][ T25] ? usb_submit_urb+0xc4e/0x1930 [ 77.036811][ T25] handle_bug+0x60/0x90 [ 77.040983][ T25] exc_invalid_op+0x1a/0x50 [ 77.045507][ T25] asm_exc_invalid_op+0x1a/0x20 [ 77.050393][ T25] RIP: 0010:usb_submit_urb+0xc4e/0x1930 [ 77.055989][ T25] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 ee 08 00 00 45 8b 07 48 c7 c7 60 9f af 8c 48 8b 34 24 4c 89 e2 89 e9 e8 33 75 1e fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 90 67 59 8f [ 77.075713][ T25] RSP: 0018:ffffc900001f6ae8 EFLAGS: 00010246 [ 77.081862][ T25] RAX: 713592fcea4ced00 RBX: dffffc0000000000 RCX: 0000000000100000 [ 77.089861][ T25] RDX: ffffc90019f06000 RSI: 00000000000d7245 RDI: 00000000000d7246 [ 77.097865][ T25] RBP: 0000000000000003 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 77.105959][ T25] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88807a2841c0 [ 77.113955][ T25] R13: ffff8880203e4d00 R14: 0000000000000001 R15: ffffffff8caf9d4c [ 77.121956][ T25] ? __warn_printk+0x292/0x360 [ 77.126761][ T25] ? usb_submit_urb+0xc4d/0x1930 [ 77.131749][ T25] smsusb_start_streaming+0x22/0x340 [ 77.137067][ T25] smsusb_probe+0x1c54/0x2410 [ 77.141863][ T25] ? __pfx_smsusb_probe+0x10/0x10 [ 77.146905][ T25] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 77.152478][ T25] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 77.158409][ T25] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 77.164778][ T25] ? __pm_runtime_set_status+0x6c1/0xa10 [ 77.170459][ T25] usb_probe_interface+0x641/0xbb0 [ 77.175605][ T25] ? __pfx_usb_probe_interface+0x10/0x10 [ 77.181261][ T25] really_probe+0x2b8/0xad0 [ 77.185784][ T25] __driver_probe_device+0x1a2/0x390 [ 77.191092][ T25] driver_probe_device+0x50/0x430 [ 77.196148][ T25] __device_attach_driver+0x2d6/0x530 [ 77.201547][ T25] bus_for_each_drv+0x24e/0x2e0 [ 77.206423][ T25] ? __pfx___device_attach_driver+0x10/0x10 [ 77.212343][ T25] ? __pfx_bus_for_each_drv+0x10/0x10 [ 77.217747][ T25] __device_attach+0x333/0x520 [ 77.222537][ T25] ? __pfx_lock_release+0x10/0x10 [ 77.227582][ T25] ? __pfx___device_attach+0x10/0x10 [ 77.232893][ T25] ? do_raw_spin_unlock+0x13c/0x8b0 [ 77.238113][ T25] bus_probe_device+0x189/0x260 [ 77.242988][ T25] device_add+0x856/0xbf0 [ 77.247341][ T25] usb_set_configuration+0x1976/0x1fb0 [ 77.252858][ T25] usb_generic_driver_probe+0x88/0x140 [ 77.258337][ T25] usb_probe_device+0x1b8/0x380 [ 77.263236][ T25] ? __pfx_usb_probe_device+0x10/0x10 [ 77.268629][ T25] really_probe+0x2b8/0xad0 [ 77.273168][ T25] __driver_probe_device+0x1a2/0x390 [ 77.278480][ T25] driver_probe_device+0x50/0x430 [ 77.283532][ T25] __device_attach_driver+0x2d6/0x530 [ 77.288937][ T25] bus_for_each_drv+0x24e/0x2e0 [ 77.293807][ T25] ? __pfx___device_attach_driver+0x10/0x10 [ 77.299724][ T25] ? __pfx_bus_for_each_drv+0x10/0x10 [ 77.305128][ T25] __device_attach+0x333/0x520 [ 77.309918][ T25] ? __pfx___device_attach+0x10/0x10 [ 77.315238][ T25] bus_probe_device+0x189/0x260 [ 77.320120][ T25] device_add+0x856/0xbf0 [ 77.324468][ T25] usb_new_device+0x104a/0x19a0 [ 77.329349][ T25] ? __pfx_usb_new_device+0x10/0x10 [ 77.334587][ T25] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.339799][ T25] ? lockdep_hardirqs_on+0x99/0x150 [ 77.345035][ T25] hub_event+0x2d6d/0x5150 [ 77.349508][ T25] ? __pfx_hub_event+0x10/0x10 [ 77.354291][ T25] ? __pfx_lock_acquire+0x10/0x10 [ 77.359329][ T25] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.365339][ T25] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.371696][ T25] ? process_scheduled_works+0x976/0x1840 [ 77.377431][ T25] process_scheduled_works+0xa66/0x1840 [ 77.383010][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.389011][ T25] ? assign_work+0x364/0x3d0 [ 77.393636][ T25] worker_thread+0x870/0xd30 [ 77.398254][ T25] ? __kthread_parkme+0x169/0x1d0 [ 77.403293][ T25] ? __pfx_worker_thread+0x10/0x10 [ 77.408415][ T25] kthread+0x2f0/0x390 [ 77.412508][ T25] ? __pfx_worker_thread+0x10/0x10 [ 77.417640][ T25] ? __pfx_kthread+0x10/0x10 [ 77.422245][ T25] ret_from_fork+0x4b/0x80 [ 77.426670][ T25] ? __pfx_kthread+0x10/0x10 [ 77.431275][ T25] ret_from_fork_asm+0x1a/0x30 [ 77.436064][ T25] [ 77.439440][ T25] Kernel Offset: disabled [ 77.443834][ T25] Rebooting in 86400 seconds..