last executing test programs: 10.27222511s ago: executing program 0 (id=29): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.450242912s ago: executing program 0 (id=37): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x16) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) 7.348449637s ago: executing program 0 (id=39): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x8) 7.29670327s ago: executing program 0 (id=40): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) 6.109068217s ago: executing program 1 (id=49): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x8) 6.045749435s ago: executing program 2 (id=50): io_setup(0x8, 0x0) getpid() r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 6.045616111s ago: executing program 1 (id=51): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x63, 0x2800, 0x0, 0x0}, {0x63, 0x1011, 0x0, 0x0}], 0x2}) 5.916508512s ago: executing program 1 (id=52): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) 5.898717264s ago: executing program 2 (id=53): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x16) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) 5.853168895s ago: executing program 1 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 5.74134345s ago: executing program 1 (id=55): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) poll(&(0x7f0000000500)=[{r2, 0x1}], 0x1, 0xffffffff) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10") 4.209532728s ago: executing program 0 (id=56): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}}, 0x0) fsopen(0x0, 0x0) 4.208665636s ago: executing program 2 (id=64): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf0524001c620d240f0100000000020005f29011cc03080353ee97050a2401f90a00020102092403060703020208"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) close(r4) prlimit64(r1, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 2.924229633s ago: executing program 0 (id=58): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(0x0, 0x0, 0x6) 2.751974597s ago: executing program 3 (id=59): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x800002, 0x6e}, 0x2c) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x100, 0x77}, {@private=0xa010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 2.667448679s ago: executing program 3 (id=60): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r1, 0xffffffffffffffff, 0x43) 1.740162063s ago: executing program 3 (id=61): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x68, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x60, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x2f20, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.72237927s ago: executing program 3 (id=62): io_setup(0x8, 0x0) getpid() r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.618572274s ago: executing program 3 (id=63): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) 1.524413237s ago: executing program 3 (id=65): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) 1.34957159s ago: executing program 1 (id=66): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.072185093s ago: executing program 2 (id=67): munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x3}) 968.160597ms ago: executing program 2 (id=68): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x16) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 0s ago: executing program 2 (id=69): io_setup(0x8, 0x0) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. [ 75.619772][ T5820] cgroup: Unknown subsys name 'net' [ 75.732810][ T5820] cgroup: Unknown subsys name 'cpuset' [ 75.742274][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.344962][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.040103][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.047976][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.058959][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.078987][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.081742][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.097760][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.106427][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.114633][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.114956][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.130061][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.138540][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.143787][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.146707][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.152837][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.163430][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.173728][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.181716][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.189773][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.197904][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.206284][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.773517][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 80.787296][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 80.895137][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 80.912825][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 81.045570][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.053580][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.061462][ T5833] bridge_slave_0: entered allmulticast mode [ 81.069180][ T5833] bridge_slave_0: entered promiscuous mode [ 81.090832][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.098044][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.105569][ T5831] bridge_slave_0: entered allmulticast mode [ 81.112955][ T5831] bridge_slave_0: entered promiscuous mode [ 81.138516][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.145697][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.152881][ T5833] bridge_slave_1: entered allmulticast mode [ 81.160221][ T5833] bridge_slave_1: entered promiscuous mode [ 81.167566][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.174911][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.182144][ T5831] bridge_slave_1: entered allmulticast mode [ 81.189726][ T5831] bridge_slave_1: entered promiscuous mode [ 81.311790][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.319480][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.326725][ T5832] bridge_slave_0: entered allmulticast mode [ 81.334187][ T5832] bridge_slave_0: entered promiscuous mode [ 81.343041][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.350647][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.357798][ T5832] bridge_slave_1: entered allmulticast mode [ 81.365916][ T5832] bridge_slave_1: entered promiscuous mode [ 81.373195][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.380528][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.387665][ T5830] bridge_slave_0: entered allmulticast mode [ 81.395069][ T5830] bridge_slave_0: entered promiscuous mode [ 81.405676][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.417724][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.430965][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.454031][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.461376][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.468499][ T5830] bridge_slave_1: entered allmulticast mode [ 81.476389][ T5830] bridge_slave_1: entered promiscuous mode [ 81.485263][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.579173][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.605286][ T5833] team0: Port device team_slave_0 added [ 81.613169][ T5831] team0: Port device team_slave_0 added [ 81.627825][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.640590][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.651796][ T5833] team0: Port device team_slave_1 added [ 81.660658][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.672102][ T5831] team0: Port device team_slave_1 added [ 81.784930][ T5830] team0: Port device team_slave_0 added [ 81.793651][ T5832] team0: Port device team_slave_0 added [ 81.800863][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.807833][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.835299][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.847789][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.854898][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.880889][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.893776][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.900865][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.930315][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.943800][ T5830] team0: Port device team_slave_1 added [ 81.965249][ T5832] team0: Port device team_slave_1 added [ 81.971895][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.979170][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.005139][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.073647][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.080937][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.107069][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.134546][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.141946][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.168526][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.181259][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.188221][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.214504][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.227651][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.235214][ T5835] Bluetooth: hci2: command tx timeout [ 82.235467][ T5835] Bluetooth: hci3: command tx timeout [ 82.240791][ T51] Bluetooth: hci0: command tx timeout [ 82.240934][ T51] Bluetooth: hci1: command tx timeout [ 82.253021][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.283684][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.340759][ T5831] hsr_slave_0: entered promiscuous mode [ 82.347407][ T5831] hsr_slave_1: entered promiscuous mode [ 82.373726][ T5833] hsr_slave_0: entered promiscuous mode [ 82.380504][ T5833] hsr_slave_1: entered promiscuous mode [ 82.386742][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.395087][ T5833] Cannot create hsr debugfs directory [ 82.499791][ T5830] hsr_slave_0: entered promiscuous mode [ 82.506733][ T5830] hsr_slave_1: entered promiscuous mode [ 82.513261][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.521472][ T5830] Cannot create hsr debugfs directory [ 82.543588][ T5832] hsr_slave_0: entered promiscuous mode [ 82.550633][ T5832] hsr_slave_1: entered promiscuous mode [ 82.556757][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.564912][ T5832] Cannot create hsr debugfs directory [ 83.019661][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.033079][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.044240][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.063950][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.117011][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.134441][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.147148][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.169309][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.252384][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.289970][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.301057][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.313749][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.429803][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.448081][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.460255][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.485366][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.501370][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.544698][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.578062][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.616159][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.623475][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.637827][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.645126][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.656219][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.683326][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.690549][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.701275][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.708403][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.767359][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.847242][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.886382][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.916436][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.923674][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.945471][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.952709][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.002871][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.054940][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.062162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.132280][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.139543][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.171898][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.297493][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.320145][ T5154] Bluetooth: hci3: command tx timeout [ 84.320165][ T5835] Bluetooth: hci0: command tx timeout [ 84.325589][ T5154] Bluetooth: hci2: command tx timeout [ 84.337799][ T51] Bluetooth: hci1: command tx timeout [ 84.375919][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.433470][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.545993][ T5831] veth0_vlan: entered promiscuous mode [ 84.593746][ T5831] veth1_vlan: entered promiscuous mode [ 84.612947][ T5833] veth0_vlan: entered promiscuous mode [ 84.672693][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.684263][ T5833] veth1_vlan: entered promiscuous mode [ 84.736585][ T5831] veth0_macvtap: entered promiscuous mode [ 84.771673][ T5831] veth1_macvtap: entered promiscuous mode [ 84.792434][ T5833] veth0_macvtap: entered promiscuous mode [ 84.812876][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.833146][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.843872][ T5833] veth1_macvtap: entered promiscuous mode [ 84.873168][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.902277][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.914064][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.925702][ T5830] veth0_vlan: entered promiscuous mode [ 84.934421][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.944571][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959686][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.993625][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.010099][ T5830] veth1_vlan: entered promiscuous mode [ 85.035159][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.075349][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.084841][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.120268][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.161601][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.181172][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.229695][ T5832] veth0_vlan: entered promiscuous mode [ 85.252683][ T5830] veth0_macvtap: entered promiscuous mode [ 85.274000][ T5830] veth1_macvtap: entered promiscuous mode [ 85.286675][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.296475][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.311445][ T5832] veth1_vlan: entered promiscuous mode [ 85.338483][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.361618][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.407682][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.435782][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.453277][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.465901][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.524124][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.538438][ T5832] veth0_macvtap: entered promiscuous mode [ 85.555407][ T5832] veth1_macvtap: entered promiscuous mode [ 85.581568][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.592958][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.621320][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.635724][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.672009][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.687870][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.751043][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.791576][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.826012][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.863489][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.951108][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.389613][ T5154] Bluetooth: hci2: command tx timeout [ 86.395325][ T51] Bluetooth: hci1: command tx timeout [ 86.401125][ T5835] Bluetooth: hci0: command tx timeout [ 86.583595][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.823087][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.845272][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.906111][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.927933][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.999710][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.007576][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.559280][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.798690][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 87.851710][ T5882] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 87.861385][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.870666][ T5882] usb 4-1: Product: syz [ 87.875114][ T5882] usb 4-1: Manufacturer: syz [ 87.879805][ T5882] usb 4-1: SerialNumber: syz [ 87.890453][ T5882] usb 4-1: config 0 descriptor?? [ 87.924804][ T5882] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 88.067715][ T5882] usb 4-1: setting power ON [ 88.074409][ T51] Bluetooth: hci3: command tx timeout [ 88.249885][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 88.496207][ T51] Bluetooth: hci1: command tx timeout [ 88.501834][ T51] Bluetooth: hci0: command tx timeout [ 88.507259][ T51] Bluetooth: hci2: command tx timeout [ 88.624263][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.637909][ T5882] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 88.646561][ T5882] usb 4-1: media controller created [ 88.673370][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.751039][ T5882] usb 4-1: selecting invalid altsetting 6 [ 88.768053][ T5882] usb 4-1: digital interface selection failed (-22) [ 88.787639][ T5882] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 88.813319][ T5882] usb 4-1: setting power OFF [ 88.818140][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 88.825076][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 88.848666][ T5882] (NULL device *): no alternate interface [ 88.916110][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 88.936611][ T5882] usb 4-1: USB disconnect, device number 2 [ 89.000688][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.159956][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 89.176449][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.187614][ T44] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.198326][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.209645][ T44] usb 1-1: config 0 descriptor?? [ 89.408807][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.427729][ T44] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.558679][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 89.565806][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 89.578217][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 89.590132][ T5882] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.599835][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.611102][ T5882] usb 4-1: config 0 descriptor?? [ 89.624693][ T5965] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 89.641411][ T5882] hub 4-1:0.0: USB hub found [ 90.007021][ T1212] usb 1-1: USB disconnect, device number 2 [ 90.020797][ T5882] hub 4-1:0.0: 1 port detected [ 91.085216][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.122163][ T5977] sctp: [Deprecated]: syz.2.16 (pid 5977) Use of int in maxseg socket option. [ 91.122163][ T5977] Use struct sctp_assoc_value instead [ 91.338340][ T5882] usb 4-1: USB disconnect, device number 3 [ 91.548846][ T1212] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.738755][ T1212] usb 3-1: Using ep0 maxpacket: 16 [ 91.755344][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.810813][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.894724][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.979752][ T1212] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.065511][ T1212] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.198660][ T1212] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 92.262817][ T980] cfg80211: failed to load regulatory.db [ 92.416861][ T1212] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 92.429642][ T1212] usb 3-1: Manufacturer: syz [ 92.450680][ T1212] usb 3-1: config 0 descriptor?? [ 92.718799][ T1212] rc_core: IR keymap rc-hauppauge not found [ 92.724914][ T1212] Registered IR keymap rc-empty [ 92.732093][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.748870][ T5918] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.759350][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.791118][ T1212] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 92.805282][ T1212] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 92.822558][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.848922][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.869586][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.900178][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.918703][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 92.924056][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.936516][ T5918] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 92.945814][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.955029][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.962268][ T5918] usb 1-1: Product: syz [ 92.966462][ T5918] usb 1-1: Manufacturer: syz [ 92.971257][ T5918] usb 1-1: SerialNumber: syz [ 92.979580][ T5918] usb 1-1: config 0 descriptor?? [ 92.989624][ T5918] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 92.997673][ T5918] usb 1-1: setting power ON [ 93.002700][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 93.010015][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 93.019258][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.029168][ T5918] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 93.039381][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 93.046645][ T5918] usb 1-1: media controller created [ 93.066314][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.074791][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 93.096500][ T5918] usb 1-1: selecting invalid altsetting 6 [ 93.102567][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 93.109967][ T5918] usb 1-1: digital interface selection failed (-22) [ 93.116640][ T5918] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 93.126105][ T5918] usb 1-1: setting power OFF [ 93.130839][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 93.138484][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 93.150483][ T1212] mceusb 3-1:0.0: Registered  with mce emulator interface version 1 [ 93.159039][ T1212] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 93.168657][ T5918] (NULL device *): no alternate interface [ 93.189645][ T1212] usb 3-1: USB disconnect, device number 2 [ 93.205325][ T5990] dvb-usb: bulk message failed: -22 (4/0) [ 93.246781][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 93.270531][ T5918] usb 1-1: USB disconnect, device number 3 [ 94.158363][ T5944] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.488976][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 94.557986][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.595908][ T5944] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.614578][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.786419][ T5944] usb 3-1: config 0 descriptor?? [ 95.007335][ T5944] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.208836][ T5918] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.368720][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 95.376692][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 95.388025][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 95.400313][ T5918] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.409445][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.420084][ T5918] usb 1-1: config 0 descriptor?? [ 95.426402][ T6014] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.439340][ T5918] hub 1-1:0.0: USB hub found [ 95.477435][ T5944] usb 3-1: USB disconnect, device number 3 [ 95.642870][ T5918] hub 1-1:0.0: 1 port detected [ 96.065860][ T5918] usb 1-1: USB disconnect, device number 4 [ 96.310801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 97.838729][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.009415][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 98.017373][ T5834] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.028249][ T5834] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.037483][ T5834] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 98.046895][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.057683][ T5834] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.078905][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.090248][ T5834] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.100667][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.117489][ T5834] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.127245][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.138402][ T5834] usb 2-1: config 0 descriptor?? [ 98.187243][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 98.362184][ T5834] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.574519][ T5834] usb 2-1: USB disconnect, device number 2 [ 98.597328][ T5834] usblp0: removed [ 98.601914][ T6052] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.656551][ T6052] random: crng reseeded on system resumption [ 99.113847][ T5960] IPVS: starting estimator thread 0... [ 99.233719][ T6065] IPVS: using max 32 ests per chain, 76800 per kthread [ 100.370178][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.531283][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.542292][ T5840] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.552370][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.562546][ T5840] usb 2-1: config 0 descriptor?? [ 100.777793][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 100.784025][ T5840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 100.797570][ T5840] usb 2-1: USB disconnect, device number 3 [ 101.128467][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 101.228702][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.086514][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 102.113957][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.143296][ T5840] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 102.163836][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.193042][ T5840] usb 2-1: config 0 descriptor?? [ 102.527968][ T10] IPVS: starting estimator thread 0... [ 102.620087][ T6099] IPVS: using max 29 ests per chain, 69600 per kthread [ 102.631697][ T5840] kye 0003:0458:5016.0001: control desc unexpectedly large [ 102.650199][ T5840] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0001/input/input6 [ 102.760041][ T5840] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0001/input/input7 [ 102.833730][ T5840] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 103.340021][ T5944] usb 2-1: USB disconnect, device number 4 [ 103.473100][ C0] Unknown status report in ack skb [ 104.138799][ T5944] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.308819][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 104.319645][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 104.334033][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 104.345816][ T5944] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.358526][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.373498][ T5944] usb 2-1: config 0 descriptor?? [ 104.380378][ T6115] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 104.393757][ T5944] hub 2-1:0.0: USB hub found [ 105.133133][ T5944] hub 2-1:0.0: 1 port detected [ 105.225149][ T5944] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 105.236259][ T5944] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 105.244436][ T5944] ------------[ cut here ]------------ [ 105.250009][ T5944] WARNING: kernel/workqueue.c:4208 at __flush_work+0xabc/0xbc0, CPU#1: kworker/1:6/5944 [ 105.259865][ T5944] Modules linked in: [ 105.263957][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: kworker/1:6 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 105.275658][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.285878][ T5944] Workqueue: usb_hub_wq hub_event [ 105.291039][ T5944] RIP: 0010:__flush_work+0xabc/0xbc0 [ 105.296373][ T5944] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 105.316101][ T5944] RSP: 0018:ffffc900050ee940 EFLAGS: 00010283 [ 105.323037][ T5944] RAX: ffffffff818ade3b RBX: 1ffff1100baa0454 RCX: 0000000000100000 [ 105.331798][ T5944] RDX: ffffc90017ceb000 RSI: 000000000001c936 RDI: 000000000001c937 [ 105.339865][ T5944] RBP: ffffc900050eeb10 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 105.347877][ T5944] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 0000000000000000 [ 105.356063][ T5944] R13: ffff88805d5022a0 R14: dffffc0000000000 R15: ffff88805d502288 [ 105.364128][ T5944] FS: 0000000000000000(0000) GS:ffff888125ae4000(0000) knlGS:0000000000000000 [ 105.373184][ T5944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.379863][ T5944] CR2: 000000110c36e4a6 CR3: 0000000033eee000 CR4: 00000000003526f0 [ 105.387880][ T5944] Call Trace: [ 105.391272][ T5944] [ 105.394243][ T5944] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.400684][ T5944] ? __pfx___flush_work+0x10/0x10 [ 105.405775][ T5944] ? __timer_delete_sync+0x218/0x2d0 [ 105.411180][ T5944] ? __pfx___might_resched+0x10/0x10 [ 105.416513][ T5944] ? __pfx___timer_delete_sync+0x10/0x10 [ 105.422253][ T5944] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 105.428772][ T5944] ? flush_delayed_work+0x11d/0x190 [ 105.434023][ T5944] flush_delayed_work+0x13e/0x190 [ 105.440058][ T5944] ? __pfx_flush_delayed_work+0x10/0x10 [ 105.445679][ T5944] ? _dev_err+0x10a/0x160 [ 105.450111][ T5944] hub_quiesce+0x1f0/0x330 [ 105.454585][ T5944] hub_disconnect+0xc8/0x470 [ 105.459381][ T5944] hub_probe+0x132f/0x36e0 [ 105.463878][ T5944] ? __pfx_hub_probe+0x10/0x10 [ 105.468770][ T5944] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 105.474708][ T5944] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.481172][ T5944] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 105.486775][ T5944] ? pm_runtime_enable+0x1f3/0x340 [ 105.492001][ T5944] usb_probe_interface+0x634/0xbf0 [ 105.497169][ T5944] ? __pfx_usb_probe_interface+0x10/0x10 [ 105.502913][ T5944] really_probe+0x26d/0x9a0 [ 105.507468][ T5944] __driver_probe_device+0x18c/0x2f0 [ 105.512911][ T5944] driver_probe_device+0x4f/0x430 [ 105.517980][ T5944] __device_attach_driver+0x2ce/0x530 [ 105.523473][ T5944] bus_for_each_drv+0x24e/0x2e0 [ 105.529177][ T5944] ? __pfx___device_attach_driver+0x10/0x10 [ 105.535107][ T5944] ? __pfx_bus_for_each_drv+0x10/0x10 [ 105.541367][ T5944] __device_attach+0x2b8/0x400 [ 105.546212][ T5944] ? __pfx___device_attach+0x10/0x10 [ 105.551556][ T5944] ? do_raw_spin_unlock+0x122/0x240 [ 105.556798][ T5944] bus_probe_device+0x185/0x260 [ 105.561744][ T5944] device_add+0x7b6/0xb50 [ 105.566105][ T5944] usb_set_configuration+0x1a87/0x20e0 [ 105.571700][ T5944] usb_generic_driver_probe+0x8d/0x150 [ 105.577199][ T5944] usb_probe_device+0x1c4/0x390 [ 105.582133][ T5944] ? __pfx_usb_probe_device+0x10/0x10 [ 105.587535][ T5944] really_probe+0x26d/0x9a0 [ 105.592096][ T5944] __driver_probe_device+0x18c/0x2f0 [ 105.597453][ T5944] driver_probe_device+0x4f/0x430 [ 105.602597][ T5944] __device_attach_driver+0x2ce/0x530 [ 105.608005][ T5944] bus_for_each_drv+0x24e/0x2e0 [ 105.612915][ T5944] ? __pfx___device_attach_driver+0x10/0x10 [ 105.618902][ T5944] ? __pfx_bus_for_each_drv+0x10/0x10 [ 105.624326][ T5944] __device_attach+0x2b8/0x400 [ 105.629967][ T5944] ? __pfx___device_attach+0x10/0x10 [ 105.635923][ T5944] ? do_raw_spin_unlock+0x122/0x240 [ 105.641256][ T5944] bus_probe_device+0x185/0x260 [ 105.646156][ T5944] device_add+0x7b6/0xb50 [ 105.650584][ T5944] usb_new_device+0xa39/0x16f0 [ 105.655492][ T5944] ? __pfx_usb_new_device+0x10/0x10 [ 105.660817][ T5944] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.666046][ T5944] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.671418][ T5944] hub_event+0x2941/0x4a00 [ 105.675891][ T5944] ? __pfx_hub_event+0x10/0x10 [ 105.680747][ T5944] ? process_scheduled_works+0x9ef/0x17b0 [ 105.686513][ T5944] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.691811][ T5944] ? process_scheduled_works+0x9ef/0x17b0 [ 105.697565][ T5944] ? process_scheduled_works+0x9ef/0x17b0 [ 105.703370][ T5944] process_scheduled_works+0xae1/0x17b0 [ 105.709051][ T5944] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.715095][ T5944] worker_thread+0x8a0/0xda0 [ 105.719808][ T5944] kthread+0x70e/0x8a0 [ 105.723915][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 105.729106][ T5944] ? __pfx_kthread+0x10/0x10 [ 105.734249][ T5944] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.740139][ T5944] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.745381][ T5944] ? __pfx_kthread+0x10/0x10 [ 105.750087][ T5944] ret_from_fork+0x3fc/0x770 [ 105.754731][ T5944] ? __pfx_ret_from_fork+0x10/0x10 [ 105.759962][ T5944] ? __switch_to_asm+0x39/0x70 [ 105.764760][ T5944] ? __switch_to_asm+0x33/0x70 [ 105.769619][ T5944] ? __pfx_kthread+0x10/0x10 [ 105.774258][ T5944] ret_from_fork_asm+0x1a/0x30 [ 105.779123][ T5944] [ 105.782179][ T5944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.789482][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: kworker/1:6 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 105.801041][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.811106][ T5944] Workqueue: usb_hub_wq hub_event [ 105.816166][ T5944] Call Trace: [ 105.819450][ T5944] [ 105.822385][ T5944] dump_stack_lvl+0x99/0x250 [ 105.826989][ T5944] ? __asan_memcpy+0x40/0x70 [ 105.831618][ T5944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.836829][ T5944] ? __pfx__printk+0x10/0x10 [ 105.841449][ T5944] panic+0x2db/0x790 [ 105.845355][ T5944] ? __pfx_panic+0x10/0x10 [ 105.849783][ T5944] ? ret_from_fork_asm+0x1a/0x30 [ 105.854738][ T5944] __warn+0x334/0x4c0 [ 105.858801][ T5944] ? __flush_work+0xabc/0xbc0 [ 105.863526][ T5944] ? __flush_work+0xabc/0xbc0 [ 105.868201][ T5944] report_bug+0x2be/0x4f0 [ 105.872533][ T5944] ? __flush_work+0xabc/0xbc0 [ 105.877226][ T5944] ? __flush_work+0xabc/0xbc0 [ 105.881920][ T5944] ? __flush_work+0xabe/0xbc0 [ 105.886622][ T5944] handle_bug+0x84/0x160 [ 105.890883][ T5944] exc_invalid_op+0x1a/0x50 [ 105.895393][ T5944] asm_exc_invalid_op+0x1a/0x20 [ 105.900246][ T5944] RIP: 0010:__flush_work+0xabc/0xbc0 [ 105.905532][ T5944] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 105.925153][ T5944] RSP: 0018:ffffc900050ee940 EFLAGS: 00010283 [ 105.931227][ T5944] RAX: ffffffff818ade3b RBX: 1ffff1100baa0454 RCX: 0000000000100000 [ 105.939209][ T5944] RDX: ffffc90017ceb000 RSI: 000000000001c936 RDI: 000000000001c937 [ 105.947214][ T5944] RBP: ffffc900050eeb10 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 105.955195][ T5944] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 0000000000000000 [ 105.963184][ T5944] R13: ffff88805d5022a0 R14: dffffc0000000000 R15: ffff88805d502288 [ 105.971170][ T5944] ? __flush_work+0xabb/0xbc0 [ 105.975870][ T5944] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.982214][ T5944] ? __pfx___flush_work+0x10/0x10 [ 105.987256][ T5944] ? __timer_delete_sync+0x218/0x2d0 [ 105.992643][ T5944] ? __pfx___might_resched+0x10/0x10 [ 105.997942][ T5944] ? __pfx___timer_delete_sync+0x10/0x10 [ 106.003668][ T5944] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 106.009308][ T5944] ? flush_delayed_work+0x11d/0x190 [ 106.014628][ T5944] flush_delayed_work+0x13e/0x190 [ 106.019660][ T5944] ? __pfx_flush_delayed_work+0x10/0x10 [ 106.025212][ T5944] ? _dev_err+0x10a/0x160 [ 106.029561][ T5944] hub_quiesce+0x1f0/0x330 [ 106.033992][ T5944] hub_disconnect+0xc8/0x470 [ 106.038612][ T5944] hub_probe+0x132f/0x36e0 [ 106.043063][ T5944] ? __pfx_hub_probe+0x10/0x10 [ 106.047830][ T5944] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 106.053727][ T5944] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 106.060075][ T5944] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 106.065655][ T5944] ? pm_runtime_enable+0x1f3/0x340 [ 106.070777][ T5944] usb_probe_interface+0x634/0xbf0 [ 106.075904][ T5944] ? __pfx_usb_probe_interface+0x10/0x10 [ 106.081554][ T5944] really_probe+0x26d/0x9a0 [ 106.086081][ T5944] __driver_probe_device+0x18c/0x2f0 [ 106.091394][ T5944] driver_probe_device+0x4f/0x430 [ 106.096436][ T5944] __device_attach_driver+0x2ce/0x530 [ 106.101820][ T5944] bus_for_each_drv+0x24e/0x2e0 [ 106.106691][ T5944] ? __pfx___device_attach_driver+0x10/0x10 [ 106.112594][ T5944] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.117974][ T5944] __device_attach+0x2b8/0x400 [ 106.122764][ T5944] ? __pfx___device_attach+0x10/0x10 [ 106.128066][ T5944] ? do_raw_spin_unlock+0x122/0x240 [ 106.133267][ T5944] bus_probe_device+0x185/0x260 [ 106.138126][ T5944] device_add+0x7b6/0xb50 [ 106.142453][ T5944] usb_set_configuration+0x1a87/0x20e0 [ 106.147935][ T5944] usb_generic_driver_probe+0x8d/0x150 [ 106.153394][ T5944] usb_probe_device+0x1c4/0x390 [ 106.158254][ T5944] ? __pfx_usb_probe_device+0x10/0x10 [ 106.163624][ T5944] really_probe+0x26d/0x9a0 [ 106.168132][ T5944] __driver_probe_device+0x18c/0x2f0 [ 106.173415][ T5944] driver_probe_device+0x4f/0x430 [ 106.178449][ T5944] __device_attach_driver+0x2ce/0x530 [ 106.183819][ T5944] bus_for_each_drv+0x24e/0x2e0 [ 106.188684][ T5944] ? __pfx___device_attach_driver+0x10/0x10 [ 106.194587][ T5944] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.199976][ T5944] __device_attach+0x2b8/0x400 [ 106.204741][ T5944] ? __pfx___device_attach+0x10/0x10 [ 106.210038][ T5944] ? do_raw_spin_unlock+0x122/0x240 [ 106.215252][ T5944] bus_probe_device+0x185/0x260 [ 106.220119][ T5944] device_add+0x7b6/0xb50 [ 106.224462][ T5944] usb_new_device+0xa39/0x16f0 [ 106.229250][ T5944] ? __pfx_usb_new_device+0x10/0x10 [ 106.234459][ T5944] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.239656][ T5944] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.244860][ T5944] hub_event+0x2941/0x4a00 [ 106.249354][ T5944] ? __pfx_hub_event+0x10/0x10 [ 106.254128][ T5944] ? process_scheduled_works+0x9ef/0x17b0 [ 106.259863][ T5944] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.265068][ T5944] ? process_scheduled_works+0x9ef/0x17b0 [ 106.270794][ T5944] ? process_scheduled_works+0x9ef/0x17b0 [ 106.276534][ T5944] process_scheduled_works+0xae1/0x17b0 [ 106.282136][ T5944] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.288131][ T5944] worker_thread+0x8a0/0xda0 [ 106.292755][ T5944] kthread+0x70e/0x8a0 [ 106.296833][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 106.301945][ T5944] ? __pfx_kthread+0x10/0x10 [ 106.306546][ T5944] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.311746][ T5944] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.316941][ T5944] ? __pfx_kthread+0x10/0x10 [ 106.321538][ T5944] ret_from_fork+0x3fc/0x770 [ 106.326159][ T5944] ? __pfx_ret_from_fork+0x10/0x10 [ 106.331288][ T5944] ? __switch_to_asm+0x39/0x70 [ 106.336052][ T5944] ? __switch_to_asm+0x33/0x70 [ 106.340814][ T5944] ? __pfx_kthread+0x10/0x10 [ 106.345412][ T5944] ret_from_fork_asm+0x1a/0x30 [ 106.350199][ T5944] [ 106.353559][ T5944] Kernel Offset: disabled [ 106.357887][ T5944] Rebooting in 86400 seconds..