last executing test programs: 31.118015519s ago: executing program 3 (id=423): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) sendfile(r0, r0, 0x0, 0xfffc) 31.017561474s ago: executing program 3 (id=424): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 30.910292601s ago: executing program 3 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x9, 0x7a61}}, 0x28) 30.815837966s ago: executing program 3 (id=427): mount$9p_fd(0x0, 0x0, 0x0, 0x392c090, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 30.666432665s ago: executing program 3 (id=429): syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000023c1b20ac054a02c3ab0102030109022b0001000010000904110002038b0200090505039705003ce7070588"], 0x0) 30.326166635s ago: executing program 3 (id=430): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @f={0x6, 0x2, 0x0, 0x2, 0xb, 0x9, 0x4, {0x88, 0xc8, "6e3680b4b5970e6ac115e4664c816e8c3b7ad1d4ce3b4ffa851ec12b2cdb641cda3eb15141682243e2913f61768bb3dbeeedd25900bbae552a7becd9f176ddab972b59f4407cfeef1156854dde91dbdbe495acc738cfeaccf39f3cb67154be70c15621c5735d1eb69d5ae56355c24796739845fdc51c25732bdc365bd4563976e6d4e0de20df46c65c19322348f86a6067fe392040a4512e8bd75c2454fb1a9df8d32eca53b36c8229b21583048681099acb285127bc01adc520847825829e702a43a6903d4ca402"}, 0x1, 0x1, 0x2, 0xff}}, 0xd9) 29.946629057s ago: executing program 32 (id=430): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @f={0x6, 0x2, 0x0, 0x2, 0xb, 0x9, 0x4, {0x88, 0xc8, "6e3680b4b5970e6ac115e4664c816e8c3b7ad1d4ce3b4ffa851ec12b2cdb641cda3eb15141682243e2913f61768bb3dbeeedd25900bbae552a7becd9f176ddab972b59f4407cfeef1156854dde91dbdbe495acc738cfeaccf39f3cb67154be70c15621c5735d1eb69d5ae56355c24796739845fdc51c25732bdc365bd4563976e6d4e0de20df46c65c19322348f86a6067fe392040a4512e8bd75c2454fb1a9df8d32eca53b36c8229b21583048681099acb285127bc01adc520847825829e702a43a6903d4ca402"}, 0x1, 0x1, 0x2, 0xff}}, 0xd9) 5.127551653s ago: executing program 2 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.940675364s ago: executing program 2 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bfca3958f2206cdc7095682c14f10ba1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b8ee8d414e757b6cce3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b5e749bf5271efd93ce76e67758fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29142a369b14607b5e48987541ed2cb5a3512a877da93174aa5bf4ee9fbf1bd0f42d221d7cbfec3feff2ef0a1d3316421ee72754aea5b5abb253295c2d87aeb468bd4f73d391c07a4831b4b0bf962e6cfa0f0445ba37524c8c062c4787f9bff922b012e833c08ff0c365c289657b88ff8aa4c26260956f6e9b640f90cacb464007c3717fd9ec6d618bd3ff950b9dc4d7f9c94205db3b47bdded6a47911088f1a1d06649c3ac08c7f6194604786d0a1fe96667fcf082caac73dda1b9c0dda7dd90c38107b8a016132b63ec21a988cc2788efc9d5f6fbfd7ddbe800a5382bbc4b2624a4b9976b2c5f4c611e88370a5dff77de5d0960a3bd91321a8e0b27a48cbc2607a4c6c406cd4ac5d5a18ba185ad620beeb77f1c6bc1697151600bd3491d5a8358ef635d50d54af5b24d11d52eb75c970ab41ee0afbd2a01d249fabacc95695efc923da1800f1439d385bbb00ac0d7c8043f4e2661ffec2eafbac5b483885d76ff5b2358986923a5fa8aad707a0aba60e4fae6dd3decf94ead2dfb52fd0be70d5d14a5f6c6a6786b0ce6a5eeeae8fb8c6ed627c348d9bf64a7aa47e02b8dd67c12141bfd5efb2b05501f57bcf3f0660dd63cb4f4912fd386647f9a9e32f5e7f00f21063f4d262bc29e8a4edd8cba7ee7fd9cf4a21cb93a9eb232acbce357044d3c99154e4ba0ed25e2ecbad23b08b2073a8a7de2c6dac3cfcab3fd33b082ddc278776963c5ad1fa244360716dc571d6e95a767ad6bf69d4c8d132155ad94b610d4a42161e7532dd5fe80556dc149d70f002ce4006bbac4549e4b48f8360e1b2353cf636ca348db1c5e8335066efe415560683c7b5eadcffe56a58093756d20609a1ea83831a430818d1e5090b2608290469eede3f81e0e4f402b63c2b54374af37aafcae614bb3936cf952f2f944f5740c4c2c629a7935eb86abb14cfcdde8b371119f1ccda5850d8c6194775b8a5f8de7000000000000a1c7e2233be2fe4254f6a9c1fc414252a4ceefd417f37b4a1507da7b4d870f3fea9757a8c24e6a72e9e3a41da13496e27952b373c776a939540527c01661ed7d0026ad4b6ee543cfac2b7f48916212dddb2eca1e2ab0861ab94a693f6b9fc9a9c2ec231588ecef2907c47fe1344eee20d3c1024ebbfbe50d6bf4543db64f8cc0d82c532d75479ad8afe72cffbd569f448d6f2f88d88b9f12ce5b56cb0731ee8e5c70598f5608726a0a5a7d57352a996722"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b70200001000b15cbfa300000000000007030000f8ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) close(0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x53}, 0x0) 4.750330655s ago: executing program 2 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 4.531960458s ago: executing program 2 (id=574): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) accept$ax25(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000328bd7000fbdbdf2507000000340001", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="63378b3b4170c54c100002b90c43"], 0x48}, 0x1, 0x0, 0x0, 0x200488a0}, 0x40840) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.258472093s ago: executing program 2 (id=577): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xd95, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0xc, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="05", 0x1}, {&(0x7f0000000440)="9f336d70bf41f19e", 0x8}], 0x2}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.603151041s ago: executing program 2 (id=581): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="401704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x4, "25dd0e95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="003104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x40, 0x3, 0x4, "9789aa8e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="20fb08"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000980)={0x60, 0x7, 0x4, "1497711d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000003c0)={0x20, 0xf, 0x4, "bdcb3f06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x20, 0x7, 0x4, "bf4a0520"}, 0x0, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x40, 0x31, 0x4, "df2ba088"}, 0x0, 0x0, &(0x7f0000000480), 0x0}) 2.668679816s ago: executing program 0 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x5, 0x5, 0x5, 0xb}]}) 2.439041649s ago: executing program 0 (id=593): socket$inet6(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.227611601s ago: executing program 0 (id=595): syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x6, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 2.017609973s ago: executing program 1 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r0], 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000000701"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r2}, 0x38) 1.814846535s ago: executing program 1 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 1.775436217s ago: executing program 4 (id=600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c356020d0000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x60}, 0x2d) 1.587095188s ago: executing program 4 (id=601): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x46}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000780)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r0, @ANYBLOB="00000000000000006100100300000000180000000000000000000000000000009500000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008100000b703000000000000850000009e00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x4}, 0x94) 1.572710439s ago: executing program 1 (id=602): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "02823f6bd900000000000097efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.356568681s ago: executing program 1 (id=603): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)}, 0x5}], 0x1, 0x40010000, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="ac141411e0"], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.298284165s ago: executing program 4 (id=604): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x40181) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 824.372922ms ago: executing program 4 (id=605): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a00fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 612.544064ms ago: executing program 4 (id=606): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) accept$ax25(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x8080) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000328bd7000fbdbdf2507000000340001", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="63378b3b4170c54c100002b90c43"], 0x48}, 0x1, 0x0, 0x0, 0x200488a0}, 0x40840) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 586.297016ms ago: executing program 0 (id=607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) 305.394642ms ago: executing program 0 (id=608): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) 304.084672ms ago: executing program 4 (id=609): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600), 0x2a) 187.362989ms ago: executing program 1 (id=610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 92.564705ms ago: executing program 0 (id=611): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 0s ago: executing program 1 (id=612): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 80.229461][ T5757] cgroup: Unknown subsys name 'net' [ 80.349521][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.083541][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.882887][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.891923][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.900204][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.908608][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.917636][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.925165][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.951974][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.961018][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.970170][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.978758][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.986617][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.994130][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.003979][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.017100][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.030710][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.033058][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.041673][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.047769][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.061960][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.064392][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.077318][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.077631][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.091778][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.093474][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.571495][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 84.641791][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 84.662520][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 84.834585][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.843106][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.851669][ T5768] bridge_slave_0: entered allmulticast mode [ 84.858949][ T5768] bridge_slave_0: entered promiscuous mode [ 84.885144][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 84.904030][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.911343][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.918645][ T5768] bridge_slave_1: entered allmulticast mode [ 84.926620][ T5768] bridge_slave_1: entered promiscuous mode [ 84.988903][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.996519][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.005636][ T5771] bridge_slave_0: entered allmulticast mode [ 85.013247][ T5771] bridge_slave_0: entered promiscuous mode [ 85.032856][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.040360][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.047877][ T5769] bridge_slave_0: entered allmulticast mode [ 85.054988][ T5769] bridge_slave_0: entered promiscuous mode [ 85.064191][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.071718][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.079039][ T5769] bridge_slave_1: entered allmulticast mode [ 85.086751][ T5769] bridge_slave_1: entered promiscuous mode [ 85.105725][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.113236][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.121032][ T5771] bridge_slave_1: entered allmulticast mode [ 85.128429][ T5771] bridge_slave_1: entered promiscuous mode [ 85.138372][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.192090][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.215384][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.227873][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.268309][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.298269][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.312865][ T5768] team0: Port device team_slave_0 added [ 85.375737][ T5768] team0: Port device team_slave_1 added [ 85.397112][ T5769] team0: Port device team_slave_0 added [ 85.406454][ T5769] team0: Port device team_slave_1 added [ 85.413001][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.420624][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.427872][ T5770] bridge_slave_0: entered allmulticast mode [ 85.435251][ T5770] bridge_slave_0: entered promiscuous mode [ 85.445950][ T5771] team0: Port device team_slave_0 added [ 85.455931][ T5771] team0: Port device team_slave_1 added [ 85.506802][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.515048][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.522721][ T5770] bridge_slave_1: entered allmulticast mode [ 85.529804][ T5770] bridge_slave_1: entered promiscuous mode [ 85.537820][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.545833][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.572822][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.596627][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.604431][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.631579][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.663314][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.670819][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.696955][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.714888][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.722008][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.748228][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.765193][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.774267][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.800652][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.813782][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.820900][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.847075][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.879814][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.932019][ T5768] hsr_slave_0: entered promiscuous mode [ 85.938566][ T5768] hsr_slave_1: entered promiscuous mode [ 85.948452][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.027298][ T5770] team0: Port device team_slave_0 added [ 86.048694][ T5770] team0: Port device team_slave_1 added [ 86.060511][ T5769] hsr_slave_0: entered promiscuous mode [ 86.066875][ T5769] hsr_slave_1: entered promiscuous mode [ 86.072959][ T5779] Bluetooth: hci0: command tx timeout [ 86.078925][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.079057][ T5783] Bluetooth: hci1: command tx timeout [ 86.087779][ T5769] Cannot create hsr debugfs directory [ 86.133904][ T5771] hsr_slave_0: entered promiscuous mode [ 86.140975][ T5771] hsr_slave_1: entered promiscuous mode [ 86.147210][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.150793][ T5779] Bluetooth: hci2: command tx timeout [ 86.155346][ T5771] Cannot create hsr debugfs directory [ 86.161841][ T5783] Bluetooth: hci3: command tx timeout [ 86.207718][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.215230][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.241942][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.255306][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.262402][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.288419][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.462304][ T5770] hsr_slave_0: entered promiscuous mode [ 86.469171][ T5770] hsr_slave_1: entered promiscuous mode [ 86.475670][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.483517][ T5770] Cannot create hsr debugfs directory [ 86.790921][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.817421][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.829038][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.839531][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.908733][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.927834][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.940353][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.954774][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.055776][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.074020][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.088142][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.099430][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.309479][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.326233][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.357988][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.384494][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.415750][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.495312][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.572682][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.580146][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.629562][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.636890][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.676313][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.754903][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.776873][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.819826][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.861816][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.869063][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.926962][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.934259][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.949645][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.957027][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.993620][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.000850][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.151567][ T5783] Bluetooth: hci1: command tx timeout [ 88.157046][ T5783] Bluetooth: hci0: command tx timeout [ 88.172044][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.231229][ T5779] Bluetooth: hci2: command tx timeout [ 88.236891][ T5783] Bluetooth: hci3: command tx timeout [ 88.259571][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.314416][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.321662][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.346485][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.366739][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.374053][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.507036][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.607401][ T5768] veth0_vlan: entered promiscuous mode [ 88.669423][ T5768] veth1_vlan: entered promiscuous mode [ 88.697161][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.808401][ T5768] veth0_macvtap: entered promiscuous mode [ 88.826850][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.843582][ T5768] veth1_macvtap: entered promiscuous mode [ 88.911219][ T5769] veth0_vlan: entered promiscuous mode [ 88.939793][ T5769] veth1_vlan: entered promiscuous mode [ 88.967183][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.989164][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.000621][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.021034][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.031818][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.041375][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.050307][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.164779][ T5771] veth0_vlan: entered promiscuous mode [ 89.197691][ T5770] veth0_vlan: entered promiscuous mode [ 89.244061][ T5771] veth1_vlan: entered promiscuous mode [ 89.266471][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.276358][ T5769] veth0_macvtap: entered promiscuous mode [ 89.285334][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.317271][ T5770] veth1_vlan: entered promiscuous mode [ 89.344508][ T5769] veth1_macvtap: entered promiscuous mode [ 89.362688][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.377261][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.388388][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.389407][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.411775][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.458468][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.470754][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.502605][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.564734][ T5771] veth0_macvtap: entered promiscuous mode [ 89.604964][ T5770] veth0_macvtap: entered promiscuous mode [ 89.622731][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.652366][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.662642][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.672954][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.688389][ T5859] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.705358][ T5771] veth1_macvtap: entered promiscuous mode [ 89.718114][ T5770] veth1_macvtap: entered promiscuous mode [ 89.772335][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.784096][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.803059][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.817598][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.852283][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.951129][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.971791][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.991307][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.019967][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.032431][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.045210][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.057982][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.080928][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.090761][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125553][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.145902][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.165042][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.194178][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.204703][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.217052][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.232071][ T5783] Bluetooth: hci0: command tx timeout [ 90.237561][ T5783] Bluetooth: hci1: command tx timeout [ 90.244840][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.278059][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.295070][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.305219][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.316399][ T5783] Bluetooth: hci3: command tx timeout [ 90.322032][ T5779] Bluetooth: hci2: command tx timeout [ 90.328054][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.338096][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.348904][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.360731][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.475903][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.486003][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.493749][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.493889][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.493919][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.493955][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.560299][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.570803][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.694176][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.703793][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.707042][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.738880][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.892088][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.918218][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.986817][ T5871] syz.3.5[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.029652][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.051321][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.123133][ T5871] loop3: detected capacity change from 0 to 1024 [ 91.169081][ T5871] ======================================================= [ 91.169081][ T5871] WARNING: The mand mount option has been deprecated and [ 91.169081][ T5871] and is ignored by this kernel. Remove the mand [ 91.169081][ T5871] option from the mount to silence this warning. [ 91.169081][ T5871] ======================================================= [ 91.179577][ T5874] loop2: detected capacity change from 0 to 1024 [ 91.255834][ T5874] EXT4-fs: Ignoring removed orlov option [ 91.265425][ T5874] EXT4-fs: Ignoring removed bh option [ 91.275746][ T5871] EXT4-fs: Ignoring removed orlov option [ 91.285111][ T5871] EXT4-fs: Ignoring removed bh option [ 91.514320][ T5874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.534217][ T5871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.320018][ T5783] Bluetooth: hci1: command tx timeout [ 92.325538][ T5783] Bluetooth: hci0: command tx timeout [ 92.365458][ T5887] loop0: detected capacity change from 0 to 1024 [ 92.488631][ T23] cfg80211: failed to load regulatory.db [ 92.501656][ T5887] EXT4-fs: Ignoring removed orlov option [ 92.507436][ T5887] EXT4-fs: Ignoring removed bh option [ 92.513162][ T5779] Bluetooth: hci3: command tx timeout [ 92.513188][ T5783] Bluetooth: hci2: command tx timeout [ 93.502168][ T5887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.530988][ T5894] loop1: detected capacity change from 0 to 1024 [ 93.539561][ T5894] EXT4-fs: Ignoring removed orlov option [ 93.555830][ T5894] EXT4-fs: Ignoring removed bh option [ 93.582033][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.661297][ T5894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.071328][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.463813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.473216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.610233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.619564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.638792][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.668305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.700128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.830714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.841838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.852405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.865848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 97.380022][ T5779] Bluetooth: hci3: command tx timeout [ 97.785832][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.763270][ T5935] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.572059][ T6013] 9pnet_fd: Insufficient options for proto=fd [ 114.450728][ T6032] 9pnet: Found fid 0 not clunked [ 129.734103][ T6132] 9pnet_fd: Insufficient options for proto=fd [ 133.196233][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.203032][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.639990][ T5783] Bluetooth: hci3: command tx timeout [ 151.643669][ T6260] 9pnet_fd: Insufficient options for proto=fd [ 174.235694][ T6381] 9pnet_fd: Insufficient options for proto=fd [ 179.141086][ T6412] 9pnet_fd: Insufficient options for proto=fd [ 181.032764][ T5783] Bluetooth: hci3: command tx timeout [ 188.103913][ T6486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.144'. [ 195.027093][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.035956][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.845311][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 207.055626][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 207.063918][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 207.071616][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 207.077705][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 207.812373][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 208.522746][ T6612] 9pnet_fd: Insufficient options for proto=fd [ 224.177654][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 226.682461][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 232.819535][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 240.157893][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 248.158085][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 256.075369][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.083452][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.967411][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 267.327629][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 277.233519][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 282.288413][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 292.407078][ T7068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.286'. [ 298.757828][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 305.669851][ C1] sched: RT throttling activated [ 306.830549][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 308.305292][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 313.447494][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 317.527248][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.533784][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.610481][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 335.019430][ T7297] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 337.270571][ T7315] syz_tun: entered allmulticast mode [ 338.697472][ T7339] syz_tun: entered allmulticast mode [ 338.846528][ T7339] dvmrp8: entered allmulticast mode [ 339.103877][ T7338] syz_tun: left allmulticast mode [ 340.570110][ T7371] netlink: 5 bytes leftover after parsing attributes in process `syz.3.368'. [ 340.589627][ T7371] 0{X: renamed from gretap0 (while UP) [ 340.626353][ T7371] 0{X: entered allmulticast mode [ 340.654282][ T7371] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 341.788270][ T7399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.800417][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 342.167908][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 342.199834][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.230088][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.275562][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 342.319695][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 342.354148][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 342.399574][ T9] usb 1-1: Manufacturer: syz [ 342.447992][ T9] usb 1-1: config 0 descriptor?? [ 343.051898][ T9] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1 [ 343.085813][ T9] appleir 0003:05AC:8243.0001: parse failed [ 343.106328][ T9] appleir: probe of 0003:05AC:8243.0001 failed with error -22 [ 343.246337][ T5773] usb 1-1: USB disconnect, device number 2 [ 344.413157][ T7462] syzkaller0: entered promiscuous mode [ 344.422796][ T7462] syzkaller0: entered allmulticast mode [ 345.630904][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 345.840579][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 345.854194][ T9] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 345.868458][ T9] usb 3-1: config 0 has no interface number 0 [ 345.883019][ T9] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 345.905668][ T9] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 345.932929][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 345.949923][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.961232][ T9] usb 3-1: Product: syz [ 345.965482][ T9] usb 3-1: Manufacturer: syz [ 345.970726][ T9] usb 3-1: SerialNumber: syz [ 345.981455][ T9] usb 3-1: config 0 descriptor?? [ 345.987319][ T7496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 346.015577][ T7496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 346.057721][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 346.501686][ T5773] usb 3-1: USB disconnect, device number 2 [ 347.425348][ T7601] dvmrp8: entered allmulticast mode [ 347.520484][ T6813] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 347.744991][ T6813] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.758188][ T6813] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.770512][ T6813] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.799974][ T6813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.808118][ T6813] usb 3-1: SerialNumber: syz [ 347.851718][ T7607] tipc: Started in network mode [ 347.856878][ T7607] tipc: Node identity 6ea4f11f0ffe, cluster identity 4711 [ 347.865503][ T7607] tipc: Enabled bearer , priority 0 [ 347.876292][ T7606] tipc: Resetting bearer [ 348.043857][ T5768] syz-executor (5768) used greatest stack depth: 20872 bytes left [ 348.066942][ T6813] usb 3-1: 0:2 : does not exist [ 348.129093][ T6813] usb 3-1: USB disconnect, device number 3 [ 348.204308][ T7533] udevd[7533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.129314][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.139261][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.148039][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.174960][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.184276][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 349.193119][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.331024][ T7629] syz.2.436 uses obsolete (PF_INET,SOCK_PACKET) [ 350.800273][ T7606] tipc: Disabling bearer [ 350.823164][ T5773] tipc: Node number set to 1633349919 [ 350.918670][ T7560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.097137][ T7560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.138275][ T7648] syzkaller0: entered promiscuous mode [ 351.144116][ T7648] syzkaller0: entered allmulticast mode [ 351.203602][ T7560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.276444][ T5785] Bluetooth: hci0: command tx timeout [ 351.304513][ T7560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.340159][ T6813] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 351.550852][ T6813] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 351.596388][ T6813] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 351.623900][ T7624] chnl_net:caif_netlink_parms(): no params data found [ 351.629405][ T6813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.650418][ T6813] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.659637][ T6813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.711324][ T6813] usb 3-1: config 0 descriptor?? [ 351.718044][ T7652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 351.796780][ T6813] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 352.160540][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.167752][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.190153][ T7624] bridge_slave_0: entered allmulticast mode [ 352.197761][ T7624] bridge_slave_0: entered promiscuous mode [ 352.251004][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.258326][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.300222][ T7624] bridge_slave_1: entered allmulticast mode [ 352.307834][ T7624] bridge_slave_1: entered promiscuous mode [ 352.394243][ T7624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.445094][ T7624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.625345][ T7624] team0: Port device team_slave_0 added [ 352.646383][ T7624] team0: Port device team_slave_1 added [ 352.822137][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.839547][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.866246][ T7624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.908249][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.938317][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.967046][ T7624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.020719][ T7560] dvmrp8 (unregistering): left allmulticast mode [ 353.368472][ T5785] Bluetooth: hci0: command tx timeout [ 353.427939][ T7624] hsr_slave_0: entered promiscuous mode [ 353.435958][ T7624] hsr_slave_1: entered promiscuous mode [ 353.452908][ T7624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.469940][ T7624] Cannot create hsr debugfs directory [ 353.680364][ T7560] hsr_slave_0: left promiscuous mode [ 353.694949][ T7560] hsr_slave_1: left promiscuous mode [ 353.704541][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.724603][ T7560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.736288][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.754721][ T7560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.764938][ T7560] bridge_slave_1: left allmulticast mode [ 353.773922][ T7560] bridge_slave_1: left promiscuous mode [ 353.786262][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.823757][ T7560] bridge_slave_0: left allmulticast mode [ 353.838340][ T7560] bridge_slave_0: left promiscuous mode [ 353.848418][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.910800][ T7560] veth1_macvtap: left promiscuous mode [ 353.917711][ T7560] veth0_macvtap: left promiscuous mode [ 353.931977][ T7560] veth1_vlan: left promiscuous mode [ 353.938033][ T7560] veth0_vlan: left promiscuous mode [ 354.032822][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 354.245168][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 354.252996][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 354.278144][ T8] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.308212][ T8] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 354.346799][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 354.366878][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 354.389879][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.413880][ T8] usb 2-1: config 0 descriptor?? [ 354.799569][ T5892] usb 3-1: USB disconnect, device number 4 [ 354.843914][ T8] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 354.864380][ T8] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 354.895790][ T8] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 354.906078][ T8] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 354.928974][ T8] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 354.976329][ T8] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID v0.0b Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 355.051962][ T5892] usb 2-1: USB disconnect, device number 2 [ 355.071534][ T7745] loop7: detected capacity change from 0 to 7 [ 355.108484][ T7745] Dev loop7: unable to read RDB block 7 [ 355.135804][ T7745] loop7: unable to read partition table [ 355.151064][ T7745] loop7: partition table beyond EOD, truncated [ 355.167661][ T7745] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 355.212297][ T7743] fido_id[7743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 355.430032][ T5785] Bluetooth: hci0: command tx timeout [ 355.595056][ T7560] team0 (unregistering): Port device team_slave_1 removed [ 355.685477][ T7560] team0 (unregistering): Port device team_slave_0 removed [ 355.760312][ T7560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.868197][ T7560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.269725][ T7560] bond0 (unregistering): Released all slaves [ 356.807506][ T7624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.887712][ T7624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.932727][ T7624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.211729][ T7624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.518023][ T5785] Bluetooth: hci0: command tx timeout [ 357.586959][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.647770][ T7793] Zero length message leads to an empty skb [ 357.685597][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.725669][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.732928][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.817109][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.824356][ T7560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.870000][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 358.061774][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 358.089275][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 358.108025][ T8] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 358.111048][ T5819] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 358.120409][ T8] usb 1-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 62 [ 358.141435][ T6813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 358.171548][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.178302][ T8] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 358.215490][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.240670][ T8] usb 1-1: config 0 descriptor?? [ 358.336605][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.356730][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.377427][ T7624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.384681][ T5819] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 358.392858][ T6813] usb 3-1: Using ep0 maxpacket: 8 [ 358.406365][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.427356][ T6813] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 358.447615][ T6813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.454671][ T5819] usb 2-1: config 0 descriptor?? [ 358.506766][ T6813] usb 3-1: config 0 descriptor?? [ 358.711824][ T8] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 358.737647][ T8] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 358.747044][ T8] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 358.765641][ T8] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 358.778354][ T8] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 358.810536][ T8] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.04 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 358.911258][ T8] hid-thrustmaster 0003:044F:B65D.0003: setup data couldn't be sent [ 358.919719][ C0] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 358.926663][ T5819] savu 0003:1E7D:2D5A.0004: collection stack underflow [ 358.960738][ T6813] cypress 0003:04B4:0001.0005: unknown main item tag 0x0 [ 358.967193][ T5819] savu 0003:1E7D:2D5A.0004: item 0 0 0 12 parsing failed [ 358.967887][ T6813] cypress 0003:04B4:0001.0005: unknown main item tag 0x0 [ 358.993014][ T5819] savu 0003:1E7D:2D5A.0004: parse failed [ 359.012178][ T8] usb 1-1: USB disconnect, device number 3 [ 359.028253][ T6813] cypress 0003:04B4:0001.0005: unknown main item tag 0x0 [ 359.033749][ T5819] savu: probe of 0003:1E7D:2D5A.0004 failed with error -22 [ 359.070564][ T6813] cypress 0003:04B4:0001.0005: unknown main item tag 0x0 [ 359.078797][ T6813] cypress 0003:04B4:0001.0005: unknown main item tag 0x0 [ 359.087327][ T6813] cypress 0003:04B4:0001.0005: unknown main item tag 0x0 [ 359.105748][ T7817] fido_id[7817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 359.149679][ T5819] usb 2-1: USB disconnect, device number 3 [ 359.155712][ T6813] cypress 0003:04B4:0001.0005: unknown main item tag 0x0 [ 359.212979][ T6813] cypress 0003:04B4:0001.0005: hidraw0: USB HID v0.20 Device [HID 04b4:0001] on usb-dummy_hcd.2-1/input0 [ 359.264058][ T6813] usb 3-1: USB disconnect, device number 5 [ 359.444938][ T7624] veth0_vlan: entered promiscuous mode [ 359.459364][ T7824] fido_id[7824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 359.494952][ T7624] veth1_vlan: entered promiscuous mode [ 359.557116][ T7624] veth0_macvtap: entered promiscuous mode [ 359.597914][ T7624] veth1_macvtap: entered promiscuous mode [ 359.651371][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.673249][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.693564][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.712789][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.732764][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.744029][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.772218][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.848236][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.884361][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.908946][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.932818][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.947670][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.958435][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.978799][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.003979][ T7624] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.017375][ T7624] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.029533][ T7624] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.038849][ T7624] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.170043][ T6813] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 360.199168][ T7560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.210179][ T7560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.227011][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 360.276131][ T7560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.286421][ T7560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.361371][ T6813] usb 3-1: Using ep0 maxpacket: 8 [ 360.395244][ T6813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.420961][ T6813] usb 3-1: config 0 has no interfaces? [ 360.429995][ T6813] usb 3-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 360.449605][ T6813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.479089][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 360.488807][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 360.509352][ T6813] usb 3-1: config 0 descriptor?? [ 360.523629][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 360.565290][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.585225][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.597516][ T8] usb 2-1: Product: syz [ 360.607311][ T8] usb 2-1: Manufacturer: syz [ 360.613216][ T8] usb 2-1: SerialNumber: syz [ 360.820868][ T7833] KVM: debugfs: duplicate directory 7833-8 [ 360.868183][ T8] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 360.889165][ T8] usb 2-1: unit 0 not found! [ 360.896708][ T6813] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 360.917892][ T8] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 360.943414][ T8] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 360.977586][ T8] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 360.994936][ T8] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 361.012760][ T8] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 361.068750][ T8] usb 2-1: USB disconnect, device number 4 [ 361.134757][ T6813] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 361.162319][ T6813] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 361.209901][ T6813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 361.218974][ T6813] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 361.240126][ T6813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.263090][ T6813] usb 5-1: config 0 descriptor?? [ 361.535699][ T8] usb 3-1: USB disconnect, device number 6 [ 361.710085][ T6813] hid-rmi 0003:17EF:6085.0006: unknown main item tag 0x0 [ 361.735124][ T6813] hid-rmi 0003:17EF:6085.0006: unknown main item tag 0x0 [ 361.763163][ T6813] hid-rmi 0003:17EF:6085.0006: item fetching failed at offset 3/5 [ 361.798525][ T6813] hid-rmi 0003:17EF:6085.0006: parse failed [ 361.813724][ T6813] hid-rmi: probe of 0003:17EF:6085.0006 failed with error -22 [ 361.899093][ T6813] usb 5-1: USB disconnect, device number 2 [ 362.071600][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 362.150052][ T5819] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 362.270292][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 362.278381][ T8] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 362.287353][ T8] usb 2-1: config 0 has no interface number 0 [ 362.299012][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 362.309184][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.319922][ T8] usb 2-1: Product: syz [ 362.324295][ T8] usb 2-1: Manufacturer: syz [ 362.329191][ T8] usb 2-1: SerialNumber: syz [ 362.342522][ T8] usb 2-1: config 0 descriptor?? [ 362.351917][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.364793][ T8] smsc95xx v2.0.0 [ 362.381374][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.400435][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.416965][ T5819] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.440146][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.469149][ T5819] usb 3-1: config 0 descriptor?? [ 362.520055][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 362.594790][ T7892] netlink: 'syz.4.490': attribute type 10 has an invalid length. [ 362.604756][ T7892] netlink: 'syz.4.490': attribute type 4 has an invalid length. [ 362.729707][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.749947][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.766289][ T23] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 362.780366][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 362.802977][ T23] usb 1-1: SerialNumber: syz [ 362.807939][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 362.844462][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 362.923135][ T5819] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 362.955089][ T5819] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 363.006970][ T5819] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 363.071439][ T23] usb 1-1: 0:2 : does not exist [ 363.128807][ T23] usb 1-1: USB disconnect, device number 4 [ 363.247837][ T7534] udevd[7534]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.378747][ T5819] usb 3-1: USB disconnect, device number 7 [ 364.200214][ T5819] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 364.390347][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 364.409570][ T5819] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 364.429630][ T5819] usb 1-1: config 0 has no interface number 0 [ 364.450127][ T5819] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 364.479679][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.497058][ T5819] usb 1-1: Product: syz [ 364.508460][ T5819] usb 1-1: Manufacturer: syz [ 364.517893][ T5819] usb 1-1: SerialNumber: syz [ 364.526600][ T5819] usb 1-1: config 0 descriptor?? [ 364.548202][ T5819] smsc95xx v2.0.0 [ 365.001410][ T5819] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 365.039935][ T5819] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 365.450147][ T5773] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 365.488510][ T7962] syz_tun: entered allmulticast mode [ 365.523791][ T7962] dvmrp8: entered allmulticast mode [ 365.541093][ T7961] syz_tun: left allmulticast mode [ 365.640915][ T5773] usb 5-1: Using ep0 maxpacket: 32 [ 365.658294][ T5773] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 365.684258][ T5773] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 365.707439][ T5773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 365.722826][ T5773] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 365.735153][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.758348][ T5773] usb 5-1: config 0 descriptor?? [ 365.930282][ T7965] kvm: pic: non byte write [ 366.212539][ T5773] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 366.228113][ T5773] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 366.236028][ T5773] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 366.244008][ T5773] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 366.252136][ T5773] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 366.272739][ T5773] sunplus 0003:04FC:05D8.0008: hidraw0: USB HID v0.04 Device [HID 04fc:05d8] on usb-dummy_hcd.4-1/input0 [ 366.457041][ T6813] usb 5-1: USB disconnect, device number 3 [ 366.538542][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 366.555453][ T8] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 366.569481][ T8] usb 2-1: USB disconnect, device number 5 [ 367.112668][ T5819] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 367.149182][ T5819] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 367.206486][ T5819] usb 1-1: USB disconnect, device number 5 [ 367.866750][ T8006] A@: renamed from bond_slave_0 (while UP) [ 368.224739][ T8025] tun0: tun_chr_ioctl cmd 1074025677 [ 368.240063][ T8025] tun0: linktype set to 1 [ 368.360045][ T5773] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 368.561740][ T5773] usb 1-1: Using ep0 maxpacket: 16 [ 368.580182][ T5773] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.600449][ T5773] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 368.618768][ T5773] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 368.637949][ T5773] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.651467][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 368.661415][ T5773] usb 1-1: SerialNumber: syz [ 368.686830][ T5773] cdc_acm 1-1:1.0: skipping garbage [ 368.692307][ T5773] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 368.701711][ T5773] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 368.716182][ T5773] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 368.810082][ T5819] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 369.035935][ T5819] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 369.049949][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.074218][ T5819] usb 3-1: config 0 descriptor?? [ 369.259881][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 369.311382][ T5773] usb 1-1: USB disconnect, device number 6 [ 369.450079][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 369.461394][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.468565][ T8] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 369.481856][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.501879][ T8] usb 5-1: config 0 descriptor?? [ 370.115729][ T5819] usb 3-1: Cannot set autoneg [ 370.130033][ T5819] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 370.149312][ T8] hid-led: probe of 0003:1D34:0004.0009 failed with error -71 [ 370.190676][ T5819] usb 3-1: USB disconnect, device number 8 [ 370.202448][ T8] usb 5-1: USB disconnect, device number 4 [ 372.585996][ T8132] syz_tun: entered allmulticast mode [ 372.723096][ T8136] syz_tun: entered allmulticast mode [ 372.730224][ T6813] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 372.759152][ T8135] syz_tun: left allmulticast mode [ 372.936199][ T6813] usb 2-1: Using ep0 maxpacket: 32 [ 372.967576][ T6813] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 372.979973][ T6813] usb 2-1: config 0 has no interface number 0 [ 373.022740][ T6813] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 373.036696][ T6813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.044834][ T6813] usb 2-1: Product: syz [ 373.061655][ T6813] usb 2-1: Manufacturer: syz [ 373.074186][ T6813] usb 2-1: SerialNumber: syz [ 373.086950][ T6813] usb 2-1: config 0 descriptor?? [ 373.109672][ T6813] smsc95xx v2.0.0 [ 373.960621][ T6813] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 373.979744][ T8174] syz_tun: entered allmulticast mode [ 374.013891][ T8173] syz_tun: left allmulticast mode [ 374.162333][ T8178] pim6reg1: entered allmulticast mode [ 374.181425][ T6813] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 374.220020][ T6813] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 374.250691][ T6813] usb 2-1: USB disconnect, device number 6 [ 374.830323][ T7836] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 375.051206][ T7836] usb 5-1: Using ep0 maxpacket: 32 [ 375.064684][ T7836] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 375.075978][ T7836] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 375.089719][ T7836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 375.097726][ T7836] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 375.107336][ T7836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.121790][ T7836] usb 5-1: config 0 descriptor?? [ 375.129967][ T5869] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 375.339964][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 375.352485][ T5869] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 375.364632][ T5869] usb 3-1: config 0 has no interface number 0 [ 375.376306][ T5869] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 375.399887][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.407976][ T5869] usb 3-1: Product: syz [ 375.420527][ T5869] usb 3-1: Manufacturer: syz [ 375.426045][ T5869] usb 3-1: SerialNumber: syz [ 375.444788][ T5869] usb 3-1: config 0 descriptor?? [ 375.454869][ T5869] smsc95xx v2.0.0 [ 375.561255][ T7836] usbhid 5-1:0.0: can't add hid device: -71 [ 375.587833][ T7836] usbhid: probe of 5-1:0.0 failed with error -71 [ 375.620069][ T7836] usb 5-1: USB disconnect, device number 5 [ 375.879983][ T5869] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 375.917271][ T5869] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 376.520495][ T23] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 376.727877][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.750666][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 376.774927][ T23] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 376.793702][ T23] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 376.812449][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.828196][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.859938][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.893337][ T23] usb 1-1: Product: syz [ 376.897657][ T23] usb 1-1: Manufacturer: syz [ 376.923020][ T23] usb 1-1: SerialNumber: syz [ 377.178609][ T23] usb 1-1: 0:2 : does not exist [ 377.225965][ T23] usb 1-1: USB disconnect, device number 7 [ 378.457667][ T8305] [ 378.460539][ T8305] ============================= [ 378.465449][ T8305] WARNING: suspicious RCU usage [ 378.470695][ T8305] syzkaller #0 Not tainted [ 378.475185][ T8305] ----------------------------- [ 378.480107][ T8305] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 378.488656][ T8305] [ 378.488656][ T8305] other info that might help us debug this: [ 378.488656][ T8305] [ 378.499902][ T8305] [ 378.499902][ T8305] rcu_scheduler_active = 2, debug_locks = 1 [ 378.508036][ T8305] 1 lock held by syz.0.611/8305: [ 378.513333][ T8305] #0: ffffffff8d1321c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 378.523896][ T8305] [ 378.523896][ T8305] stack backtrace: [ 378.529910][ T8305] CPU: 0 PID: 8305 Comm: syz.0.611 Not tainted syzkaller #0 [ 378.537438][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.547832][ T8305] Call Trace: [ 378.551177][ T8305] [ 378.554165][ T8305] dump_stack_lvl+0x18c/0x250 [ 378.558925][ T8305] ? show_regs_print_info+0x20/0x20 [ 378.564190][ T8305] ? load_image+0x400/0x400 [ 378.568784][ T8305] lockdep_rcu_suspicious+0x1e1/0x300 [ 378.574235][ T8305] get_callchain_entry+0x2a9/0x3c0 [ 378.579414][ T8305] get_perf_callchain+0xc8/0x4f0 [ 378.584460][ T8305] ? put_callchain_entry+0xb0/0xb0 [ 378.589659][ T8305] __bpf_get_stack+0x2e4/0x540 [ 378.594512][ T8305] ? stack_map_get_build_id_offset+0x720/0x720 [ 378.600761][ T8305] ? __cant_sleep+0x220/0x220 [ 378.605517][ T8305] ? bpf_prog_14d9fb3786f83342+0x45/0x49 [ 378.611407][ T8305] bpf_get_stack_raw_tp+0x1a9/0x210 [ 378.616683][ T8305] bpf_prog_14d9fb3786f83342+0x45/0x49 [ 378.622219][ T8305] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 378.627663][ T8305] bpf_prog_test_run_syscall+0x317/0x4a0 [ 378.633368][ T8305] ? sock_gen_cookie+0x60/0x60 [ 378.638217][ T8305] ? sock_gen_cookie+0x60/0x60 [ 378.643056][ T8305] bpf_prog_test_run+0x321/0x390 [ 378.648078][ T8305] __sys_bpf+0x49d/0x890 [ 378.652394][ T8305] ? bpf_link_show_fdinfo+0x390/0x390 [ 378.657835][ T8305] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 378.663820][ T8305] ? lock_chain_count+0x20/0x20 [ 378.668789][ T8305] __x64_sys_bpf+0x7c/0x90 [ 378.673282][ T8305] do_syscall_64+0x55/0xa0 [ 378.677863][ T8305] ? clear_bhb_loop+0x40/0x90 [ 378.682606][ T8305] ? clear_bhb_loop+0x40/0x90 [ 378.687362][ T8305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.693331][ T8305] RIP: 0033:0x7fbf7799aeb9 [ 378.697824][ T8305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.717496][ T8305] RSP: 002b:00007fbf78919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.725977][ T8305] RAX: ffffffffffffffda RBX: 00007fbf77c15fa0 RCX: 00007fbf7799aeb9 [ 378.734103][ T8305] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 378.742128][ T8305] RBP: 00007fbf77a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 378.750158][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.758193][ T8305] R13: 00007fbf77c16038 R14: 00007fbf77c15fa0 R15: 00007fff75f850c8 [ 378.766254][ T8305] [ 378.880078][ T5773] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 378.954683][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.965189][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.090571][ T5773] usb 2-1: Using ep0 maxpacket: 16 [ 379.104263][ T5773] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 379.129936][ T5773] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.159960][ T5773] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.179947][ T5773] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 379.209893][ T5773] usb 2-1: config 7 interface 0 has no altsetting 0 [ 379.227565][ T5773] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 379.250091][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.404079][ T5869] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000024: -71 [ 379.428911][ T5869] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 379.440826][ T5869] usb 3-1: USB disconnect, device number 9 [ 379.700948][ T5773] usbhid 2-1:7.0: can't add hid device: -71 [ 379.707046][ T5773] usbhid: probe of 2-1:7.0 failed with error -71 [ 379.717181][ T5773] usb 2-1: USB disconnect, device number 7