last executing test programs: 42.603801252s ago: executing program 4 (id=5): fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) 31.429188745s ago: executing program 4 (id=24): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040)=0x4, 0x7f) 30.502327175s ago: executing program 4 (id=26): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b300"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x80880, 0x34) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0xe101, r2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) timerfd_create(0x7, 0x800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x200000000622c, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r8, &(0x7f0000000140)=""/116, 0x74, 0x4) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x40000000, 0x8c, "00080000000000000000000cadf100004000"}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x3, 0x0, 0x0) r10 = syz_open_pts(r3, 0x141401) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0001002965248062dbdf250aa6e68593f60000"], 0x18}}, 0x880) fcntl$setstatus(r10, 0x4, 0x2000) write(r10, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000000e4bdf64d000001"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 26.270123606s ago: executing program 4 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x70}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) splice(r4, &(0x7f0000000040)=0x6, r3, &(0x7f00000002c0)=0x100, 0x3, 0x1) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1b8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1000000000000, 0x1000, 0x0, 0x5, 0x0, 0x5, 0xa, 0x5}, {0x0, 0x0, 0x800}, 0x3, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x34ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in=@local, 0x3502}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x6c}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x3, 0xb, 0xc, 0x0, 0x708f}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendfile(r6, r5, &(0x7f0000002080)=0x3a, 0x23b) write(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_setup(0x8, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 14.695870356s ago: executing program 2 (id=64): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="88b11b3a3ee8", 0x6, 0x4040080, &(0x7f00000000c0)={0x11, 0x88a8, r1, 0x1, 0x3, 0x6, @link_local}, 0x14) 14.213773082s ago: executing program 2 (id=67): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x26, 0x3, 0xebb1) sendto$unix(r2, 0x0, 0x0, 0x48850, &(0x7f0000000340)=@file={0x0, './cgroup\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008045}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x200000c0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000540), 0x0, 0xc000) syz_emit_ethernet(0xbe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './cgroup'}, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x548, 0x6, 0x57c, 0x8000001, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9b) socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x6020600) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) unshare(0x22020600) ioctl$TIOCGPTPEER(r7, 0x5441, 0x2076) 12.241395035s ago: executing program 1 (id=71): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xe, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x40}}, 0x800) 11.102806714s ago: executing program 1 (id=72): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "48d7e852"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x60, 0x31, 0x4, "46789230"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000780)={0x20, 0x0, 0x4, "ec9f8e49"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.860454564s ago: executing program 32 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x70}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) splice(r4, &(0x7f0000000040)=0x6, r3, &(0x7f00000002c0)=0x100, 0x3, 0x1) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1b8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1000000000000, 0x1000, 0x0, 0x5, 0x0, 0x5, 0xa, 0x5}, {0x0, 0x0, 0x800}, 0x3, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x34ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in=@local, 0x3502}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x6c}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x3, 0xb, 0xc, 0x0, 0x708f}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendfile(r6, r5, &(0x7f0000002080)=0x3a, 0x23b) write(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_setup(0x8, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 9.901273864s ago: executing program 0 (id=77): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="88b11b3a3ee8", 0x6, 0x4040080, &(0x7f00000000c0)={0x11, 0x88a8, r1, 0x1, 0x3, 0x6, @link_local}, 0x14) 9.226729847s ago: executing program 0 (id=79): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 8.356358739s ago: executing program 0 (id=81): unshare(0x20000400) capset(0x0, &(0x7f0000000200)={0x4, 0xd5, 0x0, 0x400007f, 0xffffffff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) 7.629090558s ago: executing program 1 (id=83): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 7.49991327s ago: executing program 0 (id=84): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x81, r0, 0x80000}) bind$unix(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x7, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet(0x2, 0x5, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 5.960325369s ago: executing program 2 (id=86): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x1, 0x6080, 0x0, 0x0) 5.215084509s ago: executing program 3 (id=88): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="88b11b3a3ee8", 0x6, 0x4040080, &(0x7f00000000c0)={0x11, 0x88a8, r1, 0x1, 0x3, 0x6, @link_local}, 0x14) 4.646500239s ago: executing program 2 (id=89): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getpgid(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$kcm(0x11, 0x2, 0x300) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0xc000, 0x0, 0x38}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4.646056819s ago: executing program 3 (id=90): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@flushpolicy={0x24, 0x1d, 0x1, 0x0, 0x0, "", [@coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}]}, 0x24}}, 0x0) recvmsg$kcm(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/238, 0xee}, {&(0x7f0000002900)=""/157, 0x9d}, {&(0x7f00000029c0)=""/55, 0x37}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x5, &(0x7f0000003b40)=""/48, 0x30}, 0x40) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000006c0), 0x81, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000002100)={0x1000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)=[0x0], 0x1}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000076000/0x1000)=nil, 0x1000}}) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b80)={0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0x26, 0x0, &(0x7f0000003540)) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000840)=0x5) fsopen(0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f00000000c0)=0x2) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000001c0)={0x5a13, 0x6, 0x6, 0x6}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0000000006"], 0x24}}, 0x40) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x4, 0x5}) 4.138748938s ago: executing program 1 (id=91): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000004c0)={0x40, 0x12, 0x6, "03000000a283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.99886909s ago: executing program 0 (id=92): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000002000)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001600), 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2c0000000100000001000000", @ANYRESOCT, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYBLOB="4ef1a4e9710000fb000000000000000000477053460ba36f036d0c4fba5f6ae6dc0fbd44d6761e1c", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x5c, 0x20008840}}], 0x1, 0x44800) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@chain={'key_or_keyring:', r6}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000022f000/0x4000)=nil, 0x4000}, 0x5}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.162634673s ago: executing program 0 (id=93): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x78, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x7ffd, 0xfc, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x9, {[@global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000580)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.14291734s ago: executing program 2 (id=94): socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x9, 0xffffffffffffffff, 0x2, {0xfffffffffffffffb, 0xfffffffffffffc01}, 0x1}, 0x1) 2.678853428s ago: executing program 2 (id=95): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x26, 0x3, 0xebb1) sendto$unix(r2, 0x0, 0x0, 0x48850, &(0x7f0000000340)=@file={0x0, './cgroup\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008045}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x200000c0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000540), 0x0, 0xc000) syz_emit_ethernet(0xbe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './cgroup'}, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x548, 0x6, 0x57c, 0x8000001, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9b) socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x6020600) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) unshare(0x22020600) ioctl$TIOCGPTPEER(r7, 0x5441, 0x2076) 2.130446365s ago: executing program 3 (id=96): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 1.542610583s ago: executing program 3 (id=97): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) 954.911127ms ago: executing program 3 (id=98): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34615da6fd14d95d}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x6b]}, 0x8, 0x800) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000340)=@attr_pmu_init) pipe2(&(0x7f0000000040), 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x2080) r2 = syz_open_dev$media(&(0x7f00000001c0), 0x5, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00000003c0), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x1c49d23787c9f54f, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) epoll_create1(0x0) 521.679165ms ago: executing program 1 (id=99): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 228.953195ms ago: executing program 3 (id=100): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 0s ago: executing program 1 (id=101): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x81, r0, 0x80000}) bind$unix(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x7, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 155.614324][ T5562] cgroup: Unknown subsys name 'net' [ 155.739570][ T5562] cgroup: Unknown subsys name 'cpuset' [ 155.758272][ T5562] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.282870][ T5562] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.989616][ T5581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.001497][ T5581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.013194][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.026100][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.037971][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.073634][ T5587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.082935][ T5587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.092019][ T5587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.111665][ T5587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.122961][ T5587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.144657][ T5587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.155393][ T5587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.165273][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.178732][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.193978][ T5587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.249346][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.273424][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.285049][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.302333][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.316084][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.358151][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.372844][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.382297][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.401434][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.418416][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.102987][ T48] Bluetooth: hci0: command tx timeout [ 168.260830][ T48] Bluetooth: hci2: command tx timeout [ 168.266524][ T5584] Bluetooth: hci1: command tx timeout [ 168.421637][ T48] Bluetooth: hci3: command tx timeout [ 168.501622][ T48] Bluetooth: hci4: command tx timeout [ 170.182285][ T48] Bluetooth: hci0: command tx timeout [ 170.342490][ T48] Bluetooth: hci2: command tx timeout [ 170.348176][ T5584] Bluetooth: hci1: command tx timeout [ 170.356331][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.380854][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.395752][ T5586] bridge_slave_0: entered allmulticast mode [ 170.406804][ T5586] bridge_slave_0: entered promiscuous mode [ 170.456764][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.471077][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.493904][ T5586] bridge_slave_1: entered allmulticast mode [ 170.500496][ T48] Bluetooth: hci3: command tx timeout [ 170.505345][ T5586] bridge_slave_1: entered promiscuous mode [ 170.518882][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.543632][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.553386][ T5583] bridge_slave_0: entered allmulticast mode [ 170.569423][ T5583] bridge_slave_0: entered promiscuous mode [ 170.580422][ T48] Bluetooth: hci4: command tx timeout [ 170.704260][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.712626][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.720620][ T5583] bridge_slave_1: entered allmulticast mode [ 170.728787][ T5583] bridge_slave_1: entered promiscuous mode [ 170.768488][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.823222][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.831056][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.838435][ T5580] bridge_slave_0: entered allmulticast mode [ 170.847308][ T5580] bridge_slave_0: entered promiscuous mode [ 170.864473][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.897003][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.904635][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.912564][ T5597] bridge_slave_0: entered allmulticast mode [ 170.920918][ T5597] bridge_slave_0: entered promiscuous mode [ 170.955261][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.962974][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.970700][ T5580] bridge_slave_1: entered allmulticast mode [ 170.978940][ T5580] bridge_slave_1: entered promiscuous mode [ 171.030593][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.038039][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.045759][ T5597] bridge_slave_1: entered allmulticast mode [ 171.054014][ T5597] bridge_slave_1: entered promiscuous mode [ 171.071999][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.128176][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.135777][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.143854][ T5588] bridge_slave_0: entered allmulticast mode [ 171.152300][ T5588] bridge_slave_0: entered promiscuous mode [ 171.193583][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.233634][ T5586] team0: Port device team_slave_0 added [ 171.240391][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.248131][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.255816][ T5588] bridge_slave_1: entered allmulticast mode [ 171.264574][ T5588] bridge_slave_1: entered promiscuous mode [ 171.325448][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.384578][ T5586] team0: Port device team_slave_1 added [ 171.472211][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.514685][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.576702][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.593299][ T5583] team0: Port device team_slave_0 added [ 171.623404][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.630873][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.657296][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.676616][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.714196][ T5583] team0: Port device team_slave_1 added [ 171.742800][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.750329][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.776616][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.794897][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.853134][ T5580] team0: Port device team_slave_0 added [ 171.903029][ T5597] team0: Port device team_slave_0 added [ 171.936334][ T5580] team0: Port device team_slave_1 added [ 171.973904][ T5597] team0: Port device team_slave_1 added [ 171.982188][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.989260][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.015441][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.058699][ T5588] team0: Port device team_slave_0 added [ 172.088332][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.095924][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.122311][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.183960][ T5588] team0: Port device team_slave_1 added [ 172.229261][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.236476][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.260709][ T48] Bluetooth: hci0: command tx timeout [ 172.264825][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.344843][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.352335][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.378614][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.396049][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.403556][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.430392][ T48] Bluetooth: hci2: command tx timeout [ 172.432357][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.436012][ T5584] Bluetooth: hci1: command tx timeout [ 172.461492][ T5586] hsr_slave_0: entered promiscuous mode [ 172.469753][ T5586] hsr_slave_1: entered promiscuous mode [ 172.504896][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.512116][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.538376][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.581557][ T5584] Bluetooth: hci3: command tx timeout [ 172.601070][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.608169][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.634340][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.660986][ T5584] Bluetooth: hci4: command tx timeout [ 172.712086][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.719416][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.745629][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.791050][ T5583] hsr_slave_0: entered promiscuous mode [ 172.799246][ T5583] hsr_slave_1: entered promiscuous mode [ 172.807255][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 172.813222][ T5583] Cannot create hsr debugfs directory [ 172.985575][ T5580] hsr_slave_0: entered promiscuous mode [ 172.993974][ T5580] hsr_slave_1: entered promiscuous mode [ 173.002128][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 173.007943][ T5580] Cannot create hsr debugfs directory [ 173.080598][ T5597] hsr_slave_0: entered promiscuous mode [ 173.089142][ T5597] hsr_slave_1: entered promiscuous mode [ 173.097202][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 173.103088][ T5597] Cannot create hsr debugfs directory [ 173.222537][ T5588] hsr_slave_0: entered promiscuous mode [ 173.231551][ T5588] hsr_slave_1: entered promiscuous mode [ 173.238976][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 173.245024][ T5588] Cannot create hsr debugfs directory [ 174.285691][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.311663][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.322636][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.340455][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.342689][ T5584] Bluetooth: hci0: command tx timeout [ 174.365256][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.381168][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.406780][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.426284][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.484348][ T5583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.502020][ T5584] Bluetooth: hci1: command tx timeout [ 174.503868][ T48] Bluetooth: hci2: command tx timeout [ 174.535117][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.546963][ T5583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.562234][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.572105][ T5583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.594755][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.604343][ T5583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.624203][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.660463][ T48] Bluetooth: hci3: command tx timeout [ 174.752281][ T48] Bluetooth: hci4: command tx timeout [ 174.785492][ T5580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.815683][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.854160][ T5580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.872821][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.886061][ T5580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.904703][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.919875][ T5580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.939598][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.138571][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.163987][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.189612][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.209022][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.257750][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.275433][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.311067][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.328949][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.517343][ T5588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.535682][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.586384][ T5588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.608746][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.635206][ T5588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.652907][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.663042][ T5588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.682279][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.854111][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.883052][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.017812][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.095438][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.116648][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.124027][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.194457][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.206521][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.213905][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.261182][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.268663][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.315245][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.322856][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.551825][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.634828][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.642409][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.729792][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.737385][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.808106][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.952320][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.095154][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.265483][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.291607][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.299196][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.404196][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.411775][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.427125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.434702][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.485896][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.493411][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.793696][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.869281][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.303226][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.696304][ T5583] veth0_vlan: entered promiscuous mode [ 180.747653][ T5586] veth0_vlan: entered promiscuous mode [ 180.874788][ T5586] veth1_vlan: entered promiscuous mode [ 180.887640][ T5583] veth1_vlan: entered promiscuous mode [ 180.982498][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.011674][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.034075][ T5580] veth0_vlan: entered promiscuous mode [ 181.202695][ T5580] veth1_vlan: entered promiscuous mode [ 181.377067][ T5583] veth0_macvtap: entered promiscuous mode [ 181.416337][ T5586] veth0_macvtap: entered promiscuous mode [ 181.465075][ T5583] veth1_macvtap: entered promiscuous mode [ 181.506168][ T5586] veth1_macvtap: entered promiscuous mode [ 181.756591][ T5580] veth0_macvtap: entered promiscuous mode [ 181.785042][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.805638][ T5588] veth0_vlan: entered promiscuous mode [ 181.828132][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.854604][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.893494][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.927529][ T5580] veth1_macvtap: entered promiscuous mode [ 181.973694][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.982881][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.019593][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.035128][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.065075][ T5588] veth1_vlan: entered promiscuous mode [ 182.090843][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.102984][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.144412][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.157557][ T1010] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.327970][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.435946][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.490472][ T5597] veth0_vlan: entered promiscuous mode [ 182.575412][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.595179][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.641970][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.669046][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.806003][ T5597] veth1_vlan: entered promiscuous mode [ 182.868807][ T5588] veth0_macvtap: entered promiscuous mode [ 182.942806][ T5588] veth1_macvtap: entered promiscuous mode [ 183.323359][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.403209][ T5597] veth0_macvtap: entered promiscuous mode [ 183.505964][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.569190][ T5597] veth1_macvtap: entered promiscuous mode [ 183.756006][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.784282][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.829433][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.858287][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.975190][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.057607][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.157734][ T1153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.203621][ T1153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.247655][ T1153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.291993][ T1153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.206250][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.228563][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.491760][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.526991][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.710451][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.745192][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.903855][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.977000][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.986737][ T5586] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 188.143912][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.173073][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.457734][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.509804][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.132777][ T5684] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 189.324992][ T5850] process 'syz.3.4' launched './file2' with NULL argv: empty string added [ 189.378050][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.416989][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.792501][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.854311][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.128683][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 190.188901][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 190.368018][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.396048][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.646861][ T5850] ipvlan2: entered allmulticast mode [ 190.679173][ T5850] syz_tun: entered allmulticast mode [ 191.051153][ T5860] Zero length message leads to an empty skb [ 191.508979][ T5866] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.524065][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.581379][ T5684] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 191.619214][ T5684] usb 2-1: can't read configurations, error -71 [ 191.812283][ T5863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.932943][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.949439][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.275603][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 193.430408][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 193.647605][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.728827][ T11] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 193.740362][ T2162] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.827972][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.857917][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.861465][ T5884] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 193.914524][ T2162] usb 2-1: Using ep0 maxpacket: 8 [ 193.924406][ T11] usb 1-1: Product: syz [ 193.931822][ T29] audit: type=1800 audit(1780647911.729:2): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="bus" dev="ramfs" ino=7855 res=0 errno=0 [ 193.963281][ T2162] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 193.982212][ T2162] usb 2-1: config 179 has no interface number 0 [ 193.984444][ T11] usb 1-1: Manufacturer: syz [ 194.011471][ T2162] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 194.030466][ T11] usb 1-1: SerialNumber: syz [ 194.075943][ T2162] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 194.138815][ T2162] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 194.195416][ T2162] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 194.230328][ T2162] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.280103][ T2162] usb 2-1: config 179 interface 65 has no altsetting 0 [ 194.328967][ T5879] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.354510][ T2162] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 194.394737][ T2162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.561229][ T2162] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 194.577911][ T5684] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 194.704672][ T4922] input input5: unable to receive magic message: -110 [ 194.760195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 194.798080][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 194.823179][ T4922] input input5: unable to receive magic message: -71 [ 194.824603][ T5684] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 194.950059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 194.977890][ T5684] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 195.010022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.049877][ T2162] usb 2-1: USB disconnect, device number 4 [ 195.050346][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 195.064737][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 195.085907][ T5879] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.098269][ T4922] input input5: unable to receive magic message: -71 [ 195.100458][ T5684] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.205533][ T5684] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 195.302212][ T5684] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 195.394588][ T5684] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 195.433444][ T5684] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 195.433578][ T5684] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.433691][ T5684] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 195.433832][ T5684] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 195.459348][ T5684] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 195.459484][ T5684] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 195.459619][ T5684] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.459796][ T5684] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 195.462766][ T5684] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 195.501434][ T5684] usb 3-1: string descriptor 0 read error: -22 [ 195.501947][ T5684] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 195.502076][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.518753][ T11] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 195.518881][ T11] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 195.518987][ T11] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 195.633825][ T5684] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 195.757534][ T11] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 195.814873][ T11] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 195.827341][ T5884] syz.2.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 196.717311][ T5684] usb 3-1: USB disconnect, device number 2 [ 198.282796][ T5684] usb 1-1: USB disconnect, device number 2 [ 198.294442][ T5684] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 198.844811][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.858031][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.409736][ T5911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14'. [ 205.090376][ T5684] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 205.282419][ T5684] usb 5-1: Using ep0 maxpacket: 8 [ 205.322731][ T5684] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 205.370944][ T5684] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 205.418438][ T5684] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 205.478143][ T5684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.075099][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.083945][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.821055][ T11] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 206.924061][ T5957] bridge_slave_0: left allmulticast mode [ 206.962885][ T5957] bridge_slave_0: left promiscuous mode [ 206.996718][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.032266][ T11] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 207.050230][ T11] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 207.090345][ T11] usb 4-1: config 0 has no interface number 0 [ 207.127872][ T11] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 207.184935][ T11] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.204606][ T5957] bridge_slave_1: left allmulticast mode [ 207.226615][ T5957] bridge_slave_1: left promiscuous mode [ 207.254671][ T11] usb 4-1: config 0 interface 52 has no altsetting 0 [ 207.263381][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.302483][ T11] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 207.363809][ T11] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 207.409374][ T11] usb 4-1: Manufacturer: syz [ 207.446585][ T5957] bond0: (slave bond_slave_0): Releasing backup interface [ 207.474681][ T11] usb 4-1: config 0 descriptor?? [ 207.514592][ T11] hub 4-1:0.52: bad descriptor, ignoring hub [ 207.550647][ T11] hub 4-1:0.52: probe with driver hub failed with error -5 [ 207.630898][ T5957] bond0: (slave bond_slave_1): Releasing backup interface [ 207.725842][ T5957] team0: Port device team_slave_0 removed [ 207.841161][ T5957] team0: Port device team_slave_1 removed [ 207.841722][ T11] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input6 [ 208.004062][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.065207][ T11] usb 4-1: Failed to suspend device, error -71 [ 208.087141][ T11] usb 4-1: USB disconnect, device number 2 [ 208.130671][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.266769][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.393062][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.537226][ T5957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 208.807117][ T5681] usb 5-1: USB disconnect, device number 2 [ 209.210185][ T5991] netlink: 256 bytes leftover after parsing attributes in process `syz.4.35'. [ 209.330321][ T5681] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 209.519488][ T5681] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 209.580969][ T5681] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 209.635980][ T5681] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 209.670609][ T5681] usb 4-1: config 220 has no interface number 2 [ 209.725794][ T5681] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 209.763680][ T5681] usb 4-1: config 220 interface 0 has no altsetting 0 [ 209.794089][ T5681] usb 4-1: config 220 interface 76 has no altsetting 0 [ 209.817514][ T5681] usb 4-1: config 220 interface 1 has no altsetting 0 [ 209.853340][ T5681] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 209.885089][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.910207][ T5681] usb 4-1: Product: syz [ 209.910385][ T5684] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 209.921700][ T5681] usb 4-1: Manufacturer: syz [ 209.931294][ T5681] usb 4-1: SerialNumber: syz [ 210.145671][ T5684] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 210.169140][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.212163][ T5684] usb 2-1: Product: syz [ 210.227732][ T5684] usb 2-1: Manufacturer: syz [ 210.239415][ T5684] usb 2-1: SerialNumber: syz [ 210.261461][ T5681] usb 4-1: selecting invalid altsetting 0 [ 210.295593][ T5681] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 210.322269][ T5681] uvcvideo 4-1:220.0: No valid video chain found. [ 210.446559][ T5681] usb 4-1: selecting invalid altsetting 0 [ 210.462281][ T5681] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 210.503043][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.39'. [ 210.528940][ T5681] usb 4-1: USB disconnect, device number 3 [ 210.639205][ T6008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.665536][ T806] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 210.875918][ T806] usb 3-1: Using ep0 maxpacket: 16 [ 210.894491][ T806] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 210.927284][ T806] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 210.949797][ T806] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 211.020257][ T806] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 211.033627][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.042901][ T806] usb 3-1: Product: syz [ 211.059741][ T806] usb 3-1: Manufacturer: syz [ 211.071274][ T806] usb 3-1: SerialNumber: syz [ 211.122593][ T806] r8152-cfgselector 3-1: Unknown version 0x0000 [ 211.155438][ T806] r8152-cfgselector 3-1: config 0 descriptor?? [ 211.447794][ T5684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 211.516368][ T5684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 211.596016][ T5684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.693956][ T5684] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 211.804736][ T5684] usb 2-1: USB disconnect, device number 5 [ 212.810485][ T806] r8152-cfgselector 3-1: Unknown version 0x0000 [ 212.847240][ T806] r8152-cfgselector 3-1: No union descriptors [ 213.009502][ T806] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 213.130552][ T5684] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 213.315512][ T5684] usb 1-1: device descriptor read/64, error -71 [ 213.587728][ T5684] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 213.774066][ T5684] usb 1-1: device descriptor read/64, error -71 [ 213.901318][ T5684] usb usb1-port1: attempt power cycle [ 214.261349][ T5684] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.341940][ T5684] usb 1-1: device descriptor read/8, error -71 [ 214.621120][ T5684] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 214.681794][ T5684] usb 1-1: device descriptor read/8, error -71 [ 214.828040][ T5684] usb usb1-port1: unable to enumerate USB device [ 216.411204][ T6052] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 216.721256][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.730244][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.324744][ T6050] bridge_slave_0: left allmulticast mode [ 217.351454][ T6050] bridge_slave_0: left promiscuous mode [ 217.378653][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.569199][ T6050] bridge_slave_1: left allmulticast mode [ 217.584140][ T6050] bridge_slave_1: left promiscuous mode [ 217.599152][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.776405][ T6050] bond0: (slave bond_slave_0): Releasing backup interface [ 217.923672][ T6050] bond0: (slave bond_slave_1): Releasing backup interface [ 218.117533][ T6050] team0: Port device team_slave_0 removed [ 218.230772][ T5683] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 218.249190][ T6050] team0: Port device team_slave_1 removed [ 218.305346][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.354640][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.390222][ T5683] usb 2-1: Using ep0 maxpacket: 16 [ 218.415072][ T5683] usb 2-1: config index 0 descriptor too short (expected 1289, got 27) [ 218.424972][ T5683] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 218.447085][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.460596][ T5683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.487549][ T5683] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 218.501440][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.521029][ T5683] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 218.552222][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.579416][ T5683] usb 2-1: Product: syz [ 218.603899][ T5683] usb 2-1: Manufacturer: syz [ 218.619256][ T6050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.638267][ T5683] usb 2-1: SerialNumber: syz [ 218.648908][ T5683] usb 2-1: config 0 descriptor?? [ 219.272244][ T6061] program syz.2.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.410509][ T5683] usb 2-1: USB disconnect, device number 6 [ 221.151475][ T5684] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 221.332079][ T5684] usb 1-1: device descriptor read/64, error -71 [ 221.630477][ T5684] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 221.843155][ T5684] usb 1-1: device descriptor read/64, error -71 [ 221.992381][ T5684] usb usb1-port1: attempt power cycle [ 222.393418][ T5684] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 222.444836][ T5684] usb 1-1: device descriptor read/8, error -71 [ 222.720439][ T5684] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 222.777663][ T5684] usb 1-1: device descriptor read/8, error -71 [ 222.924975][ T5684] usb usb1-port1: unable to enumerate USB device [ 224.610738][ T5683] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 224.820942][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 224.856484][ T5683] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 224.882940][ T5683] usb 2-1: config 0 has no interface number 0 [ 224.948789][ T5683] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 224.989017][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.019073][ T5683] usb 2-1: Product: syz [ 225.043575][ T5683] usb 2-1: Manufacturer: syz [ 225.060910][ T5683] usb 2-1: SerialNumber: syz [ 225.094044][ T5683] usb 2-1: config 0 descriptor?? [ 226.040057][ T5584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.051703][ T5584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.068828][ T5584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.088767][ T5584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.107870][ T5584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.457987][ T5683] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 226.555199][ T5683] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 226.622814][ T5683] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 226.690928][ T5683] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 226.806712][ T5683] usb 2-1: USB disconnect, device number 7 [ 228.122432][ T5683] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 228.180539][ T48] Bluetooth: hci5: command tx timeout [ 228.291026][ T5683] usb 2-1: device descriptor read/64, error -71 [ 228.582165][ T5683] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 228.672089][ T5991] syz.4.35 (5991): drop_caches: 1 [ 228.734292][ T5994] syz.4.35 (5994): drop_caches: 1 [ 228.771464][ T5683] usb 2-1: device descriptor read/64, error -71 [ 228.906218][ T5683] usb usb2-port1: attempt power cycle [ 229.320562][ T5683] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 229.387410][ T5683] usb 2-1: device descriptor read/8, error -71 [ 229.650849][ T5683] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.692570][ T5683] usb 2-1: device descriptor read/8, error -71 [ 229.822123][ T5683] usb usb2-port1: unable to enumerate USB device [ 230.261296][ T48] Bluetooth: hci5: command tx timeout [ 230.630729][ T6160] warning: `syz.2.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 231.515369][ T5683] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 231.680368][ T5683] usb 2-1: device descriptor read/64, error -71 [ 231.974198][ T5683] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 232.130422][ T5683] usb 2-1: device descriptor read/64, error -71 [ 232.261716][ T5683] usb usb2-port1: attempt power cycle [ 232.342274][ T48] Bluetooth: hci5: command tx timeout [ 232.402665][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.469173][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.478795][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.486522][ T5681] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 232.501741][ T6116] bridge_slave_0: entered allmulticast mode [ 232.526252][ T6116] bridge_slave_0: entered promiscuous mode [ 232.578576][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.597773][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.606998][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.626062][ T5683] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 232.646815][ T6116] bridge_slave_1: entered allmulticast mode [ 232.657538][ T6116] bridge_slave_1: entered promiscuous mode [ 232.671161][ T5683] usb 2-1: device descriptor read/8, error -71 [ 232.678082][ T5681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.694156][ T5681] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 232.708781][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.745161][ T5681] usb 1-1: config 0 descriptor?? [ 232.917694][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.934108][ T5683] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 232.962252][ T5683] usb 2-1: device descriptor read/8, error -71 [ 233.016341][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.095556][ T5681] usbhid 1-1:0.0: can't add hid device: -71 [ 233.119522][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.154826][ T5683] usb usb2-port1: unable to enumerate USB device [ 233.161872][ T5681] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 233.207403][ T5681] usb 1-1: USB disconnect, device number 11 [ 233.544410][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.630996][ T5681] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 233.641463][ T6116] team0: Port device team_slave_0 added [ 233.686405][ T6116] team0: Port device team_slave_1 added [ 233.859715][ T5681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.877555][ T5681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 233.900660][ T5681] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 233.911049][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.931461][ T5681] usb 1-1: config 0 descriptor?? [ 233.938765][ T6179] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 234.072991][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.101368][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.206407][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.311630][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.339271][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.424952][ T48] Bluetooth: hci5: command tx timeout [ 234.474944][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.618203][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 234.673650][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 234.702836][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 234.729024][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 234.750445][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 234.778757][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 234.822689][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 234.843832][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 234.876891][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 234.936615][ T5681] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 235.078770][ T5681] hid-steam 0003:28DE:1102.0001: : USB HID v7f.fd Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 235.180809][ T56] bridge_slave_1: left allmulticast mode [ 235.201024][ T5681] ===================================================== [ 235.208501][ T5681] BUG: KMSAN: uninit-value in steam_register+0xd83/0x10e0 [ 235.216617][ T5681] steam_register+0xd83/0x10e0 [ 235.221601][ T5681] steam_probe+0x6f1/0x19b0 [ 235.226177][ T5681] hid_device_probe+0x60d/0xb90 [ 235.231278][ T5681] really_probe+0x4d5/0xe40 [ 235.235935][ T5681] __driver_probe_device+0x2fb/0x410 [ 235.241448][ T5681] driver_probe_device+0x70/0x8f0 [ 235.246593][ T5681] __device_attach_driver+0x4ee/0x950 [ 235.252141][ T5681] bus_for_each_drv+0x3e3/0x680 [ 235.257068][ T5681] __device_attach+0x3c5/0x5f0 [ 235.262263][ T5681] device_initial_probe+0x126/0x170 [ 235.267966][ T5681] bus_probe_device+0x287/0x530 [ 235.269022][ T56] bridge_slave_1: left promiscuous mode [ 235.273063][ T5681] device_add+0x12e3/0x1c90 [ 235.273187][ T5681] hid_add_device+0x440/0x5d0 [ 235.296290][ T5681] usbhid_probe+0x1a25/0x20e0 [ 235.303991][ T5681] usb_probe_interface+0xd51/0x1440 [ 235.310872][ T5681] really_probe+0x4d5/0xe40 [ 235.315586][ T5681] __driver_probe_device+0x2fb/0x410 [ 235.321889][ T5681] driver_probe_device+0x70/0x8f0 [ 235.326467][ T56] bridge0: port 2(bridge_slave_1) entered disabled state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 235.327156][ T5681] __device_attach_driver+0x4ee/0x950 [ 235.340023][ T5681] bus_for_each_drv+0x3e3/0x680 [ 235.345128][ T5681] __device_attach+0x3c5/0x5f0 [ 235.350236][ T5681] device_initial_probe+0x126/0x170 [ 235.355628][ T5681] bus_probe_device+0x287/0x530 [ 235.360757][ T5681] device_add+0x12e3/0x1c90 [ 235.365450][ T5681] usb_set_configuration+0x3484/0x3b60 [ 235.377347][ T5681] usb_generic_driver_probe+0xfc/0x290 [ 235.387761][ T5681] usb_probe_device+0x38d/0x690 [ 235.395018][ T5681] really_probe+0x4d5/0xe40 [ 235.400124][ T5681] __driver_probe_device+0x2fb/0x410 [ 235.405921][ T5681] driver_probe_device+0x70/0x8f0 [ 235.411297][ T5681] __device_attach_driver+0x4ee/0x950 [ 235.416975][ T5681] bus_for_each_drv+0x3e3/0x680 [ 235.422184][ T5681] __device_attach+0x3c5/0x5f0 [ 235.427142][ T5681] device_initial_probe+0x126/0x170 [ 235.432657][ T5681] bus_probe_device+0x287/0x530 [ 235.437684][ T5681] device_add+0x12e3/0x1c90 [ 235.442471][ T5681] usb_new_device+0x106a/0x2120 [ 235.447513][ T5681] hub_event+0x5404/0x77c0 [ 235.452209][ T5681] process_scheduled_works+0xb65/0x1e40 [ 235.457934][ T5681] worker_thread+0xee4/0x1590 [ 235.463764][ T5681] kthread+0x53a/0x5f0 [ 235.468075][ T5681] ret_from_fork+0x20f/0x8d0 [ 235.472962][ T5681] ret_from_fork_asm+0x1a/0x30 [ 235.477901][ T5681] [ 235.484893][ T5681] Local variable reply.i created at: [ 235.492417][ T5681] steam_register+0x180/0x10e0 [ 235.497358][ T5681] steam_probe+0x6f1/0x19b0 [ 235.502128][ T5681] [ 235.504563][ T5681] CPU: 0 UID: 0 PID: 5681 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(lazy) [ 235.514270][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.524684][ T5681] Workqueue: usb_hub_wq hub_event [ 235.529815][ T5681] ===================================================== [ 235.536898][ T5681] Disabling lock debugging due to kernel taint [ 235.560362][ T2162] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 235.600999][ T5681] Kernel panic - not syncing: kmsan.panic set ... [ 235.607577][ T5681] CPU: 0 UID: 0 PID: 5681 Comm: kworker/0:4 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 235.618691][ T5681] Tainted: [B]=BAD_PAGE [ 235.622896][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.633086][ T5681] Workqueue: usb_hub_wq hub_event [ 235.638297][ T5681] Call Trace: [ 235.641614][ T5681] [ 235.644584][ T5681] __dump_stack+0x26/0x30 [ 235.649000][ T5681] dump_stack_lvl+0x50/0x1c0 [ 235.653685][ T5681] ? dump_stack+0x12/0x25 [ 235.658176][ T5681] dump_stack+0x1e/0x25 [ 235.662443][ T5681] vpanic+0x7b4/0x1430 [ 235.666642][ T5681] panic+0x15d/0x160 [ 235.670666][ T5681] kmsan_report+0x31a/0x320 [ 235.675280][ T5681] ? __msan_warning+0x1b/0x30 [ 235.680064][ T5681] ? steam_register+0xd83/0x10e0 [ 235.685103][ T5681] ? steam_probe+0x6f1/0x19b0 [ 235.689946][ T5681] ? hid_device_probe+0x60d/0xb90 [ 235.695105][ T5681] ? really_probe+0x4d5/0xe40 [ 235.699896][ T5681] ? __driver_probe_device+0x2fb/0x410 [ 235.705541][ T5681] ? driver_probe_device+0x70/0x8f0 [ 235.710855][ T5681] ? __device_attach_driver+0x4ee/0x950 [ 235.716522][ T5681] ? bus_for_each_drv+0x3e3/0x680 [ 235.721630][ T5681] ? __device_attach+0x3c5/0x5f0 [ 235.726667][ T5681] ? device_initial_probe+0x126/0x170 [ 235.732139][ T5681] ? bus_probe_device+0x287/0x530 [ 235.737247][ T5681] ? device_add+0x12e3/0x1c90 [ 235.742016][ T5681] ? hid_add_device+0x440/0x5d0 [ 235.746984][ T5681] ? usbhid_probe+0x1a25/0x20e0 [ 235.751910][ T5681] ? usb_probe_interface+0xd51/0x1440 [ 235.757380][ T5681] ? really_probe+0x4d5/0xe40 [ 235.762167][ T5681] ? __driver_probe_device+0x2fb/0x410 [ 235.767732][ T5681] ? driver_probe_device+0x70/0x8f0 [ 235.773033][ T5681] ? __device_attach_driver+0x4ee/0x950 [ 235.779083][ T5681] ? bus_for_each_drv+0x3e3/0x680 [ 235.784193][ T5681] ? __device_attach+0x3c5/0x5f0 [ 235.789237][ T5681] ? device_initial_probe+0x126/0x170 [ 235.794789][ T5681] ? bus_probe_device+0x287/0x530 [ 235.799960][ T5681] ? device_add+0x12e3/0x1c90 [ 235.804782][ T5681] ? usb_set_configuration+0x3484/0x3b60 [ 235.810497][ T5681] ? usb_generic_driver_probe+0xfc/0x290 [ 235.816207][ T5681] ? usb_probe_device+0x38d/0x690 [ 235.821312][ T5681] ? really_probe+0x4d5/0xe40 [ 235.826091][ T5681] ? __driver_probe_device+0x2fb/0x410 [ 235.831650][ T5681] ? driver_probe_device+0x70/0x8f0 [ 235.836953][ T5681] ? __device_attach_driver+0x4ee/0x950 [ 235.842602][ T5681] ? bus_for_each_drv+0x3e3/0x680 [ 235.847704][ T5681] ? __device_attach+0x3c5/0x5f0 [ 235.852738][ T5681] ? device_initial_probe+0x126/0x170 [ 235.858222][ T5681] ? bus_probe_device+0x287/0x530 [ 235.863325][ T5681] ? device_add+0x12e3/0x1c90 [ 235.868086][ T5681] ? usb_new_device+0x106a/0x2120 [ 235.873207][ T5681] ? hub_event+0x5404/0x77c0 [ 235.877865][ T5681] ? process_scheduled_works+0xb65/0x1e40 [ 235.883677][ T5681] ? worker_thread+0xee4/0x1590 [ 235.888624][ T5681] ? kthread+0x53a/0x5f0 [ 235.893033][ T5681] ? ret_from_fork+0x20f/0x8d0 [ 235.897880][ T5681] ? ret_from_fork_asm+0x1a/0x30 [ 235.902933][ T5681] ? steam_recv_report+0x3b7/0x590 [ 235.908125][ T5681] ? kmsan_get_metadata+0xf1/0x160 [ 235.913347][ T5681] __msan_warning+0x1b/0x30 [ 235.917940][ T5681] steam_register+0xd83/0x10e0 [ 235.922787][ T5681] ? mutex_unlock+0x28/0x50 [ 235.927393][ T5681] ? kmsan_get_metadata+0xf1/0x160 [ 235.932621][ T5681] steam_probe+0x6f1/0x19b0 [ 235.937215][ T5681] ? __pfx_steam_probe+0x10/0x10 [ 235.942230][ T5681] hid_device_probe+0x60d/0xb90 [ 235.947190][ T5681] ? __pfx_hid_device_probe+0x10/0x10 [ 235.952674][ T5681] really_probe+0x4d5/0xe40 [ 235.957370][ T5681] __driver_probe_device+0x2fb/0x410 [ 235.962774][ T5681] driver_probe_device+0x70/0x8f0 [ 235.967918][ T5681] ? kmsan_get_metadata+0xf1/0x160 [ 235.973146][ T5681] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.979076][ T5681] __device_attach_driver+0x4ee/0x950 [ 235.984582][ T5681] bus_for_each_drv+0x3e3/0x680 [ 235.989516][ T5681] ? __pfx___device_attach_driver+0x10/0x10 [ 235.995542][ T5681] __device_attach+0x3c5/0x5f0 [ 236.000446][ T5681] device_initial_probe+0x126/0x170 [ 236.005762][ T5681] bus_probe_device+0x287/0x530 [ 236.010712][ T5681] device_add+0x12e3/0x1c90 [ 236.015327][ T5681] hid_add_device+0x440/0x5d0 [ 236.020118][ T5681] usbhid_probe+0x1a25/0x20e0 [ 236.024897][ T5681] ? pm_runtime_enable+0x49b/0x500 [ 236.030143][ T5681] ? kmsan_get_metadata+0xf1/0x160 [ 236.035362][ T5681] ? __pfx_usbhid_probe+0x10/0x10 [ 236.040463][ T5681] usb_probe_interface+0xd51/0x1440 [ 236.045766][ T5681] ? __pfx_usb_probe_interface+0x10/0x10 [ 236.051492][ T5681] really_probe+0x4d5/0xe40 [ 236.056119][ T5681] __driver_probe_device+0x2fb/0x410 [ 236.061515][ T5681] driver_probe_device+0x70/0x8f0 [ 236.066649][ T5681] ? kmsan_get_metadata+0xf1/0x160 [ 236.071866][ T5681] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 236.077790][ T5681] __device_attach_driver+0x4ee/0x950 [ 236.083306][ T5681] bus_for_each_drv+0x3e3/0x680 [ 236.088234][ T5681] ? __pfx___device_attach_driver+0x10/0x10 [ 236.094272][ T5681] __device_attach+0x3c5/0x5f0 [ 236.099223][ T5681] device_initial_probe+0x126/0x170 [ 236.104536][ T5681] bus_probe_device+0x287/0x530 [ 236.109487][ T5681] device_add+0x12e3/0x1c90 [ 236.114094][ T5681] usb_set_configuration+0x3484/0x3b60 [ 236.119645][ T5681] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 236.125612][ T5681] usb_generic_driver_probe+0xfc/0x290 [ 236.131157][ T5681] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 236.137303][ T5681] usb_probe_device+0x38d/0x690 [ 236.142242][ T5681] ? __pfx_usb_probe_device+0x10/0x10 [ 236.147696][ T5681] really_probe+0x4d5/0xe40 [ 236.152317][ T5681] __driver_probe_device+0x2fb/0x410 [ 236.157719][ T5681] driver_probe_device+0x70/0x8f0 [ 236.162849][ T5681] ? kmsan_get_metadata+0xf1/0x160 [ 236.168073][ T5681] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 236.174326][ T5681] __device_attach_driver+0x4ee/0x950 [ 236.179824][ T5681] bus_for_each_drv+0x3e3/0x680 [ 236.184777][ T5681] ? __pfx___device_attach_driver+0x10/0x10 [ 236.190801][ T5681] __device_attach+0x3c5/0x5f0 [ 236.195701][ T5681] device_initial_probe+0x126/0x170 [ 236.201164][ T5681] bus_probe_device+0x287/0x530 [ 236.206130][ T5681] device_add+0x12e3/0x1c90 [ 236.210754][ T5681] usb_new_device+0x106a/0x2120 [ 236.215739][ T5681] hub_event+0x5404/0x77c0 [ 236.220273][ T5681] ? kmsan_get_metadata+0xf1/0x160 [ 236.225514][ T5681] ? __pfx_hub_event+0x10/0x10 [ 236.230352][ T5681] process_scheduled_works+0xb65/0x1e40 [ 236.236037][ T5681] worker_thread+0xee4/0x1590 [ 236.240821][ T5681] kthread+0x53a/0x5f0 [ 236.244990][ T5681] ? __pfx_worker_thread+0x10/0x10 [ 236.250213][ T5681] ? __pfx_kthread+0x10/0x10 [ 236.254976][ T5681] ret_from_fork+0x20f/0x8d0 [ 236.259648][ T5681] ? __switch_to+0x573/0x7a0 [ 236.264335][ T5681] ? __pfx_kthread+0x10/0x10 [ 236.269031][ T5681] ret_from_fork_asm+0x1a/0x30 [ 236.273935][ T5681] [ 236.277462][ T5681] Kernel Offset: disabled [ 236.281881][ T5681] Rebooting in 86400 seconds..