last executing test programs: 4m55.523954957s ago: executing program 3 (id=1557): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 4m54.316878933s ago: executing program 3 (id=1562): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x2, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) close(r4) 4m52.704599248s ago: executing program 3 (id=1569): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40, 0x0, 0x2}, 0xc) close(0x3) 4m52.537895588s ago: executing program 3 (id=1570): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 4m51.563114795s ago: executing program 3 (id=1575): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 4m51.200044992s ago: executing program 3 (id=1578): syz_open_dev$sg(&(0x7f00000002c0), 0x9, 0x2602) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="19", 0x1, 0x4008800, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fff9, 0x180, 0x2, 0x4, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m50.566384725s ago: executing program 32 (id=1578): syz_open_dev$sg(&(0x7f00000002c0), 0x9, 0x2602) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="19", 0x1, 0x4008800, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fff9, 0x180, 0x2, 0x4, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m30.597299013s ago: executing program 1 (id=1625): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010428bd70000001000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 4m29.965326039s ago: executing program 1 (id=1627): timer_create(0x1, &(0x7f0000001180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x129101, 0x95) creat(&(0x7f0000000080)='./file0\x00', 0x2b) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) prctl$PR_SET_FPEMU(0xa, 0x3) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newaddr={0x18, 0x14, 0x0, 0x70bd26, 0x25dfdbfb, {0xa, 0x20, 0x4, 0x0, r7}}, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m28.150501097s ago: executing program 1 (id=1632): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0x8ae83) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sync() sync() sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040815}, 0xc4) 4m27.322941241s ago: executing program 1 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 4m26.732304592s ago: executing program 1 (id=1637): timer_create(0x1, &(0x7f0000001180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x129101, 0x95) creat(&(0x7f0000000080)='./file0\x00', 0x2b) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) 4m26.298912414s ago: executing program 1 (id=1639): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a0103b7360000000000000100000008000240000000020900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001"], 0xa4}}, 0x0) syz_pidfd_open(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x8040) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="00180a0000595a10"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) close(0x4) 4m25.491670939s ago: executing program 33 (id=1639): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a0103b7360000000000000100000008000240000000020900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001"], 0xa4}}, 0x0) syz_pidfd_open(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x8040) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="00180a0000595a10"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) close(0x4) 4m9.493000357s ago: executing program 4 (id=1691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 4m8.990053356s ago: executing program 4 (id=1694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 4m8.87041581s ago: executing program 4 (id=1695): openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42382, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x946) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x4, 0x18c6}, 0x0, 0x0) 4m7.325273944s ago: executing program 4 (id=1704): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 4m6.24780614s ago: executing program 4 (id=1712): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002500)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x80) 4m5.791952168s ago: executing program 4 (id=1713): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000cc0)=""/226, 0xe2}], 0x1}, 0xa2a}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 4m4.774730416s ago: executing program 34 (id=1713): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000cc0)=""/226, 0xe2}], 0x1}, 0xa2a}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 4m4.307144252s ago: executing program 2 (id=1719): socket$inet6(0xa, 0x3, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) mlockall(0x3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_ethernet(0x87a2f, 0x0, 0x0) 4m2.331763035s ago: executing program 2 (id=1722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x41}, 0x94) r0 = socket$nl_audit(0x10, 0x3, 0x9) pread64(r0, 0x0, 0x0, 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r2, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) file_setattr(r3, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x846}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8c0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044894) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x10, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendto(r2, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x9, 0x787d, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7, 0x2}) quotactl$Q_GETQUOTA(0x0, &(0x7f0000000380)=@sr0, r7, &(0x7f00000004c0)) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b06e53f07010000002a900683749e821c0b8b9236"], 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x9, 0xf, 0x94b, 0x0, "46406c0ff8e97324106d6409a02711829bbbea0b41b7ed1a500dadf2091fafdb"}) 3m59.944314785s ago: executing program 2 (id=1730): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) 3m59.563286211s ago: executing program 2 (id=1732): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 3m58.515285008s ago: executing program 2 (id=1738): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r1) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000600)=""/86}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) 3m57.819283868s ago: executing program 2 (id=1740): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, 0xffffffffffffffff, 0x6}, 0x50) 3m56.855260677s ago: executing program 35 (id=1740): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, 0xffffffffffffffff, 0x6}, 0x50) 4.75079988s ago: executing program 0 (id=3162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) write(r1, &(0x7f0000000400)='PASV\r\n', 0x6) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 4.357559022s ago: executing program 6 (id=3170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x38}}, 0x0) nanosleep(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a000000000000010010020000126700000000000000"], 0x0) 4.217145158s ago: executing program 6 (id=3174): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @private=0xa010102, @broadcast, @remote}}}}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 3.995943753s ago: executing program 6 (id=3178): socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x200, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0xc580, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x100000, 0x1000, 0x1, 0x3}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xde, 0x2, 0x6, 0x9}, 0x7, 0x4, &(0x7f00000001c0)={{0xffffff07, 0x5, 0x7, 0x8}, &(0x7f0000000180)={{0xb, 0x7, 0xe, 0x6}}}, 0x5, 0x0, 0x3}}) sendfile(r1, r0, 0x0, 0x23b) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, r0, 0x0, &(0x7f0000000040)={0x9b0971, 0x0, '\x00', @string=0x0}}) 3.683740794s ago: executing program 0 (id=3182): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80004700) 3.406598479s ago: executing program 0 (id=3185): socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x200, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0xc580, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x100000, 0x1000, 0x1, 0x3}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xde, 0x2, 0x6, 0x9}, 0x7, 0x4, &(0x7f00000001c0)={{0xffffff07, 0x5, 0x7, 0x8}, &(0x7f0000000180)={{0xb, 0x7, 0xe, 0x6}}}, 0x5, &(0x7f0000000140)="f95028dbd7b5de281c6587347497db989f15f45f9baaeed3ce708462", 0x3}}) sendfile(r1, r0, 0x0, 0x23b) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, r0, 0x0, &(0x7f0000000040)={0x9b0971, 0x0, '\x00', @string=0x0}}) 2.901585614s ago: executing program 7 (id=3189): r0 = syz_ublk_setup_io_uring(0x57c, &(0x7f0000000500)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, 0x0) 1.865585344s ago: executing program 5 (id=3190): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}]}}}]}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 1.624143329s ago: executing program 6 (id=3191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00800008000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.547835856s ago: executing program 5 (id=3192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) nanosleep(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000"], 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x1000000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f40003820000000000000000100100200001267000000000100100201001001017705dc0000000073797a5f74756e000000"], 0x0) 1.431621097s ago: executing program 7 (id=3193): syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[], 0x0) 1.309130899s ago: executing program 8 (id=3194): socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r1}, 0x38) 1.260013504s ago: executing program 6 (id=3195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80004700) 1.187076849s ago: executing program 5 (id=3196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.108826152s ago: executing program 7 (id=3197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 917.048406ms ago: executing program 0 (id=3198): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder}, 0x0}}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) 904.407641ms ago: executing program 5 (id=3199): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x1, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x240048d4) 886.828438ms ago: executing program 6 (id=3200): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000000), &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) listen(r0, 0x0) 870.442488ms ago: executing program 8 (id=3201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 797.525169ms ago: executing program 8 (id=3202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x24) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, 0x0, 0x0, 0x240048d4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56330400000000000001d6e747033a0093b837dc6cc01e32efaec8c7f9010e6e1902a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b", 0x89}], 0x1}, 0x4040) 724.264124ms ago: executing program 0 (id=3203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="0400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400", @ANYBLOB, @ANYRESOCT=r2, @ANYBLOB="040001000400010004000100040001000400010004000100040001000400010004000100", @ANYRES64=r3, @ANYBLOB="0400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYRES8=r2, @ANYRES64=r2], 0x460}}, 0x0) 641.970768ms ago: executing program 5 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) nanosleep(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000"], 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x1000000}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) 503.621807ms ago: executing program 8 (id=3205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00800008000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 375.396294ms ago: executing program 0 (id=3206): r0 = syz_ublk_setup_io_uring(0x57c, &(0x7f0000000500)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, 0x0) 375.232985ms ago: executing program 7 (id=3207): syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[], 0x0) 257.019921ms ago: executing program 8 (id=3208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) nanosleep(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000"], 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x1000000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f40003820000000000000000100100200001267000000000100100201001001017705dc0000000073797a5f74756e000000"], 0x0) 256.720839ms ago: executing program 5 (id=3209): r0 = syz_usb_connect$hid(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x74d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="f9", 0x1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) 238.128115ms ago: executing program 7 (id=3210): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80004700) 82.682927ms ago: executing program 8 (id=3211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 0s ago: executing program 7 (id=3212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): msi2500 6-1:1.0: probe with driver msi2500 failed with error -23 [ 596.659526][ T6159] tipc: Left network mode [ 596.933230][ T5683] usb 5-1: USB disconnect, device number 60 [ 597.022836][T11683] netlink: 'syz.0.1646': attribute type 2 has an invalid length. [ 597.277540][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 597.347755][ T8496] usb 3-1: USB disconnect, device number 48 [ 597.488184][ T5624] Bluetooth: hci0: command tx timeout [ 597.868495][ T6159] hsr_slave_0: left promiscuous mode [ 597.872597][ T6159] hsr_slave_1: left promiscuous mode [ 598.028862][ T6159] veth1_macvtap: left promiscuous mode [ 598.028921][ T6159] veth0_macvtap: left promiscuous mode [ 598.029026][ T6159] veth1_vlan: left promiscuous mode [ 598.029095][ T6159] veth0_vlan: left promiscuous mode [ 599.215315][ T5690] usb 6-1: USB disconnect, device number 2 [ 599.578317][ T5624] Bluetooth: hci0: command tx timeout [ 599.970704][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 600.606952][T11645] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.607130][T11645] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.607400][T11645] bridge_slave_0: entered allmulticast mode [ 600.639346][T11645] bridge_slave_0: entered promiscuous mode [ 600.705168][T11645] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.705317][T11645] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.705439][T11645] bridge_slave_1: entered allmulticast mode [ 600.722610][T11645] bridge_slave_1: entered promiscuous mode [ 600.878417][ T6159] IPVS: stop unused estimator thread 0... [ 601.051565][T11645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.095292][T11645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.399793][T11645] team0: Port device team_slave_0 added [ 601.441583][T11645] team0: Port device team_slave_1 added [ 601.648477][ T5624] Bluetooth: hci0: command tx timeout [ 601.708367][T11645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.708402][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.708435][T11645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.766834][T11645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.766853][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.766878][T11645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.070986][T11645] hsr_slave_0: entered promiscuous mode [ 602.075089][T11645] hsr_slave_1: entered promiscuous mode [ 602.079950][T11645] debugfs: 'hsr0' already exists in 'hsr' [ 602.080021][T11645] Cannot create hsr debugfs directory [ 602.090774][ T25] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 602.239547][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 602.239588][ T25] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 602.240635][ T25] usb 5-1: config index 0 descriptor too short (expected 43, got 25) [ 602.240665][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.243209][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 602.243248][ T25] usb 5-1: Product: syz [ 602.243263][ T25] usb 5-1: Manufacturer: syz [ 602.578190][ T5690] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 602.648818][ T25] msi2500 5-1:1.0: Registered as swradio24 [ 602.648861][ T25] msi2500 5-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 602.730362][ T5690] usb 6-1: not running at top speed; connect to a high speed hub [ 602.730408][ T5690] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 602.764964][ T5690] usb 6-1: config index 0 descriptor too short (expected 43, got 25) [ 602.765000][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.793972][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 602.794009][ T5690] usb 6-1: Product: syz [ 602.794025][ T5690] usb 6-1: Manufacturer: syz [ 603.102945][ T5690] videodev: could not get a free minor [ 603.102970][ T5690] msi2500 6-1:1.0: Failed to register as video device (-23) [ 603.144153][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.146452][ T5690] msi2500 6-1:1.0: probe with driver msi2500 failed with error -23 [ 603.167012][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.775492][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 604.148539][T11645] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 604.204237][T11645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 604.205271][T11645] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 604.246030][T11645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.257881][T11645] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 604.301188][T11645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.315997][T11645] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 604.455217][T11645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.810568][ T10] usb 5-1: USB disconnect, device number 61 [ 604.917302][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.061904][T11645] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.083781][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.083891][ T6157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.121130][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.121236][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.569612][ T25] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 605.622995][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.721065][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 605.721099][ T25] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 605.760758][ T25] usb 5-1: config index 0 descriptor too short (expected 43, got 25) [ 605.760789][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.765970][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 605.765995][ T25] usb 5-1: Product: syz [ 605.766010][ T25] usb 5-1: Manufacturer: syz [ 605.891853][ T25] msi2500 5-1:1.0: Registered as swradio24 [ 605.891876][ T25] msi2500 5-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 606.064785][ T10] usb 6-1: USB disconnect, device number 3 [ 606.115980][T11645] veth0_vlan: entered promiscuous mode [ 606.203897][T11809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.204375][T11809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.270854][T11645] veth1_vlan: entered promiscuous mode [ 606.442662][T11645] veth0_macvtap: entered promiscuous mode [ 606.486627][T11645] veth1_macvtap: entered promiscuous mode [ 606.550662][T11645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.583600][T11645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.621318][ T6157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.650952][ T5978] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.651272][ T5978] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.719979][ T5978] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.917867][ T5976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.917888][ T5976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.042006][ T6157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.042029][ T6157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.097868][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1675'. [ 607.128354][ T5690] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 607.278363][ T5690] usb 1-1: Using ep0 maxpacket: 16 [ 607.284007][ T5690] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 607.286274][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.286309][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.286332][ T5690] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 607.286384][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.357321][ T5690] usb 1-1: config 0 descriptor?? [ 607.735455][T11835] ovs-dp0: entered promiscuous mode [ 607.936576][ T5690] usbhid 1-1:0.0: can't add hid device: -71 [ 607.936670][ T5690] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 607.963375][ T5690] usb 1-1: USB disconnect, device number 51 [ 608.136016][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1683'. [ 608.158166][ T5683] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 608.310507][ T5683] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 608.312125][ T5683] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 608.312162][ T5683] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 608.312203][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.325522][T11857] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 608.388982][ T5683] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.660540][ T5712] usb 5-1: USB disconnect, device number 62 [ 609.280096][ T5712] usb 3-1: USB disconnect, device number 49 [ 609.706560][T11911] netlink: 'syz.6.1696': attribute type 2 has an invalid length. [ 610.218944][ T5697] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 610.382274][ T5697] usb 6-1: Using ep0 maxpacket: 16 [ 610.384499][ T5697] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 610.409792][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.409830][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.409857][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 610.409905][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.469515][ T5697] usb 6-1: config 0 descriptor?? [ 610.535773][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1693'. [ 610.592997][ T5712] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 610.746125][ T5712] usb 3-1: not running at top speed; connect to a high speed hub [ 610.746156][ T5712] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 610.765728][ T5712] usb 3-1: config index 0 descriptor too short (expected 43, got 25) [ 610.765761][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.805067][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 610.805114][ T5712] usb 3-1: Product: syz [ 610.805130][ T5712] usb 3-1: Manufacturer: syz [ 611.151131][T11920] ovs-dp0: entered promiscuous mode [ 611.215659][ T5697] usbhid 6-1:0.0: can't add hid device: -71 [ 611.215771][ T5697] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 611.305211][ T5697] usb 6-1: USB disconnect, device number 4 [ 611.345124][T11947] fuse: Unknown parameter 'user_i00000000000000000000' [ 611.355812][ T5712] msi2500 3-1:1.0: Registered as swradio24 [ 611.355843][ T5712] msi2500 3-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 612.009338][ T5683] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 612.174770][ T5683] usb 7-1: not running at top speed; connect to a high speed hub [ 612.174842][ T5683] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 612.221791][ T5683] usb 7-1: config index 0 descriptor too short (expected 43, got 25) [ 612.221829][ T5683] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.247239][ T5683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 612.247267][ T5683] usb 7-1: Product: syz [ 612.247281][ T5683] usb 7-1: Manufacturer: syz [ 612.474806][ T5683] videodev: could not get a free minor [ 612.474826][ T5683] msi2500 7-1:1.0: Failed to register as video device (-23) [ 612.518867][ T5683] msi2500 7-1:1.0: probe with driver msi2500 failed with error -23 [ 612.628672][ T5690] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 612.680284][ T5683] usb 7-1: USB disconnect, device number 2 [ 612.799026][ T5690] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.801618][ T5690] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.801662][ T5690] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 612.801708][ T5690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.862934][T11969] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 612.885700][ T5690] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 613.435354][ T5690] usb 6-1: USB disconnect, device number 5 [ 613.742198][ T25] usb 3-1: USB disconnect, device number 50 [ 613.918833][T11323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.924221][T11323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.924963][T11323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.925911][T11323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.926541][T11323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 614.120014][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 614.288308][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 614.294679][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 614.296518][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.296562][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.296586][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 614.296628][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.335864][ T5712] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 614.375489][ T10] usb 7-1: config 0 descriptor?? [ 614.533997][ T5712] usb 1-1: not running at top speed; connect to a high speed hub [ 614.534037][ T5712] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 614.558107][ T5712] usb 1-1: config index 0 descriptor too short (expected 43, got 25) [ 614.558139][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.595149][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 614.595222][ T5712] usb 1-1: Product: syz [ 614.595242][ T5712] usb 1-1: Manufacturer: syz [ 614.730457][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 614.783344][T11987] ovs-dp0: entered promiscuous mode [ 614.838258][ T5690] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 614.897673][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.907218][ T5712] msi2500 1-1:1.0: Registered as swradio24 [ 614.907249][ T5712] msi2500 1-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 614.942758][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.012011][ T5690] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 615.047076][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.047104][ T5690] usb 3-1: Product: syz [ 615.047119][ T5690] usb 3-1: Manufacturer: syz [ 615.047133][ T5690] usb 3-1: SerialNumber: syz [ 615.127064][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.127101][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.127126][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.127143][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.127160][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.127176][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.127212][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.127234][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.127256][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.127280][ T10] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 615.225126][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001B/input/input15 [ 615.476449][ T5690] rtl8150 3-1:1.0: couldn't reset the device [ 615.476777][ T5690] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 615.521433][ T5690] usb 3-1: USB disconnect, device number 51 [ 615.676059][ T10] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 615.704038][ T10] usb 7-1: USB disconnect, device number 3 [ 616.059754][ T5624] Bluetooth: hci1: command tx timeout [ 616.089155][T12013] fido_id[12013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 616.649782][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 616.652893][T11994] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.653983][T11994] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.654460][T11994] bridge_slave_0: entered allmulticast mode [ 616.695679][T11994] bridge_slave_0: entered promiscuous mode [ 616.732037][T11994] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.733002][T11994] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.733189][T11994] bridge_slave_1: entered allmulticast mode [ 616.749809][T11994] bridge_slave_1: entered promiscuous mode [ 616.799988][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 616.801604][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 616.802885][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.802919][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.802943][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 616.802990][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.866776][ T25] usb 3-1: config 0 descriptor?? [ 616.987186][T11994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.011108][T11994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.132518][T11994] team0: Port device team_slave_0 added [ 617.141845][T11994] team0: Port device team_slave_1 added [ 617.331801][T12019] ovs-dp0: entered promiscuous mode [ 617.360708][T11994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.360749][T11994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.360776][T11994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.365975][ T988] usb 1-1: USB disconnect, device number 52 [ 617.392891][T11994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.392929][T11994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.393033][T11994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.569662][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001C/input/input16 [ 617.665279][ T25] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 617.763153][T11994] hsr_slave_0: entered promiscuous mode [ 617.765246][T11994] hsr_slave_1: entered promiscuous mode [ 617.776262][T11994] debugfs: 'hsr0' already exists in 'hsr' [ 617.776320][T11994] Cannot create hsr debugfs directory [ 617.818464][ T25] usb 3-1: USB disconnect, device number 52 [ 617.939075][ T988] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 617.944680][T12044] fido_id[12044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 618.089241][ T988] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.090367][ T988] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.090389][ T988] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 618.090434][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.096402][T12042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 618.128335][T11323] Bluetooth: hci1: command tx timeout [ 618.158327][ T988] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.641214][ T10] usb 1-1: USB disconnect, device number 53 [ 618.677867][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 618.837185][T11994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 618.893189][T11994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.897529][T11994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 618.934339][T11994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.936478][T11994] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 618.966753][T11994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.967628][T11994] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 618.982848][T12053] fuse: Bad value for 'fd' [ 619.002786][T11994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.326491][T11994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.413793][T11994] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.438502][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.438625][ T6155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.463917][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.464020][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.768821][ T5697] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 619.796370][T11994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.912710][T12075] syz_tun: entered allmulticast mode [ 619.931318][ T5697] usb 1-1: not running at top speed; connect to a high speed hub [ 619.931360][ T5697] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 619.934943][ T5697] usb 1-1: config index 0 descriptor too short (expected 43, got 25) [ 619.934990][ T5697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.940433][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 619.940518][ T5697] usb 1-1: Product: syz [ 619.940578][ T5697] usb 1-1: Manufacturer: syz [ 620.206341][ T5697] msi2500 1-1:1.0: Registered as swradio24 [ 620.208166][T11323] Bluetooth: hci1: command tx timeout [ 620.219310][ T5697] msi2500 1-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 620.280903][T11994] veth0_vlan: entered promiscuous mode [ 620.365296][T11994] veth1_vlan: entered promiscuous mode [ 620.968241][ T5683] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 621.094383][ T5976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.128057][ T5683] usb 6-1: Using ep0 maxpacket: 16 [ 621.128874][ T5683] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.130130][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.130221][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.130248][ T5683] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.130294][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.223726][ T5683] usb 6-1: config 0 descriptor?? [ 621.451581][T12072] syz_tun: left allmulticast mode [ 621.457863][T12082] ovs-dp0: left promiscuous mode [ 621.619840][T11994] veth0_macvtap: entered promiscuous mode [ 621.775299][ T5976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.876607][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 621.883322][T11994] veth1_macvtap: entered promiscuous mode [ 621.892060][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 621.897336][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 621.924922][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 621.946717][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 622.019726][T12087] ovs-dp0: entered promiscuous mode [ 622.060572][ T5683] usbhid 6-1:0.0: can't add hid device: -71 [ 622.060715][ T5683] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 622.085697][ T5683] usb 6-1: USB disconnect, device number 6 [ 622.223567][ T5976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.263061][T11994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.288753][ T5624] Bluetooth: hci1: command tx timeout [ 622.304800][T11994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.445912][ T5976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.594941][T12094] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1743'. [ 622.768436][ T6157] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.773012][ T5978] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.773077][ T5978] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.773115][ T5978] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.978220][ T8496] usb 1-1: USB disconnect, device number 54 [ 623.080649][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1746'. [ 623.161776][ T5683] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 623.321029][ T5683] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 623.322248][ T5683] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.322287][ T5683] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 623.322329][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.388741][T12099] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 623.436687][ T5683] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.895024][ T5697] usb 6-1: USB disconnect, device number 7 [ 623.968120][ T5624] Bluetooth: hci2: command tx timeout [ 624.228571][ T5976] bond0 (unregistering): Released all slaves [ 624.354890][ T5976] ovs-dp0: left promiscuous mode [ 624.382425][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.382484][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.523261][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.523283][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.690681][ T5976] tipc: Left network mode [ 624.715543][T12117] syzkaller0: entered promiscuous mode [ 624.715558][T12117] syzkaller0: entered allmulticast mode [ 624.717802][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.717815][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.893472][T12117] tipc: Started in network mode [ 624.893507][T12117] tipc: Node identity c21a36e99fc2, cluster identity 4711 [ 624.914515][T12117] tipc: Enabled bearer , priority 0 [ 625.019935][T12117] tipc: Resetting bearer [ 625.098514][ T5683] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 625.159037][T12116] tipc: Resetting bearer [ 625.199703][T12116] tipc: Disabling bearer [ 625.268707][ T5683] usb 6-1: Using ep0 maxpacket: 16 [ 625.269462][ T5683] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 625.270510][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.270543][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.270577][ T5683] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 625.270620][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.277669][ T5683] usb 6-1: config 0 descriptor?? [ 625.406647][ T5976] hsr_slave_0: left promiscuous mode [ 625.407580][ T5976] hsr_slave_1: left promiscuous mode [ 625.451944][ T5976] veth1_macvtap: left promiscuous mode [ 625.451985][ T5976] veth0_macvtap: left promiscuous mode [ 625.452095][ T5976] veth1_vlan: left promiscuous mode [ 625.452181][ T5976] veth0_vlan: left promiscuous mode [ 625.908127][ T988] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 626.048968][ T5624] Bluetooth: hci2: command tx timeout [ 626.059461][ T988] usb 1-1: Using ep0 maxpacket: 32 [ 626.071692][ T988] usb 1-1: unable to get BOS descriptor or descriptor too short [ 626.071736][ T988] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 626.074653][ T988] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 626.074675][ T988] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 626.074694][ T988] usb 1-1: config 14 has no interface number 0 [ 626.074709][ T988] usb 1-1: config 14 has no interface number 1 [ 626.074764][ T988] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 626.074786][ T988] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 626.074809][ T988] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 626.074834][ T988] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 626.074859][ T988] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 626.077603][ T988] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.077631][ T988] usb 1-1: config 14 interface 57 has no altsetting 0 [ 626.077648][ T988] usb 1-1: config 14 interface 228 has no altsetting 0 [ 626.096178][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.096248][ T988] usb 1-1: Product: syz [ 626.096291][ T988] usb 1-1: Manufacturer: syz [ 626.096330][ T988] usb 1-1: SerialNumber: syz [ 626.659671][ T988] legousbtower 1-1:14.57: interrupt endpoints not found [ 626.881635][T12141] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1753'. [ 626.927004][T12123] ovs-dp0: left promiscuous mode [ 627.012517][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 627.026446][T12090] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.026548][T12090] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.026685][T12090] bridge_slave_0: entered allmulticast mode [ 627.062839][T12090] bridge_slave_0: entered promiscuous mode [ 627.074618][ T988] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 627.090939][ T5683] usbhid 6-1:0.0: can't add hid device: -71 [ 627.091044][ T5683] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 627.102409][T12090] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.102637][T12090] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.102976][T12090] bridge_slave_1: entered allmulticast mode [ 627.134047][ T5683] usb 6-1: USB disconnect, device number 8 [ 627.144097][T12090] bridge_slave_1: entered promiscuous mode [ 627.197406][ T988] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 627.385798][T12090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.410628][T12090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.497462][T12090] team0: Port device team_slave_0 added [ 627.506123][T12090] team0: Port device team_slave_1 added [ 627.579718][T12090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.579735][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.579760][T12090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.587602][T12090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.587617][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.587640][T12090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.748536][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1757'. [ 627.903766][T12090] hsr_slave_0: entered promiscuous mode [ 627.924480][T12090] hsr_slave_1: entered promiscuous mode [ 627.932576][T12090] debugfs: 'hsr0' already exists in 'hsr' [ 627.932637][T12090] Cannot create hsr debugfs directory [ 627.961699][ T8326] usb 1-1: USB disconnect, device number 55 [ 628.023130][ T8326] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 628.129355][ T5624] Bluetooth: hci2: command tx timeout [ 628.242275][T12143] syz.6.1754 (12143): drop_caches: 2 [ 628.435643][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 628.534025][T12090] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 628.555526][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.557563][T12090] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 628.587781][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.595865][T12090] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 628.611186][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.611998][T12090] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 628.635045][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 628.641306][T12152] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 628.799257][T12090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.804938][T12152] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 628.806270][T12152] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 628.806301][T12152] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 628.806339][T12152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.864597][T12183] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 628.882183][T12090] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.896838][T12152] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 628.912316][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.912417][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.953268][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.953388][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.305660][T12090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.569299][T12090] veth0_vlan: entered promiscuous mode [ 629.607254][T12090] veth1_vlan: entered promiscuous mode [ 629.670364][ T8495] usb 7-1: USB disconnect, device number 4 [ 629.719685][T12090] veth0_macvtap: entered promiscuous mode [ 629.756631][T12090] veth1_macvtap: entered promiscuous mode [ 629.844497][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1766'. [ 629.905458][T12090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.015377][T12090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.155724][ T6173] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.157126][ T5976] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.157508][ T5976] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.157556][ T5976] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.209471][ T5624] Bluetooth: hci2: command tx timeout [ 630.680452][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.680478][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.844858][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1769'. [ 630.916220][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.916248][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.958400][ T988] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 631.118858][ T988] usb 7-1: Using ep0 maxpacket: 16 [ 631.120587][ T988] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 631.123452][ T988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.123487][ T988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.123510][ T988] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.123555][ T988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.214260][ T988] usb 7-1: config 0 descriptor?? [ 631.444253][T12222] ovs-dp0: left promiscuous mode [ 631.569663][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 631.584606][ T988] usbhid 7-1:0.0: can't add hid device: -71 [ 631.584922][ T988] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 631.626261][ T988] usb 7-1: USB disconnect, device number 5 [ 632.237809][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1741'. [ 633.009488][T12228] syz.5.1770 (12228): drop_caches: 2 [ 633.072159][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1776'. [ 633.396263][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1780'. [ 633.538589][ T8496] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 633.691198][ T8496] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 633.693557][ T8496] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 633.693593][ T8496] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 633.693635][ T8496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.745499][T12265] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 633.771393][ T8496] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 634.059803][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1786'. [ 634.428474][ T8495] usb 6-1: USB disconnect, device number 9 [ 635.453211][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1798'. [ 637.183493][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 637.348967][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 637.350190][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.350218][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 637.350256][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.353606][ T9] usb 9-1: config 0 descriptor?? [ 637.455368][T12369] ovs-dp0: left promiscuous mode [ 637.634585][T12363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.680478][T12363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.733281][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1804'. [ 637.825511][T12363] vlan2: entered promiscuous mode [ 637.825553][T12363] syz_tun: entered promiscuous mode [ 638.143612][ T9] usb 9-1: USB disconnect, device number 2 [ 638.910179][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 639.145211][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 639.878722][ T5690] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 640.055913][ T5690] usb 7-1: not running at top speed; connect to a high speed hub [ 640.055967][ T5690] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 640.083392][ T5690] usb 7-1: config index 0 descriptor too short (expected 43, got 25) [ 640.083421][ T5690] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.083437][ T5690] usb 7-1: config 0 has no interfaces? [ 640.148228][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 640.148270][ T5690] usb 7-1: Product: syz [ 640.148288][ T5690] usb 7-1: Manufacturer: syz [ 640.178827][ T5690] usb 7-1: config 0 descriptor?? [ 643.422014][T12480] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1835'. [ 643.439916][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 643.461133][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 643.462697][ T9] usb 7-1: USB disconnect, device number 6 [ 643.492182][ T988] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 643.639247][ T988] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 643.643445][ T988] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 643.643484][ T988] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 643.643527][ T988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.690722][T12475] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 643.695881][ T988] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 644.056827][T12492] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1841'. [ 644.067208][ T988] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 644.109647][ T9] usb 6-1: USB disconnect, device number 10 [ 644.244704][ T988] usb 7-1: not running at top speed; connect to a high speed hub [ 644.244738][ T988] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 644.246073][ T988] usb 7-1: config index 0 descriptor too short (expected 43, got 25) [ 644.246098][ T988] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.246116][ T988] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 644.298302][ T988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 644.298332][ T988] usb 7-1: Product: syz [ 644.298348][ T988] usb 7-1: Manufacturer: syz [ 645.898672][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 646.082869][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 646.087981][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.088006][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 646.088058][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.139802][ T9] usb 9-1: config 0 descriptor?? [ 646.376101][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.376484][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.403708][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1851'. [ 646.464935][T12520] vlan2: entered promiscuous mode [ 646.577075][ T9] usb 9-1: USB disconnect, device number 3 [ 646.641370][ T988] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 646.790153][ T988] usb 6-1: not running at top speed; connect to a high speed hub [ 646.790182][ T988] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 646.795273][ T988] usb 6-1: config index 0 descriptor too short (expected 43, got 25) [ 646.795291][ T988] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.795320][ T988] usb 6-1: config 0 has no interfaces? [ 646.849237][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 646.849258][ T988] usb 6-1: Product: syz [ 646.849269][ T988] usb 6-1: Manufacturer: syz [ 646.855018][ T988] usb 6-1: config 0 descriptor?? [ 647.393245][ T9] usb 7-1: USB disconnect, device number 7 [ 647.794435][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1859'. [ 647.796255][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1859'. [ 647.883834][T12540] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1857'. [ 648.094007][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1861'. [ 648.117747][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1861'. [ 649.984077][ T9] usb 6-1: USB disconnect, device number 11 [ 650.117787][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1868'. [ 650.130425][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1869'. [ 650.261441][T12578] ipvlan2: entered allmulticast mode [ 650.261471][T12578] syz_tun: entered allmulticast mode [ 651.525577][T12595] syz.6.1874 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 651.525642][T12595] CPU: 0 UID: 0 PID: 12595 Comm: syz.6.1874 Not tainted syzkaller #0 PREEMPT(full) [ 651.525671][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.525694][T12595] Call Trace: [ 651.525707][T12595] [ 651.525719][T12595] dump_stack_lvl+0xe8/0x150 [ 651.525762][T12595] dump_header+0xd3/0x4b0 [ 651.525800][T12595] oom_kill_process+0x3ab/0x9e0 [ 651.525837][T12595] out_of_memory+0x1064/0x1480 [ 651.525865][T12595] ? try_charge_memcg+0xc32/0x15e0 [ 651.525910][T12595] ? __pfx_out_of_memory+0x10/0x10 [ 651.525937][T12595] ? do_raw_spin_unlock+0xf5/0x200 [ 651.525983][T12595] try_charge_memcg+0xcdf/0x15e0 [ 651.526044][T12595] ? __pfx_try_charge_memcg+0x10/0x10 [ 651.526094][T12595] ? charge_memcg+0x47/0x310 [ 651.526135][T12595] charge_memcg+0x1dd/0x310 [ 651.526166][T12595] __mem_cgroup_charge+0x25/0x80 [ 651.526196][T12595] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 651.526229][T12595] ? filemap_get_entry+0xcd/0x3f0 [ 651.526269][T12595] ? __pfx_filemap_get_entry+0x10/0x10 [ 651.526298][T12595] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 651.526349][T12595] shmem_get_folio_gfp+0x5da/0x16d0 [ 651.526384][T12595] shmem_symlink+0x293/0x4d0 [ 651.526407][T12595] vfs_symlink+0x18b/0x330 [ 651.526427][T12595] ? security_path_symlink+0xfd/0x360 [ 651.526543][T12595] filename_symlinkat+0x1cd/0x410 [ 651.526567][T12595] ? __pfx_filename_symlinkat+0x10/0x10 [ 651.526588][T12595] ? getname_long+0xbc/0x130 [ 651.526613][T12595] ? do_getname+0x151/0x250 [ 651.526666][T12595] __se_sys_symlink+0x4d/0x2b0 [ 651.526696][T12595] __do_fast_syscall_32+0x27a/0x6a0 [ 651.526725][T12595] ? do_fast_syscall_32+0x33/0x70 [ 651.526751][T12595] ? irqentry_exit+0x10f/0x910 [ 651.526773][T12595] ? trace_irq_disable+0x3b/0x140 [ 651.526801][T12595] do_fast_syscall_32+0x33/0x70 [ 651.526828][T12595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 651.526859][T12595] RIP: 0023:0xf7f160ec [ 651.526880][T12595] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 651.526895][T12595] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 651.526938][T12595] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000440 [ 651.526956][T12595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 651.526970][T12595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 651.526983][T12595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 651.526999][T12595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 651.527035][T12595] [ 651.781580][ T988] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 651.858293][T12595] memory: usage 8kB, limit 8kB, failcnt 26 [ 651.858313][T12595] memory+swap: usage 16kB, limit 9007199254740988kB, failcnt 0 [ 651.858324][T12595] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 651.858334][T12595] Memory cgroup stats for /syz6/test: [ 651.858840][T12595] cache 0 [ 651.858849][T12595] rss 0 [ 651.858854][T12595] rss_huge 0 [ 651.858860][T12595] shmem 0 [ 651.858865][T12595] mapped_file 0 [ 651.858871][T12595] dirty 0 [ 651.858876][T12595] writeback 0 [ 651.858881][T12595] workingset_refault_anon 0 [ 651.858888][T12595] workingset_refault_file 0 [ 651.858894][T12595] swap 8192 [ 651.858899][T12595] swapcached 8192 [ 651.858905][T12595] pgpgin 2 [ 651.858910][T12595] pgpgout 2 [ 651.858915][T12595] pgfault 7 [ 651.858921][T12595] pgmajfault 0 [ 651.858926][T12595] inactive_anon 0 [ 651.858932][T12595] active_anon 0 [ 651.858938][T12595] inactive_file 0 [ 651.858943][T12595] active_file 0 [ 651.858949][T12595] unevictable 0 [ 651.858954][T12595] hierarchical_memory_limit 8192 [ 651.858961][T12595] hierarchical_memsw_limit 9223372036854771712 [ 651.858968][T12595] total_cache 0 [ 651.858973][T12595] total_rss 0 [ 651.858979][T12595] total_rss_huge 0 [ 651.858985][T12595] total_shmem 0 [ 651.858990][T12595] total_mapped_file 0 [ 651.858996][T12595] total_dirty 0 [ 651.859002][T12595] total_writeback 0 [ 651.859007][T12595] total_workingset_refault_anon 0 [ 651.859014][T12595] total_workingset_refault_file 0 [ 651.859020][T12595] total_swap 8192 [ 651.859026][T12595] total_swapcached 8192 [ 651.859032][T12595] total_pgpgin 2 [ 651.859038][T12595] total_pgpgout 2 [ 651.859043][T12595] total_pgfault 7 [ 651.859049][T12595] total_pgmajfault 0 [ 651.859055][T12595] total_inactive_anon 0 [ 651.859061][T12595] total_active_anon 0 [ 651.859066][T12595] total_inactive_file 0 [ 651.859072][T12595] total_active_file 0 [ 651.859078][T12595] total_unevictable 0 [ 651.859085][T12595] anon_cost 0 [ 651.859090][T12595] file_cost 0 [ 651.859096][T12595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.1874,pid=12593,uid=0 [ 651.861405][T12595] Memory cgroup out of memory: Killed process 12593 (syz.6.1874) total-vm:104208kB, anon-rss:1304kB, file-rss:23128kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 651.990452][ T988] usb 6-1: Using ep0 maxpacket: 32 [ 652.022021][ T988] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 652.058475][ T988] usb 6-1: config 0 has no interfaces? [ 652.112636][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.112720][ T988] usb 6-1: Product: syz [ 652.112759][ T988] usb 6-1: Manufacturer: syz [ 652.112791][ T988] usb 6-1: SerialNumber: syz [ 652.167407][ T988] usb 6-1: config 0 descriptor?? [ 652.339067][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1876'. [ 652.354200][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1876'. [ 652.557234][ T9] usb 6-1: USB disconnect, device number 12 [ 653.058136][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 653.229586][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 653.229627][ T9] usb 9-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 653.233537][ T9] usb 9-1: config index 0 descriptor too short (expected 43, got 25) [ 653.233572][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.233595][ T9] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 653.298155][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 653.298189][ T9] usb 9-1: Product: syz [ 653.298206][ T9] usb 9-1: Manufacturer: syz [ 653.524219][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1881'. [ 654.748081][ T988] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 654.900230][ T988] usb 6-1: Using ep0 maxpacket: 8 [ 654.901156][ T988] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 654.901854][ T988] usb 6-1: config 0 has no interfaces? [ 654.903629][ T988] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 654.903669][ T988] usb 6-1: Product: syz [ 654.903680][ T988] usb 6-1: SerialNumber: syz [ 654.983505][ T988] usb 6-1: config 0 descriptor?? [ 655.722124][ T988] usb 6-1: USB disconnect, device number 13 [ 656.434348][ T988] usb 9-1: USB disconnect, device number 4 [ 656.552660][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1886'. [ 656.555864][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1886'. [ 656.981521][ T988] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 657.018176][ T5683] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 657.128645][ T988] usb 9-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 657.129927][ T988] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 657.129956][ T988] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.129981][ T988] usb 9-1: config 0 interface 0 has no altsetting 0 [ 657.130018][ T988] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.132789][ T988] usb 9-1: config 0 descriptor?? [ 657.624935][ T988] elan 0003:04F3:074D.001D: ignoring exceeding usage max [ 657.698648][ T5979] IPVS: starting estimator thread 0... [ 657.725178][ T988] elan 0003:04F3:074D.001D: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.8-1/input0 [ 657.789455][T12676] IPVS: using max 37 ests per chain, 88800 per kthread [ 658.020246][ T8496] usb 9-1: USB disconnect, device number 5 [ 658.041613][T12679] fido_id[12679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 658.829813][ T5979] IPVS: starting estimator thread 0... [ 658.918266][T12700] IPVS: using max 26 ests per chain, 62400 per kthread [ 660.517025][ T5683] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 660.518079][ T5683] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 660.518139][ T5683] usb 7-1: can't read configurations, error -71 [ 661.368341][ T5683] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 661.543623][ T5683] usb 7-1: not running at top speed; connect to a high speed hub [ 661.543653][ T5683] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 661.556711][ T5683] usb 7-1: config index 0 descriptor too short (expected 43, got 25) [ 661.556740][ T5683] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.556762][ T5683] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 661.587776][ T5683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 661.587807][ T5683] usb 7-1: Product: syz [ 661.587823][ T5683] usb 7-1: Manufacturer: syz [ 662.730330][T12759] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 663.085446][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1910'. [ 663.131607][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1910'. [ 663.781078][T12152] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 663.796883][ T5979] IPVS: starting estimator thread 0... [ 663.878249][T12775] IPVS: using max 37 ests per chain, 88800 per kthread [ 663.904803][T12778] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 663.938033][T12152] usb 9-1: Using ep0 maxpacket: 16 [ 663.939750][T12152] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 663.940725][T12152] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.940752][T12152] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.940773][T12152] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 663.940814][T12152] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.942800][T12152] usb 9-1: config 0 descriptor?? [ 664.354669][ T5690] usb 7-1: USB disconnect, device number 9 [ 664.404694][T12152] hid_parser_main: 10 callbacks suppressed [ 664.404720][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.404753][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.404783][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.404812][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.404852][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.404880][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.404915][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.404939][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.404964][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.404988][T12152] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 664.507686][T12152] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.001E/input/input18 [ 664.604238][T12152] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 664.652125][T12152] usb 9-1: USB disconnect, device number 6 [ 664.994569][T12791] fido_id[12791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 665.272068][ T5979] IPVS: starting estimator thread 0... [ 665.306478][T12802] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 665.358230][T12800] IPVS: using max 38 ests per chain, 91200 per kthread [ 665.554216][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'. [ 665.572571][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'. [ 666.129346][T12151] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 666.278025][T12151] usb 9-1: Using ep0 maxpacket: 8 [ 666.279423][T12151] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 666.280268][T12151] usb 9-1: config 0 has no interfaces? [ 666.282213][T12151] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 666.282237][T12151] usb 9-1: Product: syz [ 666.282253][T12151] usb 9-1: SerialNumber: syz [ 666.289052][T12151] usb 9-1: config 0 descriptor?? [ 666.660730][T12151] usb 9-1: USB disconnect, device number 7 [ 666.870320][ T988] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 667.034351][ T988] usb 1-1: not running at top speed; connect to a high speed hub [ 667.034380][ T988] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 667.055696][ T988] usb 1-1: config index 0 descriptor too short (expected 43, got 25) [ 667.055719][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.055733][ T988] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 667.102911][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 667.102939][ T988] usb 1-1: Product: syz [ 667.102950][ T988] usb 1-1: Manufacturer: syz [ 669.780459][ T988] usb 1-1: USB disconnect, device number 56 [ 670.069947][T12863] syzkaller0: entered promiscuous mode [ 670.069963][T12863] syzkaller0: entered allmulticast mode [ 672.038040][ T8496] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 672.189599][ T8496] usb 1-1: Using ep0 maxpacket: 32 [ 672.190407][ T8496] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 672.190939][ T8496] usb 1-1: config 0 has no interfaces? [ 672.193720][ T8496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.193746][ T8496] usb 1-1: Product: syz [ 672.193763][ T8496] usb 1-1: Manufacturer: syz [ 672.193779][ T8496] usb 1-1: SerialNumber: syz [ 672.269218][ T8496] usb 1-1: config 0 descriptor?? [ 672.404384][T12151] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 672.559542][T12151] usb 7-1: Using ep0 maxpacket: 32 [ 672.562191][T12151] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 672.567037][T12151] usb 7-1: config 0 has no interfaces? [ 672.597346][T12151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.597387][T12151] usb 7-1: Product: syz [ 672.597404][T12151] usb 7-1: Manufacturer: syz [ 672.597419][T12151] usb 7-1: SerialNumber: syz [ 672.630543][T12151] usb 7-1: config 0 descriptor?? [ 673.034701][T12152] usb 1-1: USB disconnect, device number 57 [ 673.709943][ T8496] usb 7-1: USB disconnect, device number 10 [ 676.588704][ T5690] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 676.742057][ T5690] usb 9-1: not running at top speed; connect to a high speed hub [ 676.742099][ T5690] usb 9-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 676.772507][ T5690] usb 9-1: config index 0 descriptor too short (expected 43, got 25) [ 676.772529][ T5690] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.772543][ T5690] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 676.820981][ T5690] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 676.821004][ T5690] usb 9-1: Product: syz [ 676.821015][ T5690] usb 9-1: Manufacturer: syz [ 678.063358][T12960] syzkaller0: entered promiscuous mode [ 678.063387][T12960] syzkaller0: entered allmulticast mode [ 678.626008][ T5979] IPVS: starting estimator thread 0... [ 678.688947][T12973] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 678.708478][T12971] IPVS: using max 34 ests per chain, 81600 per kthread [ 679.709667][ T10] usb 9-1: USB disconnect, device number 8 [ 681.838154][T12151] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 681.991860][T12151] usb 7-1: not running at top speed; connect to a high speed hub [ 681.991895][T12151] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 681.994125][T12151] usb 7-1: config index 0 descriptor too short (expected 43, got 25) [ 681.994163][T12151] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.994180][T12151] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 682.055957][T12151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 682.055991][T12151] usb 7-1: Product: syz [ 682.056003][T12151] usb 7-1: Manufacturer: syz [ 682.563731][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 685.040241][ T10] usb 7-1: USB disconnect, device number 11 [ 685.266793][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2013'. [ 685.291645][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.291665][T13073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.294083][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.294099][T13073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.814727][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.814792][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.001445][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2017'. [ 686.411070][T12151] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 686.441370][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 686.475032][ T5976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.561729][T12151] usb 6-1: not running at top speed; connect to a high speed hub [ 686.561799][T12151] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 686.564453][T12151] usb 6-1: config index 0 descriptor too short (expected 43, got 25) [ 686.564485][T12151] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.564503][T12151] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 686.636445][T12151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 686.636473][T12151] usb 6-1: Product: syz [ 686.636485][T12151] usb 6-1: Manufacturer: syz [ 687.051982][ T5976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.335341][ T5976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.484210][T13100] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 687.530964][T13099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.531005][T13099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.559293][T13099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.559321][T13099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.874071][ T5976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.560872][ T5690] usb 6-1: USB disconnect, device number 14 [ 689.582319][ T5976] bond0 (unregistering): Released all slaves [ 689.626767][ T5976] bond1 (unregistering): Released all slaves [ 689.690584][ T5976] bond2 (unregistering): Released all slaves [ 689.716921][ T5976] bond3 (unregistering): Released all slaves [ 689.769494][ T5976] bond4 (unregistering): Released all slaves [ 689.965512][ T5976] tipc: Left network mode [ 690.118918][ T10] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 690.295644][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 690.295673][ T10] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 690.296727][ T10] usb 7-1: config index 0 descriptor too short (expected 43, got 25) [ 690.296753][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.296774][ T10] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 690.299904][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 690.299957][ T10] usb 7-1: Product: syz [ 690.299994][ T10] usb 7-1: Manufacturer: syz [ 690.592226][ T5976] hsr_slave_0: left promiscuous mode [ 690.605929][ T5976] hsr_slave_1: left promiscuous mode [ 690.682498][ T5976] veth1_macvtap: left promiscuous mode [ 690.682538][ T5976] veth0_macvtap: left promiscuous mode [ 690.682637][ T5976] veth1_vlan: left promiscuous mode [ 690.682703][ T5976] veth0_vlan: left promiscuous mode [ 691.538337][ T988] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 691.698108][ T988] usb 9-1: Using ep0 maxpacket: 32 [ 691.701882][ T988] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 691.703597][ T988] usb 9-1: config 0 has no interfaces? [ 691.730493][ T988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.730510][ T988] usb 9-1: Product: syz [ 691.730519][ T988] usb 9-1: Manufacturer: syz [ 691.730529][ T988] usb 9-1: SerialNumber: syz [ 691.734786][ T988] usb 9-1: config 0 descriptor?? [ 692.055145][ T988] usb 9-1: USB disconnect, device number 9 [ 692.156777][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13 [ 693.376300][ T988] usb 7-1: USB disconnect, device number 12 [ 694.400157][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14 [ 695.165392][T13212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.165429][T13212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.186549][T13212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.186583][T13212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.750226][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 698.341632][ T988] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 698.521657][ T988] usb 9-1: not running at top speed; connect to a high speed hub [ 698.521688][ T988] usb 9-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 698.530448][ T988] usb 9-1: config index 0 descriptor too short (expected 43, got 25) [ 698.530492][ T988] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.530520][ T988] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 698.590617][ T988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 698.590652][ T988] usb 9-1: Product: syz [ 698.590670][ T988] usb 9-1: Manufacturer: syz [ 699.841828][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16 [ 701.720790][ T10] usb 9-1: USB disconnect, device number 10 [ 702.424134][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 702.609009][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 702.611695][ T10] usb 6-1: config 0 has no interfaces? [ 702.611727][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.617826][ T10] usb 6-1: config 0 descriptor?? [ 702.882631][T13322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.882979][T13322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.925801][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2084'. [ 702.978943][T13322] vlan2: entered promiscuous mode [ 702.978959][T13322] syz_tun: entered promiscuous mode [ 703.045258][T12152] usb 6-1: USB disconnect, device number 15 [ 704.213246][T13352] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2098'. [ 718.612763][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 723.757680][T13639] tipc: Started in network mode [ 723.757709][T13639] tipc: Node identity 1001001, cluster identity 4711 [ 723.757724][T13639] tipc: Node number set to 16781313 [ 723.785556][T13639] tipc: Enabled bearer , priority 0 [ 723.978836][ T5690] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 724.131431][ T5690] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 724.132282][ T5690] usb 7-1: config 0 has no interfaces? [ 724.132336][ T5690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.133202][T13649] tipc: Started in network mode [ 724.133225][T13649] tipc: Node identity 1001001, cluster identity 4711 [ 724.133238][T13649] tipc: Node number set to 16781313 [ 724.135039][T13649] tipc: Enabled bearer , priority 0 [ 724.185199][ T5690] usb 7-1: config 0 descriptor?? [ 724.457222][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.457662][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.493702][T13638] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2187'. [ 724.517848][ T5690] usb 7-1: USB disconnect, device number 13 [ 724.645296][T13657] tipc: Enabling of bearer rejected, already enabled [ 726.832855][ T5690] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 726.993337][ T5690] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 726.995179][ T5690] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 726.995211][ T5690] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 726.995247][ T5690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.058151][T13687] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 727.084034][ T5690] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 728.076011][ T8495] usb 6-1: USB disconnect, device number 16 [ 729.535364][T13720] tipc: Started in network mode [ 729.535396][T13720] tipc: Node identity 1001001, cluster identity 4711 [ 729.535411][T13720] tipc: Node number set to 16781313 [ 729.568333][T13720] tipc: Enabled bearer , priority 0 [ 729.774507][T13722] tipc: Cannot configure node identity twice [ 729.777423][T13722] tipc: Enabled bearer , priority 0 [ 730.208042][T12152] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 730.371228][T12152] usb 9-1: not running at top speed; connect to a high speed hub [ 730.371289][T12152] usb 9-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 730.373189][T12152] usb 9-1: config index 0 descriptor too short (expected 43, got 25) [ 730.373211][T12152] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.377133][T12152] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 730.377160][T12152] usb 9-1: Product: syz [ 730.377173][T12152] usb 9-1: Manufacturer: syz [ 730.498187][T12151] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 730.633325][T12152] msi2500 9-1:1.0: Registered as swradio24 [ 730.633364][T12152] msi2500 9-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 730.664141][T12151] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 730.667336][T12151] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 730.667376][T12151] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 730.667408][T12151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.735408][T13741] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 730.787058][T12151] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 730.819362][T12152] tipc: Node number set to 1574450921 [ 731.276352][ T8496] usb 7-1: USB disconnect, device number 14 [ 731.930694][T13754] tipc: Enabling of bearer rejected, already enabled [ 732.215752][T13766] tipc: Enabling of bearer rejected, already enabled [ 732.896240][T12151] usb 9-1: USB disconnect, device number 11 [ 733.245739][T13793] tipc: Enabling of bearer rejected, already enabled [ 733.360326][ T8496] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 733.519017][ T8496] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 733.520073][ T8496] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 733.520106][ T8496] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 733.520146][ T8496] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.526509][T13783] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 733.589982][ T8496] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 734.041690][ T8496] usb 7-1: USB disconnect, device number 15 [ 734.479101][ T10] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 734.635715][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 734.635765][ T10] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 734.637000][ T10] usb 1-1: config index 0 descriptor too short (expected 43, got 25) [ 734.637030][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.685206][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 734.685246][ T10] usb 1-1: Product: syz [ 734.685258][ T10] usb 1-1: Manufacturer: syz [ 734.846365][ T10] msi2500 1-1:1.0: Registered as swradio24 [ 734.846404][ T10] msi2500 1-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 735.058755][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2262'. [ 735.324085][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2263'. [ 735.528634][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2264'. [ 735.865499][T13836] tipc: Enabling of bearer rejected, already enabled [ 736.368414][T12152] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 736.521350][T12152] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 736.523297][T12152] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 736.523351][T12152] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 736.523409][T12152] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.606437][T13844] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 736.630872][T12152] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 737.256503][ T8496] usb 9-1: USB disconnect, device number 12 [ 737.300324][ T10] usb 1-1: USB disconnect, device number 58 [ 738.048512][T12152] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 738.181172][T12152] usb 1-1: device descriptor read/64, error -71 [ 738.278081][ T8496] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 738.429332][T12152] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 738.448965][ T8496] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 738.450386][ T8496] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 738.450419][ T8496] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 738.450455][ T8496] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.499137][T13871] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 738.519177][ T8496] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 738.558892][T12152] usb 1-1: device descriptor read/64, error -71 [ 738.668841][T12152] usb usb1-port1: attempt power cycle [ 738.689243][T13884] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2287'. [ 739.012989][ T8496] usb 9-1: USB disconnect, device number 13 [ 739.013007][T12152] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 739.034140][T12152] usb 1-1: device descriptor read/8, error -71 [ 739.090320][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 739.279041][T12152] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 739.299695][T12152] usb 1-1: device descriptor read/8, error -71 [ 739.412051][T12152] usb usb1-port1: unable to enumerate USB device [ 739.961209][T13895] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2291'. [ 740.868016][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 741.019521][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 741.019556][ T10] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 741.022555][ T10] usb 6-1: config index 0 descriptor too short (expected 43, got 25) [ 741.022582][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.022600][ T10] usb 6-1: config 0 has no interfaces? [ 741.074515][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 741.074536][ T10] usb 6-1: Product: syz [ 741.074547][ T10] usb 6-1: Manufacturer: syz [ 741.090364][ T10] usb 6-1: config 0 descriptor?? [ 741.977962][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 742.132272][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 742.137796][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 742.137843][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 742.137876][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.181044][T13917] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 742.184825][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 742.511005][ T10] usb 7-1: USB disconnect, device number 16 [ 743.636795][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2316'. [ 743.653325][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2316'. [ 743.751634][ T10] usb 6-1: USB disconnect, device number 17 [ 743.869147][T13957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2317'. [ 744.208538][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 744.392779][ T988] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 744.518705][T12151] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 744.538739][ T988] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 744.540045][ T988] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 744.540073][ T988] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 744.540125][ T988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.544835][T13968] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 744.598188][ T988] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 744.676349][T12151] usb 6-1: not running at top speed; connect to a high speed hub [ 744.676384][T12151] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 744.699662][T12151] usb 6-1: config index 0 descriptor too short (expected 43, got 25) [ 744.699692][T12151] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.699714][T12151] usb 6-1: config 0 has no interfaces? [ 744.735122][T12151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 744.735142][T12151] usb 6-1: Product: syz [ 744.735152][T12151] usb 6-1: Manufacturer: syz [ 744.755222][T12151] usb 6-1: config 0 descriptor?? [ 744.755380][T12152] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 744.811720][ T988] usb 7-1: USB disconnect, device number 17 [ 744.900220][T12152] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 744.901278][T12152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.901300][T12152] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.901334][T12152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.903323][T12152] usb 1-1: config 0 descriptor?? [ 745.115588][T13980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.115873][T13980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.127053][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2327'. [ 745.147691][T13980] vlan2: entered promiscuous mode [ 745.147705][T13980] syz_tun: entered promiscuous mode [ 745.226334][ T988] usb 1-1: USB disconnect, device number 63 [ 745.728626][ T988] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 745.894108][ T988] usb 9-1: not running at top speed; connect to a high speed hub [ 745.894145][ T988] usb 9-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 745.895265][ T988] usb 9-1: config index 0 descriptor too short (expected 43, got 25) [ 745.895286][ T988] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.895330][ T988] usb 9-1: config 0 has no interfaces? [ 745.897018][ T988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 745.897041][ T988] usb 9-1: Product: syz [ 745.897054][ T988] usb 9-1: Manufacturer: syz [ 745.968915][ T988] usb 9-1: config 0 descriptor?? [ 746.490306][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'. [ 746.542044][T13991] ipvlan2: entered allmulticast mode [ 746.542070][T13991] syz_tun: entered allmulticast mode [ 747.254144][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.254221][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.406737][ T8495] usb 6-1: USB disconnect, device number 18 [ 748.320690][T14011] syz.5.2336 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 748.320733][T14011] CPU: 1 UID: 0 PID: 14011 Comm: syz.5.2336 Not tainted syzkaller #0 PREEMPT(full) [ 748.320751][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.320763][T14011] Call Trace: [ 748.320790][T14011] [ 748.320801][T14011] dump_stack_lvl+0xe8/0x150 [ 748.320849][T14011] dump_header+0xd3/0x4b0 [ 748.320889][T14011] oom_kill_process+0x3ab/0x9e0 [ 748.320932][T14011] out_of_memory+0x1064/0x1480 [ 748.320953][T14011] ? try_charge_memcg+0xc32/0x15e0 [ 748.320986][T14011] ? __pfx_out_of_memory+0x10/0x10 [ 748.321005][T14011] ? do_raw_spin_unlock+0xf5/0x200 [ 748.321037][T14011] try_charge_memcg+0xcdf/0x15e0 [ 748.321071][T14011] ? __pfx_try_charge_memcg+0x10/0x10 [ 748.321109][T14011] ? charge_memcg+0x47/0x310 [ 748.321131][T14011] charge_memcg+0x1dd/0x310 [ 748.321153][T14011] __mem_cgroup_charge+0x25/0x80 [ 748.321173][T14011] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 748.321195][T14011] ? filemap_get_entry+0xcd/0x3f0 [ 748.321225][T14011] ? __pfx_filemap_get_entry+0x10/0x10 [ 748.321246][T14011] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 748.321301][T14011] shmem_get_folio_gfp+0x5da/0x16d0 [ 748.321344][T14011] shmem_symlink+0x293/0x4d0 [ 748.321367][T14011] vfs_symlink+0x18b/0x330 [ 748.321386][T14011] ? security_path_symlink+0xfd/0x360 [ 748.321427][T14011] filename_symlinkat+0x1cd/0x410 [ 748.321465][T14011] ? __pfx_filename_symlinkat+0x10/0x10 [ 748.321495][T14011] ? getname_long+0xbc/0x130 [ 748.321527][T14011] ? do_getname+0x151/0x250 [ 748.321560][T14011] __se_sys_symlink+0x4d/0x2b0 [ 748.321583][T14011] __do_fast_syscall_32+0x27a/0x6a0 [ 748.321614][T14011] ? do_fast_syscall_32+0x33/0x70 [ 748.321634][T14011] ? irqentry_exit+0x10f/0x910 [ 748.321655][T14011] do_fast_syscall_32+0x33/0x70 [ 748.321674][T14011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 748.321699][T14011] RIP: 0023:0xf7f790ec [ 748.321714][T14011] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 748.321729][T14011] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 748.321749][T14011] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000440 [ 748.321761][T14011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 748.321771][T14011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 748.321780][T14011] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 748.321790][T14011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 748.321815][T14011] [ 748.323717][T14011] memory: usage 8kB, limit 8kB, failcnt 24 [ 748.323743][T14011] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 748.323756][T14011] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 748.323766][T14011] Memory cgroup stats for /syz5/test: [ 748.323914][T14011] cache 0 [ 748.323924][T14011] rss 0 [ 748.323930][T14011] rss_huge 0 [ 748.323937][T14011] shmem 0 [ 748.323944][T14011] mapped_file 0 [ 748.323949][T14011] dirty 0 [ 748.323955][T14011] writeback 0 [ 748.323961][T14011] workingset_refault_anon 0 [ 748.323988][T14011] workingset_refault_file 0 [ 748.323994][T14011] swap 0 [ 748.323999][T14011] swapcached 0 [ 748.324005][T14011] pgpgin 0 [ 748.324010][T14011] pgpgout 0 [ 748.324016][T14011] pgfault 0 [ 748.324021][T14011] pgmajfault 0 [ 748.324027][T14011] inactive_anon 0 [ 748.324033][T14011] active_anon 0 [ 748.324039][T14011] inactive_file 0 [ 748.324044][T14011] active_file 0 [ 748.324050][T14011] unevictable 0 [ 748.324056][T14011] hierarchical_memory_limit 8192 [ 748.324062][T14011] hierarchical_memsw_limit 9223372036854771712 [ 748.324069][T14011] total_cache 0 [ 748.324075][T14011] total_rss 0 [ 748.324080][T14011] total_rss_huge 0 [ 748.324086][T14011] total_shmem 0 [ 748.324093][T14011] total_mapped_file 0 [ 748.324100][T14011] total_dirty 0 [ 748.324106][T14011] total_writeback 0 [ 748.324112][T14011] total_workingset_refault_anon 0 [ 748.324119][T14011] total_workingset_refault_file 0 [ 748.324126][T14011] total_swap 0 [ 748.324132][T14011] total_swapcached 0 [ 748.339158][T14011] total_pgpgin 0 [ 748.339209][T14011] total_pgpgout 0 [ 748.339231][T14011] total_pgfault 0 [ 748.339253][T14011] total_pgmajfault 0 [ 748.339280][T14011] total_inactive_anon 0 [ 748.339304][T14011] total_active_anon 0 [ 748.339332][T14011] total_inactive_file 0 [ 748.339349][T14011] total_active_file 0 [ 748.339378][T14011] total_unevictable 0 [ 748.339400][T14011] anon_cost 0 [ 748.339421][T14011] file_cost 0 [ 748.339443][T14011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.2336,pid=14010,uid=0 [ 748.339850][T14011] Memory cgroup out of memory: Killed process 14010 (syz.5.2336) total-vm:104076kB, anon-rss:1304kB, file-rss:23064kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 749.321228][ T8496] usb 9-1: USB disconnect, device number 14 [ 749.408426][ T8495] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 749.408612][ T10] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 749.563432][ T8495] usb 6-1: not running at top speed; connect to a high speed hub [ 749.563460][ T8495] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 749.564817][ T8495] usb 6-1: config index 0 descriptor too short (expected 43, got 25) [ 749.564839][ T8495] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.564861][ T8495] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 749.571446][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 749.571573][ T10] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 749.625208][ T10] usb 7-1: config index 0 descriptor too short (expected 43, got 25) [ 749.625314][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.625366][ T10] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 749.652096][ T8495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 749.652113][ T8495] usb 6-1: Product: syz [ 749.652122][ T8495] usb 6-1: Manufacturer: syz [ 749.687984][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 749.688055][ T10] usb 7-1: Product: syz [ 749.688067][ T10] usb 7-1: Manufacturer: syz [ 751.388038][ T8495] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 751.538143][ T8495] usb 1-1: Using ep0 maxpacket: 32 [ 751.539094][ T8495] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 751.540650][ T8495] usb 1-1: config 0 has no interfaces? [ 751.546630][ T8495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.546652][ T8495] usb 1-1: Product: syz [ 751.546663][ T8495] usb 1-1: Manufacturer: syz [ 751.546674][ T8495] usb 1-1: SerialNumber: syz [ 751.585779][ T8495] usb 1-1: config 0 descriptor?? [ 752.158922][ T988] usb 1-1: USB disconnect, device number 64 [ 752.626424][ T8496] usb 7-1: USB disconnect, device number 18 [ 752.834671][ T10] usb 6-1: USB disconnect, device number 19 [ 753.269267][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2352'. [ 753.288339][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2352'. [ 753.689386][T12152] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 753.708178][ T988] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 753.858229][T12152] usb 6-1: Using ep0 maxpacket: 8 [ 753.869395][T12152] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 753.870433][T12152] usb 6-1: config 0 has no interfaces? [ 753.905648][T12152] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 753.905678][T12152] usb 6-1: Product: syz [ 753.905725][T12152] usb 6-1: SerialNumber: syz [ 753.936777][T12152] usb 6-1: config 0 descriptor?? [ 753.954114][ T988] usb 7-1: not running at top speed; connect to a high speed hub [ 753.954157][ T988] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 753.959521][ T988] usb 7-1: config index 0 descriptor too short (expected 43, got 25) [ 753.959554][ T988] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.959574][ T988] usb 7-1: config 0 has no interfaces? [ 754.016581][ T988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 754.016607][ T988] usb 7-1: Product: syz [ 754.016618][ T988] usb 7-1: Manufacturer: syz [ 754.050076][ T988] usb 7-1: config 0 descriptor?? [ 754.833449][ T8495] usb 6-1: USB disconnect, device number 20 [ 756.228211][ T5690] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 756.354460][T14090] syz.5.2364 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 756.354507][T14090] CPU: 0 UID: 0 PID: 14090 Comm: syz.5.2364 Not tainted syzkaller #0 PREEMPT(full) [ 756.354537][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 756.354555][T14090] Call Trace: [ 756.354566][T14090] [ 756.354578][T14090] dump_stack_lvl+0xe8/0x150 [ 756.354623][T14090] dump_header+0xd3/0x4b0 [ 756.354661][T14090] oom_kill_process+0x3ab/0x9e0 [ 756.354702][T14090] out_of_memory+0x1064/0x1480 [ 756.354732][T14090] ? try_charge_memcg+0xc32/0x15e0 [ 756.354780][T14090] ? __pfx_out_of_memory+0x10/0x10 [ 756.354810][T14090] ? do_raw_spin_unlock+0xf5/0x200 [ 756.354860][T14090] try_charge_memcg+0xcdf/0x15e0 [ 756.354917][T14090] ? __pfx_try_charge_memcg+0x10/0x10 [ 756.354974][T14090] ? charge_memcg+0x47/0x310 [ 756.355009][T14090] charge_memcg+0x1dd/0x310 [ 756.355044][T14090] __mem_cgroup_charge+0x25/0x80 [ 756.355073][T14090] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 756.355110][T14090] ? filemap_get_entry+0xcd/0x3f0 [ 756.355156][T14090] ? __pfx_filemap_get_entry+0x10/0x10 [ 756.355190][T14090] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 756.355245][T14090] shmem_get_folio_gfp+0x5da/0x16d0 [ 756.355304][T14090] shmem_symlink+0x293/0x4d0 [ 756.355351][T14090] vfs_symlink+0x18b/0x330 [ 756.355378][T14090] ? security_path_symlink+0xfd/0x360 [ 756.355414][T14090] filename_symlinkat+0x1cd/0x410 [ 756.355454][T14090] ? __pfx_filename_symlinkat+0x10/0x10 [ 756.355489][T14090] ? getname_long+0xbc/0x130 [ 756.355527][T14090] ? do_getname+0x151/0x250 [ 756.355566][T14090] __se_sys_symlink+0x4d/0x2b0 [ 756.355605][T14090] __do_fast_syscall_32+0x27a/0x6a0 [ 756.355640][T14090] ? do_fast_syscall_32+0x33/0x70 [ 756.355672][T14090] ? irqentry_exit+0x10f/0x910 [ 756.355706][T14090] do_fast_syscall_32+0x33/0x70 [ 756.355738][T14090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 756.355775][T14090] RIP: 0023:0xf7f790ec [ 756.355798][T14090] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 756.355820][T14090] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 756.355847][T14090] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000440 [ 756.355868][T14090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.355885][T14090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 756.355902][T14090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 756.355919][T14090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 756.355960][T14090] [ 756.426391][T14090] memory: usage 8kB, limit 8kB, failcnt 63 [ 756.426414][T14090] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 756.426432][T14090] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 756.426447][T14090] Memory cgroup stats for /syz5/test: [ 756.426722][T14090] cache 0 [ 756.426755][T14090] rss 0 [ 756.426779][T14090] rss_huge 0 [ 756.426802][T14090] shmem 0 [ 756.426825][T14090] mapped_file 0 [ 756.426849][T14090] dirty 0 [ 756.426871][T14090] writeback 0 [ 756.426894][T14090] workingset_refault_anon 0 [ 756.426917][T14090] workingset_refault_file 0 [ 756.426941][T14090] swap 0 [ 756.426963][T14090] swapcached 4096 [ 756.426978][T14090] pgpgin 1 [ 756.427000][T14090] pgpgout 1 [ 756.427023][T14090] pgfault 6 [ 756.427045][T14090] pgmajfault 0 [ 756.427068][T14090] inactive_anon 0 [ 756.427091][T14090] active_anon 0 [ 756.427114][T14090] inactive_file 0 [ 756.427137][T14090] active_file 0 [ 756.427167][T14090] unevictable 0 [ 756.427191][T14090] hierarchical_memory_limit 8192 [ 756.427216][T14090] hierarchical_memsw_limit 9223372036854771712 [ 756.427249][T14090] total_cache 0 [ 756.427272][T14090] total_rss 0 [ 756.427296][T14090] total_rss_huge 0 [ 756.427319][T14090] total_shmem 0 [ 756.427343][T14090] total_mapped_file 0 [ 756.427367][T14090] total_dirty 0 [ 756.427390][T14090] total_writeback 0 [ 756.427422][T14090] total_workingset_refault_anon 0 [ 756.427524][T14090] total_workingset_refault_file 0 [ 756.427556][T14090] total_swap 0 [ 756.427578][T14090] total_swapcached 4096 [ 756.427602][T14090] total_pgpgin 1 [ 756.427625][T14090] total_pgpgout 1 [ 756.427649][T14090] total_pgfault 6 [ 756.427679][T14090] total_pgmajfault 0 [ 756.427702][T14090] total_inactive_anon 0 [ 756.427726][T14090] total_active_anon 0 [ 756.427749][T14090] total_inactive_file 0 [ 756.427772][T14090] total_active_file 0 [ 756.427795][T14090] total_unevictable 0 [ 756.427827][T14090] anon_cost 0 [ 756.427843][T14090] file_cost 0 [ 756.427866][T14090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.2364,pid=14089,uid=0 [ 756.470351][T14090] Memory cgroup out of memory: Killed process 14089 (syz.5.2364) total-vm:104208kB, anon-rss:1312kB, file-rss:22916kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 756.498736][ T5690] usb 1-1: not running at top speed; connect to a high speed hub [ 756.498777][ T5690] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 756.665840][ T5690] usb 1-1: config index 0 descriptor too short (expected 43, got 25) [ 756.665874][ T5690] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.665894][ T5690] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 756.798100][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 756.798164][ T5690] usb 1-1: Product: syz [ 756.798179][ T5690] usb 1-1: Manufacturer: syz [ 757.406579][ T8495] usb 7-1: USB disconnect, device number 19 [ 759.366566][ T988] usb 1-1: USB disconnect, device number 65 [ 759.491203][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2395'. [ 759.492503][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2395'. [ 760.375211][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 760.391487][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 761.438141][ T8496] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 761.593122][ T8496] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 761.594302][ T8496] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 761.594326][ T8496] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 761.594354][ T8496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.633672][T14206] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 761.667287][ T8496] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 762.333064][ T988] usb 6-1: USB disconnect, device number 21 [ 762.901684][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2427'. [ 762.927427][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2427'. [ 764.661336][ T988] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 764.822309][ T988] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 764.824243][ T988] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.824302][ T988] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 764.824334][ T988] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.427824][ T988] dvb_ttusb_budget: ttusb_init_controller: error [ 765.428438][ T988] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 765.565436][ T988] DVB: Unable to find symbol stv0299_attach() [ 765.649360][ T8496] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 765.767623][ T988] DVB: Unable to find symbol tda8083_attach() [ 765.767639][ T988] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 765.803528][ T8496] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 765.805613][ T8496] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 765.805651][ T8496] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 765.805704][ T8496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.853945][T14269] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 765.874539][ T8496] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.970734][T12152] usb 9-1: USB disconnect, device number 15 [ 766.370801][T12152] usb 6-1: USB disconnect, device number 22 [ 768.056577][T14301] tipc: Enabling of bearer rejected, already enabled [ 768.888013][ T5683] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 769.040153][ T5683] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 769.041754][ T5683] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 769.041785][ T5683] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 769.041820][ T5683] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.047485][T14314] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 769.091406][ T5683] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 769.785077][ T5683] usb 9-1: USB disconnect, device number 16 [ 772.958965][ T8496] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 773.114379][ T8496] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 773.118694][ T8496] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 773.118727][ T8496] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 773.118765][ T8496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.177585][T14408] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 773.207282][ T8496] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 774.105993][ T8496] usb 6-1: USB disconnect, device number 23 [ 776.288115][ T8496] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 776.439693][ T8496] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 776.441574][ T8496] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 776.441596][ T8496] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 776.441622][ T8496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.488626][T14467] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 776.555795][ T8496] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 777.066908][ T991] usb 6-1: USB disconnect, device number 24 [ 778.013397][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2517'. [ 778.098245][ T5683] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 778.250947][ T5683] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 778.252404][ T5683] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 778.252434][ T5683] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 778.252466][ T5683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.326415][T14476] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 778.365883][ T5683] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 779.049293][ T988] usb 7-1: USB disconnect, device number 20 [ 779.084393][T14504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.084421][T14504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.109400][T14504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.109422][T14504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.688532][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 780.841736][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 780.845717][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 780.845760][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 780.845798][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.901369][T14555] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 780.938469][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 781.690332][ T5683] usb 1-1: USB disconnect, device number 66 [ 783.678679][ T5690] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 783.830371][ T5690] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 783.832250][ T5690] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 783.832284][ T5690] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 783.832321][ T5690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.885880][T14626] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 783.923361][ T5690] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 784.631274][ T10] usb 7-1: USB disconnect, device number 21 [ 785.630059][T14657] tipc: Enabling of bearer rejected, already enabled [ 786.638135][ T5690] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 786.809520][ T5690] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 786.814565][ T5690] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 786.814605][ T5690] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 786.814647][ T5690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.865680][T14680] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 786.898114][ T5690] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 787.005214][T14695] tipc: Enabling of bearer rejected, already enabled [ 787.554573][T12152] usb 9-1: USB disconnect, device number 17 [ 789.139530][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 789.295600][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 789.299023][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 789.299150][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 789.299300][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.360636][T14741] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 789.400312][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 789.885796][ T988] usb 9-1: USB disconnect, device number 18 [ 791.457033][T14770] syzkaller0: entered promiscuous mode [ 791.457058][T14770] syzkaller0: entered allmulticast mode [ 794.336374][T14813] syzkaller0: entered promiscuous mode [ 794.336391][T14813] syzkaller0: entered allmulticast mode [ 799.018453][ T988] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 799.183928][ T988] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 799.187226][ T988] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 799.187253][ T988] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.187273][ T988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 799.187297][ T988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.210449][ T988] usb 7-1: config 0 descriptor?? [ 799.825268][ T988] usbhid 7-1:0.0: can't add hid device: -71 [ 799.825353][ T988] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 799.846396][ T988] usb 7-1: USB disconnect, device number 22 [ 802.669814][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2707'. [ 803.198172][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 803.369492][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 803.385478][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 803.385530][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 803.385574][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.426671][T14923] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 803.447259][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 804.150422][ T10] usb 7-1: USB disconnect, device number 23 [ 806.285605][ T5690] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 806.453578][ T5690] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 806.455153][ T5690] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 806.455205][ T5690] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 806.455253][ T5690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.507020][T14986] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 806.546200][ T5690] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.126200][T15012] tipc: Enabling of bearer rejected, already enabled [ 807.151293][ T5690] usb 9-1: USB disconnect, device number 19 [ 807.924836][T15031] syzkaller0: entered promiscuous mode [ 807.924859][T15031] syzkaller0: entered allmulticast mode [ 808.250520][T15049] tipc: Enabling of bearer rejected, already enabled [ 808.678026][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 808.698929][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.698984][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.829234][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 808.830231][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 808.830262][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 808.830297][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.837600][T15057] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 808.897190][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 809.036099][T15080] syzkaller0: entered promiscuous mode [ 809.036124][T15080] syzkaller0: entered allmulticast mode [ 809.382545][T15090] tipc: Enabled bearer , priority 0 [ 809.402594][ T988] usb 9-1: USB disconnect, device number 20 [ 809.484926][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2780'. [ 810.278800][T15120] syzkaller0: entered promiscuous mode [ 810.278828][T15120] syzkaller0: entered allmulticast mode [ 810.499421][ T5690] tipc: Node number set to 3043484171 [ 811.508186][ T5690] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 811.659454][ T5690] usb 9-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 811.660768][ T5690] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 811.660805][ T5690] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.660835][ T5690] usb 9-1: config 0 interface 0 has no altsetting 0 [ 811.660871][ T5690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.705802][ T5690] usb 9-1: config 0 descriptor?? [ 812.196198][ T5690] elan 0003:04F3:074D.001F: ignoring exceeding usage max [ 812.209355][ T5690] hid_parser_main: 5 callbacks suppressed [ 812.209405][ T5690] elan 0003:04F3:074D.001F: unknown main item tag 0x0 [ 812.209442][ T5690] elan 0003:04F3:074D.001F: unbalanced collection at end of report description [ 812.210716][ T5690] elan 0003:04F3:074D.001F: Hid Parse failed [ 812.210844][ T5690] elan 0003:04F3:074D.001F: probe with driver elan failed with error -22 [ 812.510432][ T5690] usb 9-1: USB disconnect, device number 21 [ 812.686287][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2821'. [ 812.686397][T15189] bridge_slave_1: left allmulticast mode [ 812.686420][T15189] bridge_slave_1: left promiscuous mode [ 812.686721][T15189] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.723185][T15189] bridge_slave_0: left allmulticast mode [ 812.723217][T15189] bridge_slave_0: left promiscuous mode [ 812.723520][T15189] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.166661][T15204] tipc: Enabling of bearer rejected, already enabled [ 813.686092][T15226] tipc: Enabling of bearer rejected, already enabled [ 813.871077][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2841'. [ 815.001438][T15261] tipc: Enabling of bearer rejected, already enabled [ 815.255360][T15270] tipc: Enabling of bearer rejected, already enabled [ 815.302091][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2855'. [ 815.302193][T15274] bridge_slave_1: left allmulticast mode [ 815.302218][T15274] bridge_slave_1: left promiscuous mode [ 815.302482][T15274] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.346422][T15274] bridge_slave_0: left allmulticast mode [ 815.346457][T15274] bridge_slave_0: left promiscuous mode [ 815.353350][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.820764][T15299] tipc: Enabling of bearer rejected, already enabled [ 816.760888][T15328] tipc: Enabling of bearer rejected, already enabled [ 819.006439][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 819.015108][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 819.016298][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 819.020295][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 819.025609][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 819.843549][T15024] tipc: Resetting bearer [ 819.942913][T15024] tipc: Disabling bearer [ 820.268866][ T8496] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 820.313129][ T6155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.422528][ T8496] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 820.427082][ T8496] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 820.427105][ T8496] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 820.427129][ T8496] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.485619][T15412] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 820.501182][ T8496] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 820.645362][ T6155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.921049][ T6155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.098659][T11323] Bluetooth: hci5: command tx timeout [ 821.125862][ T8496] usb 7-1: USB disconnect, device number 24 [ 821.243336][ T6155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.585957][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.586909][T15396] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.587065][T15396] bridge_slave_0: entered allmulticast mode [ 821.617698][T15396] bridge_slave_0: entered promiscuous mode [ 821.627791][T15396] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.628247][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.628594][T15396] bridge_slave_1: entered allmulticast mode [ 821.642348][T15396] bridge_slave_1: entered promiscuous mode [ 821.899033][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.951716][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.170077][T15396] team0: Port device team_slave_0 added [ 822.289094][T15396] team0: Port device team_slave_1 added [ 823.168907][T11323] Bluetooth: hci5: command tx timeout [ 823.390937][ T6155] bond0 (unregistering): Released all slaves [ 823.411679][ T6155] bond1 (unregistering): Released all slaves [ 823.448859][ T6155] bond2 (unregistering): Released all slaves [ 823.480683][ T6155] bond3 (unregistering): Released all slaves [ 823.553501][ T6155] bond4 (unregistering): Released all slaves [ 823.597331][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.597362][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.597396][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.709110][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.709140][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.709170][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.053953][ T6155] tipc: Left network mode [ 824.058350][ T8496] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 824.126110][T15396] hsr_slave_0: entered promiscuous mode [ 824.155990][T15396] hsr_slave_1: entered promiscuous mode [ 824.228386][ T8496] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.230036][ T8496] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 824.230073][ T8496] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 824.230115][ T8496] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.234941][ T6155] IPVS: stopping master sync thread 13100 ... [ 824.262023][T15483] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 824.276918][ T8496] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 825.248194][T11323] Bluetooth: hci5: command tx timeout [ 825.395944][ T6155] hsr_slave_0: left promiscuous mode [ 825.415391][ T6155] hsr_slave_1: left promiscuous mode [ 825.482385][ T5683] usb 7-1: USB disconnect, device number 25 [ 825.485319][ T6155] veth1_macvtap: left promiscuous mode [ 825.485351][ T6155] veth0_macvtap: left promiscuous mode [ 825.493849][ T6155] veth1_vlan: left promiscuous mode [ 825.493954][ T6155] veth0_vlan: left promiscuous mode [ 827.190480][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 827.328900][T11323] Bluetooth: hci5: command tx timeout [ 827.866275][ T6155] IPVS: stop unused estimator thread 0... [ 829.606178][T15396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 829.643359][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 829.645406][T15396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 829.690911][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 829.712471][T15396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 829.755364][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 829.757214][T15396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 829.827254][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.292074][T15396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.373723][T15396] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.425037][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.425124][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.483758][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.483894][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.970793][T15396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.386766][T15396] veth0_vlan: entered promiscuous mode [ 831.469124][T15396] veth1_vlan: entered promiscuous mode [ 831.750673][T15396] veth0_macvtap: entered promiscuous mode [ 831.784237][T15396] veth1_macvtap: entered promiscuous mode [ 831.928831][T15396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.986437][T15396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.119050][ T6155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.217206][ T5976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.217302][ T5976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.217343][ T5976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.251104][ T988] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 832.413531][ T988] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 832.432884][ T988] usb 9-1: config 0 has no interfaces? [ 832.432930][ T988] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.464283][ T988] usb 9-1: config 0 descriptor?? [ 832.591073][ T5979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.591107][ T5979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.689068][T15635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.692222][T15635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.716979][ T988] usb 9-1: USB disconnect, device number 22 [ 832.930914][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.930955][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.924403][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3001'. [ 838.257445][T15781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3026'. [ 845.733390][T15929] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3085'. [ 846.744146][T15961] tipc: Enabling of bearer rejected, already enabled [ 847.886037][T15977] tipc: Enabling of bearer rejected, already enabled [ 848.925293][T15996] tipc: Enabling of bearer rejected, already enabled [ 849.596355][T16011] tipc: Enabling of bearer rejected, already enabled [ 854.935993][T16163] syzkaller0: entered promiscuous mode [ 854.936010][T16163] syzkaller0: entered allmulticast mode [ 857.025544][T16187] tipc: Enabling of bearer rejected, already enabled [ 857.340011][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 857.340041][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 857.546682][T16198] syzkaller0: entered promiscuous mode [ 857.546711][T16198] syzkaller0: entered allmulticast mode [ 857.915739][T16218] tipc: Enabling of bearer rejected, already enabled [ 858.201685][T16231] tipc: Enabling of bearer rejected, already enabled [ 858.438229][ T991] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 858.481160][T16239] ------------[ cut here ]------------ [ 858.481180][T16239] !chanctx_conf [ 858.481196][T16239] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#0: syz.7.3212/16239 [ 858.504497][T16239] Modules linked in: [ 858.508754][T16239] CPU: 0 UID: 0 PID: 16239 Comm: syz.7.3212 Not tainted syzkaller #0 PREEMPT(full) [ 858.518433][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 858.528742][T16239] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 858.535015][T16239] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c c5 91 00 cc e8 66 96 71 f6 90 0f 0b 90 eb e1 e8 5b 96 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 858.554773][T16239] RSP: 0018:ffffc90005e26fc8 EFLAGS: 00010287 [ 858.562152][T16239] RAX: ffffffff8b563435 RBX: ffff88807cddc050 RCX: 0000000000080000 [ 858.571129][T16239] RDX: ffffc90013392000 RSI: 000000000000071d RDI: 000000000000071e [ 858.579948][T16239] RBP: dffffc0000000000 R08: ffffffff8b562fa7 R09: 0000000000000000 [ 858.588565][T16239] R10: dffffc0000000000 R11: ffffed100f9bb831 R12: ffffffff8b562fa7 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 858.596602][T16239] R13: ffff88807eef0f40 R14: 0000000000000001 R15: 0000000000000000 [ 858.604684][T16239] FS: 0000000000000000(0000) GS:ffff888124cd2000(0063) knlGS:00000000f54b6b40 [ 858.615155][T16239] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 858.618707][ T991] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 858.628430][ T991] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 858.628580][ T991] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.628653][ T991] usb 6-1: config 0 interface 0 has no altsetting 0 [ 858.628745][ T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.654211][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3211'. [ 858.654293][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3211'. [ 858.689560][T16239] CR2: 0000000031e1dff8 CR3: 0000000076268000 CR4: 00000000003526f0 [ 858.697619][T16239] Call Trace: [ 858.701022][T16239] [ 858.704005][T16239] rate_control_rate_init_all_links+0xf4/0x190 [ 858.710307][T16239] sta_apply_auth_flags+0x1bc/0x430 [ 858.715635][T16239] sta_apply_parameters+0x1291/0x1b50 [ 858.721130][T16239] ieee80211_add_station+0x3de/0x700 [ 858.726503][T16239] rdev_add_station+0xfc/0x290 [ 858.731407][T16239] nl80211_new_station+0x1b4e/0x1fd0 [ 858.735920][ T991] usb 6-1: config 0 descriptor?? [ 858.741759][T16239] ? trace_contention_end+0x3d/0x140 [ 858.747116][T16239] ? __pfx_nl80211_new_station+0x10/0x10 [ 858.752859][T16239] ? __rtnl_unlock+0xc8/0xf0 [ 858.757554][T16239] ? nl80211_pre_doit+0x53d/0x890 [ 858.762731][T16239] genl_family_rcv_msg_doit+0x233/0x340 [ 858.768490][T16239] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 858.775627][T16239] ? bpf_lsm_capable+0x9/0x20 [ 858.781329][T16239] ? security_capable+0x7e/0x2c0 [ 858.786408][T16239] genl_rcv_msg+0x614/0x7a0 [ 858.791140][T16239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 858.796223][T16239] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 858.801782][T16239] ? __pfx_nl80211_new_station+0x10/0x10 [ 858.807492][T16239] ? __pfx_nl80211_post_doit+0x10/0x10 [ 858.813096][T16239] ? __asan_memcpy+0x40/0x70 [ 858.817766][T16239] ? __skb_clone+0x5c/0x6c0 [ 858.822400][T16239] netlink_rcv_skb+0x226/0x4a0 [ 858.827251][T16239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 858.832432][T16239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 858.837823][T16239] ? down_read+0x2be/0x330 [ 858.842377][T16239] genl_rcv+0x28/0x40 [ 858.846430][T16239] netlink_unicast+0x7bd/0x940 [ 858.851448][T16239] netlink_sendmsg+0x813/0xb40 [ 858.856335][T16239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.861771][T16239] ? apparmor_socket_sendmsg+0x98/0x360 [ 858.867473][T16239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.872904][T16239] sock_sendmsg_nosec+0x13a/0x180 [ 858.878939][T16239] ____sys_sendmsg+0x54e/0x850 [ 858.884516][T16239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.889956][T16239] ? __pfx_futex_wake_mark+0x10/0x10 [ 858.895358][T16239] ___sys_sendmsg+0x2a5/0x360 [ 858.900187][T16239] ? __lock_acquire+0x747/0x2de0 [ 858.905205][T16239] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.910632][T16239] ? futex_wait+0x2a2/0x390 [ 858.915259][T16239] ? __fget_files+0x2a/0x420 [ 858.920003][T16239] ? __fget_files+0x3a2/0x420 [ 858.924810][T16239] __sys_sendmsg+0x177/0x240 [ 858.929673][T16239] ? __pfx___sys_sendmsg+0x10/0x10 [ 858.934895][T16239] __do_fast_syscall_32+0x27a/0x6a0 [ 858.940324][T16239] ? do_fast_syscall_32+0x33/0x70 [ 858.945435][T16239] ? asm_int80_emulation+0x1a/0x20 [ 858.950727][T16239] ? do_int80_emulation+0x299/0x500 [ 858.956001][T16239] ? trace_irq_disable+0x3b/0x140 [ 858.961136][T16239] do_fast_syscall_32+0x33/0x70 [ 858.966088][T16239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 858.972626][T16239] RIP: 0023:0xf7ff80ec [ 858.976772][T16239] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 858.997563][T16239] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 859.006870][T16239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 859.015027][T16239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 859.023119][T16239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.031227][T16239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 859.039315][T16239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.047386][T16239] [ 859.050538][T16239] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 859.057862][T16239] CPU: 0 UID: 0 PID: 16239 Comm: syz.7.3212 Not tainted syzkaller #0 PREEMPT(full) [ 859.067285][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.077427][T16239] Call Trace: [ 859.080796][T16239] [ 859.083787][T16239] vpanic+0x56d/0xa60 [ 859.087871][T16239] ? __pfx__printk+0x10/0x10 [ 859.092517][T16239] ? __pfx_vpanic+0x10/0x10 [ 859.097082][T16239] ? is_bpf_text_address+0x292/0x2b0 [ 859.102457][T16239] ? is_bpf_text_address+0x26/0x2b0 [ 859.107737][T16239] panic+0xc5/0xd0 [ 859.111532][T16239] ? __pfx_panic+0x10/0x10 [ 859.116010][T16239] __warn+0x315/0x4c0 [ 859.120061][T16239] ? rate_control_rate_init+0x5a6/0x630 [ 859.125683][T16239] ? rate_control_rate_init+0x5a6/0x630 [ 859.131303][T16239] __report_bug+0x276/0x570 [ 859.135907][T16239] ? rate_control_rate_init+0x5a6/0x630 [ 859.141544][T16239] ? __pfx___report_bug+0x10/0x10 [ 859.146633][T16239] ? __lock_acquire+0x747/0x2de0 [ 859.151627][T16239] ? __lock_acquire+0x747/0x2de0 [ 859.156610][T16239] ? rate_control_rate_init+0x5a6/0x630 [ 859.162202][T16239] report_bug+0x16b/0x220 [ 859.166584][T16239] ? rate_control_rate_init+0x5a6/0x630 [ 859.172165][T16239] ? rate_control_rate_init+0x5a8/0x630 [ 859.177750][T16239] handle_bug+0x9c/0x200 [ 859.182034][T16239] exc_invalid_op+0x1a/0x50 [ 859.186573][T16239] asm_exc_invalid_op+0x1a/0x20 [ 859.191457][T16239] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 859.197655][T16239] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c c5 91 00 cc e8 66 96 71 f6 90 0f 0b 90 eb e1 e8 5b 96 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 859.217311][T16239] RSP: 0018:ffffc90005e26fc8 EFLAGS: 00010287 [ 859.223418][T16239] RAX: ffffffff8b563435 RBX: ffff88807cddc050 RCX: 0000000000080000 [ 859.231427][T16239] RDX: ffffc90013392000 RSI: 000000000000071d RDI: 000000000000071e [ 859.239418][T16239] RBP: dffffc0000000000 R08: ffffffff8b562fa7 R09: 0000000000000000 [ 859.247408][T16239] R10: dffffc0000000000 R11: ffffed100f9bb831 R12: ffffffff8b562fa7 [ 859.255418][T16239] R13: ffff88807eef0f40 R14: 0000000000000001 R15: 0000000000000000 [ 859.263422][T16239] ? rate_control_rate_init+0x117/0x630 [ 859.269018][T16239] ? rate_control_rate_init+0x117/0x630 [ 859.274643][T16239] ? rate_control_rate_init+0x5a5/0x630 [ 859.280241][T16239] ? rate_control_rate_init+0x5a5/0x630 [ 859.285817][T16239] rate_control_rate_init_all_links+0xf4/0x190 [ 859.292002][T16239] sta_apply_auth_flags+0x1bc/0x430 [ 859.297234][T16239] sta_apply_parameters+0x1291/0x1b50 [ 859.302714][T16239] ieee80211_add_station+0x3de/0x700 [ 859.308047][T16239] rdev_add_station+0xfc/0x290 [ 859.312870][T16239] nl80211_new_station+0x1b4e/0x1fd0 [ 859.318195][T16239] ? trace_contention_end+0x3d/0x140 [ 859.323538][T16239] ? __pfx_nl80211_new_station+0x10/0x10 [ 859.329207][T16239] ? __rtnl_unlock+0xc8/0xf0 [ 859.333856][T16239] ? nl80211_pre_doit+0x53d/0x890 [ 859.338916][T16239] genl_family_rcv_msg_doit+0x233/0x340 [ 859.344506][T16239] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 859.350615][T16239] ? bpf_lsm_capable+0x9/0x20 [ 859.355338][T16239] ? security_capable+0x7e/0x2c0 [ 859.360322][T16239] genl_rcv_msg+0x614/0x7a0 [ 859.364877][T16239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.369958][T16239] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 859.375386][T16239] ? __pfx_nl80211_new_station+0x10/0x10 [ 859.381090][T16239] ? __pfx_nl80211_post_doit+0x10/0x10 [ 859.386616][T16239] ? __asan_memcpy+0x40/0x70 [ 859.391278][T16239] ? __skb_clone+0x5c/0x6c0 [ 859.395856][T16239] netlink_rcv_skb+0x226/0x4a0 [ 859.400714][T16239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.405781][T16239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 859.411152][T16239] ? down_read+0x2be/0x330 [ 859.415619][T16239] genl_rcv+0x28/0x40 [ 859.419633][T16239] netlink_unicast+0x7bd/0x940 [ 859.424449][T16239] netlink_sendmsg+0x813/0xb40 [ 859.429258][T16239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.434593][T16239] ? apparmor_socket_sendmsg+0x98/0x360 [ 859.440200][T16239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.445530][T16239] sock_sendmsg_nosec+0x13a/0x180 [ 859.450611][T16239] ____sys_sendmsg+0x54e/0x850 [ 859.455437][T16239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.460768][T16239] ? __pfx_futex_wake_mark+0x10/0x10 [ 859.466117][T16239] ___sys_sendmsg+0x2a5/0x360 [ 859.471062][T16239] ? __lock_acquire+0x747/0x2de0 [ 859.476037][T16239] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.481270][T16239] ? futex_wait+0x2a2/0x390 [ 859.485841][T16239] ? __fget_files+0x2a/0x420 [ 859.490470][T16239] ? __fget_files+0x3a2/0x420 [ 859.495181][T16239] __sys_sendmsg+0x177/0x240 [ 859.499802][T16239] ? __pfx___sys_sendmsg+0x10/0x10 [ 859.504964][T16239] __do_fast_syscall_32+0x27a/0x6a0 [ 859.510192][T16239] ? do_fast_syscall_32+0x33/0x70 [ 859.515258][T16239] ? asm_int80_emulation+0x1a/0x20 [ 859.520395][T16239] ? do_int80_emulation+0x299/0x500 [ 859.525618][T16239] ? trace_irq_disable+0x3b/0x140 [ 859.530673][T16239] do_fast_syscall_32+0x33/0x70 [ 859.535547][T16239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 859.541951][T16239] RIP: 0023:0xf7ff80ec [ 859.546047][T16239] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 859.565690][T16239] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 859.574139][T16239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 859.582142][T16239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 859.590133][T16239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.598131][T16239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 859.606129][T16239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.614154][T16239] [ 859.618012][T16239] Kernel Offset: disabled [ 859.622403][T16239] Rebooting in 86400 seconds..