last executing test programs: 5.885206272s ago: executing program 0 (id=30): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c5fe68bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8ba58502975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) 5.7690912s ago: executing program 0 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000a00)={@val={0x0, 0x16}, @val={0x0, 0x3, 0x6, 0x1, 0xf, 0x40}, @ipv4=@generic={{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0xe, 0x29, 0x0, @private=0xa010100, @empty}}}, 0x22) 5.194457776s ago: executing program 0 (id=34): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f00000002c0)=""/40, 0x28}], 0x3}, 0x8}], 0x1, 0x40000000, 0x0) 5.067546383s ago: executing program 3 (id=36): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b00"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.012871115s ago: executing program 0 (id=37): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 4.556263482s ago: executing program 1 (id=38): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000b40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000980)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.825728261s ago: executing program 2 (id=39): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) 3.806318444s ago: executing program 2 (id=40): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@random={'security.', '/.{\x00'}) 3.383690379s ago: executing program 2 (id=41): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) close(0xffffffffffffffff) 3.129999536s ago: executing program 1 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000a00)={@val={0x0, 0x16}, @val={0x0, 0x3, 0x6, 0x1, 0xf, 0x40}, @ipv4=@generic={{0x5, 0x4, 0x3, 0x5, 0x18, 0x64, 0x0, 0xe, 0x29, 0x0, @private=0xa010100, @empty}, "e290cb2b"}}, 0x26) 2.706534861s ago: executing program 1 (id=43): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.982110193s ago: executing program 3 (id=44): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.844995515s ago: executing program 0 (id=45): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4}, 0x8}], 0x1, 0x40000000, 0x0) 1.781964757s ago: executing program 3 (id=46): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.76787425s ago: executing program 0 (id=47): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059a"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.078650146s ago: executing program 1 (id=48): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) 1.018966645s ago: executing program 1 (id=49): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@random={'security.', '/.{\x00'}) 832.887477ms ago: executing program 3 (id=50): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x0) 776.406001ms ago: executing program 3 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000a00)={@val={0x0, 0x16}, @val={0x0, 0x3, 0x6, 0x1, 0xf, 0x40}, @ipv4=@generic={{0x5, 0x4, 0x3, 0x5, 0x18, 0x64, 0x0, 0xe, 0x29, 0x0, @private=0xa010100, @empty}, "e290cb2b"}}, 0x26) 628.297766ms ago: executing program 1 (id=52): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 293.601333ms ago: executing program 3 (id=53): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r1, r2, 0x0, 0xfff2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$key(0xf, 0x3, 0x2) r4 = getpgid(0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) syz_clone3(&(0x7f0000000980)={0x20000000, &(0x7f0000000340), &(0x7f0000000480), &(0x7f00000004c0), {}, &(0x7f00000006c0)=""/208, 0xd0, &(0x7f00000007c0)=""/16, &(0x7f0000000800)=[r4, r5], 0x2, {r2}}, 0x58) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000040)={0x8, 'vlan1\x00', {'team_slave_1\x00'}, 0xc58}) r6 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x3, 0x3, 0x2}}) socketpair(0x26, 0x1, 0x9, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x82}}]}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) 277.453477ms ago: executing program 2 (id=54): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 64.689668ms ago: executing program 2 (id=55): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4}, 0x8}], 0x1, 0x40000000, 0x0) 0s ago: executing program 2 (id=56): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="03ff0f"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x28001, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7eff, 0xa, 0x103}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000340)=[{0x94}]}) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x1) r4 = fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x89, 0xa, 0x2}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4404c841}, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 74.231168][ T5598] cgroup: Unknown subsys name 'net' [ 74.472959][ T5598] cgroup: Unknown subsys name 'cpuset' [ 74.528049][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.270253][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.624162][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.642628][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.643354][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.644565][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.645899][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.762381][ T4928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.782655][ T4928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.783676][ T4928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.785256][ T4928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.786304][ T4928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.876844][ T4928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.900352][ T4928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.903226][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.931110][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.932895][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.956538][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.957328][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.974691][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.975729][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.976651][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.698874][ T5624] Bluetooth: hci0: command tx timeout [ 80.741846][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.742530][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.742940][ T5619] bridge_slave_0: entered allmulticast mode [ 80.745308][ T5619] bridge_slave_0: entered promiscuous mode [ 80.806956][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.807155][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.811712][ T5619] bridge_slave_1: entered allmulticast mode [ 80.820292][ T5619] bridge_slave_1: entered promiscuous mode [ 80.842504][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.842697][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.842853][ T5614] bridge_slave_0: entered allmulticast mode [ 80.845205][ T5614] bridge_slave_0: entered promiscuous mode [ 80.859407][ T5624] Bluetooth: hci1: command tx timeout [ 80.911091][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.911302][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.911464][ T5614] bridge_slave_1: entered allmulticast mode [ 80.913525][ T5614] bridge_slave_1: entered promiscuous mode [ 81.011642][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.012061][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.012341][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.012583][ T5610] bridge_slave_0: entered allmulticast mode [ 81.014665][ T5610] bridge_slave_0: entered promiscuous mode [ 81.018416][ T5624] Bluetooth: hci2: command tx timeout [ 81.090509][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.090977][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.091224][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.091381][ T5610] bridge_slave_1: entered allmulticast mode [ 81.093487][ T5610] bridge_slave_1: entered promiscuous mode [ 81.100637][ T5624] Bluetooth: hci3: command tx timeout [ 81.112120][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.113287][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.115568][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.119087][ T5618] bridge_slave_0: entered allmulticast mode [ 81.126765][ T5618] bridge_slave_0: entered promiscuous mode [ 81.203966][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.204343][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.204570][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.204750][ T5618] bridge_slave_1: entered allmulticast mode [ 81.206800][ T5618] bridge_slave_1: entered promiscuous mode [ 81.395128][ T5619] team0: Port device team_slave_0 added [ 81.405831][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.451192][ T5619] team0: Port device team_slave_1 added [ 81.454716][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.461372][ T5614] team0: Port device team_slave_0 added [ 81.478788][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.522056][ T5614] team0: Port device team_slave_1 added [ 81.526049][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.618286][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.618297][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.618314][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.623414][ T5610] team0: Port device team_slave_0 added [ 81.710439][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.710451][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.710471][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.714326][ T5610] team0: Port device team_slave_1 added [ 81.715968][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.715978][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.715998][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.729021][ T5618] team0: Port device team_slave_0 added [ 81.828728][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.828738][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.828756][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.832900][ T5618] team0: Port device team_slave_1 added [ 81.915657][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.915666][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.915683][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.981439][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.981448][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.981465][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.984670][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.984679][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.984696][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.094331][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.094343][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.094363][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.124744][ T5619] hsr_slave_0: entered promiscuous mode [ 82.133805][ T5619] hsr_slave_1: entered promiscuous mode [ 82.187063][ T5614] hsr_slave_0: entered promiscuous mode [ 82.192868][ T5614] hsr_slave_1: entered promiscuous mode [ 82.197347][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 82.198488][ T5614] Cannot create hsr debugfs directory [ 82.288633][ T5610] hsr_slave_0: entered promiscuous mode [ 82.290071][ T5610] hsr_slave_1: entered promiscuous mode [ 82.291158][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 82.291179][ T5610] Cannot create hsr debugfs directory [ 82.663944][ T5618] hsr_slave_0: entered promiscuous mode [ 82.665279][ T5618] hsr_slave_1: entered promiscuous mode [ 82.666344][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 82.666365][ T5618] Cannot create hsr debugfs directory [ 82.787591][ T5624] Bluetooth: hci0: command tx timeout [ 82.937628][ T5624] Bluetooth: hci1: command tx timeout [ 83.097719][ T5624] Bluetooth: hci2: command tx timeout [ 83.177550][ T5624] Bluetooth: hci3: command tx timeout [ 83.311908][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.350226][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.365838][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.391824][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.396263][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.416126][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.439406][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.475353][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.578944][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.612807][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.621075][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.664772][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.693447][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.721941][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.752490][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.781344][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.906056][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.931732][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.938568][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.971178][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.995540][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.031059][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.060388][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.093687][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.212816][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.245491][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.260487][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.300884][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.317360][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.351473][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.355835][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.391378][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.472878][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.579205][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.616538][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.616766][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.659357][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.686494][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.686593][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.792064][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.836864][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.837004][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.862442][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.869905][ T5624] Bluetooth: hci0: command tx timeout [ 84.906346][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.906456][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.990636][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.017918][ T5624] Bluetooth: hci1: command tx timeout [ 85.055510][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.090973][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.091146][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.155818][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.155987][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.188788][ T5624] Bluetooth: hci2: command tx timeout [ 85.256203][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.264570][ T5624] Bluetooth: hci3: command tx timeout [ 85.313696][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.313856][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.369604][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.369744][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.112139][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.468588][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.470204][ T5619] veth0_vlan: entered promiscuous mode [ 86.558953][ T5619] veth1_vlan: entered promiscuous mode [ 86.665863][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.690154][ T32] cfg80211: failed to load regulatory.db [ 86.836435][ T5614] veth0_vlan: entered promiscuous mode [ 86.855323][ T5619] veth0_macvtap: entered promiscuous mode [ 86.902779][ T5619] veth1_macvtap: entered promiscuous mode [ 86.926709][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.937810][ T5624] Bluetooth: hci0: command tx timeout [ 86.946124][ T5614] veth1_vlan: entered promiscuous mode [ 87.050810][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.109497][ T5624] Bluetooth: hci1: command tx timeout [ 87.130617][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.143129][ T5610] veth0_vlan: entered promiscuous mode [ 87.196282][ T1188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.217036][ T1188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.231893][ T165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.255091][ T5610] veth1_vlan: entered promiscuous mode [ 87.257611][ T5624] Bluetooth: hci2: command tx timeout [ 87.274264][ T165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.288411][ T5614] veth0_macvtap: entered promiscuous mode [ 87.337734][ T5624] Bluetooth: hci3: command tx timeout [ 87.365413][ T5614] veth1_macvtap: entered promiscuous mode [ 87.381646][ T5618] veth0_vlan: entered promiscuous mode [ 87.559565][ T5618] veth1_vlan: entered promiscuous mode [ 87.596222][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.643387][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.673384][ T5610] veth0_macvtap: entered promiscuous mode [ 87.705676][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.715207][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.731803][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.731823][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.738636][ T5610] veth1_macvtap: entered promiscuous mode [ 87.776721][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.794274][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.944143][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.944161][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.012463][ T5618] veth0_macvtap: entered promiscuous mode [ 88.069753][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.194088][ T5618] veth1_macvtap: entered promiscuous mode [ 88.317094][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.400823][ T1032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.415993][ T1032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.445130][ T1032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.453651][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.468007][ T1032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.517214][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.517231][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.537776][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.655657][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.714501][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.784697][ T165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.801811][ T165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.996306][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.996322][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.078776][ T5714] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 89.211283][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.211299][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.406255][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.406277][ T5714] usb 4-1: config 0 has no interfaces? [ 89.428451][ T5714] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 89.428476][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.428494][ T5714] usb 4-1: Product: syz [ 89.428507][ T5714] usb 4-1: Manufacturer: syz [ 89.428520][ T5714] usb 4-1: SerialNumber: syz [ 89.533219][ T5714] usb 4-1: config 0 descriptor?? [ 89.630156][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.630171][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.765406][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.765425][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.897765][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.897783][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.908698][ T5716] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.122247][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 90.125699][ T5716] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.125730][ T5716] usb 2-1: config 0 has no interfaces? [ 90.158482][ T5716] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 90.158510][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.158530][ T5716] usb 2-1: Product: syz [ 90.158545][ T5716] usb 2-1: Manufacturer: syz [ 90.158557][ T5716] usb 2-1: SerialNumber: syz [ 90.232072][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.232096][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.296676][ T5716] usb 2-1: config 0 descriptor?? [ 91.676486][ T5714] usb 4-1: USB disconnect, device number 2 [ 91.918876][ T5790] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 91.919437][ T5790] syzkaller1: entered promiscuous mode [ 91.919450][ T5790] syzkaller1: entered allmulticast mode [ 92.300026][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.498058][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 92.505426][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.505465][ T32] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 92.505486][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.613146][ T32] usb 1-1: config 0 descriptor?? [ 92.782396][ T5691] usb 2-1: USB disconnect, device number 2 [ 93.250712][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 93.387832][ T32] usbhid 1-1:0.0: can't add hid device: -71 [ 93.387925][ T32] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.499288][ T32] usb 1-1: USB disconnect, device number 2 [ 93.549605][ T9] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 93.549631][ T9] usb 4-1: config 8 has no interface number 0 [ 93.549671][ T9] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 93.549697][ T9] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 93.549722][ T9] usb 4-1: config 8 interface 177 has no altsetting 0 [ 93.549752][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 93.549775][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.671626][ T5801] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.676873][ T5801] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.719788][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 94.177661][ T5704] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 94.227531][ T9] ir_toy 4-1:8.177: could not write reset command: -110 [ 94.227736][ T9] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110 [ 94.247737][ T9] usb 4-1: USB disconnect, device number 3 [ 94.248888][ T5818] syzkaller1: entered promiscuous mode [ 94.248909][ T5818] syzkaller1: entered allmulticast mode [ 94.327558][ T5760] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 94.339459][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.339480][ T5704] usb 2-1: config 0 has no interfaces? [ 94.341900][ T5704] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 94.341926][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.341939][ T5704] usb 2-1: Product: syz [ 94.341948][ T5704] usb 2-1: Manufacturer: syz [ 94.341957][ T5704] usb 2-1: SerialNumber: syz [ 94.361372][ T5704] usb 2-1: config 0 descriptor?? [ 94.479252][ T5760] usb 1-1: device descriptor read/64, error -71 [ 94.727675][ T5760] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 94.857740][ T5760] usb 1-1: device descriptor read/64, error -71 [ 94.958603][ T5691] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.972323][ T5760] usb usb1-port1: attempt power cycle [ 95.107485][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 95.109511][ T5691] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.109532][ T5691] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 95.111754][ T5691] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 95.111777][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.111794][ T5691] usb 3-1: Product: syz [ 95.111818][ T5691] usb 3-1: Manufacturer: syz [ 95.111827][ T5691] usb 3-1: SerialNumber: syz [ 95.175339][ T5691] usb 3-1: config 0 descriptor?? [ 95.337571][ T5760] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 95.359479][ T5760] usb 1-1: device descriptor read/8, error -71 [ 95.597698][ T5760] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 95.638446][ T5760] usb 1-1: device descriptor read/8, error -71 [ 95.747910][ T5760] usb usb1-port1: unable to enumerate USB device [ 96.738877][ T37] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.887543][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 96.890303][ T37] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.890353][ T37] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 96.890386][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.896485][ T37] usb 4-1: config 0 descriptor?? [ 96.988886][ T5691] usb 2-1: USB disconnect, device number 3 [ 97.529816][ T37] usbhid 4-1:0.0: can't add hid device: -71 [ 97.529931][ T37] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.532410][ T5851] syzkaller1: entered promiscuous mode [ 97.532431][ T5851] syzkaller1: entered allmulticast mode [ 97.572022][ T37] usb 4-1: USB disconnect, device number 4 [ 97.776169][ T823] usb 3-1: USB disconnect, device number 2 [ 98.427505][ T5714] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 98.477734][ T5760] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 98.580720][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.580744][ T5714] usb 4-1: config 0 has no interfaces? [ 98.600846][ T5714] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 98.600874][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.600893][ T5714] usb 4-1: Product: syz [ 98.600907][ T5714] usb 4-1: Manufacturer: syz [ 98.600920][ T5714] usb 4-1: SerialNumber: syz [ 98.608563][ T5760] usb 1-1: device descriptor read/64, error -71 [ 98.642516][ T5714] usb 4-1: config 0 descriptor?? [ 98.858263][ T5760] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 98.987589][ T5760] usb 1-1: device descriptor read/64, error -71 [ 99.004668][ T5714] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.100716][ T5760] usb usb1-port1: attempt power cycle [ 99.177583][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 99.179433][ T5714] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 99.179449][ T5714] usb 2-1: config 0 has no interface number 0 [ 99.179475][ T5714] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 99.179517][ T5714] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.179531][ T5714] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 99.179547][ T5714] usb 2-1: config 0 interface 196 has no altsetting 0 [ 99.185238][ T5714] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 99.185255][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.185267][ T5714] usb 2-1: Product: syz [ 99.185277][ T5714] usb 2-1: Manufacturer: syz [ 99.185286][ T5714] usb 2-1: SerialNumber: syz [ 99.246348][ T5714] usb 2-1: config 0 descriptor?? [ 99.302517][ T5869] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.460423][ T5760] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 99.480904][ T5760] usb 1-1: device descriptor read/8, error -71 [ 99.534056][ T5714] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 99.534478][ T5714] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 99.571671][ T5714] usb 2-1: USB disconnect, device number 4 [ 99.717502][ T5760] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 99.740210][ T5760] usb 1-1: device descriptor read/8, error -71 [ 99.851200][ T5760] usb usb1-port1: unable to enumerate USB device [ 100.117608][ T823] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.136053][ T5879] syzkaller1: entered promiscuous mode [ 100.136068][ T5879] syzkaller1: entered allmulticast mode [ 100.267532][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 100.271824][ T823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.271845][ T823] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 100.274119][ T823] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 100.274144][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.274163][ T823] usb 3-1: Product: syz [ 100.274176][ T823] usb 3-1: Manufacturer: syz [ 100.274192][ T823] usb 3-1: SerialNumber: syz [ 100.335293][ T823] usb 3-1: config 0 descriptor?? [ 100.787506][ T5714] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.947485][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 100.949334][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.949374][ T5714] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 100.949397][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.954208][ T5714] usb 2-1: config 0 descriptor?? [ 101.227795][ T5704] usb 4-1: USB disconnect, device number 5 [ 101.618402][ T5714] usbhid 2-1:0.0: can't add hid device: -71 [ 101.618511][ T5714] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 101.647509][ T5714] usb 2-1: USB disconnect, device number 5 [ 101.767512][ T823] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 101.917464][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 101.919188][ T823] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 101.919212][ T823] usb 1-1: config 0 has no interface number 0 [ 101.919249][ T823] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.919274][ T823] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 101.919292][ T823] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 101.919308][ T823] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 101.919322][ T823] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.921486][ T823] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 101.921514][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.921527][ T823] usb 1-1: Product: syz [ 101.921536][ T823] usb 1-1: Manufacturer: syz [ 101.921545][ T823] usb 1-1: SerialNumber: syz [ 101.926826][ T823] usb 1-1: config 0 descriptor?? [ 102.055340][ T823] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 102.538446][ T5904] syzkaller1: entered promiscuous mode [ 102.538471][ T5904] syzkaller1: entered allmulticast mode [ 102.857536][ T5704] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 102.944636][ T5714] usb 3-1: USB disconnect, device number 3 [ 103.023179][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.023213][ T5704] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.027175][ T5704] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 103.027208][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.027227][ T5704] usb 2-1: Product: syz [ 103.027240][ T5704] usb 2-1: Manufacturer: syz [ 103.027254][ T5704] usb 2-1: SerialNumber: syz [ 103.102226][ T5704] usb 2-1: config 0 descriptor?? [ 103.387520][ T5704] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 103.508103][ T823] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.552627][ T5704] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 103.552659][ T5704] usb 4-1: config 8 has no interface number 0 [ 103.552699][ T5704] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 103.552717][ T5704] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 103.552734][ T5704] usb 4-1: config 8 interface 177 has no altsetting 0 [ 103.552754][ T5704] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 103.552769][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.607006][ T5909] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 103.607122][ T5909] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 103.665236][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 103.719732][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 103.719768][ T823] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 103.719783][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.723051][ T823] usb 3-1: config 0 descriptor?? [ 103.763859][ T823] ------------[ cut here ]------------ [ 103.763870][ T823] workqueue: ath6kl_wq is using neither WQ_PERCPU or WQ_UNBOUND. Setting WQ_PERCPU. [ 103.763885][ T823] WARNING: kernel/workqueue.c:5856 at __alloc_workqueue+0x1d02/0x2070, CPU#1: kworker/1:2/823 [ 103.763924][ T823] Modules linked in: [ 103.763957][ T823] CPU: 1 UID: 0 PID: 823 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.764001][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.764014][ T823] Workqueue: usb_hub_wq hub_event [ 103.764044][ T823] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 103.764069][ T823] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 103.764086][ T823] RSP: 0018:ffffc9000569ebc8 EFLAGS: 00010287 [ 103.764103][ T823] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 103.764117][ T823] RDX: ffffc90019758000 RSI: ffff88801bf63d68 RDI: ffffffff8fd24120 [ 103.764131][ T823] RBP: 0000000000000000 R08: ffff888026fd1f00 R09: 0000000000000002 [ 103.764144][ T823] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 103.764158][ T823] R13: ffff88801bf63c00 R14: ffffc9000569ece0 R15: 0000000000000000 [ 103.764173][ T823] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 103.764189][ T823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.764202][ T823] CR2: 00007f6e5ae15d58 CR3: 00000000352de000 CR4: 00000000003526f0 [ 103.764220][ T823] Call Trace: [ 103.764233][ T823] [ 103.764258][ T823] alloc_workqueue_noprof+0xe3/0x210 [ 103.764290][ T823] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 103.764318][ T823] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 103.764341][ T823] ? ath6kl_usb_probe+0x8e/0x1580 [ 103.764381][ T823] ath6kl_usb_probe+0xaa/0x1580 [ 103.764439][ T823] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 103.764473][ T823] usb_probe_interface+0x659/0xc70 [ 103.764514][ T823] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.764540][ T823] really_probe+0x267/0xaf0 [ 103.764575][ T823] __driver_probe_device+0x1e2/0x350 [ 103.764606][ T823] driver_probe_device+0x4f/0x240 [ 103.764646][ T823] __device_attach_driver+0x270/0x410 [ 103.764679][ T823] bus_for_each_drv+0x25b/0x2f0 [ 103.764700][ T823] ? __pfx___device_attach_driver+0x10/0x10 [ 103.764728][ T823] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.764747][ T823] ? rt_spin_unlock+0x160/0x200 [ 103.764775][ T823] __device_attach+0x2c8/0x450 [ 103.764803][ T823] ? __pfx___device_attach+0x10/0x10 [ 103.764832][ T823] ? rt_spin_unlock+0x160/0x200 [ 103.764859][ T823] device_initial_probe+0xa1/0xd0 [ 103.764887][ T823] bus_probe_device+0x12d/0x220 [ 103.764910][ T823] device_add+0x7ec/0xb90 [ 103.764939][ T823] usb_set_configuration+0x1a87/0x2110 [ 103.764991][ T823] usb_generic_driver_probe+0x8d/0x150 [ 103.765019][ T823] usb_probe_device+0x1c4/0x3b0 [ 103.765049][ T823] ? __pfx_usb_probe_device+0x10/0x10 [ 103.765072][ T823] really_probe+0x267/0xaf0 [ 103.765106][ T823] __driver_probe_device+0x1e2/0x350 [ 103.765135][ T823] driver_probe_device+0x4f/0x240 [ 103.765165][ T823] __device_attach_driver+0x270/0x410 [ 103.765195][ T823] bus_for_each_drv+0x25b/0x2f0 [ 103.765215][ T823] ? __pfx___device_attach_driver+0x10/0x10 [ 103.765243][ T823] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.765263][ T823] ? rt_spin_unlock+0x160/0x200 [ 103.765291][ T823] __device_attach+0x2c8/0x450 [ 103.765319][ T823] ? __pfx___device_attach+0x10/0x10 [ 103.765346][ T823] ? rt_spin_unlock+0x160/0x200 [ 103.765373][ T823] device_initial_probe+0xa1/0xd0 [ 103.765401][ T823] bus_probe_device+0x12d/0x220 [ 103.765426][ T823] device_add+0x7ec/0xb90 [ 103.765454][ T823] usb_new_device+0x9f8/0x16e0 [ 103.765486][ T823] ? __pfx_usb_new_device+0x10/0x10 [ 103.765516][ T823] hub_event+0x2a49/0x4f60 [ 103.765589][ T823] ? __pfx_hub_event+0x10/0x10 [ 103.765614][ T823] ? process_one_work+0x8be/0x1630 [ 103.765666][ T823] ? process_one_work+0x8be/0x1630 [ 103.765695][ T823] process_one_work+0x98b/0x1630 [ 103.765746][ T823] ? __pfx_process_one_work+0x10/0x10 [ 103.765774][ T823] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.765813][ T823] worker_thread+0xb49/0x1140 [ 103.765869][ T823] kthread+0x388/0x470 [ 103.765894][ T823] ? __pfx_worker_thread+0x10/0x10 [ 103.765924][ T823] ? __pfx_kthread+0x10/0x10 [ 103.765950][ T823] ret_from_fork+0x514/0xb70 [ 103.765978][ T823] ? __pfx_ret_from_fork+0x10/0x10 [ 103.766003][ T823] ? __switch_to+0xc79/0x1410 [ 103.766026][ T823] ? __pfx_kthread+0x10/0x10 [ 103.766050][ T823] ret_from_fork_asm+0x1a/0x30 [ 103.766096][ T823] [ 103.766106][ T823] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.766120][ T823] CPU: 1 UID: 0 PID: 823 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.766143][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.766156][ T823] Workqueue: usb_hub_wq hub_event [ 103.766179][ T823] Call Trace: [ 103.766186][ T823] [ 103.766195][ T823] vpanic+0x56c/0xa60 [ 103.766224][ T823] ? __pfx__printk+0x10/0x10 [ 103.766245][ T823] ? __pfx_vpanic+0x10/0x10 [ 103.766272][ T823] ? is_bpf_text_address+0x292/0x2b0 [ 103.766301][ T823] ? is_bpf_text_address+0x26/0x2b0 [ 103.766337][ T823] panic+0xc5/0xd0 [ 103.766365][ T823] ? __pfx_panic+0x10/0x10 [ 103.766403][ T823] ? ret_from_fork_asm+0x1a/0x30 [ 103.766436][ T823] __warn+0x315/0x4c0 [ 103.766463][ T823] ? __alloc_workqueue+0x1d02/0x2070 [ 103.766489][ T823] ? __alloc_workqueue+0x1d02/0x2070 [ 103.766514][ T823] __report_bug+0x339/0x540 [ 103.766539][ T823] ? __device_attach+0x2c8/0x450 [ 103.766564][ T823] ? device_initial_probe+0xa1/0xd0 [ 103.766589][ T823] ? bus_probe_device+0x12d/0x220 [ 103.766612][ T823] ? __alloc_workqueue+0x1d02/0x2070 [ 103.766645][ T823] ? __pfx___report_bug+0x10/0x10 [ 103.766670][ T823] ? device_add+0x7ec/0xb90 [ 103.766712][ T823] report_bug_entry+0x19a/0x290 [ 103.766740][ T823] ? __alloc_workqueue+0x1d07/0x2070 [ 103.766761][ T823] ? __alloc_workqueue+0x1d0c/0x2070 [ 103.766784][ T823] handle_bug+0xce/0x200 [ 103.766814][ T823] exc_invalid_op+0x1a/0x50 [ 103.766843][ T823] asm_exc_invalid_op+0x1a/0x20 [ 103.766862][ T823] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 103.766886][ T823] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 103.766903][ T823] RSP: 0018:ffffc9000569ebc8 EFLAGS: 00010287 [ 103.766920][ T823] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 103.766934][ T823] RDX: ffffc90019758000 RSI: ffff88801bf63d68 RDI: ffffffff8fd24120 [ 103.766949][ T823] RBP: 0000000000000000 R08: ffff888026fd1f00 R09: 0000000000000002 [ 103.766963][ T823] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 103.766977][ T823] R13: ffff88801bf63c00 R14: ffffc9000569ece0 R15: 0000000000000000 [ 103.766999][ T823] ? __alloc_workqueue+0x1cfb/0x2070 [ 103.767029][ T823] ? __alloc_workqueue+0x1cfb/0x2070 [ 103.767067][ T823] alloc_workqueue_noprof+0xe3/0x210 [ 103.767098][ T823] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 103.767126][ T823] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 103.767157][ T823] ? ath6kl_usb_probe+0x8e/0x1580 [ 103.767194][ T823] ath6kl_usb_probe+0xaa/0x1580 [ 103.767219][ T823] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 103.767241][ T823] usb_probe_interface+0x659/0xc70 [ 103.767268][ T823] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.767286][ T823] really_probe+0x267/0xaf0 [ 103.767310][ T823] __driver_probe_device+0x1e2/0x350 [ 103.767330][ T823] driver_probe_device+0x4f/0x240 [ 103.767352][ T823] __device_attach_driver+0x270/0x410 [ 103.767402][ T823] bus_for_each_drv+0x25b/0x2f0 [ 103.767423][ T823] ? __pfx___device_attach_driver+0x10/0x10 [ 103.767451][ T823] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.767471][ T823] ? rt_spin_unlock+0x160/0x200 [ 103.767499][ T823] __device_attach+0x2c8/0x450 [ 103.767527][ T823] ? __pfx___device_attach+0x10/0x10 [ 103.767555][ T823] ? rt_spin_unlock+0x160/0x200 [ 103.767582][ T823] device_initial_probe+0xa1/0xd0 [ 103.767611][ T823] bus_probe_device+0x12d/0x220 [ 103.767642][ T823] device_add+0x7ec/0xb90 [ 103.767673][ T823] usb_set_configuration+0x1a87/0x2110 [ 103.767709][ T823] usb_generic_driver_probe+0x8d/0x150 [ 103.767727][ T823] usb_probe_device+0x1c4/0x3b0 [ 103.767748][ T823] ? __pfx_usb_probe_device+0x10/0x10 [ 103.767765][ T823] really_probe+0x267/0xaf0 [ 103.767789][ T823] __driver_probe_device+0x1e2/0x350 [ 103.767809][ T823] driver_probe_device+0x4f/0x240 [ 103.767830][ T823] __device_attach_driver+0x270/0x410 [ 103.767852][ T823] bus_for_each_drv+0x25b/0x2f0 [ 103.767866][ T823] ? __pfx___device_attach_driver+0x10/0x10 [ 103.767885][ T823] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.767899][ T823] ? rt_spin_unlock+0x160/0x200 [ 103.767917][ T823] __device_attach+0x2c8/0x450 [ 103.767936][ T823] ? __pfx___device_attach+0x10/0x10 [ 103.767954][ T823] ? rt_spin_unlock+0x160/0x200 [ 103.767972][ T823] device_initial_probe+0xa1/0xd0 [ 103.767992][ T823] bus_probe_device+0x12d/0x220 [ 103.768007][ T823] device_add+0x7ec/0xb90 [ 103.768026][ T823] usb_new_device+0x9f8/0x16e0 [ 103.768048][ T823] ? __pfx_usb_new_device+0x10/0x10 [ 103.768068][ T823] hub_event+0x2a49/0x4f60 [ 103.768116][ T823] ? __pfx_hub_event+0x10/0x10 [ 103.768132][ T823] ? process_one_work+0x8be/0x1630 [ 103.768161][ T823] ? process_one_work+0x8be/0x1630 [ 103.768181][ T823] process_one_work+0x98b/0x1630 [ 103.768215][ T823] ? __pfx_process_one_work+0x10/0x10 [ 103.768234][ T823] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.768261][ T823] worker_thread+0xb49/0x1140 [ 103.768299][ T823] kthread+0x388/0x470 [ 103.768315][ T823] ? __pfx_worker_thread+0x10/0x10 [ 103.768336][ T823] ? __pfx_kthread+0x10/0x10 [ 103.768352][ T823] ret_from_fork+0x514/0xb70 [ 103.768371][ T823] ? __pfx_ret_from_fork+0x10/0x10 [ 103.768387][ T823] ? __switch_to+0xc79/0x1410 [ 103.768403][ T823] ? __pfx_kthread+0x10/0x10 [ 103.768419][ T823] ret_from_fork_asm+0x1a/0x30 [ 103.768449][ T823] [ 103.769041][ T823] Kernel Offset: disabled