last executing test programs: 23.386095926s ago: executing program 3 (id=760): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$printer(r2, &(0x7f00000001c0)={0x14, &(0x7f00000002c0)={0x40, 0x0, 0xa8, {0xa8, 0x21, "a283587d1a243bf1a22f88c8545ef0cbd5711fb87f3782895dcfcad551562939c47a35c11a11e3ce1b23c859e4b5992d907c8b9fefbab375fb68caef162b446b49abc501dbf3f9c07ff0a0346cb50f4f6d9a82e56b02c73cf9b9fa995a79138653f7465fd3923ca7f1da7974c2e2278e7a3dca2d158619cacbfd4252e7f3cf06a2280a7c6f76fb2a352ac448f340fd7261ba2c179ee38f91d3bbacf76608abad4c3e7671ae1d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x0, 0x17, 0x96, "d2276f66e23686bca4e44a9b5970fda024f6bd07d70dd3715430869586bf067ccc2ab5d0cb520cd22f5cec3142b8575466c6e3925873ca2dfe21b28f4b93c9a65b832515ecb36ae76fbc1f20011e5e4ac889312cb7ac30dad787429194298593f4c63057178e9aab3fff451e77116b4df38f1afac8a96a96fa1ec9c2af720237cd5c8f566ab87593a74a914a1d56a4796a43898e64d7"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x10, {0xe, "4e4434bada9e55edc714fa13a971"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xf}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "da9ecb", 0x0, 0x11, 0x0, @loopback, @loopback}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000882}, 0x4004815) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xb0, &(0x7f0000000000), &(0x7f0000000240)=0x4) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x30d0, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x3, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc040564a, &(0x7f00000000c0)={0x2}) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000200)={0x0, @motion_det}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 19.184148654s ago: executing program 3 (id=779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1c0) fcntl$addseals(r4, 0x409, 0x7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x9) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) accept(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) creat(&(0x7f0000000080)='./file0\x00', 0x1c0) (async) fcntl$addseals(r4, 0x409, 0x7) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) (async) 18.990561941s ago: executing program 3 (id=781): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4005, @local}, 0x10, 0x0}, 0x30004081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd, 0xe6, 0x7a}}]}}]}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002800)="c2", 0x1}], 0x1}, 0x0) 18.405032321s ago: executing program 2 (id=786): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="6b299ade8cbda6e56212ff3893660fee7029bbf2486deb59b1b6ed06a3a349323f23ed723a59d2f0aeb03ba360926341d607d7b1f4eb0b3081878a8656ddf677a06da64f8655b12c4dbf095059b2aaa6b2072e1f73dce7185cc3199352dadd93ad", 0x61}, {&(0x7f0000000300)="b8237cfc040a165fb83894065a74b78e50cf60125ba6e46f577caa70d60e8d928191fba45f59d7b9de34c2d885d6983d2725a7d4eeffe4eb233dc09d827a4dde6c793c326cadf128b87a400d1983e6fc76cce5d3fc5a0ace93f2d39f00007327df3a52f7bbe206be79917ee0", 0x6c}, {&(0x7f0000000240)="3a57c1f4753fd7c5ba05da7257d875190145e456920360b121e00bc227f5d41665429b383d8c9e059471d632ab77fc3577b269ed416657ac1875459cec011c09f3c5bbfaf6e3eeb3284aa0dbbad325c6670a99973eb2709b913011ec0f8c2147b7857da667dffd1ba1f1149a4f6188b7d29827832b1678bcb5607e6e74728eefc4b23cccb4cd9b026b66d94841f003d34ac4cc7463f0b408b3912898cf27ab73572063e7e8234a113b1ef7823432d6a100f09af141de969466", 0xb9}, {&(0x7f0000000440)="fdca1b45d61473ab03319a916dd332de18fe8ac4688ce89abedf60c8533fe371e646e8b14eed9fa54ca90d57ea76d8aa9b333f040f951d659cf692ffd62b4b29f8942e4c8715f2365441a581de6dbc5353a8c96dd5b7d8573fe0b3a1c94dc90190d6e2dbb6f924e00694038d4ae01ece67d068e173bd3430580060eab8888c8b8328d8535062751c2dd4c545d61b333427da5cb986aff7ad10271fb0edd9cff0d06a90b4a9cd1936dc79131d9e315021049e75476e5e0c911dfff9939b9f70773b1f77fd8b3df10eaca2bd5b4f7dec18c0d5ddb88aa23ff9739930ae01a3fa3f572f602d8f3c0c3960bda16bf6b935cce10166ce60ca5a", 0xf7}], 0x4}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000140)={{@any, 0xffffffff}, 0x1, 0x0, 0x1}) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x8001) 18.158556472s ago: executing program 2 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="018004000000bbbbbbbbbba1f1b94900002c0000000000069078000000000000000000104e26", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200019078000001000000"], 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 18.143750804s ago: executing program 2 (id=789): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x18}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x78}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000040), 0x57, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') lseek(r6, 0x3ff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800"/28], 0x0) 17.692720593s ago: executing program 3 (id=793): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x8, 0x7, 0xa, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x81}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_ident={0x2, 0xa, 0x3ff, 0x0, 0x9}]}, 0x50}}, 0x20000004) read$alg(r1, &(0x7f0000001e00)=""/4108, 0x210) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1e, 0xd8, 0x93, 0x40, 0x15c2, 0x36, 0x5961, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdc, 0x0, 0x0, 0xd5, 0x7b, 0x52}}]}}]}}, 0x0) 16.650479982s ago: executing program 2 (id=794): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = syz_io_uring_setup(0xd5, &(0x7f00000002c0)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 16.609033855s ago: executing program 2 (id=795): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0xf, 0x1, 0x80000000) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x12c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xfc, 0x2, [@TCA_FLOW_EMATCHES={0xf8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x1ff}, "30e8a0bd8da85469e4033eb716bdf6b86165c012ce28910ebc497914de768c8263a44ceb2060c60e695ad04b956cff3fef58fec6ee2d672d8d91af5454b5dfd0c434f32b952630c5b8744c85b0594215bce42407fd85af06faaa9e3d06e73c6399e7ad1f3fcd4f4f2f0370c3b1179a36514036b81daa24b27b79bee070a26bb97541d4c5f1acfdbbddf6b9f73e44193c323843966d4b17bbd8b4af5884264135024c26026fedd86508cea3e898dce0c76f89bc9ec61e6d028005f4847d"}}]}]}]}}]}, 0x12c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 16.291373138s ago: executing program 3 (id=796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) write(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102385, 0x18ff1}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000f07000)}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0xa, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0xfffffffd, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x800, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x2a, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x6, [0x614f]}]}}}}}) getpgid(0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x4, 0x0, 0x3ff}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000140)={0x0, 'pimreg\x00'}) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x2000, 0x0) lseek(r6, 0x1000, 0x4) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 15.87109296s ago: executing program 1 (id=798): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@initdev}, &(0x7f00000000c0)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x210c00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000140)={0x1000, 0xd000, 0x8, 0x7, 0x46}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000180)={{0x3, 0x0, 0x80, {0x8080000, 0x3000, 0x1}}, "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", "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"}) r4 = io_uring_setup(0x1176, &(0x7f0000002200)={0x0, 0xc554, 0x800, 0x3, 0x295}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000002280)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000022c0)={"e364ae09a5cd048bb27778063a97764e", 0x0, r5, {0x9272, 0x35}, {0x1, 0xffff}, 0x3, [0x7, 0x80, 0x3, 0x8001, 0x4, 0x401, 0x40, 0x1, 0xadc7, 0x2, 0x4, 0x6, 0x627, 0x1, 0x80000, 0x100000001]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000023c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000002400)={0x0}) ioctl$DRM_IOCTL_DMA(r6, 0xc0406429, &(0x7f0000002540)={r7, 0x3, &(0x7f0000002440)=[0x97, 0x5, 0x0], &(0x7f0000002480)=[0x4, 0xfffffff7, 0x1, 0x100, 0xbe3, 0x5, 0x0], 0x22, 0x1, 0x0, &(0x7f00000024c0)=[0xef], &(0x7f0000002500)=[0x7fffffff, 0x81]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x100010, r4, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r8 = openat2(0xffffffffffffffff, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0xc8e3e95311a256e5, 0x0, 0xb}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), r8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000002640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x9}}, './file0\x00'}) ioctl$KVM_S390_VCPU_FAULT(r9, 0x4008ae52, &(0x7f0000002680)=0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002740)=@nat={'nat\x00', 0x1b, 0x5, 0x3b0, 0xa8, 0xa8, 0xffffffff, 0xa8, 0x0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, &(0x7f00000026c0), {[{{@ip={@rand_addr=0x64010102, @rand_addr=0x64010100, 0xff000000, 0x0, 'team_slave_1\x00', 'veth1_to_team\x00', {0xff}, {}, 0xc, 0x3, 0x23}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @gre_key=0x2, @gre_key=0x5}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1f}, @loopback, 0xffffff, 0xffffffff, 'wg1\x00', 'vlan0\x00', {0xff}, {}, 0x21, 0x3, 0x2}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x800, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x3, 0x3}, {0xffffffffffffffff, 0x6, 0x4}, 0x9, 0x9}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @multicast1, @local, @icmp_id=0x65, @gre_key=0x81}}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 'bond0\x00', 'ipvlan1\x00', {0xff}, {}, 0x73, 0x0, 0x4}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x2, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @remote, @empty, @icmp_id=0x67, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) syz_open_dev$video(&(0x7f0000002b80), 0x3, 0x40) flock(r2, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000002bc0)={'HL\x00'}, &(0x7f0000002c00)=0x1e) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002c40), 0x32000, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000002c80)={0x4, 0x3}, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000002cc0)={0x2, 'pimreg\x00', {0x2}, 0x7}) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40000110}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x34, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFQA_CFG_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000002e80)={{0x1, 0x1, 0x18, r9, {0xee00, 0xee01}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40), 0x2080000, &(0x7f0000002f80)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {}, 0x2c, {[{@default_permissions}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/video#\x00'}}, {@fowner_lt}]}}) 15.544805912s ago: executing program 1 (id=799): ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x4000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40e80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000200)="66baf80cb81c04de86ef66bafc0c66ba210066edee9a000000003500b8010000000f01d98fea681247320b0000000f78cab9800000c00f3235000100000f3066baf80cb8f8867886ef6736f6930000b829440000eff30f09b8006800000f23c80f21f8350c0040000f23f8670f013b", 0x6f}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.764997291s ago: executing program 4 (id=802): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "04616ce43cf5c286ab3b1bd1e60316e9", 0x5}}}, 0x1a) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x63, 0x79, 0x20, 0x5ac, 0x23f, 0xe0d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd6, 0x2}}]}}]}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e4"], 0x20) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='batadv0\x00', 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x1000000}}}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x7, @private1, 0x9f6a}], 0x58) 14.764119516s ago: executing program 0 (id=803): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000200)={0x800, 0x8, '\x00', 0x0, &(0x7f0000000000)=[0x0]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="4001000010001307000000000300000000000000000000000000000000000000ac0d41e88f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414aa0000000032000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050019006c000000"], 0x140}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) syz_usb_connect(0x0, 0x190, &(0x7f0000001240)=ANY=[@ANYBLOB="120100000c296210f415150072740102030109027e0101000000000904"], 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pidfd_send_signal(r6, 0xfffffffb, &(0x7f0000000080)={0x0, 0x0, 0x80000001}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080)={0x9, 0x9, 0x2, 0x1, 0x7, 0x1, 0xe5, 0xf7, 0x9, 0x50, 0x4, 0x5, 0x8, 0xf0}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000040)={r8, 0x6, 0x10, 0x4, 0x1d14}, &(0x7f00000000c0)=0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40010000100013070000000000000000ac14141000000000000000000000000000000000000000000000ffffac1e01010000fdfc00"/64, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d332000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000a000000420000000000000014000d006401010100000000000000000000000008001d000000000008001800000000002c001700040000002bbd70002bbd700028bd70002dbd700008000000a9000000050000000000000003000000"], 0x140}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.705643655s ago: executing program 1 (id=804): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x18}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x78}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000040), 0x57, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') lseek(r6, 0x3ff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800"/28], 0x0) 12.068341736s ago: executing program 1 (id=805): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = syz_io_uring_setup(0xd5, &(0x7f00000002c0)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 11.9509263s ago: executing program 1 (id=806): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = openat$audio(0xffffff9c, &(0x7f0000000000), 0x881, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) poll(&(0x7f0000000180)=[{}, {}, {r0, 0x20}], 0x20000000000002cd, 0x3ff) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10101}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000002900)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0xa, "ba1a25d7"}, @global=@item_012={0x2, 0x1, 0x4, "598a"}]}}, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000002c0012800b00010067656e65766500001c00028005000a0001000000060005004e210000050003000600000008000300", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x0) 9.699766294s ago: executing program 0 (id=807): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x90, 0xf1, 0x9c, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xcc, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0xff, 0xc0, 0x6d, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x96}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x6, 0x6, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x2, 0x5, 0x34, "85610c45c0cac6"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x1001}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xc1, 0x1, 0x0, 0x7}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0xd, 0x40, "02227b9208"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0x9, 0xfc, "38ea5547b0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0x2, 0xf2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0x8, 0xa, 's'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x8, 0x3, "c54c3b92f0ce3e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x18, 0x0, 0x2, 0x3f, {0x7, 0x25, 0x1, 0x80, 0x8, 0x5}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x8, 0x7, 0x80, 0x40, 0x4}, 0x15, &(0x7f0000000480)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x5, 0x0, 0x5, [0xc000]}]}, 0x6, [{0x49, &(0x7f00000004c0)=@string={0x49, 0x3, "51349a77139b8c5630046575d66cd97013cd454eef58c7af366fc9735318f6d01ec03b4ab12087390350c235036dc3fafa29009cbcea739b4266a173a79853089ad8804309b0aa"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x420}}, {0x56, &(0x7f00000007c0)=@string={0x56, 0x3, "c997a9b82d4115dbc43ed4bd4e040b5fec99d367e852cabee32384827f8bdd61894e0ae36213d492d3a73f7a4f0dc1fd827075c74cba19bee144ec1ed4d856ca6457ca69a93a56ad34fa3417a529635874bf1ef2"}}, {0x7d, &(0x7f00000006c0)=@string={0x7d, 0x3, "cefee8cd91a523acf2f83f4a6432957bcf61e0dd48542c16dd0d52bdc7aa736014d737136782c7499f21942cedd8ad6fba400aced7cf76305df53584348a07f82f36badca0d6a5970b9607e275945284d4e55242e53fec50161d3a6ba92bee5239fd52191a7267411b83f1a85ccde5b5d4970c2e38da00c1138e42"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x814}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0xff, 0x40, 0xa, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, "2faa"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x0, 0x8, 0xf8}, [@acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x5, 0x63, 0x8}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x3, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x600, 0x6, 0xf, 0x6}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0x4, 0xb8, 0x8, 0x3}, 0xad, &(0x7f0000000140)={0x5, 0xf, 0xad, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x9, 0x4, 0x79, 0xd}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x4, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xe, 0xa, 0x5}, @generic={0x2b, 0x10, 0x4, "a07b58c5a395173f575005f26448b21ff3fab4699c8581b4d77d11c01c840d169c41442edc6642e1"}, @generic={0x5d, 0x10, 0xb, "311fe578ec44685a4976636986ee39401a00540ba5953403a506662be14e87dbfa65ede2fdd5c8113c7bc2b1d8c0814f6ae80f63aa6d3794d1b9177ac021345685f41ab2ae41d8bb431bc87fcf43a241cd859d2ac2514602d843"}]}, 0x1, [{0xaf, &(0x7f0000000200)=@string={0xaf, 0x3, "212020fc83714cddf9ac25196183562182ddd0abf7ea2b828b5dc9f2f23f99ab344d4de14a96f78664942862acc8f5dfbcd9fff1a56b068e1b5eb9fb04b375c5a4de69885151a2bc8a6d431d57b0d40db0eb40890d65360b40c981e75a08f4b851be62d02bd13e177a4ac39ba228f7b9148ad64a46132d9b9f6383539fff3125d7d2960370a074f492db9f6a1a2f6a43782a8b01ff7e87cd12065bf8e943e74287b0e4311cff558d8ee5c7677b"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.698312253s ago: executing program 2 (id=808): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001e40)={r1, 0x3, 0x6}, 0x10) socket$inet6(0xa, 0x17a78047fd755627, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x881, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x40010161, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00\x00', 0x2}], 0x1}, 0x8001) fsopen(&(0x7f0000000140)='erofs\x00', 0x0) fsopen(&(0x7f0000000040)='overlay\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r1], 0x20}}, 0xfffffffffffffffe) 9.136599448s ago: executing program 3 (id=809): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x3}}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x2}, 0x10) r1 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000fc0), 0xa01) r3 = io_uring_setup(0x6274, &(0x7f0000001300)={0x0, 0x6bba, 0x40, 0x2, 0x2a7}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000015c0)={0x1, 0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x0}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000019, 0x405c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000001000)) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "7f6496", 0xc, 0x11, 0xff, @private1, @empty, {[], {0x4e24, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000380)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x42) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002110000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) ioctl$sock_proto_private(r7, 0x89e4, &(0x7f0000000000)="248ed9179bcef0804b55cca3ae53efff7f1056f5991c2f9b2ee2f926e0d772eba7896f90324ce79f53afaea67ffeca9b4528bd73b0340f01ed26001279463c48ef65515b06f784798180107a801803ed4242826e1c869a5e786836c182096c04c7219ebcfed4df02f40ee9048529764be8803014") flock(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[0x0, 0x0]}) 8.969593111s ago: executing program 4 (id=810): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000680)={0x18, 0x0, {0x0, @remote, 'pim6reg\x00'}}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x3b, @loopback, 0x4e24, 0x0, 'none\x00', 0x1, 0x0, 0x1e}, 0x2c) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x2c, 0x28, 0x107, 0x0, 0x0, {0x2}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='!])&\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x2) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 8.823574606s ago: executing program 4 (id=811): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) 8.588617687s ago: executing program 1 (id=812): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0xf, 0x1, 0x80000000) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 5.619709459s ago: executing program 4 (id=813): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7498}}, './file0\x00'}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000005880)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) getdents64(r5, &(0x7f0000000100)=""/42, 0x2a) syz_open_dev$sg(0x0, 0x7f, 0x5017c1) removexattr(0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x1}}, 0x10) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r6, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r10}, 0xc) 5.496658691s ago: executing program 4 (id=814): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect(0x6, 0x4a2, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0xeb, 0x3d, 0x3c, 0x20, 0x2770, 0x930c, 0x945d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x490, 0x2, 0x5, 0xf0, 0x40, 0x3, [{{0x9, 0x4, 0x3b, 0xb, 0x8, 0x54, 0x67, 0x5b, 0x4, [@generic={0xf7, 0xd, "1d19a937bbbfaf1b937e4f6e1a0b755284fc759d2b400697cc8f58e6ef64db1e58de9cc9ce06b12f1cf072f8b87348aae3d06891e5721ed312aae0f16e5f757a671dc1ead1d02949a090e1c78990a222b9a2215f634d759d5be3ca4552eedb760a074388d62c0fd5ebb21315f691c9e6706e8161891cc47327858fd7a89529deacd07296a0d6a3de71c444a0f9d56bb152b745df247030fe89670fb3fa570dea7e18ac158449396b17d3cf0f08493c694f117fa0328ae33423a01f89712d67e3a3aed72839a647b988728c15ba32fe74eb720627a7092969f0b1f9db2659fcd9bcd88273c8ceeb750457be9c2e285827905d975b8e"}], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x6, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x9, 0x3, 0x7, [@generic={0x10, 0x10, "58dbbefcc0b038ec47d33433d62e"}, @generic={0xce, 0x2, "6301d3047d3bfd5fa512cac2bb31d3e65255f38d6d2d1fba9aba2bff473671b09c9fda4bc6995f597d80f793fd710a1dbf65600ad66eef2ce592a88a52c4fd2c8a35a1a91b0b7fba5afa42a3a1be60cf4153a5ef682b5e47a6edbc09e531796db6d095abe1218b4301e9291c01b31adfd3b2ffed9cdd26b72c6d5b2d8abc9cae6237d0599d78b0a1fd12ba4ef2f70226ca1dc7f2c1db5b615a5ca79c2cd5e8edc1cceb0ebb178ee6cddbc3d53ca836d6d7307462ed44c16723c90d23749fc8974598a4d53ffff4893bd43d98"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x12, 0x5, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x0, 0xed, 0xd, [@generic={0xca, 0x30, "b87c16d0185fba512d81a2d4573c81131fa156f64ae7a779a230a55dc44a6637ecd630617ed3d2183c48b79fadd4652bc97ca42cbe82d4f6c6e27d97fe553cf3775f52aabcd458df7b1536a4b78c3d96b92e084071e419683bc2b3e8f4eb1136451a70b1d4f507c53607e062e6b419f10e925b817ddb374a6a3c5163ef433f050833cfd6d31da175345800c9ed1502d140e2ea7c45d29fc7882a508847409b24fc4c80eb428a3e9b9c56400368571c19996b9826ddad54d142545471d912df648297a8839eda7105"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x1}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x3, 0x10, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf9, 0x1}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x10, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x87, 0x98, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}]}}, {{0x9, 0x4, 0x6f, 0x3, 0x5, 0xdc, 0x46, 0xd8, 0xc5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, ':!T1'}, {0x5, 0x24, 0x0, 0x22}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x8, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x8, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0x8, 0x100}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x0, [0x401, 0x4, 0x7fff, 0x7, 0x584]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc3}, @country_functional={0x10, 0x24, 0x7, 0x6, 0x7f1a, [0x3, 0x17, 0xfff, 0x8, 0x4]}]}], [{{0x9, 0x5, 0x80, 0x8, 0x10, 0x74, 0xb, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfffe}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0xdf, 0x9, 0x7, [@generic={0x8c, 0x23, "e36d6df1a4d1fe29618c14bdd6d5a9204f884184f2ae92c7d019039e5582b08de1147a5eba1ac036b322f0dbab328fb7247d4c59da6ecdfb63c22f69db6b604de2aeea9804730b40756fdbf6979b0d02d096f1549e2841c7ac7a4807700916c7ca23b8c30e90f3b376b6404be5da9aaf3ba8d34aafb035221595507b946f182e754c4fa1373b70d7589d"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xe4, 0xe6, 0x6, [@generic={0x24, 0x2, "b83e3ea437bb3fef25133a6d2a4039f734101ede268c93fc089d2ea47cd53fa95730"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7c}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0xeb, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x40fb}]}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x5, 0x7, 0x6, 0x20, 0x5}, 0xf, &(0x7f00000004c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1, 0x5, 0x8}]}, 0x7, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc04}}, {0x84, &(0x7f00000005c0)=@string={0x84, 0x3, "e9a59d0efb900d1e69f4fb18827bb73a6bc0b506386e48cd77308a158881da53a85192585e8e30348d2dc1b9685c8c7202b382463168599e6287a8e624a2dbff2a49a2a2a70181cb4dd7dba845c4def95798c0cf1d3811639eb0707aee08f226208c06ea6861b8f3123100ca1b9026ff59c47292ca9ebdfd04885f2e2ab514962dd2"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x404}}, {0x7a, &(0x7f0000000c40)=@string={0x7a, 0x3, "396a697d1ff486b001e41b35b0971d0d27e1af3960badfdced6bddc5ca090a7534a9df24b57a2c0bc66e533d8271f78249567307f5e9e502696c58ab2df8395965bec516455fb2f0f8be074f34c3c13b971046c6a8b4694e23907c099ea5013344b11e227a39af628eeb8f688b76fcccb569272666ce4c06"}}, {0xb7, &(0x7f0000000d00)=@string={0xb7, 0x3, "4267f279b31d1bbf6dfa85b29fde918162bc9136c2c5fdc3bfaa74d67dd05c260bdb07233e8b3fc2263883ec429406627be43d63e3cffead080671ccb1bb7db7fad69df87f3fc20e15109c074224155837d0fac2fad554f928ae1cd6c7dc2360e95e3acf31f59f62e7a5da9902d45794ccab5070a401d7d016256dfedfbd0ad8b43215a73d54b648109fca002bb21880a5e00a89180fd8689fcb9076cbd175736613d3896db706706f592c6164b725f10ea25a7f67"}}, {0xff, &(0x7f0000000e40)=@string={0xff, 0x3, "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"}}, {0xa3, &(0x7f0000001040)=@string={0xa3, 0x3, "6016c9c56f18033fa2249af87231eeb47fa636ff8869a5d7fd7d5af81f5168875bb69a23922ef029d19066ba2ab6ee3acfa3ddad0884047ec9ee5a3b258e46236f87fa5b3f8133b149b596777eea27740faccf82ea72a297483cd021eb750755b560424acf338654f7070f77cceb034fa4cbb33afdc224564723e2a94b781013ac62b4bc16aeec0eb22eb63e94a607ef5b9e378ec75219eb4552adef0033c1dab4"}}]}) syz_usb_control_io(r1, &(0x7f0000001380)={0x2c, &(0x7f00000011c0)={0x0, 0xe, 0x7c, {0x7c, 0x9, "dc9775f62b8e267ac8fff37f6f5f5c50d9d7ae96504495596faeff117ed734593b8eed45c70f608592bc846bb5c840b68823d61680dc0e543db663cc374ce6b64317d891d26c9563ea215a3bc453b0472672c888575bb35e6340d83d9bba7e3bd1114030f132878669b3a4380ffbb2e99f3f22ca827eb19a7452"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000001280)={0x0, 0xf, 0x95, {0x5, 0xf, 0x95, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x3b, 0x6, 0x9, 0x780f, 0xffff, [0x17, 0xff00, 0xc030, 0x0, 0xffffff, 0x30]}, @generic={0x57, 0x10, 0x4, "0863bfd9f1729efb18f5e9a07d25c514a79ee4aa79fdfeed03b26aafb6e45d980865b4ef3cd924d98fa2e3f90da3242ba6c93c44ee9decd4d48d367ac71cd8bdf2b2e5ff75ba6357c4f0469781db842c15b23bfe"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x69, 0x10, 0x7fff, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x6, 0xfffd}, @ptm_cap={0x3}]}}, &(0x7f0000000f40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x7, 0x5, "fa2375e0", "a6c8100e"}}, &(0x7f0000001340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x0, 0x4, 0xe, 0x8, 0x9}}}, &(0x7f0000001a00)={0x84, &(0x7f0000001500)={0x20, 0x31, 0xfb, "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"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000001640)={0x20, 0x0, 0x8, {0x80, 0x10, [0xf]}}, &(0x7f0000001680)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001700)={0x40, 0xb, 0x2, 'WZ'}, &(0x7f0000001800)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001840)={0x40, 0x13, 0x6, @random="82b91da0c135"}, &(0x7f0000001880)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000018c0)={0x40, 0x19, 0x2, 'Y['}, &(0x7f0000001900)={0x40, 0x1a, 0x2, 0x5a}, &(0x7f0000001940)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001980)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000019c0)={0x40, 0x21, 0x1, 0xb}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x22, 0x4e, {0x4e, 0x3, "750aa9461fea7e9da2afd3ac672e4ae26cdb8f4b286d29c4c90aa42c15241a77c1ee6257e91eb062ee004855170b7aaaecd0944533eb09a6348808f9a5dc9228ee35e2f82de2811b82106cff"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x17, 0x69, "1ac434fe532ec9710a7bc0f4db49ae55babc48989b83d15dc8029be7bdb670ee4decc3f37e401f347b6b692081379f389d9c5d63c34fecf06aee833fe3d67cd61f02ee02542ce8526a2506cedc2c5a533acf4aca8de2cc08dd55772471dc7e2fd59fd1d9f8c1688681"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7a}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8c}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x7, 0x5, 0x977d, 0x3ff, 0x3, 0x7, 0x3, 0x8, 0x4, 0x7, 0x4, 0x5}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x7e52ed6c}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x0, 0x15, 0x1, "a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x2c, r3, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x2c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x40, 0x7, 0x2, 0x70}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.268384542s ago: executing program 0 (id=815): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x18}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x78}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000040), 0x57, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') lseek(r6, 0x3ff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800"/28], 0x0) 3.493227005s ago: executing program 0 (id=816): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0xd5, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.312348616s ago: executing program 0 (id=817): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000004a40)={0xa, 0x4e23, 0x4, @local, 0xe}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0xfb, 0x80, 0xa, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x40, {{0xfffffffffffffeb0}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3725, 0x400, 0x6, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x7e7, 0xc8, 0x5}}}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x4cef432d0aebbf73) 1.10870308s ago: executing program 4 (id=818): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0xf, 0x1, 0x80000000) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x12c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xfc, 0x2, [@TCA_FLOW_EMATCHES={0xf8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x1ff}, "30e8a0bd8da85469e4033eb716bdf6b86165c012ce28910ebc497914de768c8263a44ceb2060c60e695ad04b956cff3fef58fec6ee2d672d8d91af5454b5dfd0c434f32b952630c5b8744c85b0594215bce42407fd85af06faaa9e3d06e73c6399e7ad1f3fcd4f4f2f0370c3b1179a36514036b81daa24b27b79bee070a26bb97541d4c5f1acfdbbddf6b9f73e44193c323843966d4b17bbd8b4af5884264135024c26026fedd86508cea3e898dce0c76f89bc9ec61e6d028005f4847d"}}]}]}]}}]}, 0x12c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 0 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000054001ffff7ff00000800000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ffe0f33fd23cd88ec01bfaf1cbc352900d"], 0x38}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000060006004e23000008000500000000003000088028"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x200400d0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async, rerun: 64) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r4], 0x50}}, 0x0) kernel console output (not intermixed with test programs): config 3 interface 102 altsetting 107 has a duplicate endpoint with address 0xC, skipping [ 217.339316][ T1185] usb 2-1: config 3 interface 102 altsetting 107 has a duplicate endpoint with address 0xE, skipping [ 217.350293][ T1185] usb 2-1: config 3 interface 102 altsetting 107 has a duplicate endpoint with address 0x9, skipping [ 217.361525][ T1185] usb 2-1: config 3 interface 102 altsetting 107 has an invalid descriptor for endpoint zero, skipping [ 217.372923][ T1185] usb 2-1: config 3 interface 102 altsetting 107 has a duplicate endpoint with address 0x5, skipping [ 217.383982][ T1185] usb 2-1: config 3 interface 102 altsetting 107 has 7 endpoint descriptors, different from the interface descriptor's value: 17 [ 217.397565][ T1185] usb 2-1: config 3 interface 119 has no altsetting 0 [ 217.404405][ T1185] usb 2-1: config 3 interface 53 has no altsetting 0 [ 217.411224][ T1185] usb 2-1: config 3 interface 166 has no altsetting 0 [ 217.419010][ T5325] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 217.426723][ T1185] usb 2-1: config 3 interface 181 has no altsetting 0 [ 217.433557][ T1185] usb 2-1: config 3 interface 102 has no altsetting 0 [ 217.471233][ T5324] usbhid 5-1:0.0: can't add hid device: -71 [ 217.479328][ T5324] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 217.492323][ T7815] netlink: 124 bytes leftover after parsing attributes in process `syz.3.568'. [ 217.497689][ T5324] usb 5-1: USB disconnect, device number 33 [ 217.512511][ T1185] usb 2-1: New USB device found, idVendor=0864, idProduct=4102, bcdDevice=2f.13 [ 217.522350][ T1185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.530857][ T1185] usb 2-1: Product: syz [ 217.535084][ T1185] usb 2-1: Manufacturer: syz [ 217.540101][ T1185] usb 2-1: SerialNumber: syz [ 217.547146][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.568'. [ 217.557338][ T7791] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 217.581546][ T7815] tipc: Started in network mode [ 217.588698][ T7815] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 217.605760][ T7815] tipc: Enabled bearer , priority 0 [ 217.648657][ T5325] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 217.657415][ T5325] usb 1-1: config 0 has no interface number 0 [ 217.667398][ T5325] usb 1-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16 [ 217.676705][ T5325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.684799][ T5325] usb 1-1: Product: syz [ 217.706360][ T5325] usb 1-1: Manufacturer: syz [ 217.711145][ T5325] usb 1-1: SerialNumber: syz [ 217.730869][ T5325] usb 1-1: config 0 descriptor?? [ 217.941799][ T9] usb 1-1: USB disconnect, device number 36 [ 218.486628][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 218.657050][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 218.675510][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.716738][ T5287] tipc: Node number set to 10922666 [ 218.723629][ T9] usb 5-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 218.739336][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.757460][ T9] usb 5-1: config 0 descriptor?? [ 218.774850][ T9] r8712u: register rtl8712_netdev_ops to netdev_ops [ 218.790858][ T9] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 218.906490][ T5324] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 218.976754][ T7826] openvswitch: netlink: Message has -1 unknown bytes. [ 218.988582][ T7826] openvswitch: netlink: Actions may not be safe on all matching packets [ 219.066541][ T5324] usb 1-1: Using ep0 maxpacket: 16 [ 219.089513][ T5324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.101514][ T5324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.112186][ T5324] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 219.121500][ T5324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.138194][ T5324] usb 1-1: config 0 descriptor?? [ 219.206002][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.219581][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.237925][ T9] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 219.254476][ T9] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 219.270033][ T9] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 219.288829][ T9] usb 5-1: USB disconnect, device number 34 [ 219.479285][ T1185] hub 2-1:3.181: bad descriptor, ignoring hub [ 219.492368][ T1185] hub 2-1:3.181: probe with driver hub failed with error -5 [ 219.551753][ T1185] usb 2-1: USB disconnect, device number 43 [ 219.572704][ T5324] elecom 0003:056E:00FF.0008: item fetching failed at offset 2/5 [ 219.601534][ T5324] elecom 0003:056E:00FF.0008: probe with driver elecom failed with error -22 [ 219.777891][ T7840] netlink: 'syz.1.576': attribute type 49 has an invalid length. [ 220.023028][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.106454][ T1185] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 220.256480][ T1185] usb 2-1: Using ep0 maxpacket: 32 [ 220.267260][ T1185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.278760][ T1185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.288735][ T1185] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.298065][ T1185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.310370][ T1185] usb 2-1: config 0 descriptor?? [ 220.326833][ T1185] hub 2-1:0.0: USB hub found [ 220.436461][ T5324] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 220.518025][ T1185] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 220.596494][ T5324] usb 4-1: Using ep0 maxpacket: 32 [ 220.603752][ T5324] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 220.613659][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.629444][ T5324] usb 4-1: config 0 descriptor?? [ 220.647284][ T5324] gspca_main: sunplus-2.14.0 probing 041e:400b [ 220.724437][ T1185] usbhid 2-1:0.0: can't add hid device: -71 [ 220.724591][ T1185] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 220.757661][ T1185] usb 2-1: USB disconnect, device number 44 [ 220.980296][ T7857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.582'. [ 221.226553][ T5289] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 221.337148][ T7867] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.584'. [ 221.386431][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 221.405089][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.438376][ T5289] usb 3-1: config 0 has no interfaces? [ 221.451425][ T5289] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 221.461347][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.471374][ T5289] usb 3-1: Product: syz [ 221.476896][ T5289] usb 3-1: Manufacturer: syz [ 221.485003][ T5289] usb 3-1: SerialNumber: syz [ 221.496098][ T5289] usb 3-1: config 0 descriptor?? [ 221.577179][ T5289] usb 1-1: USB disconnect, device number 37 [ 221.791991][ T7860] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 221.863628][ T5324] gspca_sunplus: reg_w_riv err -71 [ 221.882903][ T5324] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 221.925230][ T5324] usb 4-1: USB disconnect, device number 38 [ 221.989053][ T5289] usb 3-1: USB disconnect, device number 28 [ 222.247232][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.256144][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.446547][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 222.476519][ T5289] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 222.602621][ T9] usb 1-1: config 38 has too many interfaces: 92, using maximum allowed: 32 [ 222.624388][ T9] usb 1-1: config 38 has an invalid descriptor of length 0, skipping remainder of the config [ 222.636492][ T5289] usb 5-1: Using ep0 maxpacket: 16 [ 222.646620][ T9] usb 1-1: config 38 has 0 interfaces, different from the descriptor's value: 92 [ 222.668929][ T9] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 222.678957][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.686823][ T5289] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.693779][ T9] usb 1-1: Product: syz [ 222.710718][ T9] usb 1-1: Manufacturer: syz [ 222.720062][ T9] usb 1-1: SerialNumber: syz [ 222.734266][ T5289] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 222.754136][ T5289] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.779586][ T5289] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.794184][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.804031][ T5289] usb 5-1: Product: syz [ 222.815588][ T5289] usb 5-1: Manufacturer: syz [ 222.838302][ T5289] usb 5-1: SerialNumber: syz [ 223.126766][ T5289] usb 5-1: USB disconnect, device number 35 [ 223.135977][ T7877] binder: BINDER_SET_CONTEXT_MGR already set [ 223.171723][ T7877] binder: 7876:7877 ioctl 4018620d 20000040 returned -16 [ 223.181859][ T5655] udevd[5655]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.255906][ T7900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.283733][ T7902] PM: Enabling pm_trace changes system date and time during resume. [ 223.283733][ T7902] PM: Correct system time has to be restored manually after resume. [ 223.547258][ T7906] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 223.575616][ T7906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.595'. [ 223.590120][ T7906] bridge0: port 1(syz_tun) entered blocking state [ 223.598597][ T7906] bridge0: port 1(syz_tun) entered disabled state [ 223.606142][ T7906] syz_tun: entered allmulticast mode [ 223.625469][ T7906] syz_tun: entered promiscuous mode [ 223.634722][ T7906] bridge0: port 1(syz_tun) entered blocking state [ 223.641526][ T7906] bridge0: port 1(syz_tun) entered forwarding state [ 224.114047][ T8] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 224.354852][ T8] usb 5-1: config 0 has no interfaces? [ 224.456889][ T8] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 224.466140][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.474339][ T8] usb 5-1: Product: syz [ 224.478673][ T8] usb 5-1: Manufacturer: syz [ 224.483381][ T8] usb 5-1: SerialNumber: syz [ 224.515396][ T8] usb 5-1: config 0 descriptor?? [ 225.407331][ T9] usb 1-1: USB disconnect, device number 38 [ 225.456391][ T5324] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 225.612061][ T5324] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 225.623014][ T5324] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 225.657597][ T5324] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 225.668073][ T7929] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 225.674661][ T7929] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 225.722399][ T5324] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 225.742348][ T7929] vhci_hcd vhci_hcd.0: Device attached [ 225.806586][ T5324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 225.827093][ T7931] vhci_hcd: cannot find the pending unlink 0 [ 225.842406][ T5324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 225.934823][ T5324] usb 4-1: string descriptor 0 read error: -22 [ 225.968964][ T5324] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 226.026578][ T9] usb 10-1: SetAddress Request (2) to port 0 [ 226.036494][ T5324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.053384][ T9] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 226.077072][ T7933] xt_hashlimit: overflow, rate too high: 0 [ 226.097149][ T5324] usb 4-1: config 0 descriptor?? [ 226.126405][ T7924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 226.165701][ T5324] hub 4-1:0.0: bad descriptor, ignoring hub [ 226.203741][ T5324] hub 4-1:0.0: probe with driver hub failed with error -5 [ 226.261928][ T5324] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 226.606442][ T7931] vhci_hcd: connection reset by peer [ 226.698007][ T8] usb 4-1: USB disconnect, device number 39 [ 226.707775][ T2569] vhci_hcd: stop threads [ 226.712109][ T2569] vhci_hcd: release socket [ 226.756221][ T2569] vhci_hcd: disconnect device [ 227.084442][ T1185] usb 5-1: USB disconnect, device number 36 [ 227.801547][ T7951] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 227.806656][ T5306] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 227.818164][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 227.835425][ T7951] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 227.963946][ T7960] netlink: 124 bytes leftover after parsing attributes in process `syz.4.612'. [ 227.973633][ T5306] usb 1-1: device descriptor read/64, error -71 [ 227.982764][ T7960] tipc: Enabled bearer , priority 0 [ 227.987866][ T5324] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 228.010242][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.026385][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.047499][ T8] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 228.067080][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.088239][ T8] usb 4-1: config 0 descriptor?? [ 228.126954][ T1185] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 228.147169][ T5324] usb 2-1: Using ep0 maxpacket: 8 [ 228.160095][ T5324] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 228.169510][ T5324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.178730][ T5324] usb 2-1: Product: syz [ 228.183058][ T5324] usb 2-1: Manufacturer: syz [ 228.188053][ T5324] usb 2-1: SerialNumber: syz [ 228.237498][ T5306] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 228.276397][ T1185] usb 3-1: Using ep0 maxpacket: 8 [ 228.287475][ T1185] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=1b.62 [ 228.297952][ T1185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.306421][ T1185] usb 3-1: Product: syz [ 228.311382][ T1185] usb 3-1: Manufacturer: syz [ 228.316065][ T1185] usb 3-1: SerialNumber: syz [ 228.328262][ T1185] usb 3-1: config 0 descriptor?? [ 228.357224][ T1185] usb 3-1: selecting invalid altsetting 3 [ 228.363302][ T1185] comedi comedi0: could not set alternate setting 3 in high speed [ 228.376404][ T1185] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 228.388594][ T1185] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 228.389817][ T5306] usb 1-1: device descriptor read/64, error -71 [ 228.415378][ T5324] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 228.436876][ T5324] usb 2-1: USB disconnect, device number 45 [ 228.456037][ T5324] usblp0: removed [ 228.515910][ T8] hid (null): invalid report_count -402105466 [ 228.522806][ T5306] usb usb1-port1: attempt power cycle [ 228.530698][ T8] hid-multitouch 0003:0EEF:72D0.0009: invalid report_count -402105466 [ 228.545037][ T8] hid-multitouch 0003:0EEF:72D0.0009: item 0 4 1 9 parsing failed [ 228.546180][ T1185] usb 3-1: USB disconnect, device number 29 [ 228.554315][ T8] hid-multitouch 0003:0EEF:72D0.0009: probe with driver hid-multitouch failed with error -22 [ 228.726022][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.735031][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.744335][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.753318][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.886559][ T5306] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 228.923490][ T5306] usb 1-1: device descriptor read/8, error -71 [ 229.106518][ T5286] tipc: Node number set to 2886997162 [ 229.119049][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.618'. [ 229.166500][ T5306] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 229.197041][ T5306] usb 1-1: device descriptor read/8, error -71 [ 229.296425][ T5324] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 229.310756][ T5306] usb usb1-port1: unable to enumerate USB device [ 229.426404][ T5324] usb 2-1: device descriptor read/64, error -71 [ 229.666403][ T5324] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 229.796512][ T5324] usb 2-1: device descriptor read/64, error -71 [ 229.916817][ T5324] usb usb2-port1: attempt power cycle [ 229.941881][ T7987] vlan2: entered promiscuous mode [ 230.256419][ T5324] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 230.287077][ T5324] usb 2-1: device descriptor read/8, error -71 [ 230.482703][ T5306] usb 4-1: USB disconnect, device number 40 [ 230.528754][ T5324] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 230.587094][ T5324] usb 2-1: device descriptor read/8, error -71 [ 230.728117][ T5324] usb usb2-port1: unable to enumerate USB device [ 230.939502][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 231.119298][ T5306] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 231.136387][ T9] usb 10-1: device descriptor read/8, error -110 [ 231.326961][ T5306] usb 1-1: Using ep0 maxpacket: 16 [ 231.334457][ T5306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.353844][ T5306] usb 1-1: config 0 has no interfaces? [ 231.363171][ T5306] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 231.400087][ T5306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.408375][ T5306] usb 1-1: Product: syz [ 231.412718][ T5306] usb 1-1: Manufacturer: syz [ 231.417541][ T5306] usb 1-1: SerialNumber: syz [ 231.419585][ T8018] bond_slave_0: entered promiscuous mode [ 231.428212][ T8018] bond_slave_1: entered promiscuous mode [ 231.436105][ T5306] usb 1-1: config 0 descriptor?? [ 231.441347][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 231.462902][ T8018] bond_slave_0: left promiscuous mode [ 231.469000][ T8018] bond_slave_1: left promiscuous mode [ 231.547820][ T9] usb usb10-port1: attempt power cycle [ 231.598431][ T8] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 231.611356][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 231.622024][ T8] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 231.633476][ T8] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 231.646490][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 231.676229][ T8] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 231.695858][ T8007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.626'. [ 231.705357][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.713626][ T8] usb 3-1: Product: syz [ 231.718099][ T8] usb 3-1: Manufacturer: syz [ 231.722753][ T8] usb 3-1: SerialNumber: syz [ 231.733269][ T8] usb 3-1: ucan: probing device on interface #0 [ 231.741483][ T8] usb 3-1: ucan: invalid endpoint configuration [ 231.747843][ T8] usb 3-1: ucan: probe failed; try to update the device firmware [ 231.809219][ T8] usb 1-1: USB disconnect, device number 43 [ 231.906979][ T5286] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 231.940118][ T25] usb 3-1: USB disconnect, device number 30 [ 232.058691][ T5286] usb 5-1: device descriptor read/64, error -71 [ 232.117978][ T9] usb usb10-port1: unable to enumerate USB device [ 232.125133][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'. [ 232.285131][ T8039] netlink: 'syz.3.636': attribute type 15 has an invalid length. [ 232.326988][ T5286] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 232.496483][ T8] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 232.504246][ T5286] usb 5-1: device descriptor read/64, error -71 [ 232.637019][ T5286] usb usb5-port1: attempt power cycle [ 232.699609][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 232.707710][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 232.719790][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.747216][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.757049][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.765155][ T8] usb 2-1: Product: syz [ 232.769723][ T8] usb 2-1: Manufacturer: syz [ 232.774663][ T8] usb 2-1: SerialNumber: syz [ 232.787686][ T8] usb 2-1: config 0 descriptor?? [ 232.797490][ T8] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 232.807929][ T8] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 233.036447][ T5286] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 233.063503][ T5286] usb 5-1: device descriptor read/8, error -71 [ 233.275569][ T8064] ptrace attach of ""[8065] was attempted by "./syz-executor exec"[8064] [ 233.326616][ T5286] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 233.387187][ T5286] usb 5-1: device descriptor read/8, error -71 [ 233.405939][ T8] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 233.466805][ T8] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 233.576748][ T5286] usb usb5-port1: unable to enumerate USB device [ 233.799875][ T8070] x_tables: duplicate underflow at hook 1 [ 234.167074][ T8] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 234.174913][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 234.185016][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 234.195750][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 234.214227][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 234.266495][ T5286] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 234.432573][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 234.444044][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.462224][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 234.483475][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 234.506176][ T5286] usb 3-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 234.531475][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.562276][ T5286] usb 3-1: Product: syz [ 234.573894][ T5286] usb 3-1: Manufacturer: syz [ 234.606415][ T5306] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 234.620219][ T5286] usb 3-1: SerialNumber: syz [ 234.672168][ T5286] usb 3-1: config 0 descriptor?? [ 234.728199][ T5286] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 234.753906][ T5286] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 234.801641][ T5306] usb 1-1: not running at top speed; connect to a high speed hub [ 234.820314][ T5306] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 234.844350][ T5306] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 234.871214][ T5306] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 234.894544][ T5306] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.912289][ T5306] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.924423][ T5306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.934454][ T5306] usb 1-1: Product: ဇ [ 234.938871][ T5306] usb 1-1: Manufacturer: ⳎïŸàªá‘›ïŠ–璘甋ì´ë–¦è ˜è¨‹äƒ¹ì±¯ã¸„쉬â‚댊밹承ꢷ鈩î帎㩿衅䷅뼒뎣뫈é­â´šâ¹¾Ö­ä¿†æ·ã‰’䶤䚽࿰₪ᕸ敬㬕滟ã®ãœƒå«šë—¼é¤½ê°ˆéá‹’ç±¢ë¢ä˜” [ 234.958901][ T5306] usb 1-1: SerialNumber: 殘〶⸱ë–빓嬮詇ི鈙벜얶邞酢㹖䬮䩢欢雾⌂á覆âŸê¶ë¯è‘½í‹«æ¿¼ã„€ì©žã“­èŸ‘劢녎ꙻ [ 234.986380][ T5324] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 235.136644][ T25] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 235.150776][ T5324] usb 4-1: Using ep0 maxpacket: 16 [ 235.159148][ T5324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.170060][ T5324] usb 4-1: config 0 has no interfaces? [ 235.179687][ T5324] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 235.189485][ T5324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.198906][ T5306] usb 1-1: 0:2 : does not exist [ 235.200723][ T5324] usb 4-1: Product: syz [ 235.209409][ T5324] usb 4-1: Manufacturer: syz [ 235.214070][ T5324] usb 4-1: SerialNumber: syz [ 235.227040][ T5324] usb 4-1: config 0 descriptor?? [ 235.251400][ T5306] usb 1-1: USB disconnect, device number 44 [ 235.290837][ T5655] udevd[5655]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.336510][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 235.344175][ T25] usb 5-1: config 106 has too many interfaces: 48, using maximum allowed: 32 [ 235.354175][ T25] usb 5-1: config 106 has an invalid descriptor of length 61, skipping remainder of the config [ 235.365082][ T25] usb 5-1: config 106 has 0 interfaces, different from the descriptor's value: 48 [ 235.376414][ T25] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 235.385616][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.531009][ T8] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 235.540217][ T5306] usb 4-1: USB disconnect, device number 41 [ 235.664254][ T8082] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 235.776927][ T5306] usb 2-1: USB disconnect, device number 50 [ 235.872401][ T8088] pimreg: entered allmulticast mode [ 235.907846][ T8087] pimreg: left allmulticast mode [ 236.385154][ T8103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.526787][ T5324] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 236.682840][ T1185] usb 3-1: USB disconnect, device number 31 [ 236.705945][ T1185] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 236.731557][ T5324] usb 1-1: config 0 has no interfaces? [ 236.781638][ T5324] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.822282][ T5324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.869127][ T5324] usb 1-1: Product: syz [ 236.897528][ T5324] usb 1-1: Manufacturer: syz [ 236.904446][ T5324] usb 1-1: SerialNumber: syz [ 236.957928][ T5324] usb 1-1: config 0 descriptor?? [ 237.217197][ T8109] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 238.040959][ T25] usb 5-1: string descriptor 0 read error: -71 [ 238.098836][ T25] usb 5-1: USB disconnect, device number 41 [ 238.533005][ T8126] netlink: 'syz.3.660': attribute type 58 has an invalid length. [ 238.549184][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.660'. [ 238.846485][ T25] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 239.076427][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 239.100276][ T25] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 239.128939][ T25] usb 4-1: config 179 has no interface number 0 [ 239.143754][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 239.211251][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 239.246224][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.362006][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 239.439563][ T25] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 239.525022][ T25] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 239.534327][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.545920][ T8128] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 239.607739][ T5289] usb 1-1: USB disconnect, device number 45 [ 239.653525][ T8135] netlink: 124 bytes leftover after parsing attributes in process `syz.1.663'. [ 239.674850][ T8135] tipc: Enabling of bearer rejected, already enabled [ 239.802323][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 239.878772][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 239.952931][ T2507] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.007894][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 240.039645][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 240.076516][ T8] usb 3-1: too many configurations: 84, using maximum allowed: 8 [ 240.077667][ T25] usb 4-1: USB disconnect, device number 42 [ 240.084323][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 240.084371][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 240.137252][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 240.153068][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.164218][ T8] usb 3-1: Product: syz [ 240.186190][ T8] usb 3-1: Manufacturer: syz [ 240.197036][ T2507] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.232542][ T8] usb 3-1: SerialNumber: syz [ 240.259581][ T8] r8152-cfgselector 3-1: Unknown version 0x0000 [ 240.266129][ T8] r8152-cfgselector 3-1: config 0 descriptor?? [ 240.368960][ T2507] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.480325][ T2507] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.502054][ T5306] r8152-cfgselector 3-1: USB disconnect, device number 32 [ 240.536392][ T8] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 240.552394][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.566159][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.579639][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.590294][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.599925][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 240.608849][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.722127][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 240.748965][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 240.801863][ T2507] bridge_slave_1: left allmulticast mode [ 240.807677][ T8] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 240.807729][ T8] usb 2-1: config 219 interface 0 has no altsetting 0 [ 240.807753][ T8] usb 2-1: config 219 interface 0 has no altsetting 1 [ 240.832913][ T8] usb 2-1: string descriptor 0 read error: -22 [ 240.838382][ T2507] bridge_slave_1: left promiscuous mode [ 240.846539][ T8] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 240.855151][ T2507] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.869582][ T2507] tipc: Resetting bearer [ 240.876008][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.901940][ T8] usb 2-1: selecting invalid altsetting 0 [ 240.913746][ T8] usb 2-1: selecting invalid altsetting 0 [ 241.130410][ T9] usb 2-1: USB disconnect, device number 51 [ 241.490263][ T2507] tipc: Disabling bearer [ 241.526491][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 241.683581][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 241.699639][ T25] usb 4-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 241.726177][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.749936][ T25] usb 4-1: Product: syz [ 241.761351][ T25] usb 4-1: Manufacturer: syz [ 241.768203][ T25] usb 4-1: SerialNumber: syz [ 241.777277][ T25] usb 4-1: config 0 descriptor?? [ 241.796119][ T25] usb 4-1: bad CDC descriptors [ 241.855619][ T2507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.901998][ T2507] bond_slave_0: left promiscuous mode [ 241.941226][ T2507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.961281][ T2507] bond_slave_1: left promiscuous mode [ 241.975930][ T2507] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 241.995882][ T2507] macvlan2: left promiscuous mode [ 242.006837][ T2507] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 242.027434][ T2507] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 242.058031][ T2507] bond0 (unregistering): Released all slaves [ 242.357827][ T2507] tipc: Left network mode [ 242.406465][ T5289] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 242.656793][ T5238] Bluetooth: hci4: command tx timeout [ 242.666525][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 242.674367][ T5289] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.684620][ T5289] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.701291][ T5289] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 242.721205][ T5289] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 242.731389][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.786590][ T8172] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 242.799555][ T8148] chnl_net:caif_netlink_parms(): no params data found [ 242.817518][ T5289] hub 2-1:1.0: bad descriptor, ignoring hub [ 242.841060][ T5289] hub 2-1:1.0: probe with driver hub failed with error -5 [ 242.862970][ T5289] cdc_wdm 2-1:1.0: skipping garbage [ 242.886440][ T5289] cdc_wdm 2-1:1.0: skipping garbage [ 242.917084][ T5289] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 242.943558][ T5289] cdc_wdm 2-1:1.0: Unknown control protocol [ 243.016868][ T9] usb 1-1: config 0 has no interfaces? [ 243.048631][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 243.124362][ T5289] usb 4-1: USB disconnect, device number 43 [ 243.158578][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.170606][ T2507] hsr_slave_0: left promiscuous mode [ 243.190079][ T2507] hsr_slave_1: left promiscuous mode [ 243.205791][ T9] usb 1-1: Product: syz [ 243.232723][ T9] usb 1-1: Manufacturer: syz [ 243.251500][ T2507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.271139][ T9] usb 1-1: SerialNumber: syz [ 243.295212][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.301124][ T2507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.302138][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.315515][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.322160][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.328440][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.335060][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.341375][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.347974][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.354237][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.360850][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.367442][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.374058][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.380465][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.387095][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.393357][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.399976][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.406373][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.412990][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.419276][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.425877][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.439609][ T9] usb 1-1: config 0 descriptor?? [ 243.525156][ T2507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.551558][ T2507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.645462][ T2507] veth1_macvtap: left promiscuous mode [ 243.708869][ T2507] veth0_macvtap: left promiscuous mode [ 243.714524][ T2507] veth1_vlan: left promiscuous mode [ 243.751221][ T2507] veth0_vlan: left promiscuous mode [ 244.726822][ T5238] Bluetooth: hci4: command tx timeout [ 245.074041][ T2507] team0 (unregistering): Port device team_slave_1 removed [ 245.143396][ T2507] team0 (unregistering): Port device team_slave_0 removed [ 245.665210][ T5289] usb 2-1: USB disconnect, device number 52 [ 245.868580][ T5289] usb 1-1: USB disconnect, device number 46 [ 246.051714][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.069896][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.083078][ T8148] bridge_slave_0: entered allmulticast mode [ 246.095844][ T8148] bridge_slave_0: entered promiscuous mode [ 246.115719][ T8200] netlink: 124 bytes leftover after parsing attributes in process `syz.2.676'. [ 246.130727][ T8200] tipc: Started in network mode [ 246.136504][ T8200] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 246.151571][ T8200] tipc: Enabled bearer , priority 31 [ 246.188936][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.199498][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.216502][ T8148] bridge_slave_1: entered allmulticast mode [ 246.252317][ T8148] bridge_slave_1: entered promiscuous mode [ 246.419416][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.479640][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 246.520222][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.704831][ T8148] team0: Port device team_slave_0 added [ 246.720130][ T8148] team0: Port device team_slave_1 added [ 246.806778][ T5238] Bluetooth: hci4: command tx timeout [ 246.830218][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.841704][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.875140][ T8148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.961380][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.993787][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.086342][ T8148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.156701][ T25] tipc: Node number set to 10922666 [ 247.236427][ T1185] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 247.423307][ T1185] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.455699][ T1185] usb 2-1: config 0 has no interfaces? [ 247.509011][ T1185] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 247.511503][ T8148] hsr_slave_0: entered promiscuous mode [ 247.539077][ T1185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.556212][ T1185] usb 2-1: Product: syz [ 247.567096][ T1185] usb 2-1: Manufacturer: syz [ 247.583625][ T8148] hsr_slave_1: entered promiscuous mode [ 247.610064][ T8148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.627879][ T8148] Cannot create hsr debugfs directory [ 247.633432][ T1185] usb 2-1: SerialNumber: syz [ 247.691364][ T1185] usb 2-1: config 0 descriptor?? [ 248.164814][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.279122][ T8258] netlink: 124 bytes leftover after parsing attributes in process `syz.0.689'. [ 248.709238][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.864366][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.887096][ T5238] Bluetooth: hci4: command tx timeout [ 248.916402][ T1185] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 249.035733][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.067977][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.078301][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.100062][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.107873][ T1185] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 249.117147][ T1185] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 249.125654][ T1185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 249.137015][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 249.147716][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.164726][ T1185] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 249.170782][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.176409][ T1185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 249.237594][ T1185] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 249.254403][ T1185] usb 1-1: string descriptor 0 read error: -22 [ 249.261546][ T1185] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 249.270718][ T1185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.282479][ T1185] usb 1-1: config 0 descriptor?? [ 249.288356][ T8264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 249.296668][ T1185] hub 1-1:0.0: bad descriptor, ignoring hub [ 249.302940][ T1185] hub 1-1:0.0: probe with driver hub failed with error -5 [ 249.312366][ T1185] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 249.645297][ T1185] usb 1-1: USB disconnect, device number 47 [ 250.346517][ T35] bridge_slave_1: left allmulticast mode [ 250.352256][ T35] bridge_slave_1: left promiscuous mode [ 250.356526][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 250.386564][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.434451][ T1185] usb 2-1: USB disconnect, device number 53 [ 250.461633][ T35] tipc: Resetting bearer [ 250.566414][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 250.596405][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.607489][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 250.616686][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.626984][ T8] usb 3-1: config 0 descriptor?? [ 250.846033][ T35] tipc: Disabling bearer [ 250.866010][ T8] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 250.966686][ T1185] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 251.022277][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.033890][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.045454][ T35] bond0 (unregistering): Released all slaves [ 251.101645][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 251.135250][ T35] tipc: Left network mode [ 251.146610][ T1185] usb 2-1: Using ep0 maxpacket: 32 [ 251.176463][ T1185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.187757][ T1185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.198172][ T1185] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.207426][ T1185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.218259][ T1185] usb 2-1: config 0 descriptor?? [ 251.237471][ T1185] hub 2-1:0.0: USB hub found [ 251.286592][ T5238] Bluetooth: hci1: command tx timeout [ 251.355993][ T8271] chnl_net:caif_netlink_parms(): no params data found [ 251.380458][ T8148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.439359][ T1185] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 251.461898][ T8148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.545064][ T8148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.565821][ T8148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.592490][ T35] hsr_slave_0: left promiscuous mode [ 251.607837][ T35] hsr_slave_1: left promiscuous mode [ 251.624729][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.635443][ T5306] usb 3-1: USB disconnect, device number 33 [ 251.666745][ T5306] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 251.672994][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.699816][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.714991][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.798943][ T35] veth1_macvtap: left promiscuous mode [ 251.804668][ T35] veth0_macvtap: left promiscuous mode [ 251.861097][ T35] veth1_vlan: left promiscuous mode [ 251.874008][ T35] veth0_vlan: left promiscuous mode [ 252.378804][ T29] audit: type=1326 audit(1729632331.767:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 252.443027][ T29] audit: type=1326 audit(1729632331.767:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 252.486044][ T8] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 252.491935][ T29] audit: type=1326 audit(1729632331.767:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 252.532078][ T29] audit: type=1326 audit(1729632331.767:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 252.567168][ T29] audit: type=1326 audit(1729632331.777:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 252.625521][ T29] audit: type=1326 audit(1729632331.777:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 252.649627][ T29] audit: type=1326 audit(1729632331.777:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 252.672518][ T29] audit: type=1326 audit(1729632331.777:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 252.713273][ T29] audit: type=1326 audit(1729632331.777:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 252.744711][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.755227][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.763760][ T5289] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 252.772417][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.796879][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.799147][ T1185] usbhid 2-1:0.0: can't add hid device: -71 [ 252.812748][ T1185] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 252.833156][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.844177][ T8] usb 1-1: Product: syz [ 252.853615][ T8] usb 1-1: Manufacturer: syz [ 252.855983][ T1185] usb 2-1: USB disconnect, device number 54 [ 252.861206][ T8] usb 1-1: SerialNumber: syz [ 252.969824][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.991302][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.002898][ T5289] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 253.012357][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.042803][ T5289] usb 3-1: config 0 descriptor?? [ 253.154746][ T35] team0 (unregistering): Port device team_slave_1 removed [ 253.205452][ T35] team0 (unregistering): Port device team_slave_0 removed [ 253.367642][ T5238] Bluetooth: hci1: command tx timeout [ 253.462407][ T5289] wacom 0003:056A:00B1.000A: unknown main item tag 0x0 [ 253.471698][ T5289] wacom 0003:056A:00B1.000A: unknown main item tag 0x0 [ 253.479019][ T5289] wacom 0003:056A:00B1.000A: unknown main item tag 0x0 [ 253.486391][ T5289] wacom 0003:056A:00B1.000A: unknown main item tag 0x0 [ 253.493341][ T5289] wacom 0003:056A:00B1.000A: unknown main item tag 0x0 [ 253.501612][ T5289] wacom 0003:056A:00B1.000A: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 253.523120][ T5289] wacom 0003:056A:00B1.000A: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.2-1/input0 [ 253.560195][ T5289] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B1.000A/input/input33 [ 253.963924][ T29] audit: type=1326 audit(1729632333.357:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173097dff9 code=0x7ffc0000 [ 253.981236][ T5324] usb 3-1: USB disconnect, device number 34 [ 254.116794][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.141834][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.166610][ T8271] bridge_slave_0: entered allmulticast mode [ 254.173648][ T8271] bridge_slave_0: entered promiscuous mode [ 254.202308][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.211277][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.219362][ T8271] bridge_slave_1: entered allmulticast mode [ 254.232932][ T8271] bridge_slave_1: entered promiscuous mode [ 254.362400][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.383436][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.444819][ T8328] netlink: 124 bytes leftover after parsing attributes in process `syz.1.699'. [ 254.500330][ T8271] team0: Port device team_slave_0 added [ 254.513803][ T8271] team0: Port device team_slave_1 added [ 254.573557][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.589347][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.619407][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.633684][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.647332][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.680382][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.831024][ T8271] hsr_slave_0: entered promiscuous mode [ 254.854137][ T8271] hsr_slave_1: entered promiscuous mode [ 254.903127][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.929192][ T8334] netlink: 'syz.2.701': attribute type 3 has an invalid length. [ 255.015298][ T8338] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 255.071545][ T8] usb 1-1: USB disconnect, device number 48 [ 255.122347][ T8334] @ÿ: renamed from bridge_slave_0 (while UP) [ 255.179163][ T8148] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.290754][ T2569] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.297940][ T2569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.403525][ T1596] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.410728][ T1596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.447479][ T5238] Bluetooth: hci1: command tx timeout [ 256.014086][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.026543][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.060506][ T8148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.318781][ T8148] veth0_vlan: entered promiscuous mode [ 256.426479][ T5324] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 256.466047][ T8148] veth1_vlan: entered promiscuous mode [ 256.606485][ T5324] usb 3-1: Using ep0 maxpacket: 32 [ 256.622218][ T5324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.646538][ T5324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.679596][ T5324] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 256.710939][ T5324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.726994][ T8271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.748243][ T5324] usb 3-1: config 0 descriptor?? [ 256.765212][ T8148] veth0_macvtap: entered promiscuous mode [ 256.794971][ T8271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.838017][ T8271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.883003][ T8148] veth1_macvtap: entered promiscuous mode [ 256.900205][ T8271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.037118][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.056729][ T8] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 257.069726][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.176468][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.194637][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.215498][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.240688][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 257.259098][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.280793][ T8] usb 2-1: config 0 has no interfaces? [ 257.303975][ T8] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 257.315041][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.345684][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.359240][ T8] usb 2-1: Product: syz [ 257.363463][ T8] usb 2-1: Manufacturer: syz [ 257.379455][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.389992][ T8] usb 2-1: SerialNumber: syz [ 257.406121][ T8] usb 2-1: config 0 descriptor?? [ 257.415408][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.442749][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.461834][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.526523][ T5238] Bluetooth: hci1: command tx timeout [ 257.555614][ T8148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.593843][ T8148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.616403][ T8148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.625393][ T8148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.823642][ T8384] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 257.889335][ T8384] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 257.946091][ T5324] usbhid 3-1:0.0: can't add hid device: -71 [ 257.988632][ T1596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.000537][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.007815][ T5324] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 258.027808][ T1596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.037348][ T5324] usb 3-1: USB disconnect, device number 35 [ 258.114964][ T1596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.144243][ T1596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.177042][ T8271] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.254107][ T1596] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.261383][ T1596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.334193][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 258.334215][ T29] audit: type=1326 audit(1729632337.727:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe99997dff9 code=0x0 [ 258.365502][ T1596] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.372773][ T1596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.676365][ T5306] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 258.690917][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 258.913554][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.276884][ T8271] veth0_vlan: entered promiscuous mode [ 259.289187][ T8271] veth1_vlan: entered promiscuous mode [ 259.311359][ T8271] veth0_macvtap: entered promiscuous mode [ 259.321101][ T8271] veth1_macvtap: entered promiscuous mode [ 259.337806][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.348628][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.366603][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.377282][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.387215][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.397867][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.409881][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.420779][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.431437][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.441889][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.456388][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.466318][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.476833][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.488561][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.499330][ T8271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.508211][ T8271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.517090][ T8271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.525849][ T8271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.791515][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.834296][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.940727][ T2542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.948845][ T2542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.766587][ T5289] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 260.871717][ T8] usb 2-1: USB disconnect, device number 55 [ 261.026406][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 261.064703][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.078352][ T8443] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 261.198190][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.271553][ T5306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 261.283033][ T5306] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 261.326439][ T5289] usb 4-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 261.363669][ T5306] usb 1-1: can't read configurations, error -71 [ 261.382161][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.467492][ T5289] usb 4-1: config 0 descriptor?? [ 261.950993][ T5289] apple 0003:05AC:027B.000B: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.3-1/input0 [ 262.376498][ T5289] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 262.556692][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 262.580039][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.603275][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.656973][ T5289] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 262.701678][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.746348][ T5289] usb 3-1: config 0 descriptor?? [ 263.465158][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 263.474159][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 263.481861][ T5289] usbhid 3-1:0.0: can't add hid device: -32 [ 263.487946][ T5289] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 263.506095][ T5289] usb 3-1: USB disconnect, device number 36 [ 263.528096][ T8] usb 4-1: USB disconnect, device number 44 [ 263.631862][ T8490] netlink: 'syz.4.726': attribute type 21 has an invalid length. [ 263.640391][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 263.657146][ T8490] netlink: 156 bytes leftover after parsing attributes in process `syz.4.726'. [ 263.876367][ T8] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 263.907081][ T5306] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 264.049094][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.062076][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.076124][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.094828][ T5306] usb 5-1: Using ep0 maxpacket: 8 [ 264.107821][ T5306] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 264.124536][ T5306] usb 5-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 264.136183][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.144785][ T5306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.173524][ T5306] usb 5-1: New USB device found, idVendor=1d6b, idProduct=00f2, bcdDevice= 0.40 [ 264.223849][ T5306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.255329][ T5306] usb 5-1: Product: syz [ 264.273752][ T5306] usb 5-1: Manufacturer: syz [ 264.288686][ T5306] usb 5-1: SerialNumber: syz [ 264.294332][ T8528] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 264.382626][ T8] usb 4-1: usb_control_msg returned -32 [ 264.403199][ T8] usbtmc 4-1:16.0: can't read capabilities [ 264.552518][ T5306] usb 5-1: 0:1 : does not exist [ 264.582786][ T5306] usb 5-1: USB disconnect, device number 42 [ 264.614757][ T5252] udevd[5252]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.670827][ T5289] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 264.763574][ T8548] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 264.802336][ T5306] usb 4-1: USB disconnect, device number 45 [ 264.855164][ T5289] usb 2-1: Using ep0 maxpacket: 16 [ 264.906003][ T5289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.922017][ T5289] usb 2-1: config 0 has no interfaces? [ 264.934553][ T5289] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 264.956359][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.964443][ T5289] usb 2-1: Product: syz [ 264.971077][ T5289] usb 2-1: Manufacturer: syz [ 264.975749][ T5289] usb 2-1: SerialNumber: syz [ 264.990910][ T5289] usb 2-1: config 0 descriptor?? [ 265.176493][ T8] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 265.269733][ T5289] usb 2-1: USB disconnect, device number 56 [ 265.296393][ T5306] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 265.328775][ T8] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 265.337425][ T8] usb 1-1: config 4 has no interface number 0 [ 265.347945][ T8] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 265.358183][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.367873][ T8] usb 1-1: Product: syz [ 265.372451][ T8] usb 1-1: Manufacturer: syz [ 265.377829][ T8] usb 1-1: SerialNumber: syz [ 265.386574][ T5324] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 265.393557][ T8] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 265.447001][ T5306] usb 3-1: Using ep0 maxpacket: 8 [ 265.454426][ T5306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 265.480317][ T5306] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 265.493925][ T5306] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 265.514815][ T5306] usb 3-1: Product: syz [ 265.521841][ T5306] usb 3-1: Manufacturer: syz [ 265.531825][ T5306] usb 3-1: SerialNumber: syz [ 265.546337][ T5324] usb 5-1: device descriptor read/64, error -71 [ 265.787271][ T5324] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 265.811977][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.840180][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.867840][ T5306] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 265.876886][ T5306] visor 3-1:1.0: probe with driver visor failed with error -110 [ 265.885835][ T8] vp7045: USB control message 'in' went wrong. [ 265.908029][ T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 265.926588][ T5324] usb 5-1: device descriptor read/64, error -71 [ 265.961733][ T8] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 265.991778][ T8] usb 1-1: USB disconnect, device number 51 [ 266.057303][ T5324] usb usb5-port1: attempt power cycle [ 266.192182][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 266.382667][ T8582] veth0_to_bridge: entered promiscuous mode [ 266.466357][ T5324] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 266.546686][ T5324] usb 5-1: device descriptor read/8, error -71 [ 266.569168][ T8581] veth0_to_bridge: left promiscuous mode [ 266.846371][ T5324] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 266.905584][ T5324] usb 5-1: device descriptor read/8, error -71 [ 267.036821][ T5324] usb usb5-port1: unable to enumerate USB device [ 267.156948][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 267.351953][ T8598] wireguard0: entered promiscuous mode [ 267.360675][ T8598] wireguard0: entered allmulticast mode [ 267.966060][ T5289] usb 3-1: USB disconnect, device number 37 [ 268.026576][ T5324] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 268.198726][ T5324] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 268.216487][ T5324] usb 4-1: config 7 has no interface number 0 [ 268.225356][ T5324] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 268.270079][ T5324] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 268.315209][ T5324] usb 4-1: config 7 interface 252 has no altsetting 0 [ 268.319328][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.752'. [ 268.343966][ T5324] usb 4-1: string descriptor 0 read error: -22 [ 268.351754][ T5324] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 268.366336][ T5324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.376526][ T5289] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 268.438196][ T5324] idmouse 4-1:7.252: Unable to find bulk-in endpoint. [ 268.441118][ T8611] REæ6G: entered promiscuous mode [ 268.573243][ T5289] usb 3-1: Using ep0 maxpacket: 32 [ 268.600673][ T5289] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 268.636440][ T5289] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 268.651424][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.663357][ T5289] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.682870][ T5289] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.695422][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.734442][ T5289] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.745727][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.761576][ T5289] usb 3-1: Product: syz [ 268.772324][ T5289] usb 3-1: Manufacturer: syz [ 268.782859][ T5289] usb 3-1: SerialNumber: syz [ 268.826407][ T8] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 268.996322][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 269.006004][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.020195][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.043825][ T8] usb 2-1: config 0 has no interfaces? [ 269.052399][ T8625] tipc: Started in network mode [ 269.060277][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.072225][ T8625] tipc: Node identity aaaaaaaaaa1, cluster identity 4711 [ 269.082824][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 269.101856][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.113167][ T8625] tipc: Enabled bearer , priority 10 [ 269.123904][ T8] usb 2-1: Product: syz [ 269.132872][ T8] usb 2-1: Manufacturer: syz [ 269.142607][ T8] usb 2-1: SerialNumber: syz [ 269.143415][ T5289] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 269.160221][ T8] usb 2-1: config 0 descriptor?? [ 269.257121][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.272745][ T5289] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 269.306550][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.352285][ T5289] usb 3-1: USB disconnect, device number 38 [ 269.405185][ T5252] udevd[5252]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.518191][ T8] usb 2-1: USB disconnect, device number 57 [ 269.785086][ T8639] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 269.866407][ T5306] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 270.226551][ T8] tipc: Node number set to 12233386 [ 270.232174][ T5306] usb 5-1: Using ep0 maxpacket: 32 [ 270.250560][ T5306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.268516][ T5306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.276396][ T5289] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 270.290138][ T5306] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 270.303517][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.322235][ T5306] usb 5-1: config 0 descriptor?? [ 270.436344][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 270.447499][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.465788][ T5289] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 270.485674][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.494906][ T5289] usb 3-1: Product: syz [ 270.501285][ T5289] usb 3-1: Manufacturer: syz [ 270.506038][ T5289] usb 3-1: SerialNumber: syz [ 270.531662][ T5289] usb 3-1: config 0 descriptor?? [ 270.586580][ T25] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 270.744737][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 270.748380][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.774069][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.782655][ T25] usb 1-1: Product: syz [ 270.787157][ T25] usb 1-1: Manufacturer: syz [ 270.798330][ T25] usb 1-1: SerialNumber: syz [ 270.817926][ T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.840734][ T5324] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 271.013332][ T25] usb 4-1: USB disconnect, device number 46 [ 271.457198][ T9] usb 1-1: USB disconnect, device number 52 [ 271.466571][ T937] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 271.523066][ T5306] usbhid 5-1:0.0: can't add hid device: -71 [ 271.535604][ T5306] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 271.554718][ T5306] usb 5-1: USB disconnect, device number 47 [ 271.638064][ T937] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 271.660006][ T937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.666627][ T25] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 271.698699][ T937] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.730181][ T937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.742770][ T937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.743137][ T8658] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 271.759385][ T937] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.785343][ T937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.794968][ T937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.808876][ T937] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.822517][ T937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.826681][ T25] usb 2-1: device descriptor read/64, error -71 [ 271.843286][ T937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.856151][ T937] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.873774][ T937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.884146][ T937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.901262][ T937] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.919388][ T937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.932421][ T5324] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 271.934408][ T937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.965760][ T937] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.970511][ T5324] ath9k_htc: Failed to initialize the device [ 271.983383][ T937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.992169][ T937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.034146][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 272.066883][ T937] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.086709][ T25] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 272.099241][ T937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 272.107498][ T937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.121876][ T937] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.156434][ T937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 272.186632][ T937] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 272.220256][ T937] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 272.248082][ T937] usb 4-1: Product: syz [ 272.253047][ T937] usb 4-1: Manufacturer: syz [ 272.262458][ T937] usb 4-1: SerialNumber: syz [ 272.275052][ T937] usb 4-1: config 0 descriptor?? [ 272.286378][ T5325] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 272.294949][ T937] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 272.306525][ T25] usb 2-1: device descriptor read/64, error -71 [ 272.417016][ T25] usb usb2-port1: attempt power cycle [ 272.446463][ T5325] usb 5-1: device descriptor read/64, error -71 [ 272.517053][ T5324] usb 4-1: USB disconnect, device number 47 [ 272.539492][ T5324] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 272.696688][ T5325] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 272.724874][ T8668] netlink: 124 bytes leftover after parsing attributes in process `syz.0.766'. [ 272.766507][ T25] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 272.810722][ T25] usb 2-1: device descriptor read/8, error -71 [ 272.846586][ T5325] usb 5-1: device descriptor read/64, error -71 [ 272.966896][ T5325] usb usb5-port1: attempt power cycle [ 273.032129][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 273.071074][ T25] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 273.088515][ T5289] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 273.102769][ T25] usb 2-1: device descriptor read/8, error -71 [ 273.116525][ T5289] usb 3-1: No valid video chain found. [ 273.131648][ T5289] usb 3-1: USB disconnect, device number 39 [ 273.177966][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 273.187737][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 273.202615][ T8679] macvlan0: entered promiscuous mode [ 273.217782][ T8679] batadv_slave_0: entered promiscuous mode [ 273.224780][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 273.226770][ T25] usb usb2-port1: unable to enumerate USB device [ 273.259426][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.269568][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.292103][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.301591][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.306500][ T5325] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 273.321613][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.342993][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.359157][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.369258][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.370284][ T5325] usb 5-1: device descriptor read/8, error -71 [ 273.390820][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 273.399927][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.425910][ T8684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'. [ 273.442152][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 273.454636][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.469965][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.491190][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.499288][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.510004][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.521149][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.559084][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.568141][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.583613][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.591447][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.604165][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.621052][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.664658][ T8691] netlink: 'syz.2.772': attribute type 10 has an invalid length. [ 273.679465][ T8691] netlink: 2 bytes leftover after parsing attributes in process `syz.2.772'. [ 273.690719][ T8691] team0: entered promiscuous mode [ 273.695822][ T8691] team_slave_0: entered promiscuous mode [ 273.705159][ T8691] team_slave_1: entered promiscuous mode [ 273.713147][ T8691] bridge0: port 3(team0) entered blocking state [ 273.723112][ T8691] bridge0: port 3(team0) entered disabled state [ 273.734892][ T8691] team0: entered allmulticast mode [ 273.742681][ T8691] team_slave_0: entered allmulticast mode [ 273.750507][ T8691] team_slave_1: entered allmulticast mode [ 273.762154][ T8691] bridge0: port 3(team0) entered blocking state [ 273.768546][ T8691] bridge0: port 3(team0) entered forwarding state [ 273.836738][ T5325] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 273.852097][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.861271][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.867330][ T5325] usb 5-1: device descriptor read/8, error -71 [ 273.872370][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.890439][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 273.899886][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 273.905389][ T8696] netlink: 'syz.0.774': attribute type 2 has an invalid length. [ 273.916392][ T9] usb 4-1: Product: syz [ 273.920599][ T9] usb 4-1: Manufacturer: syz [ 273.922083][ T8696] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.774'. [ 273.934477][ T9] usb 4-1: SerialNumber: syz [ 273.946065][ T9] usb 4-1: config 0 descriptor?? [ 273.961867][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 274.007063][ T5325] usb usb5-port1: unable to enumerate USB device [ 274.058235][ T8698] netlink: 216 bytes leftover after parsing attributes in process `syz.0.775'. [ 274.148233][ T937] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 274.316535][ T937] usb 3-1: Using ep0 maxpacket: 32 [ 274.328657][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.343782][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.355449][ T937] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 274.368936][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.382894][ T937] usb 3-1: config 0 descriptor?? [ 274.416568][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 274.596418][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 274.610242][ T9] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 18688, setting to 64 [ 274.627699][ T9] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 274.639782][ T9] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 274.655516][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 274.666973][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.679969][ T9] usb 1-1: Product: syz [ 274.684254][ T9] usb 1-1: Manufacturer: syz [ 274.689034][ T9] usb 1-1: SerialNumber: syz [ 274.713537][ T9] hso 1-1:6.0: Can't find BULK IN endpoint [ 274.924845][ T9] usb 1-1: USB disconnect, device number 53 [ 275.300907][ T5325] usb 4-1: USB disconnect, device number 48 [ 275.325735][ T5325] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 275.568001][ T937] usbhid 3-1:0.0: can't add hid device: -71 [ 275.574083][ T937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 275.602577][ T937] usb 3-1: USB disconnect, device number 40 [ 275.656452][ T5289] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 275.796375][ T5289] usb 2-1: device descriptor read/64, error -71 [ 275.826419][ T5325] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 275.996654][ T5325] usb 4-1: Using ep0 maxpacket: 16 [ 276.013932][ T5325] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 276.023324][ T5325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.032169][ T5325] usb 4-1: Product: syz [ 276.036872][ T5325] usb 4-1: Manufacturer: syz [ 276.041528][ T5325] usb 4-1: SerialNumber: syz [ 276.049176][ T5325] usb 4-1: config 0 descriptor?? [ 276.063711][ T5325] mcba_usb 4-1:0.0: Can't find endpoints [ 276.069678][ T5289] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 276.151484][ T8727] __nla_validate_parse: 6 callbacks suppressed [ 276.151507][ T8727] netlink: 124 bytes leftover after parsing attributes in process `syz.4.785'. [ 276.227958][ T5289] usb 2-1: device descriptor read/64, error -71 [ 276.272930][ T9] usb 4-1: USB disconnect, device number 49 [ 276.340804][ T5289] usb usb2-port1: attempt power cycle [ 276.456454][ T5325] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 276.596470][ T5325] usb 5-1: device descriptor read/64, error -71 [ 276.686524][ T5289] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 276.707632][ T5289] usb 2-1: device descriptor read/8, error -71 [ 276.847556][ T5325] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 276.956554][ T5289] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 276.976916][ T1185] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 276.986538][ T5325] usb 5-1: device descriptor read/64, error -71 [ 276.999133][ T5289] usb 2-1: device descriptor read/8, error -71 [ 277.106346][ T5324] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 277.116579][ T5325] usb usb5-port1: attempt power cycle [ 277.124721][ T5289] usb usb2-port1: unable to enumerate USB device [ 277.131889][ T1185] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 277.146668][ T1185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.157290][ T1185] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.174642][ T1185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.186059][ T1185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.195638][ T1185] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.212389][ T1185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.233209][ T1185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.256825][ T1185] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.273335][ T1185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.280549][ T5324] usb 4-1: config 0 has an invalid interface number: 220 but max is 0 [ 277.293529][ T5324] usb 4-1: config 0 has no interface number 0 [ 277.301355][ T5324] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=59.61 [ 277.311003][ T1185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.324235][ T1185] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.335478][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.347860][ T5324] usb 4-1: config 0 descriptor?? [ 277.356393][ T1185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.377586][ T5324] imon 4-1:0.220: unable to register, err -19 [ 277.396403][ T1185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.436966][ T1185] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.448527][ T1185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.458831][ T1185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.468962][ T1185] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.480020][ T5325] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 277.487756][ T1185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.497309][ T1185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.528559][ T5325] usb 5-1: device descriptor read/8, error -71 [ 277.534952][ T1185] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.546591][ T1185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.555959][ T1185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.565956][ T1185] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.577219][ T1185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.586699][ T1185] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 277.588499][ T9] usb 4-1: USB disconnect, device number 50 [ 277.606051][ T1185] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 277.622330][ T1185] usb 1-1: Product: syz [ 277.632426][ T1185] usb 1-1: Manufacturer: syz [ 277.642641][ T1185] usb 1-1: SerialNumber: syz [ 277.658390][ T1185] usb 1-1: config 0 descriptor?? [ 277.683099][ T1185] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 277.766636][ T5325] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 277.797473][ T5325] usb 5-1: device descriptor read/8, error -71 [ 277.879644][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 277.906990][ T5325] usb usb5-port1: unable to enumerate USB device [ 277.932777][ T9] usb 1-1: USB disconnect, device number 54 [ 277.946063][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 278.769605][ T8768] netlink: 124 bytes leftover after parsing attributes in process `syz.0.797'. [ 278.943087][ T8760] pimreg: entered allmulticast mode [ 279.581387][ T8760] pimreg: left allmulticast mode [ 280.326683][ T5325] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 280.488766][ T8758] syz.3.796 (8758) used greatest stack depth: 18000 bytes left [ 280.571834][ T5325] usb 5-1: Using ep0 maxpacket: 32 [ 280.594056][ T5325] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 280.632729][ T5325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.743889][ T5325] usb 5-1: config 0 descriptor?? [ 280.774211][ T5325] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37 [ 280.825103][ T8797] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 282.093022][ T4673] bcm5974 5-1:0.0: could not read from device [ 282.143095][ T5325] usb 5-1: USB disconnect, device number 56 [ 282.846578][ T5289] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 283.027634][ T5289] usb 2-1: Using ep0 maxpacket: 32 [ 283.038447][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.071508][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.108088][ T5289] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 283.128141][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.154753][ T5289] usb 2-1: config 0 descriptor?? [ 283.611801][ T5289] savu 0003:1E7D:2D5A.000C: unbalanced delimiter at end of report description [ 283.633070][ T5289] savu 0003:1E7D:2D5A.000C: parse failed [ 283.639787][ T5289] savu 0003:1E7D:2D5A.000C: probe with driver savu failed with error -22 [ 284.719150][ T5655] bcm5974 5-1:0.0: could not read from device [ 285.300115][ T1185] usb 2-1: USB disconnect, device number 66 [ 285.406586][ T5289] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 285.484176][ T8808] veth0_to_bridge: entered promiscuous mode [ 285.490942][ T8807] overlayfs: missing 'lowerdir' [ 285.556582][ T5289] usb 1-1: Using ep0 maxpacket: 16 [ 285.576576][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 285.602022][ T5289] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 285.617384][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.634968][ T5289] usb 1-1: Product: syz [ 285.644836][ T5289] usb 1-1: Manufacturer: syz [ 285.664357][ T5289] usb 1-1: SerialNumber: syz [ 285.691615][ T5289] usb 1-1: config 0 descriptor?? [ 285.714533][ T5289] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 285.744671][ T5289] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 285.973416][ T1185] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 286.073587][ T8807] netlink: 'syz.3.809': attribute type 3 has an invalid length. [ 286.094202][ T8807] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.809'. [ 286.104051][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 286.135076][ T1185] usb 5-1: device descriptor read/64, error -71 [ 286.346877][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.396820][ T1185] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 286.526640][ T1185] usb 5-1: device descriptor read/64, error -71 [ 286.577571][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.594129][ T5289] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 286.657092][ T1185] usb usb5-port1: attempt power cycle [ 287.016467][ T1185] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 287.093762][ T1185] usb 5-1: device descriptor read/8, error -71 [ 287.389398][ T1185] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 287.437195][ T1185] usb 5-1: device descriptor read/8, error -71 [ 287.571244][ T1185] usb usb5-port1: unable to enumerate USB device [ 288.688967][ T5289] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 288.722475][ T5289] em28xx 1-1:0.0: board has no eeprom [ 288.809628][ T5289] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 288.817779][ T5289] em28xx 1-1:0.0: dvb set to bulk mode. [ 288.823941][ T1185] em28xx 1-1:0.0: Binding DVB extension [ 288.871264][ T5289] usb 1-1: USB disconnect, device number 55 [ 288.907153][ T5289] em28xx 1-1:0.0: Disconnecting em28xx [ 289.077469][ T1185] em28xx 1-1:0.0: Registering input extension [ 289.104228][ T5289] em28xx 1-1:0.0: Closing input extension [ 289.162087][ T5289] em28xx 1-1:0.0: Freeing device [ 289.256692][ T5324] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 289.426449][ T5324] usb 5-1: Using ep0 maxpacket: 8 [ 289.446048][ T5324] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 289.469387][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.555718][ T5324] usb 5-1: config 0 descriptor?? [ 291.616482][ T5289] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 291.786652][ T5289] usb 1-1: Using ep0 maxpacket: 8 [ 291.810816][ T5289] usb 1-1: unable to get BOS descriptor or descriptor too short [ 291.827571][ T5289] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 291.853895][ T5289] usb 1-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.874963][ T5289] usb 1-1: config 1 interface 0 has no altsetting 0 [ 291.885873][ T5289] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.911482][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.929898][ T5289] usb 1-1: Product: syz [ 291.934312][ T5289] usb 1-1: Manufacturer: syz [ 291.944787][ T5289] usb 1-1: SerialNumber: syz [ 292.115061][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 292.137425][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 292.158695][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 292.181458][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 292.440109][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 292.724917][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 292.754979][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 292.773954][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 292.791253][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 292.825523][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 292.842109][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 292.857409][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 292.875697][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 292.895366][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 292.920964][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 292.942616][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 292.960749][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 292.982933][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 292.995735][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.014661][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.040306][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.061917][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.080637][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.104222][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.122716][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.151124][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.173803][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.187336][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.208655][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.228344][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.266553][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.294195][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.328383][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.345170][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.371298][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.398079][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.442844][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.484210][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.525281][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.554716][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.573764][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.600685][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.628432][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.658813][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.691426][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.736536][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.758500][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.786603][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.806681][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.832654][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 293.870391][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.924882][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.971235][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.090312][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.124114][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.155770][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.264331][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.385435][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.405847][ T5289] usb 1-1: bad CDC descriptors [ 294.426753][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.448428][ T5289] usb 1-1: USB disconnect, device number 56 [ 294.477425][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.504621][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.539268][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.562443][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.580806][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.627563][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.667630][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.694047][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.718798][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.743814][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.764989][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.792247][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.804817][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.823594][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.834344][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.852889][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.875716][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.896200][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.916505][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.933122][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.943928][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 294.962297][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.984873][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 295.005851][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 295.024338][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 295.043547][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 295.055051][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 295.078521][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 295.099815][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 295.119158][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 295.138617][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 295.165287][ T5324] asix 5-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 295.194360][ T5324] asix 5-1:0.0: probe with driver asix failed with error -5 [ 295.238422][ T5324] usb 5-1: USB disconnect, device number 61 [ 296.395460][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.410511][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.420375][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.429336][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.438686][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 296.450329][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.559790][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.575619][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.585767][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.610793][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.628742][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 296.636470][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.972761][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.983781][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.992701][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.002597][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.010480][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 297.019706][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 298.486563][ T5235] Bluetooth: hci5: command tx timeout [ 298.726657][ T5235] Bluetooth: hci6: command tx timeout [ 299.126615][ T5235] Bluetooth: hci7: command tx timeout [ 300.566822][ T5235] Bluetooth: hci5: command tx timeout [ 300.806621][ T5235] Bluetooth: hci6: command tx timeout [ 301.212407][ T5235] Bluetooth: hci7: command tx timeout [ 302.646415][ T5235] Bluetooth: hci5: command tx timeout [ 302.886488][ T5235] Bluetooth: hci6: command tx timeout [ 303.286544][ T5235] Bluetooth: hci7: command tx timeout [ 304.053038][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.076292][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.100094][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.109746][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.117592][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 304.124972][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.726721][ T5238] Bluetooth: hci5: command tx timeout [ 304.976994][ T5238] Bluetooth: hci6: command tx timeout [ 305.153339][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 305.167025][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 305.177385][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 305.190593][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 305.200829][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 305.208723][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 305.366478][ T5235] Bluetooth: hci7: command tx timeout [ 306.166677][ T5235] Bluetooth: hci1: command tx timeout [ 307.286615][ T5235] Bluetooth: hci8: command tx timeout [ 308.246431][ T5235] Bluetooth: hci1: command tx timeout [ 309.366421][ T5235] Bluetooth: hci8: command tx timeout [ 310.336513][ T5235] Bluetooth: hci1: command tx timeout [ 311.446384][ T5235] Bluetooth: hci8: command tx timeout [ 312.406413][ T5235] Bluetooth: hci1: command tx timeout [ 313.534403][ T5235] Bluetooth: hci8: command tx timeout [ 314.406496][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 317.456791][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.463162][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.266506][ T8805] veth0_to_bridge: left promiscuous mode [ 336.623450][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.905879][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.014249][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.099236][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.334395][ T68] bridge_slave_1: left allmulticast mode [ 337.355253][ T68] bridge_slave_1: left promiscuous mode [ 337.372096][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.398519][ T68] bridge_slave_0: left allmulticast mode [ 337.404336][ T68] bridge_slave_0: left promiscuous mode [ 337.415473][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.214361][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.243743][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.270869][ T68] bond0 (unregistering): Released all slaves [ 356.932963][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.942992][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.953492][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.961696][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.976751][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.986110][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.002551][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.103442][ T4626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.112581][ T4626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.121183][ T4626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.130076][ T4626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 357.196590][ T4626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.587215][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.598251][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.607927][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.624429][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.633308][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.641598][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.046432][ T4626] Bluetooth: hci0: command tx timeout [ 359.286404][ T4626] Bluetooth: hci2: command tx timeout [ 359.686598][ T4626] Bluetooth: hci3: command tx timeout [ 361.126588][ T4626] Bluetooth: hci0: command tx timeout [ 361.366391][ T4626] Bluetooth: hci2: command tx timeout [ 361.766665][ T4626] Bluetooth: hci3: command tx timeout [ 363.206427][ T4626] Bluetooth: hci0: command tx timeout [ 363.446466][ T4626] Bluetooth: hci2: command tx timeout [ 363.846933][ T4626] Bluetooth: hci3: command tx timeout [ 364.602226][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.616351][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.627454][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.672312][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.681560][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 364.692136][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.286515][ T4626] Bluetooth: hci0: command tx timeout [ 365.526409][ T4626] Bluetooth: hci2: command tx timeout [ 365.942240][ T4626] Bluetooth: hci3: command tx timeout [ 366.025522][ T5235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 366.035761][ T5235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 366.052721][ T5235] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 366.064517][ T5235] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 366.080448][ T5235] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 366.088276][ T5235] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 366.726487][ T5235] Bluetooth: hci4: command tx timeout [ 368.166485][ T5235] Bluetooth: hci9: command tx timeout [ 368.806414][ T5235] Bluetooth: hci4: command tx timeout [ 370.246508][ T5235] Bluetooth: hci9: command tx timeout [ 370.896458][ T5235] Bluetooth: hci4: command tx timeout [ 373.577682][ T4626] Bluetooth: hci4: command tx timeout [ 373.583197][ T5235] Bluetooth: hci9: command tx timeout [ 373.626722][ T8823] bridge0: port 1(syz_tun) entered disabled state [ 375.686500][ T5235] Bluetooth: hci9: command tx timeout [ 378.891766][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.906309][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.930132][ T8823] syz_tun (unregistering): left allmulticast mode [ 413.966504][ T8823] syz_tun (unregistering): left promiscuous mode [ 413.988322][ T8823] bridge0: port 1(syz_tun) entered disabled state [ 420.448447][ T8907] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 420.459205][ T8907] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 420.470922][ T8907] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 420.479106][ T8907] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 420.487587][ T8907] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 420.495327][ T8907] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 420.527580][ T8908] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 420.539389][ T8907] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 420.549574][ T8907] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 420.569966][ T8907] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 420.579683][ T8907] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 420.587640][ T8907] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 420.595186][ T8907] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 420.708361][ T8908] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 420.719235][ T8908] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 420.730542][ T8908] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 420.738839][ T8908] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 420.746737][ T8908] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 422.006632][ T8908] Bluetooth: hci7: command 0x0406 tx timeout [ 422.166573][ T8908] Bluetooth: hci6: command 0x0406 tx timeout [ 422.406642][ T8905] Bluetooth: hci5: command 0x0406 tx timeout [ 422.566522][ T8908] Bluetooth: hci10: command tx timeout [ 422.646404][ T8908] Bluetooth: hci11: command tx timeout [ 422.806537][ T8908] Bluetooth: hci12: command tx timeout [ 424.647913][ T4626] Bluetooth: hci10: command tx timeout [ 424.727558][ T4626] Bluetooth: hci11: command tx timeout [ 424.886654][ T4626] Bluetooth: hci12: command tx timeout [ 425.614481][ T5238] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 425.638362][ T5238] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 425.654195][ T5238] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 425.663821][ T5238] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 425.679932][ T5238] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 425.687938][ T5238] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 426.111470][ T4626] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 426.121703][ T4626] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 426.131905][ T4626] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 426.140887][ T4626] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 426.150839][ T4626] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 426.168105][ T4626] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 426.726352][ T5238] Bluetooth: hci10: command tx timeout [ 426.806472][ T5238] Bluetooth: hci11: command tx timeout [ 426.966632][ T5238] Bluetooth: hci12: command tx timeout [ 427.052690][ T5238] Bluetooth: hci1: command 0x0406 tx timeout [ 427.766359][ T5238] Bluetooth: hci13: command tx timeout [ 428.246586][ T5238] Bluetooth: hci14: command tx timeout [ 428.806607][ T5238] Bluetooth: hci10: command tx timeout [ 428.886315][ T5238] Bluetooth: hci11: command tx timeout [ 429.046560][ T5238] Bluetooth: hci12: command tx timeout [ 429.846335][ T5238] Bluetooth: hci13: command tx timeout [ 430.326524][ T5238] Bluetooth: hci14: command tx timeout [ 431.927656][ T5238] Bluetooth: hci13: command tx timeout [ 432.169736][ T5238] Bluetooth: hci8: command 0x0406 tx timeout [ 432.406651][ T5238] Bluetooth: hci14: command tx timeout [ 434.006353][ T5235] Bluetooth: hci13: command tx timeout [ 434.486624][ T5235] Bluetooth: hci14: command tx timeout [ 440.330111][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.346111][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.728832][ T52] tipc: Resetting bearer [ 478.906557][ T5238] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 478.924653][ T5238] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 478.934444][ T5238] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 478.949764][ T5238] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 478.958583][ T5238] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 479.008142][ T5238] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 479.018557][ T5238] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 479.027199][ T5238] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 479.034765][ T8908] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 479.043061][ T8908] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 479.052569][ T8908] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 479.060278][ T8908] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 480.664613][ T4626] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 480.680281][ T4626] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 480.696528][ T4626] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 480.708178][ T4626] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 480.715987][ T4626] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 480.723577][ T4626] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 481.126591][ T5238] Bluetooth: hci15: command tx timeout [ 481.134347][ T4626] Bluetooth: hci16: command tx timeout [ 482.806683][ T5238] Bluetooth: hci17: command tx timeout [ 483.206509][ T5238] Bluetooth: hci16: command tx timeout [ 483.212105][ T5238] Bluetooth: hci15: command tx timeout [ 483.395599][ T8908] Bluetooth: hci2: command 0x0406 tx timeout [ 483.401903][ T8901] Bluetooth: hci0: command 0x0406 tx timeout [ 483.413941][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 484.886551][ T5238] Bluetooth: hci17: command tx timeout [ 485.286405][ T5238] Bluetooth: hci15: command tx timeout [ 485.292187][ T5238] Bluetooth: hci16: command tx timeout [ 486.224732][ T8901] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 486.235630][ T8901] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 486.245568][ T8901] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 486.258151][ T8901] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 486.265938][ T8901] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 486.273519][ T8901] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 486.682587][ T8907] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 486.703488][ T8907] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 486.712411][ T8907] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 486.722097][ T8907] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 486.730661][ T8907] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 486.768659][ T8907] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 486.966536][ T8909] Bluetooth: hci17: command tx timeout [ 487.366385][ T8909] Bluetooth: hci16: command tx timeout [ 487.371970][ T8909] Bluetooth: hci15: command tx timeout [ 488.492214][ T8942] Bluetooth: hci4: command 0x0406 tx timeout [ 488.498385][ T8899] Bluetooth: hci9: command 0x0406 tx timeout [ 489.047619][ T8942] Bluetooth: hci17: command tx timeout [ 492.267276][ T8901] Bluetooth: hci18: command tx timeout [ 494.326566][ T5238] Bluetooth: hci18: command tx timeout [ 494.332761][ T5238] Bluetooth: hci19: command tx timeout [ 496.406390][ T8908] Bluetooth: hci18: command tx timeout [ 496.413249][ T5238] Bluetooth: hci19: command tx timeout [ 497.926607][ T30] INFO: task syz.2.808:8805 blocked for more than 143 seconds. [ 497.935021][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 497.964870][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 498.006365][ T30] task:syz.2.808 state:D stack:25184 pid:8805 tgid:8805 ppid:7321 flags:0x00004006 [ 498.056357][ T30] Call Trace: [ 498.059731][ T30] [ 498.062741][ T30] __schedule+0x18af/0x4bd0 [ 498.156439][ T30] ? __pfx___schedule+0x10/0x10 [ 498.161403][ T30] ? __pfx_lock_release+0x10/0x10 [ 498.245758][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 498.265287][ T30] ? schedule+0x90/0x320 [ 498.302668][ T30] schedule+0x14b/0x320 [ 498.320839][ T30] schedule_preempt_disabled+0x13/0x30 [ 498.366189][ T30] __mutex_lock+0x6a7/0xd70 [ 498.370804][ T30] ? __mutex_lock+0x52a/0xd70 [ 498.375536][ T30] ? tun_chr_close+0x3b/0x1b0 [ 498.436304][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 498.442136][ T30] ? __pfx_call_rcu+0x10/0x10 [ 498.493256][ T8908] Bluetooth: hci18: command tx timeout [ 498.499026][ T5238] Bluetooth: hci19: command tx timeout [ 498.526205][ T30] tun_chr_close+0x3b/0x1b0 [ 498.530812][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 498.535980][ T30] __fput+0x23f/0x880 [ 498.560725][ T30] task_work_run+0x24f/0x310 [ 498.565416][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 498.576218][ T30] ? __pfx_task_work_run+0x10/0x10 [ 498.581421][ T30] ? do_exit+0xa2a/0x28e0 [ 498.585795][ T30] ? kmem_cache_free+0x1a2/0x420 [ 498.601762][ T30] ? do_exit+0xa2a/0x28e0 [ 498.609265][ T30] do_exit+0xa2f/0x28e0 [ 498.613509][ T30] ? __pfx_do_exit+0x10/0x10 [ 498.623665][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 498.631897][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.642102][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 498.654975][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 498.670087][ T30] do_group_exit+0x207/0x2c0 [ 498.674769][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.684048][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 498.693516][ T30] get_signal+0x16a3/0x1740 [ 498.702054][ T30] ? __pfx_get_signal+0x10/0x10 [ 498.709749][ T30] arch_do_signal_or_restart+0x96/0x860 [ 498.715379][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 498.725580][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.736111][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 498.745477][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 498.754999][ T30] do_syscall_64+0x100/0x230 [ 498.764842][ T30] ? clear_bhb_loop+0x35/0x90 [ 498.775738][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.785641][ T30] RIP: 0033:0x7f173097dff9 [ 498.792846][ T30] RSP: 002b:00007f1730c5fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 498.808533][ T30] RAX: 0000000000000000 RBX: 00007f1730b37a80 RCX: 00007f173097dff9 [ 498.820264][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 498.831118][ T30] RBP: 00007f1730b37a80 R08: 0000000000000006 R09: 00007f1730c5fe7f [ 498.843269][ T30] R10: 00000000003ffc30 R11: 0000000000000246 R12: 000000000004679e [ 498.855142][ T30] R13: 00007f1730c5fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 498.867339][ T30] [ 498.870520][ T30] [ 498.870520][ T30] Showing all locks held in the system: [ 498.889065][ T30] 3 locks held by kworker/0:1/9: [ 498.894070][ T30] 3 locks held by kworker/u8:0/11: [ 498.904983][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 498.926184][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 498.943474][ T30] #2: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 498.955368][ T30] 3 locks held by ksoftirqd/0/16: [ 498.967185][ T30] 1 lock held by khungtaskd/30: [ 498.972110][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 498.992347][ T30] 3 locks held by kworker/u8:3/52: [ 499.003391][ T30] #0: ffff888020a9f948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 499.015049][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 499.036238][ T30] #2: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 499.053212][ T30] 3 locks held by kworker/u8:4/68: [ 499.059803][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 499.078586][ T30] #1: ffffc900015c7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 499.094344][ T30] #2: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 499.108627][ T30] 1 lock held by dhcpcd/4902: [ 499.113376][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 499.126379][ T30] 2 locks held by getty/4989: [ 499.131122][ T30] #0: ffff88802ec3f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 499.148230][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 499.164537][ T30] 1 lock held by syz.2.808/8805: [ 499.171318][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 499.186766][ T30] 2 locks held by syz.4.818/8844: [ 499.191851][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 499.206197][ T30] #1: ffffffff8e7d1e10 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 499.232584][ T30] 2 locks held by syz-executor/8856: [ 499.239610][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.254330][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 499.265893][ T30] 2 locks held by syz-executor/8858: [ 499.276277][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.285808][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 499.300516][ T30] 2 locks held by syz-executor/8860: [ 499.305867][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.318304][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 499.335194][ T30] 2 locks held by syz-executor/8865: [ 499.342118][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.359458][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 499.374588][ T30] 2 locks held by syz-executor/8869: [ 499.381514][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.396175][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 499.405007][ T30] 2 locks held by syz-executor/8881: [ 499.415798][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.425698][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.443209][ T30] 2 locks held by syz-executor/8885: [ 499.452021][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.469230][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.483461][ T30] 2 locks held by syz-executor/8887: [ 499.492628][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.505022][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.520344][ T30] 2 locks held by syz-executor/8892: [ 499.525697][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.539076][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.553194][ T30] 2 locks held by syz-executor/8895: [ 499.566724][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.582718][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.593374][ T30] 2 locks held by syz-executor/8910: [ 499.606472][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.616008][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.642424][ T30] 2 locks held by syz-executor/8911: [ 499.649357][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.665479][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.680321][ T30] 2 locks held by syz-executor/8912: [ 499.685867][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.703412][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.714008][ T30] 2 locks held by syz-executor/8915: [ 499.725606][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.736628][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.753072][ T30] 2 locks held by syz-executor/8918: [ 499.758831][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.776196][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.796861][ T30] 2 locks held by syz-executor/8930: [ 499.802220][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.819169][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.833262][ T30] 2 locks held by syz-executor/8931: [ 499.842521][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.858791][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.874075][ T30] 2 locks held by syz-executor/8934: [ 499.883019][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.896750][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.920186][ T30] 2 locks held by syz-executor/8939: [ 499.925556][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.940427][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.953512][ T30] 2 locks held by syz-executor/8941: [ 499.963863][ T30] #0: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 499.975058][ T30] #1: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 499.989422][ T30] [ 499.991805][ T30] ============================================= [ 499.991805][ T30] [ 500.005559][ T30] NMI backtrace for cpu 1 [ 500.009952][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 500.020506][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 500.030606][ T30] Call Trace: [ 500.033923][ T30] [ 500.036892][ T30] dump_stack_lvl+0x241/0x360 [ 500.041624][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.046884][ T30] ? __pfx__printk+0x10/0x10 [ 500.051527][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 500.056522][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 500.062043][ T30] ? _printk+0xd5/0x120 [ 500.066236][ T30] ? __pfx__printk+0x10/0x10 [ 500.070875][ T30] ? __wake_up_klogd+0xcc/0x110 [ 500.075772][ T30] ? __pfx__printk+0x10/0x10 [ 500.080404][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 500.085487][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 500.091525][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 500.097566][ T30] watchdog+0xff4/0x1040 [ 500.101871][ T30] ? watchdog+0x1ea/0x1040 [ 500.106349][ T30] ? __pfx_watchdog+0x10/0x10 [ 500.111075][ T30] kthread+0x2f0/0x390 [ 500.115185][ T30] ? __pfx_watchdog+0x10/0x10 [ 500.119907][ T30] ? __pfx_kthread+0x10/0x10 [ 500.124535][ T30] ret_from_fork+0x4b/0x80 [ 500.128999][ T30] ? __pfx_kthread+0x10/0x10 [ 500.133631][ T30] ret_from_fork_asm+0x1a/0x30 [ 500.138463][ T30] [ 500.142345][ T30] Sending NMI from CPU 1 to CPUs 0: [ 500.148007][ C0] NMI backtrace for cpu 0 [ 500.148021][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 500.148043][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 500.148054][ C0] RIP: 0010:check_preemption_disabled+0x4/0x120 [ 500.148082][ C0] Code: 8c 48 c7 c6 80 02 61 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 <41> 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 [ 500.148099][ C0] RSP: 0018:ffffc90000156758 EFLAGS: 00000046 [ 500.148117][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000100 [ 500.148129][ C0] RDX: ffff88801ce8da00 RSI: ffffffff8c0adcc0 RDI: ffffffff8c6102a0 [ 500.148144][ C0] RBP: 0000000000000000 R08: ffffffff8998ead6 R09: 1ffffffff2859300 [ 500.148157][ C0] R10: dffffc0000000000 R11: fffffbfff2859301 R12: 0000000000000246 [ 500.148170][ C0] R13: ffff88801ce8da00 R14: 00000000ffffffff R15: ffffffff8e937e20 [ 500.148184][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 500.148199][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.148212][ C0] CR2: 0000000020083000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 500.148229][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 500.148240][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 500.148252][ C0] Call Trace: [ 500.148258][ C0] [ 500.148266][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 500.148290][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 500.148320][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 500.148349][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 500.148374][ C0] ? nmi_handle+0x14f/0x5a0 [ 500.148393][ C0] ? nmi_handle+0x2a/0x5a0 [ 500.148412][ C0] ? check_preemption_disabled+0x4/0x120 [ 500.148431][ C0] ? default_do_nmi+0x63/0x160 [ 500.148456][ C0] ? exc_nmi+0x123/0x1f0 [ 500.148478][ C0] ? end_repeat_nmi+0xf/0x53 [ 500.148500][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 500.148519][ C0] ? check_preemption_disabled+0x4/0x120 [ 500.148540][ C0] ? check_preemption_disabled+0x4/0x120 [ 500.148561][ C0] ? check_preemption_disabled+0x4/0x120 [ 500.148581][ C0] [ 500.148587][ C0] [ 500.148594][ C0] lock_is_held_type+0x101/0x190 [ 500.148622][ C0] fib_lookup_good_nhc+0xd0/0x3b0 [ 500.148646][ C0] fib_table_lookup+0x9dd/0x1870 [ 500.148667][ C0] ? __lock_acquire+0x1384/0x2050 [ 500.148702][ C0] ? __pfx_fib_table_lookup+0x10/0x10 [ 500.148727][ C0] fib_lookup+0x1c0/0x450 [ 500.148752][ C0] ? fib_lookup+0x81/0x450 [ 500.148777][ C0] ip_route_output_key_hash_rcu+0x284/0x2390 [ 500.148812][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 500.148840][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 500.148869][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 500.148898][ C0] ? __pfx_lock_release+0x10/0x10 [ 500.148929][ C0] ip_route_output_flow+0x29/0x140 [ 500.148955][ C0] ip_route_me_harder+0x80d/0x1300 [ 500.148984][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 500.149010][ C0] ? trace_kmalloc+0x1f/0xd0 [ 500.149034][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 500.149068][ C0] synproxy_send_tcp+0x356/0x6c0 [ 500.149098][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 500.149129][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 500.149157][ C0] ? synproxy_pernet+0x45/0x270 [ 500.149186][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 500.149215][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 500.149256][ C0] ? nf_ip_checksum+0x13a/0x500 [ 500.149275][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 500.149304][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 500.149331][ C0] ? validate_chain+0x11e/0x5920 [ 500.149349][ C0] ? __queue_work+0x199/0xf50 [ 500.149376][ C0] ? __pfx_validate_chain+0x10/0x10 [ 500.149399][ C0] nft_do_chain+0x4ad/0x1da0 [ 500.149420][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 500.149437][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 500.149470][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 500.149491][ C0] nft_do_chain_inet+0x418/0x6b0 [ 500.149518][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 500.149544][ C0] ? ipt_do_table+0x312/0x1860 [ 500.149576][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 500.149602][ C0] nf_hook_slow+0xc3/0x220 [ 500.149631][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 500.149652][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 500.149673][ C0] NF_HOOK+0x29e/0x450 [ 500.149695][ C0] ? NF_HOOK+0x9a/0x450 [ 500.149714][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 500.149735][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 500.149758][ C0] ? ip_rcv_finish+0x406/0x560 [ 500.149779][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 500.149799][ C0] NF_HOOK+0x3a4/0x450 [ 500.149819][ C0] ? __lock_acquire+0x1384/0x2050 [ 500.149845][ C0] ? NF_HOOK+0x9a/0x450 [ 500.149866][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 500.149886][ C0] ? ip_rcv_core+0x801/0xd10 [ 500.149907][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 500.149930][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 500.149950][ C0] __netif_receive_skb+0x2bf/0x650 [ 500.149974][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 500.150000][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 500.150022][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 500.150049][ C0] ? __pfx_lock_release+0x10/0x10 [ 500.150075][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 500.150109][ C0] process_backlog+0x662/0x15b0 [ 500.150135][ C0] ? process_backlog+0x33b/0x15b0 [ 500.150181][ C0] ? __pfx_process_backlog+0x10/0x10 [ 500.150205][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 500.150233][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.150262][ C0] __napi_poll+0xcb/0x490 [ 500.150286][ C0] net_rx_action+0x89b/0x1240 [ 500.150319][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 500.150345][ C0] ? rcu_qs+0xf1/0x190 [ 500.150369][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.150400][ C0] handle_softirqs+0x2c5/0x980 [ 500.150427][ C0] ? run_ksoftirqd+0xca/0x130 [ 500.150454][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 500.150483][ C0] run_ksoftirqd+0xca/0x130 [ 500.150509][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 500.150535][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 500.150562][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 500.150589][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 500.150619][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 500.150643][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 500.150668][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 500.150694][ C0] smpboot_thread_fn+0x544/0xa30 [ 500.150719][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 500.150746][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 500.150771][ C0] kthread+0x2f0/0x390 [ 500.150788][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 500.150813][ C0] ? __pfx_kthread+0x10/0x10 [ 500.150831][ C0] ret_from_fork+0x4b/0x80 [ 500.150858][ C0] ? __pfx_kthread+0x10/0x10 [ 500.150876][ C0] ret_from_fork_asm+0x1a/0x30 [ 500.150908][ C0] [ 500.867733][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 500.875102][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 500.885651][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 500.895748][ T30] Call Trace: [ 500.899057][ T30] [ 500.902018][ T30] dump_stack_lvl+0x241/0x360 [ 500.906749][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.912042][ T30] ? __pfx__printk+0x10/0x10 [ 500.916676][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 500.923067][ T30] ? vscnprintf+0x5d/0x90 [ 500.927444][ T30] panic+0x349/0x880 [ 500.931394][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 500.938115][ T30] ? __pfx_panic+0x10/0x10 [ 500.942561][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 500.947976][ T30] ? __irq_work_queue_local+0x137/0x410 [ 500.953578][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 500.959077][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 500.965302][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 500.971504][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 500.977716][ T30] watchdog+0x1033/0x1040 [ 500.982095][ T30] ? watchdog+0x1ea/0x1040 [ 500.986578][ T30] ? __pfx_watchdog+0x10/0x10 [ 500.991307][ T30] kthread+0x2f0/0x390 [ 500.995414][ T30] ? __pfx_watchdog+0x10/0x10 [ 501.000136][ T30] ? __pfx_kthread+0x10/0x10 [ 501.004786][ T30] ret_from_fork+0x4b/0x80 [ 501.009254][ T30] ? __pfx_kthread+0x10/0x10 [ 501.013888][ T30] ret_from_fork_asm+0x1a/0x30 [ 501.018714][ T30] [ 501.022123][ T30] Kernel Offset: disabled [ 501.026462][ T30] Rebooting in 86400 seconds..