last executing test programs: 12.767383036s ago: executing program 4 (id=6937): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x80000001, 0x2, {0xa, 0x4e20, 0x80002, @remote, 0xffff}}}, 0x80, 0x0, 0xfffffffffffffe09}, 0x240098d1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x4, 0x5, 0x6}, {0xfffffff7, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0xe0, 0x8, 0xb, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0xab, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.075954393s ago: executing program 4 (id=6947): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x26020480) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x206100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x103, 0x0, r2}) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) getsockname$l2tp(r4, 0x0, &(0x7f0000000740)) 9.678328287s ago: executing program 2 (id=6950): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.735186814s ago: executing program 1 (id=6951): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e831239025481f489c56331ea60ab91a77a73aca23da9fc2a2f171a0b42708ca64bc23985acd303b5eb32045bd55755facde52d4c5d134374736438996a956b5515a21c3c92968187235f0ec1cc68f671776f6b9805f2597bf6f0f93e55c843db7e590a923867da924981b1f653882bb744b3642e31fc43edbd028e804a71e40a80f0f3945fef279b7d7e060e3f2c3cf755b26a37f600021015ff3096c726ea948c2a25d1dbd7e5f7a6865109a83e99ec6e57bb1eea68c40131e1237e33766212f5fab50541a7028d734aaf1b6da21ef19b513a83d0f66f2db05960d404f918d23095e731b7f95bf79b04c91e419891fd04338508b1d44d47c954855550b1db8ab5e4c6d433d3e0113a9a5945d8f1bfb76a3cedad512d85103cb0bb1d32f7d3e30c19ee27bcadb3924ac774c79a5f5a7dd0d5e5d37400c070d7d97cd0e8841f55dce9461e98e2a3958dee488518f8481125530fb869e128e299c40e7bf341b363d14ed5707c176fc806997145ac1fbc2295c1b47c42b1cd1a1d455e7346c3a5d3fb29fb105a8b17ec42486f0ef3891aa9aeffaabfbafb0d3660609dfca3880209f18fedcee0b53338e4d3d72a4798c53604bc9adf78789be08fd2b2b227e0f37dcf7e30d3b2308dea145e6cd0c7a0a5cf637e192188b5a9f499fe3382c954cf76a889eb975250066a13f7cf275470491d135b9b61eac107d21c41aa4db597b25a0b579ee93", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.630113559s ago: executing program 0 (id=6953): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.628036288s ago: executing program 4 (id=6954): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x58}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 8.620318502s ago: executing program 2 (id=6955): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x58}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999ea", 0x5c}, {&(0x7f0000001400)="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", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.396238112s ago: executing program 4 (id=6956): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r0 = syz_usbip_server_init(0x5) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) write$usbip_server(r0, &(0x7f0000000080)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x4}, {0x236}}, 0x30) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x6, 0x4) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) 8.395079841s ago: executing program 2 (id=6957): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 8.350157903s ago: executing program 0 (id=6958): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.348745431s ago: executing program 1 (id=6959): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001280)="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", 0x6f3}], 0x1}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES64]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x29, 0x18, 0x0, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000180)={0x2, 0xfc}, 0x2) 5.244948236s ago: executing program 0 (id=6961): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xf97}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.138685705s ago: executing program 2 (id=6962): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="20160100000069"], 0x0, 0x0, 0x0, 0x0}) 4.928336001s ago: executing program 1 (id=6964): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r5], 0x4) 4.92408958s ago: executing program 0 (id=6965): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 4.824546167s ago: executing program 4 (id=6966): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1], 0x0) 4.668026711s ago: executing program 3 (id=6967): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x58}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999ea", 0x5c}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e831239025481f489c56331ea60ab91a77a73aca23da9fc2a2f171a0b42708ca64bc23985acd303b5eb32045bd55755facde52d4c5d134374736438996a956b5515a21c3c92968187235f0ec1cc68f671776f6b9805f2597bf6f0f93e55c843db7e590a923867da924981b1f653882bb744b3642e31fc43edbd028e804a71e40a80f0f3945fef279b7d7e060e3f2c3cf755b26a37f600021015ff3096c726ea948c2a25d1dbd7e5f7a6865109a83e99ec6e57bb1eea68c40131e1237e33766212f5fab50541a7028d734aaf1b6da21ef19b513a83d0f66f2db05960d404f918d23095e731b7f95bf79b04c91e419891fd04338508b1d44d47c954855550b1db8ab5e4c6d433d3e0113a9a5945d8f1bfb76a3cedad512d85103cb0bb1d32f7d3e30c19ee27bcadb3924ac774c79a5f5a7dd0d5e5d37400c070d7d97cd0e8841f55dce9461e98e2a3958dee488518f8481125530fb869e128e299c40e7bf341b363d14ed5707c176fc806997145ac1fbc2295c1b47c42b1cd1a1d455e7346c3a5d3fb29fb105a8b17ec42486f0ef3891aa9aeffaabfbafb0d3660609dfca3880209f18fedcee0b53338e4d3d72a4798c53604bc9adf78789be08fd2b2b227e0f37dcf7e30d3b2308dea145e6cd0c7a0a5cf637e192188b5a9f499fe3382c954cf76a889eb975250066a13f7cf275470491d135b9b61eac107d21c41aa4db597b25a0b579ee93", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.249975743s ago: executing program 1 (id=6968): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8], 0x4) 4.248302206s ago: executing program 3 (id=6969): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.679682292s ago: executing program 3 (id=6970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.084649677s ago: executing program 1 (id=6971): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc45, 0x760b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x4}}}}}]}}]}}, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 2.553284675s ago: executing program 3 (id=6972): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64], 0x0) 2.287676063s ago: executing program 4 (id=6973): r0 = socket(0x1d, 0x2, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) unshare(0x24020400) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f00000003c0)={0x1, "16809f2e04865e4f0eb0f0a01415a98efac4e085ab9eeec24bf1362d808125d2", 0x2, 0x1000, 0xfffffffe, 0x140000, 0x4, 0x3, 0x7fff, 0x5}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) 1.572248722s ago: executing program 2 (id=6974): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}]}, 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e831239025481f489c56331ea60ab91a77a73aca23da9fc2a2f171a0b42708ca64bc23985acd303b5eb32045bd55755facde52d4c5d134374736438996a956b5515a21c3c92968187235f0ec1cc68f671776f6b9805f2597bf6f0f93e55c843db7e590a923867da924981b1f653882bb744b3642e31fc43edbd028e804a71e40a80f0f3945fef279b7d7e060e3f2c3cf755b26a37f600021015ff3096c726ea948c2a25d1dbd7e5f7a6865109a83e99ec6e57bb1eea68c40131e1237e33766212f5fab50541a7028d734aaf1b6da21ef19b513a83d0f66f2db05960d404f918d23095e731b7f95bf79b04c91e419891fd04338508b1d44d47c954855550b1db8ab5e4c6d433d3e0113a9a5945d8f1bfb76a3cedad512d85103cb0bb1d32f7d3e30c19ee27bcadb3924ac774c79a5f5a7dd0d5e5d37400c070d7d97cd0e8841f55dce9461e98e2a3958dee488518f8481125530fb869e128e299c40e7bf341b363d14ed5707c176fc806997145ac1fbc2295c1b47c42b1cd1a1d455e7346c3a5d3fb29fb105a8b17ec42486f0ef3891aa9aeffaabfbafb0d3660609dfca3880209f18fedcee0b53338e4d3d72a4798c53604bc9adf78789be08fd2b2b227e0f37dcf7e30d3b2308dea145e6cd0c7a0a5cf637e192188b5a9f499fe3382c954cf76a889eb975250066a13f7cf275470491d135b9b61eac107d21c41aa4db597b25a0b579ee93", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.091196342s ago: executing program 1 (id=6975): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0xd}]}) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5f, 0x82, 0x10, 0x20, 0xae6f, 0x79f4, 0x8f99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x58, 0x42}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES16], 0x54}}, 0x20000000) 1.02196027s ago: executing program 3 (id=6976): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x58}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 739.409969ms ago: executing program 0 (id=6977): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 569.411129ms ago: executing program 3 (id=6978): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r0 = syz_usbip_server_init(0x5) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) write$usbip_server(r0, &(0x7f0000000080)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x4}, {0x236}}, 0x30) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x6, 0x4) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) 382.122643ms ago: executing program 0 (id=6979): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e040809050201000208066c7c0f15bf333a2cfa4b5988a994c5a0a791e7c152e54cf4a7365652fbca61e1134d5344b757ffb0b23324a6f46d44bc198b8fef8717c0cdb48f2468368cce7eb19d9b12148ac290d78d5eb28c52d853c2d68a7990979177a5e8ed511a5d4486e988aa026863bc5422790acfb184"], 0x0) 0s ago: executing program 2 (id=6980): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x58}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xf97}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): /root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698c9befc9 code=0x7ffc0000 [ 2949.662864][ T37] audit: type=1326 audit(1761330869.109:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5055 comm="syz.0.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f698c9befc9 code=0x7ffc0000 [ 2949.662912][ T37] audit: type=1326 audit(1761330869.109:10684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5055 comm="syz.0.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698c9befc9 code=0x7ffc0000 [ 2949.662969][ T37] audit: type=1326 audit(1761330869.109:10685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5055 comm="syz.0.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698c9befc9 code=0x7ffc0000 [ 2949.663018][ T37] audit: type=1326 audit(1761330869.109:10686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5055 comm="syz.0.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f698c9befc9 code=0x7ffc0000 [ 2949.663067][ T37] audit: type=1326 audit(1761330869.109:10687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5055 comm="syz.0.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698c9befc9 code=0x7ffc0000 [ 2949.663113][ T37] audit: type=1326 audit(1761330869.109:10688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5055 comm="syz.0.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698c9befc9 code=0x7ffc0000 [ 2949.707993][ T5061] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 2949.708015][ T5061] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 2949.708025][ T5061] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2949.725445][ T37] audit: type=1326 audit(1761330869.159:10689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5055 comm="syz.0.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f698c9befc9 code=0x7ffc0000 [ 2949.746753][T26229] usb usb4-port1: attempt power cycle [ 2950.165284][T26229] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 2950.796253][T26229] usb 4-1: device descriptor read/8, error -71 [ 2951.055478][T26229] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 2955.611846][T26229] usb 4-1: device descriptor read/8, error -71 [ 2955.725640][T26229] usb usb4-port1: unable to enumerate USB device [ 2958.375065][T22403] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2958.448345][T25246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2958.452145][T25246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2958.465919][T25246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2958.475582][T25246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2958.479592][T25246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2958.529743][T22403] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2958.529765][T22403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2958.529778][T22403] usb 2-1: Product: syz [ 2958.529786][T22403] usb 2-1: Manufacturer: syz [ 2958.529794][T22403] usb 2-1: SerialNumber: syz [ 2958.774441][ T5103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2958.777596][ T5103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2958.788532][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'. [ 2958.860381][ T5103] bond0: entered promiscuous mode [ 2958.860397][ T5103] bond_slave_0: entered promiscuous mode [ 2958.860620][ T5103] bond_slave_1: entered promiscuous mode [ 2958.864123][ T5103] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2958.871943][ T5103] bond0: left promiscuous mode [ 2958.871970][ T5103] bond_slave_0: left promiscuous mode [ 2958.872258][ T5103] bond_slave_1: left promiscuous mode [ 2959.355122][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.355496][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.951981][T22403] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2959.952048][T22403] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2959.952067][T22403] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2960.031395][T22403] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2960.059107][T22403] usb 2-1: USB disconnect, device number 56 [ 2960.469306][ T5126] ksmbd: Unknown IPC event: 4, ignore. [ 2960.576443][T25246] Bluetooth: hci3: command tx timeout [ 2961.134538][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 2961.315450][T22403] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2961.465314][T22403] usb 2-1: Using ep0 maxpacket: 16 [ 2961.470509][T22403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2961.470545][T22403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2961.470570][T22403] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2961.470617][T22403] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2961.470641][T22403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.621893][T22403] usb 2-1: config 0 descriptor?? [ 2962.094114][T22403] shield 0003:0955:7214.003A: unknown main item tag 0x0 [ 2962.094159][T22403] shield 0003:0955:7214.003A: unknown main item tag 0x0 [ 2962.094185][T22403] shield 0003:0955:7214.003A: unknown main item tag 0x0 [ 2962.094211][T22403] shield 0003:0955:7214.003A: unknown main item tag 0x0 [ 2962.094234][T22403] shield 0003:0955:7214.003A: unknown main item tag 0x0 [ 2962.228348][ T5134] random: crng reseeded on system resumption [ 2962.284258][T22403] input: HID 0955:7214 Haptics as /devices/virtual/input/input102 [ 2962.329041][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f924c00: rx timeout, send abort [ 2962.675306][T25246] Bluetooth: hci3: command tx timeout [ 2962.829148][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f924c00: abort rx timeout. Force session deactivation [ 2962.978324][T22403] shield 0003:0955:7214.003A: Registered Thunderstrike controller [ 2962.978838][T22403] shield 0003:0955:7214.003A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 2963.046869][T32062] shield 0003:0955:7214.003A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2963.047817][T32062] shield 0003:0955:7214.003A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2963.048634][T32062] shield 0003:0955:7214.003A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2963.048990][T32062] shield 0003:0955:7214.003A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2963.133680][T22403] usb 2-1: USB disconnect, device number 57 [ 2963.325901][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 2963.326266][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 2963.326625][ T5108] bridge_slave_0: entered allmulticast mode [ 2963.330123][ T5108] bridge_slave_0: entered promiscuous mode [ 2963.387605][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2963.387782][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 2963.388108][ T5108] bridge_slave_1: entered allmulticast mode [ 2963.391531][ T5108] bridge_slave_1: entered promiscuous mode [ 2964.085320][T26229] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2964.463324][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2964.475013][T26229] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2964.475034][T26229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2964.475047][T26229] usb 1-1: Product: syz [ 2964.475055][T26229] usb 1-1: Manufacturer: syz [ 2964.475063][T26229] usb 1-1: SerialNumber: syz [ 2964.489104][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2964.723490][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2964.724752][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.735412][T25246] Bluetooth: hci3: command tx timeout [ 2964.754458][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6498'. [ 2964.843852][ T5162] bond0: entered promiscuous mode [ 2964.843870][ T5162] bond_slave_0: entered promiscuous mode [ 2964.844082][ T5162] bond_slave_1: entered promiscuous mode [ 2964.857797][ T5162] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2964.867722][ T5162] bond0: left promiscuous mode [ 2964.867751][ T5162] bond_slave_0: left promiscuous mode [ 2964.868206][ T5162] bond_slave_1: left promiscuous mode [ 2964.954156][ C1] vkms_vblank_simulate: vblank timer overrun [ 2965.366172][T26229] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2965.366381][T26229] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2965.366431][T26229] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2965.417999][T26229] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 2965.450279][T26229] usb 1-1: USB disconnect, device number 53 [ 2965.510473][ T5108] team0: Port device team_slave_0 added [ 2965.558383][ T5108] team0: Port device team_slave_1 added [ 2966.050739][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2966.050761][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2966.050791][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2966.065424][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2966.065443][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2966.065474][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2966.840563][T25246] Bluetooth: hci3: command tx timeout [ 2967.103342][ T5183] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2967.433317][ T5189] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2968.348725][ T5108] hsr_slave_0: entered promiscuous mode [ 2968.415849][ T5108] hsr_slave_1: entered promiscuous mode [ 2968.442166][ T5108] debugfs: 'hsr0' already exists in 'hsr' [ 2968.442188][ T5108] Cannot create hsr debugfs directory [ 2968.589495][ T1581] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2968.748477][ T1581] usb 2-1: Using ep0 maxpacket: 8 [ 2968.752253][ T1581] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2968.752272][ T1581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.752284][ T1581] usb 2-1: Product: syz [ 2968.752292][ T1581] usb 2-1: Manufacturer: syz [ 2968.752301][ T1581] usb 2-1: SerialNumber: syz [ 2968.812924][ T1581] usb 2-1: config 0 descriptor?? [ 2968.827671][ T1581] gspca_main: se401-2.14.0 probing 047d:5003 [ 2969.563997][ T1581] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input103 [ 2969.710304][ T1581] usb 2-1: USB disconnect, device number 58 [ 2969.798130][ T5196] ksmbd: Unknown IPC event: 4, ignore. [ 2971.028357][ T1581] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2971.175381][ T1581] usb 2-1: Using ep0 maxpacket: 32 [ 2971.177505][ T1581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 2971.177525][ T1581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 2971.181776][ T1581] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 2971.181800][ T1581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2971.181811][ T1581] usb 2-1: Product: syz [ 2971.181820][ T1581] usb 2-1: Manufacturer: syz [ 2971.181829][ T1581] usb 2-1: SerialNumber: syz [ 2971.260364][ T1581] usb 2-1: config 0 descriptor?? [ 2971.291958][ T1581] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2971.333291][ T5108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2971.583735][T24878] usb 2-1: Failed to submit usb control message: -71 [ 2971.583784][ T1581] usb 2-1: USB disconnect, device number 59 [ 2971.583788][T24878] usb 2-1: unable to send the bmi data to the device: -71 [ 2971.583811][T24878] usb 2-1: unable to get target info from device [ 2971.583825][T24878] usb 2-1: could not get target info (-71) [ 2971.584113][T24878] usb 2-1: could not probe fw (-71) [ 2971.779360][ C1] vkms_vblank_simulate: vblank timer overrun [ 2971.960096][ C1] vkms_vblank_simulate: vblank timer overrun [ 2972.017262][T32710] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 2972.171738][ T5213] program syz.0.6510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2972.195317][T32710] usb 4-1: device descriptor read/64, error -71 [ 2972.445666][T32710] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 2972.549142][ T5108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2972.587048][ T1581] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2972.587210][T32710] usb 4-1: device descriptor read/64, error -71 [ 2972.725292][T32710] usb usb4-port1: attempt power cycle [ 2972.808698][ T1581] usb 2-1: config 0 has no interfaces? [ 2972.819494][ T1581] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2972.819518][ T1581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2972.819533][ T1581] usb 2-1: Product: syz [ 2972.819543][ T1581] usb 2-1: Manufacturer: syz [ 2972.819553][ T1581] usb 2-1: SerialNumber: syz [ 2972.826276][ T1581] usb 2-1: config 0 descriptor?? [ 2973.115315][T32710] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 2973.138479][ T5215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2973.138789][ T5215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2973.176455][T32710] usb 4-1: device descriptor read/8, error -71 [ 2973.212407][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6511'. [ 2973.212696][ T5215] 8021q: VLANs not supported on caif0 [ 2973.393205][ T1294] usb 2-1: USB disconnect, device number 60 [ 2973.415338][T32710] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 2973.500272][T32710] usb 4-1: device descriptor read/8, error -71 [ 2973.638218][T32710] usb usb4-port1: unable to enumerate USB device [ 2973.880442][ T5108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2974.521206][ T5108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2975.666931][ T5237] program syz.0.6516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2975.748673][ T5235] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6515'. [ 2975.748702][ T5235] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 2976.233436][ T5108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2976.384689][ T5108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2976.530918][ T5108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2976.634847][ T5108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2976.755246][ T1581] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2976.918125][ T1581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2976.918163][ T1581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2976.918186][ T1581] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2976.918232][ T1581] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 2976.918256][ T1581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2976.922833][ T1581] usb 4-1: config 0 descriptor?? [ 2977.288035][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2977.297043][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.436337][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2977.477408][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.805688][ T1581] usbhid 4-1:0.0: can't add hid device: -71 [ 2977.805794][ T1581] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2977.859503][ T1581] usb 4-1: USB disconnect, device number 18 [ 2978.417598][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2978.499103][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 2978.564046][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 2978.588864][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2978.640849][T17938] bridge0: port 2(bridge_slave_1) entered blocking state [ 2978.640945][T17938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2978.761409][T22403] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2979.223178][T22403] usb 3-1: config 0 has no interfaces? [ 2979.247043][T22403] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2979.247077][T22403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2979.247098][T22403] usb 3-1: Product: syz [ 2979.247112][T22403] usb 3-1: Manufacturer: syz [ 2979.247127][T22403] usb 3-1: SerialNumber: syz [ 2979.290990][T22403] usb 3-1: config 0 descriptor?? [ 2979.743998][ T5249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6518'. [ 2979.804101][ T5249] vlan2: entered promiscuous mode [ 2979.804120][ T5249] bridge0: entered promiscuous mode [ 2979.815455][T22403] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2979.862001][ T1581] usb 3-1: USB disconnect, device number 49 [ 2980.045330][T22403] usb 1-1: config 0 has no interfaces? [ 2980.079259][T22403] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2980.079282][T22403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2980.079295][T22403] usb 1-1: Product: syz [ 2980.079303][T22403] usb 1-1: Manufacturer: syz [ 2980.079311][T22403] usb 1-1: SerialNumber: syz [ 2980.087734][T22403] usb 1-1: config 0 descriptor?? [ 2980.413693][ T5262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6522'. [ 2980.451572][ T5262] vlan2: entered promiscuous mode [ 2980.451586][ T5262] bridge0: entered promiscuous mode [ 2980.630257][T25455] usb 1-1: USB disconnect, device number 54 [ 2980.916472][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2981.019492][ T5270] binder: BINDER_SET_CONTEXT_MGR already set [ 2981.019511][ T5270] binder: 5268:5270 ioctl 4018620d 2000000001c0 returned -16 [ 2981.850753][T26229] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2982.035454][T26229] usb 4-1: Using ep0 maxpacket: 32 [ 2982.038355][T26229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 2982.038396][T26229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 2982.042214][T26229] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 2982.042247][T26229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2982.042267][T26229] usb 4-1: Product: syz [ 2982.042282][T26229] usb 4-1: Manufacturer: syz [ 2982.042297][T26229] usb 4-1: SerialNumber: syz [ 2982.210581][T26229] usb 4-1: config 0 descriptor?? [ 2982.412951][T26229] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2982.454849][T26229] usb 4-1: USB disconnect, device number 19 [ 2982.611469][ T5291] syz.2.6526 (5291): drop_caches: 2 [ 2982.775586][T31578] usb 4-1: Failed to submit usb control message: -71 [ 2982.775612][T31578] usb 4-1: unable to send the bmi data to the device: -71 [ 2982.775624][T31578] usb 4-1: unable to get target info from device [ 2982.775639][T31578] usb 4-1: could not get target info (-71) [ 2982.775917][T31578] usb 4-1: could not probe fw (-71) [ 2983.202528][ T5296] binder: BINDER_SET_CONTEXT_MGR already set [ 2983.202540][ T5296] binder: 5293:5296 ioctl 4018620d 200000000040 returned -16 [ 2983.210914][ T5296] syz.1.6527 (5296): drop_caches: 2 [ 2983.927085][ T5108] veth0_vlan: entered promiscuous mode [ 2984.038023][ T5303] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6528'. [ 2984.038043][ T5303] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 2984.184730][ T5108] veth1_vlan: entered promiscuous mode [ 2984.529670][T26229] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2984.625514][T25359] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2984.690573][T26229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2984.690610][T26229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2984.690634][T26229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2984.690681][T26229] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 2984.690703][T26229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2984.755733][T26229] usb 2-1: config 0 descriptor?? [ 2984.782834][ T5108] veth0_macvtap: entered promiscuous mode [ 2984.792539][T25359] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 2984.792577][T25359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 2984.792594][T25359] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 2984.792620][T25359] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 2984.792677][T25359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2984.856286][T25359] usb 1-1: config 0 descriptor?? [ 2984.888695][ T5108] veth1_macvtap: entered promiscuous mode [ 2984.939994][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2984.964129][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2985.050878][ T5306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2985.051597][ T5306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2985.098341][ T5306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2985.130946][T24873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2985.170744][ T5306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2985.333589][T24873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2985.374793][T30439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2985.405363][T25359] a4tech 0003:09DA:001A.003B: item fetching failed at offset 5/7 [ 2985.406685][T25359] a4tech 0003:09DA:001A.003B: parse failed [ 2985.406921][T25359] a4tech 0003:09DA:001A.003B: probe with driver a4tech failed with error -22 [ 2985.541658][T30439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2985.654711][T26229] usbhid 2-1:0.0: can't add hid device: -71 [ 2985.654851][T26229] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2985.763822][T26229] usb 2-1: USB disconnect, device number 61 [ 2986.330790][T24878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2986.330808][T24878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2986.771354][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2986.771380][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2988.859966][T26229] usb 1-1: USB disconnect, device number 55 [ 2989.119785][T32710] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2989.265257][T32710] usb 4-1: Using ep0 maxpacket: 16 [ 2989.267852][T32710] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2989.267887][T32710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2989.270281][T32710] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2989.270299][T32710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2989.270311][T32710] usb 4-1: Product: syz [ 2989.270319][T32710] usb 4-1: Manufacturer: syz [ 2989.270328][T32710] usb 4-1: SerialNumber: syz [ 2989.273947][T32710] usb 4-1: config 0 descriptor?? [ 2989.288872][T32710] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2989.288905][T32710] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2989.690263][ T5348] ksmbd: Unknown IPC event: 4, ignore. [ 2989.997574][T32710] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2990.006379][T32710] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 2990.062462][T22403] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2990.348935][T22403] usb 3-1: Using ep0 maxpacket: 16 [ 2990.787057][T32710] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 2990.788384][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 2990.790050][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 2990.791287][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 2990.792512][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 2990.793593][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 2991.314588][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 2991.314611][ T37] audit: type=1326 audit(1761330910.759:10695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5351 comm="syz.0.6543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f698c9befc9 code=0x0 [ 2991.339143][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 2991.339170][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 2991.339187][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 2991.339203][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 2991.339219][T32710] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 2991.413275][T32710] usb 4-1: USB disconnect, device number 20 [ 2995.375924][T22403] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2995.376034][T22403] usb 3-1: no configurations [ 2995.376048][T22403] usb 3-1: can't read configurations, error -22 [ 2995.468421][ T5368] binder: 5365:5368 ioctl c0306201 0 returned -14 [ 2995.479268][ T5368] binder: BINDER_SET_CONTEXT_MGR already set [ 2995.479320][ T5368] binder: 5365:5368 ioctl 4018620d 200000000040 returned -16 [ 2995.615389][T22403] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2996.718996][ T5368] syz.0.6546 (5368): drop_caches: 2 [ 2998.185339][T26229] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2998.340738][T26229] usb 4-1: Using ep0 maxpacket: 16 [ 3000.875362][T25455] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 3001.036830][T25455] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3001.036852][T25455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3001.036864][T25455] usb 1-1: Product: syz [ 3001.036873][T25455] usb 1-1: Manufacturer: syz [ 3001.036882][T25455] usb 1-1: SerialNumber: syz [ 3001.398013][ T5391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3001.424546][ T5391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3001.458949][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6552'. [ 3001.698385][ T5391] bond0: entered promiscuous mode [ 3001.698656][ T5391] bond_slave_0: entered promiscuous mode [ 3001.699567][ T5391] bond_slave_1: entered promiscuous mode [ 3002.358484][ T5391] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 3002.404150][ T5391] bond0: left promiscuous mode [ 3002.404185][ T5391] bond_slave_0: left promiscuous mode [ 3002.404509][ T5391] bond_slave_1: left promiscuous mode [ 3003.375729][T26229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3003.375966][T26229] usb 4-1: no configurations [ 3003.376044][T26229] usb 4-1: can't read configurations, error -22 [ 3003.505413][T26229] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 3003.635319][T26229] usb 4-1: device descriptor read/64, error -32 [ 3003.742317][T25455] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 3003.742384][T25455] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 3003.742407][T25455] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3003.801989][T26229] usb usb4-port1: attempt power cycle [ 3004.003481][T25455] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 3004.060248][T25455] usb 1-1: USB disconnect, device number 56 [ 3004.545297][T26229] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 3004.775747][T26229] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 3004.807408][T26229] usb 4-1: Using ep0 maxpacket: 32 [ 3004.818143][T26229] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 3004.818175][T26229] usb 4-1: config 0 has no interface number 0 [ 3004.818242][T26229] usb 4-1: config 0 interface 89 has no altsetting 0 [ 3004.824027][T26229] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 3004.824056][T26229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3004.824075][T26229] usb 4-1: Product: syz [ 3004.824089][T26229] usb 4-1: Manufacturer: syz [ 3004.824103][T26229] usb 4-1: SerialNumber: syz [ 3004.850826][T26229] usb 4-1: config 0 descriptor?? [ 3004.923050][T26229] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 3004.923092][T26229] em28xx 4-1:0.89: Video interface 89 found: bulk [ 3005.372641][ T5416] program syz.0.6559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3005.463652][T26229] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 3006.604887][T26229] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 3006.604905][T26229] em28xx 4-1:0.89: board has no eeprom [ 3006.665473][T26229] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 3006.665506][T26229] em28xx 4-1:0.89: analog set to bulk mode. [ 3006.678409][T25455] em28xx 4-1:0.89: Registering V4L2 extension [ 3006.715249][T26229] usb 4-1: USB disconnect, device number 24 [ 3006.718013][T26229] em28xx 4-1:0.89: Disconnecting em28xx [ 3007.165975][T25455] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 3007.165993][T25455] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 3007.166001][T25455] em28xx 4-1:0.89: No AC97 audio processor [ 3007.167517][T25455] usb 4-1: Decoder not found [ 3007.167527][T25455] em28xx 4-1:0.89: failed to create media graph [ 3007.167542][T25455] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 3007.169132][T25455] em28xx 4-1:0.89: Registering snapshot button... [ 3007.170858][T25455] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input104 [ 3007.185636][T25455] em28xx 4-1:0.89: Remote control support is not available for this card. [ 3007.185707][T26229] em28xx 4-1:0.89: Closing input extension [ 3007.185731][T26229] em28xx 4-1:0.89: Deregistering snapshot button [ 3007.189640][ T37] audit: type=1326 audit(1761330926.639:10696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5419 comm="syz.3.6561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f849ab0efc9 code=0x0 [ 3007.543411][T26229] em28xx 4-1:0.89: Freeing device [ 3008.025362][T26229] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 3008.035407][T25455] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3008.195403][T26229] usb 4-1: Using ep0 maxpacket: 32 [ 3008.284001][T26229] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 3008.284099][T26229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3008.284121][T26229] usb 4-1: Product: syz [ 3008.284137][T26229] usb 4-1: Manufacturer: syz [ 3008.284152][T26229] usb 4-1: SerialNumber: syz [ 3008.306208][T25455] usb 5-1: config 0 has no interfaces? [ 3008.309260][T25455] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3008.309287][T25455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3008.309306][T25455] usb 5-1: Product: syz [ 3008.309319][T25455] usb 5-1: Manufacturer: syz [ 3008.309332][T25455] usb 5-1: SerialNumber: syz [ 3008.327790][T26229] usb 4-1: config 0 descriptor?? [ 3008.331807][T25455] usb 5-1: config 0 descriptor?? [ 3008.616139][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6561'. [ 3009.056141][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3009.056554][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.096579][ T5429] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6563'. [ 3009.447727][T25512] usb 5-1: USB disconnect, device number 33 [ 3010.203129][T26229] usb 4-1: USB disconnect, device number 25 [ 3010.407711][ T5451] trusted_key: encrypted_key: key user:syz not found [ 3011.422146][ T5468] binder: 5458:5468 ioctl c0306201 0 returned -14 [ 3011.424624][ T5468] binder: BINDER_SET_CONTEXT_MGR already set [ 3011.424650][ T5468] binder: 5458:5468 ioctl 4018620d 200000000040 returned -16 [ 3011.457695][ T5468] syz.2.6571 (5468): drop_caches: 2 [ 3011.655342][T25512] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 3011.815425][T25512] usb 2-1: Using ep0 maxpacket: 32 [ 3011.817422][T25512] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 3011.817445][T25512] usb 2-1: config 0 has no interface number 0 [ 3011.817471][T25512] usb 2-1: config 0 interface 89 has no altsetting 0 [ 3011.820547][T25512] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 3011.820567][T25512] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3011.820578][T25512] usb 2-1: Product: syz [ 3011.820587][T25512] usb 2-1: Manufacturer: syz [ 3011.820595][T25512] usb 2-1: SerialNumber: syz [ 3011.824286][T25512] usb 2-1: config 0 descriptor?? [ 3011.829272][T25512] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 3011.829292][T25512] em28xx 2-1:0.89: Video interface 89 found: bulk [ 3011.935509][T30387] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 3012.096097][T30387] usb 4-1: Using ep0 maxpacket: 32 [ 3012.104651][T30387] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 3012.104770][T30387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3012.104784][T30387] usb 4-1: Product: syz [ 3012.104792][T30387] usb 4-1: Manufacturer: syz [ 3012.104801][T30387] usb 4-1: SerialNumber: syz [ 3012.108927][T30387] usb 4-1: config 0 descriptor?? [ 3012.229907][T30387] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 3012.439754][T25512] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 3013.199350][T30387] gspca_ov534_9: reg_w failed -71 [ 3013.495262][T30387] gspca_ov534_9: Unknown sensor 0000 [ 3013.495327][T30387] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 3013.502897][T30387] usb 4-1: USB disconnect, device number 26 [ 3013.504788][T25512] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 3013.504809][T25512] em28xx 2-1:0.89: board has no eeprom [ 3013.605394][T25512] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 3013.605425][T25512] em28xx 2-1:0.89: analog set to bulk mode. [ 3013.606793][T22403] em28xx 2-1:0.89: Registering V4L2 extension [ 3013.610357][T25512] usb 2-1: USB disconnect, device number 62 [ 3013.614758][T25512] em28xx 2-1:0.89: Disconnecting em28xx [ 3014.020006][T22403] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 3014.020035][T22403] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 3014.020049][T22403] em28xx 2-1:0.89: No AC97 audio processor [ 3014.023167][T22403] usb 2-1: Decoder not found [ 3014.023191][T22403] em28xx 2-1:0.89: failed to create media graph [ 3014.023225][T22403] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 3014.071841][T22403] em28xx 2-1:0.89: Registering snapshot button... [ 3014.096390][T22403] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input106 [ 3014.104731][T22403] em28xx 2-1:0.89: Remote control support is not available for this card. [ 3014.125503][T25512] em28xx 2-1:0.89: Closing input extension [ 3014.125535][T25512] em28xx 2-1:0.89: Deregistering snapshot button [ 3014.516657][T25512] em28xx 2-1:0.89: Freeing device [ 3017.035518][T25512] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 3017.198115][T25512] usb 1-1: config 0 has no interfaces? [ 3017.200096][T25512] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3017.200117][T25512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3017.200129][T25512] usb 1-1: Product: syz [ 3017.200137][T25512] usb 1-1: Manufacturer: syz [ 3017.200146][T25512] usb 1-1: SerialNumber: syz [ 3017.203695][T25512] usb 1-1: config 0 descriptor?? [ 3017.476580][ T5511] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6582'. [ 3017.483969][T26229] usb 1-1: USB disconnect, device number 57 [ 3017.695436][ T3551] Bluetooth: hci1: command 0x0406 tx timeout [ 3017.825494][ T5519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6585'. [ 3018.115373][ T1581] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3018.287789][ T1581] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3018.287819][ T1581] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3018.289083][ T1581] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3018.289112][ T1581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3018.289133][ T1581] usb 5-1: SerialNumber: syz [ 3018.417124][ T5532] binder: 5527:5532 ioctl c0306201 0 returned -14 [ 3018.421031][ T5532] binder: BINDER_SET_CONTEXT_MGR already set [ 3018.421125][ T5532] binder: 5527:5532 ioctl 4018620d 200000000040 returned -16 [ 3018.465901][ T5532] syz.0.6587 (5532): drop_caches: 2 [ 3018.631738][ T1581] usb 5-1: 0:2 : does not exist [ 3018.631832][ T1581] usb 5-1: unit 5 not found! [ 3018.838064][ T1581] usb 5-1: USB disconnect, device number 34 [ 3018.895883][T22403] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 3019.046901][T22403] usb 2-1: config 0 has no interfaces? [ 3019.048785][T22403] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3019.048802][T22403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3019.048813][T22403] usb 2-1: Product: syz [ 3019.048822][T22403] usb 2-1: Manufacturer: syz [ 3019.048831][T22403] usb 2-1: SerialNumber: syz [ 3019.167346][T22403] usb 2-1: config 0 descriptor?? [ 3019.264297][ T4902] udevd[4902]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3019.536365][ T5534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3019.538532][ T5534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3019.542305][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6589'. [ 3019.542538][ T5534] 8021q: VLANs not supported on caif0 [ 3019.933619][ T1294] usb 2-1: USB disconnect, device number 63 [ 3020.299350][T22403] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3020.369201][ T5556] ksmbd: Unknown IPC event: 4, ignore. [ 3020.519605][T22403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3020.519635][T22403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3020.519652][T22403] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3020.519692][T22403] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 3020.519716][T22403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3020.664713][T22403] usb 3-1: config 0 descriptor?? [ 3020.743433][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.743515][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.876870][ T5552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3020.877581][ T5552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3021.355348][T22403] usbhid 3-1:0.0: can't add hid device: -71 [ 3021.355442][T22403] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3021.397669][T22403] usb 3-1: USB disconnect, device number 52 [ 3025.323616][ T5599] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3027.555224][T26229] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 3027.717991][T26229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3027.718007][T26229] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3027.736252][T26229] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3027.736283][T26229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3027.736302][T26229] usb 2-1: SerialNumber: syz [ 3028.217913][T26229] usb 2-1: 0:2 : does not exist [ 3028.225823][T26229] usb 2-1: unit 255 not found! [ 3028.523151][T26229] usb 2-1: USB disconnect, device number 64 [ 3028.767088][ T4902] udevd[4902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3028.785372][T25512] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 3028.953568][T25512] usb 3-1: config 0 has no interfaces? [ 3028.972765][T25512] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3028.972797][T25512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3028.972819][T25512] usb 3-1: Product: syz [ 3028.972835][T25512] usb 3-1: Manufacturer: syz [ 3028.972850][T25512] usb 3-1: SerialNumber: syz [ 3029.012800][T25512] usb 3-1: config 0 descriptor?? [ 3029.137667][T22403] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 3029.286019][T22403] usb 5-1: Using ep0 maxpacket: 32 [ 3029.291007][T22403] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 3029.291038][T22403] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3029.291058][T22403] usb 5-1: config 0 has no interface number 0 [ 3029.292036][T22403] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 3029.292055][T22403] usb 5-1: config 0 interface 8 has no altsetting 0 [ 3029.294476][T22403] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 3029.294493][T22403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3029.294502][T22403] usb 5-1: Product: syz [ 3029.294509][T22403] usb 5-1: Manufacturer: syz [ 3029.294515][T22403] usb 5-1: SerialNumber: syz [ 3029.391853][T22403] usb 5-1: config 0 descriptor?? [ 3029.455295][ T5628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3029.457742][ T5628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3029.539563][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6611'. [ 3029.540089][ T5628] 8021q: VLANs not supported on caif0 [ 3029.734202][T22403] ath6kl: Failed to submit usb control message: -71 [ 3029.734263][T22403] ath6kl: unable to send the bmi data to the device: -71 [ 3029.734280][T22403] ath6kl: Unable to send get target info: -71 [ 3029.765040][T22403] ath6kl: Failed to init ath6kl core: -71 [ 3029.820210][T22403] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 3029.866107][T22403] usb 5-1: USB disconnect, device number 35 [ 3030.022976][T30387] usb 3-1: USB disconnect, device number 53 [ 3031.045436][T30387] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 3031.251157][T30387] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 3031.251191][T30387] usb 1-1: config 0 has no interface number 0 [ 3031.251245][T30387] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3031.251269][T30387] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3031.251306][T30387] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3031.251333][T30387] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3031.251360][T30387] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3031.251388][T30387] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3031.251435][T30387] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3031.251459][T30387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3031.268091][T30387] usb 1-1: config 0 descriptor?? [ 3031.269538][ T5647] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3031.269871][ T5647] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3031.397494][T30387] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3031.575903][ T5654] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6621'. [ 3033.335284][T30387] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 3033.475540][T30387] usb 3-1: device descriptor read/64, error -71 [ 3033.725592][T30387] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 3033.895410][T30387] usb 3-1: device descriptor read/64, error -71 [ 3034.027234][T30387] usb usb3-port1: attempt power cycle [ 3034.051779][T22403] usb 1-1: USB disconnect, device number 58 [ 3034.107806][T22403] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 3034.391947][T30387] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 3034.406549][T30387] usb 3-1: device descriptor read/8, error -71 [ 3034.647465][T30387] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 3034.666288][T30387] usb 3-1: device descriptor read/8, error -71 [ 3034.775880][T30387] usb usb3-port1: unable to enumerate USB device [ 3035.825354][T26229] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3036.007356][T26229] usb 5-1: config 0 has no interfaces? [ 3036.009439][T26229] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3036.009459][T26229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3036.009469][T26229] usb 5-1: Product: syz [ 3036.009476][T26229] usb 5-1: Manufacturer: syz [ 3036.009482][T26229] usb 5-1: SerialNumber: syz [ 3036.019693][T26229] usb 5-1: config 0 descriptor?? [ 3036.160535][ T37] audit: type=1326 audit(1761330955.609:10697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5689 comm="syz.2.6634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7144d4efc9 code=0x0 [ 3036.409632][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3036.410316][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.414179][ T5684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6630'. [ 3036.414692][ T5684] 8021q: VLANs not supported on caif0 [ 3036.505263][T22403] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 3036.551192][T25455] usb 5-1: USB disconnect, device number 36 [ 3036.675421][T22403] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3036.675443][T22403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3036.675454][T22403] usb 3-1: Product: syz [ 3036.675462][T22403] usb 3-1: Manufacturer: syz [ 3036.675471][T22403] usb 3-1: SerialNumber: syz [ 3036.931819][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3036.932974][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.943872][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6634'. [ 3037.675339][T25455] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 3037.846590][T25455] usb 5-1: Using ep0 maxpacket: 16 [ 3037.849237][T25455] usb 5-1: config 0 has no interfaces? [ 3037.852456][T25455] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3037.852478][T25455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3037.852508][T25455] usb 5-1: Product: syz [ 3037.852521][T25455] usb 5-1: Manufacturer: syz [ 3037.852532][T25455] usb 5-1: SerialNumber: syz [ 3037.970988][T25455] usb 5-1: config 0 descriptor?? [ 3038.326718][ T5711] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6639'. [ 3039.256391][T22403] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 3039.256459][T22403] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 3039.256481][T22403] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3039.331047][T22403] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 3039.435940][T22403] usb 3-1: USB disconnect, device number 58 [ 3040.234637][ T3551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3040.293325][ T3551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3040.297615][ T3551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3040.337706][ T3551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3040.339092][ T3551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3040.419642][T22403] usb 5-1: USB disconnect, device number 37 [ 3041.195179][ T37] audit: type=1326 audit(1761330960.629:10698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5726 comm="syz.3.6644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f849ab0efc9 code=0x0 [ 3042.217990][ T3646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3042.415632][T25246] Bluetooth: hci4: command tx timeout [ 3042.586640][ T5740] binder: 5739:5740 ioctl c0306201 0 returned -14 [ 3043.254658][ T3646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3043.924364][ T3646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3044.495674][T25246] Bluetooth: hci4: command tx timeout [ 3044.604917][ T3646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3044.781174][ T5779] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3045.940003][ T5722] chnl_net:caif_netlink_parms(): no params data found [ 3046.055369][T32710] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 3046.252105][T32710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 3046.252159][T32710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 3046.252187][T32710] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 3046.252231][T32710] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 3046.252254][T32710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3046.269960][T32710] usb 4-1: config 0 descriptor?? [ 3046.585800][T25246] Bluetooth: hci4: command tx timeout [ 3046.721482][T32710] a4tech 0003:09DA:001A.003C: item fetching failed at offset 5/7 [ 3046.722434][T32710] a4tech 0003:09DA:001A.003C: parse failed [ 3046.722559][T32710] a4tech 0003:09DA:001A.003C: probe with driver a4tech failed with error -22 [ 3047.056639][ T3646] bridge_slave_1: left allmulticast mode [ 3047.056673][ T3646] bridge_slave_1: left promiscuous mode [ 3047.058629][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 3047.149975][ T3646] : left allmulticast mode [ 3047.149999][ T3646] : left promiscuous mode [ 3047.150165][ T3646] bridge0: port 1() entered disabled state [ 3048.667312][T25246] Bluetooth: hci4: command tx timeout [ 3049.164237][T22403] usb 4-1: USB disconnect, device number 27 [ 3049.189050][ T5812] binder: 5810:5812 ioctl c0306201 0 returned -14 [ 3049.190256][ T5812] binder: BINDER_SET_CONTEXT_MGR already set [ 3049.190266][ T5812] binder: 5810:5812 ioctl 4018620d 200000000040 returned -16 [ 3049.209730][ T5812] syz.1.6664 (5812): drop_caches: 2 [ 3049.342114][ C0] vkms_vblank_simulate: vblank timer overrun [ 3049.434875][ C0] vkms_vblank_simulate: vblank timer overrun [ 3049.555865][ C0] vkms_vblank_simulate: vblank timer overrun [ 3049.645937][ C0] vkms_vblank_simulate: vblank timer overrun [ 3049.750831][ C0] vkms_vblank_simulate: vblank timer overrun [ 3049.865417][T26229] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 3050.085395][ C0] vkms_vblank_simulate: vblank timer overrun [ 3050.103526][T26229] usb 4-1: Using ep0 maxpacket: 16 [ 3050.112029][T26229] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3050.112063][T26229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3050.149323][T26229] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3050.149344][T26229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3050.149356][T26229] usb 4-1: Product: syz [ 3050.149365][T26229] usb 4-1: Manufacturer: syz [ 3050.149373][T26229] usb 4-1: SerialNumber: syz [ 3050.194121][T26229] usb 4-1: config 0 descriptor?? [ 3050.203384][T26229] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3050.203406][T26229] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 3050.351113][ C0] vkms_vblank_simulate: vblank timer overrun [ 3050.566038][ C0] vkms_vblank_simulate: vblank timer overrun [ 3050.838791][T26229] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 3050.839764][T26229] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 3050.855386][ T1294] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 3050.981927][ C0] vkms_vblank_simulate: vblank timer overrun [ 3051.155796][ C0] vkms_vblank_simulate: vblank timer overrun [ 3051.252462][T26229] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 3051.252488][T26229] em28xx 4-1:0.0: No AC97 audio processor [ 3051.404383][ C0] vkms_vblank_simulate: vblank timer overrun [ 3051.707109][ C0] vkms_vblank_simulate: vblank timer overrun [ 3051.791152][ C0] vkms_vblank_simulate: vblank timer overrun [ 3051.863840][ C0] vkms_vblank_simulate: vblank timer overrun [ 3051.937920][ C0] vkms_vblank_simulate: vblank timer overrun [ 3052.038001][ C0] vkms_vblank_simulate: vblank timer overrun [ 3052.154032][ C0] vkms_vblank_simulate: vblank timer overrun [ 3052.302852][ C0] vkms_vblank_simulate: vblank timer overrun [ 3052.573685][T32710] usb 4-1: USB disconnect, device number 28 [ 3052.582177][T32710] em28xx 4-1:0.0: Disconnecting em28xx [ 3052.593010][T32710] em28xx 4-1:0.0: Freeing device [ 3052.673400][ C0] vkms_vblank_simulate: vblank timer overrun [ 3052.782706][ C0] vkms_vblank_simulate: vblank timer overrun [ 3052.862456][ C0] vkms_vblank_simulate: vblank timer overrun [ 3052.917728][ C0] vkms_vblank_simulate: vblank timer overrun [ 3052.984784][ C0] vkms_vblank_simulate: vblank timer overrun [ 3053.046901][ T3646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3053.137329][ T3646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3053.163265][ T3646] bond0 (unregistering): Released all slaves [ 3053.371219][ C0] vkms_vblank_simulate: vblank timer overrun [ 3053.510123][ C0] vkms_vblank_simulate: vblank timer overrun [ 3053.668689][ C0] vkms_vblank_simulate: vblank timer overrun [ 3053.712483][ T5861] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6673'. [ 3053.739035][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 3053.740859][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 3053.741205][ T5722] bridge_slave_0: entered allmulticast mode [ 3053.770227][ T5722] bridge_slave_0: entered promiscuous mode [ 3053.790475][ C0] vkms_vblank_simulate: vblank timer overrun [ 3053.809201][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 3053.810940][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 3053.811311][ T5722] bridge_slave_1: entered allmulticast mode [ 3053.842970][ T5722] bridge_slave_1: entered promiscuous mode [ 3053.915344][T22403] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 3054.068718][T22403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3054.068757][T22403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3054.068781][T22403] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3054.068829][T22403] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3054.068852][T22403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3054.085639][T22403] usb 5-1: config 0 descriptor?? [ 3054.535910][T22403] usbhid 5-1:0.0: can't add hid device: -71 [ 3054.536058][T22403] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3054.584499][T22403] usb 5-1: USB disconnect, device number 38 [ 3054.861169][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3054.881497][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3055.475329][T26229] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 3055.655325][T26229] usb 4-1: Using ep0 maxpacket: 16 [ 3056.106427][ C0] vkms_vblank_simulate: vblank timer overrun [ 3056.209623][ T5722] team0: Port device team_slave_0 added [ 3056.295318][ T1294] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 3056.317450][ T5722] team0: Port device team_slave_1 added [ 3056.445493][ T1294] usb 5-1: Using ep0 maxpacket: 16 [ 3056.447820][ T1294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3056.447855][ T1294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3056.447877][ T1294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3056.447916][ T1294] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3056.447930][ T1294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3056.469198][ T1294] usb 5-1: config 0 descriptor?? [ 3057.251334][ T1294] usbhid 5-1:0.0: can't add hid device: -71 [ 3057.251475][ T1294] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3057.270843][ T1294] usb 5-1: USB disconnect, device number 39 [ 3058.251888][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3058.252886][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3058.252904][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3058.264453][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3058.264471][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3058.264497][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3058.686249][ T5913] syz.4.6681 (5913): drop_caches: 2 [ 3059.983550][ T5722] hsr_slave_0: entered promiscuous mode [ 3059.997462][ T5722] hsr_slave_1: entered promiscuous mode [ 3060.000658][ T5722] debugfs: 'hsr0' already exists in 'hsr' [ 3060.000677][ T5722] Cannot create hsr debugfs directory [ 3060.300869][ C0] vkms_vblank_simulate: vblank timer overrun [ 3060.735528][T26229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3060.735625][T26229] usb 4-1: no configurations [ 3060.735639][T26229] usb 4-1: can't read configurations, error -22 [ 3060.875458][T26229] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 3061.004722][ T5919] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6683'. [ 3061.014931][T26229] usb 4-1: device descriptor read/64, error -32 [ 3061.115697][T26229] usb usb4-port1: attempt power cycle [ 3064.338687][T22403] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3064.491002][T22403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3064.491040][T22403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3064.491064][T22403] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3064.491110][T22403] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 3064.491135][T22403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3064.508311][T22403] usb 4-1: config 0 descriptor?? [ 3064.847433][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3064.850153][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3064.865428][ T3646] hsr_slave_0: left promiscuous mode [ 3064.903177][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3064.903863][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3064.954774][ T3646] hsr_slave_1: left promiscuous mode [ 3065.090071][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3065.090104][ T3646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3065.144269][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3065.144293][ T3646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3065.358679][T22403] usbhid 4-1:0.0: can't add hid device: -71 [ 3065.358766][T22403] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3065.376387][T22403] usb 4-1: USB disconnect, device number 32 [ 3065.591382][ T3646] veth1_macvtap: left promiscuous mode [ 3065.591514][ T3646] veth0_macvtap: left promiscuous mode [ 3065.591826][ T3646] veth1_vlan: left promiscuous mode [ 3065.592065][ T3646] veth0_vlan: left promiscuous mode [ 3066.740708][ T5978] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3068.014953][ C0] vkms_vblank_simulate: vblank timer overrun [ 3069.125798][ C0] vkms_vblank_simulate: vblank timer overrun [ 3069.307341][ C0] vkms_vblank_simulate: vblank timer overrun [ 3069.441082][ C0] vkms_vblank_simulate: vblank timer overrun [ 3069.739580][T32710] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 3069.912978][T32710] usb 5-1: Using ep0 maxpacket: 16 [ 3069.960090][ C0] vkms_vblank_simulate: vblank timer overrun [ 3069.975457][T32710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3069.975493][T32710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3069.975517][T32710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3069.975555][T32710] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3069.975569][T32710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.980322][T32710] usb 5-1: config 0 descriptor?? [ 3070.245896][ C0] vkms_vblank_simulate: vblank timer overrun [ 3070.331127][ C0] vkms_vblank_simulate: vblank timer overrun [ 3070.417210][ C0] vkms_vblank_simulate: vblank timer overrun [ 3070.461295][T32710] usbhid 5-1:0.0: can't add hid device: -71 [ 3070.461375][T32710] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3070.498513][T32710] usb 5-1: USB disconnect, device number 40 [ 3070.530721][ C0] vkms_vblank_simulate: vblank timer overrun [ 3070.698002][ C0] vkms_vblank_simulate: vblank timer overrun [ 3070.759928][ C0] vkms_vblank_simulate: vblank timer overrun [ 3070.888336][ C0] vkms_vblank_simulate: vblank timer overrun [ 3070.942919][ C0] vkms_vblank_simulate: vblank timer overrun [ 3071.018388][ C0] vkms_vblank_simulate: vblank timer overrun [ 3071.089065][ C0] vkms_vblank_simulate: vblank timer overrun [ 3071.183696][ C0] vkms_vblank_simulate: vblank timer overrun [ 3071.237834][ C0] vkms_vblank_simulate: vblank timer overrun [ 3071.877921][ T3646] team0 (unregistering): Port device team_slave_1 removed [ 3072.285825][ T3646] team0 (unregistering): Port device team_slave_0 removed [ 3076.698726][ T6025] fuse: Bad value for 'rootmode' [ 3080.624058][ T5722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3080.767230][ T5722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3080.875266][ T5722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3081.036628][ T5722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3081.755311][T25455] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 3081.757768][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3081.813076][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 3081.849128][T24873] bridge0: port 1(bridge_slave_0) entered blocking state [ 3081.867456][T24873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3081.910971][T25455] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 3081.911004][T25455] usb 5-1: config 0 has no interface number 0 [ 3081.911082][T25455] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3081.911106][T25455] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3081.911134][T25455] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3081.911160][T25455] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3081.911193][T25455] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3081.911218][T25455] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3081.911265][T25455] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3081.911289][T25455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3081.942789][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 3081.942942][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3082.047914][T25455] usb 5-1: config 0 descriptor?? [ 3082.049513][ T6087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3082.049735][ T6087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3082.115632][T25455] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3082.182837][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.182993][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.220287][ T5722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3082.220314][ T5722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3082.687810][T22403] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 3082.877213][T22403] usb 4-1: Using ep0 maxpacket: 8 [ 3082.881916][T22403] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 3082.881951][T22403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3082.881974][T22403] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 3082.881996][T22403] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3082.890980][T22403] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3082.891020][T22403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3082.891041][T22403] usb 4-1: Product: syz [ 3082.891056][T22403] usb 4-1: Manufacturer: syz [ 3082.891071][T22403] usb 4-1: SerialNumber: syz [ 3082.901474][ T6102] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3082.956238][ T1294] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 3082.967555][T22403] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 3082.969262][T22403] usbtest 4-1:1.0: Linux user mode ISO test driver [ 3082.969279][T22403] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 3083.095401][ T1294] usb 3-1: device descriptor read/64, error -71 [ 3083.325401][T22403] usb 5-1: USB disconnect, device number 41 [ 3083.347546][ T1294] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 3083.407623][T22403] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 3083.475584][ T1294] usb 3-1: device descriptor read/64, error -71 [ 3083.586038][ T1294] usb usb3-port1: attempt power cycle [ 3083.929920][ T1294] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 3083.958768][ T1294] usb 3-1: device descriptor read/8, error -71 [ 3084.185683][T25512] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 3084.197515][ T1294] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 3084.224269][ T1294] usb 3-1: device descriptor read/8, error -71 [ 3084.266454][ T6099] Bluetooth: hci3: command 0x0406 tx timeout [ 3084.325779][ T1294] usb usb3-port1: unable to enumerate USB device [ 3084.338639][T25512] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 3084.338682][T25512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 3084.338702][T25512] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 3084.338734][T25512] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 3084.338751][T25512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3084.396291][T25512] usb 2-1: config 0 descriptor?? [ 3084.443732][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3084.535883][ T5722] veth0_vlan: entered promiscuous mode [ 3084.562617][ T5722] veth1_vlan: entered promiscuous mode [ 3084.844233][T25512] a4tech 0003:09DA:001A.003D: item fetching failed at offset 5/7 [ 3084.850567][T25512] a4tech 0003:09DA:001A.003D: parse failed [ 3084.850681][T25512] a4tech 0003:09DA:001A.003D: probe with driver a4tech failed with error -22 [ 3084.923298][ T5722] veth0_macvtap: entered promiscuous mode [ 3084.988826][ T5722] veth1_macvtap: entered promiscuous mode [ 3085.115826][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3085.212319][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3085.300809][T22403] usb 4-1: USB disconnect, device number 33 [ 3085.308692][T17939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3085.333855][T17938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3085.349574][T17938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3085.429020][T17938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3086.526041][ T1376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3086.526066][ T1376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3087.193573][T23339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3087.193597][T23339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3087.245264][ T1294] usb 2-1: USB disconnect, device number 65 [ 3088.565205][ T37] audit: type=1326 audit(1761331008.009:10699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.566427][ T37] audit: type=1326 audit(1761331008.009:10700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.567473][ T37] audit: type=1326 audit(1761331008.009:10701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.567527][ T37] audit: type=1326 audit(1761331008.009:10702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.567577][ T37] audit: type=1326 audit(1761331008.009:10703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.567623][ T37] audit: type=1326 audit(1761331008.009:10704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.567672][ T37] audit: type=1326 audit(1761331008.009:10705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.567720][ T37] audit: type=1326 audit(1761331008.009:10706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.567774][ T37] audit: type=1326 audit(1761331008.019:10707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.567820][ T37] audit: type=1326 audit(1761331008.019:10708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6162 comm="syz.2.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7144d4efc9 code=0x7ffc0000 [ 3088.993997][ T6170] binder: BINDER_SET_CONTEXT_MGR already set [ 3088.994008][ T6170] binder: 6168:6170 ioctl 4018620d 200000000040 returned -16 [ 3089.394889][ T6170] syz.1.6734 (6170): drop_caches: 2 [ 3089.807619][ T6179] gretap0: entered promiscuous mode [ 3089.807724][ T6179] vlan2: entered promiscuous mode [ 3090.005437][ C1] vkms_vblank_simulate: vblank timer overrun [ 3090.967503][ T6199] binder: BINDER_SET_CONTEXT_MGR already set [ 3090.967516][ T6199] binder: 6196:6199 ioctl 4018620d 2000000001c0 returned -16 [ 3091.133667][ T6201] binder: 6196:6201 ioctl c0306201 0 returned -14 [ 3092.512984][ T6216] trusted_key: encrypted_key: key user:syz not found [ 3094.797491][T25512] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 3094.952778][T25512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3094.952797][T25512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3094.952808][T25512] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3094.952839][T25512] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 3094.952850][T25512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3095.023368][T25512] usb 4-1: config 0 descriptor?? [ 3095.259694][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3095.260387][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3095.281171][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3095.290479][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3095.882677][T25512] usbhid 4-1:0.0: can't add hid device: -71 [ 3095.882822][T25512] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3096.000590][T25512] usb 4-1: USB disconnect, device number 34 [ 3097.705407][T22403] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 3097.865537][T22403] usb 5-1: device descriptor read/64, error -71 [ 3097.957550][ T6265] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3098.113664][T22403] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 3098.305348][T22403] usb 5-1: device descriptor read/64, error -71 [ 3098.453430][T22403] usb usb5-port1: attempt power cycle [ 3098.865533][T22403] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 3098.886152][T22403] usb 5-1: device descriptor read/8, error -71 [ 3099.125395][T22403] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 3099.149319][T22403] usb 5-1: device descriptor read/8, error -71 [ 3099.273714][T22403] usb usb5-port1: unable to enumerate USB device [ 3101.870934][ T6287] ksmbd: Unknown IPC event: 4, ignore. [ 3102.665528][T22403] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 3102.848153][T22403] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 3102.848188][T22403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3102.854875][T22403] usb 3-1: config 0 descriptor?? [ 3103.120247][T22403] usbhid 3-1:0.0: can't add hid device: -71 [ 3103.120339][T22403] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3103.146216][T22403] usb 3-1: USB disconnect, device number 64 [ 3104.073919][ T6308] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 3104.073990][ T6308] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 3104.074028][ T6308] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 3106.884756][ T6334] binder: 6322:6334 ioctl c0306201 0 returned -14 [ 3106.925411][ T6334] syz.4.6768 (6334): drop_caches: 2 [ 3107.395293][ T1294] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 3107.592947][ T1294] usb 4-1: Using ep0 maxpacket: 16 [ 3107.661684][T22403] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 3107.830698][T22403] usb 2-1: Using ep0 maxpacket: 8 [ 3107.893404][T22403] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3107.893561][T22403] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3107.923567][T22403] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3107.923594][T22403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3107.923610][T22403] usb 2-1: Product: syz [ 3107.923623][T22403] usb 2-1: Manufacturer: syz [ 3107.923691][T22403] usb 2-1: SerialNumber: syz [ 3107.996185][T22403] usb 2-1: bad CDC descriptors [ 3108.003698][T22403] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 3108.003883][T22403] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 3108.197811][T22403] usb 2-1: USB disconnect, device number 66 [ 3108.475754][T25455] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3108.725242][T25455] usb 3-1: Using ep0 maxpacket: 16 [ 3110.245348][T22403] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 3110.418669][T22403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3110.418752][T22403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3110.418776][T22403] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3110.418822][T22403] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 3110.418845][T22403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3110.518301][T22403] usb 2-1: config 0 descriptor?? [ 3110.826060][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3110.831601][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3110.849917][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3110.851146][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3111.562197][T22403] usbhid 2-1:0.0: can't add hid device: -71 [ 3111.562403][T22403] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3111.600475][T22403] usb 2-1: USB disconnect, device number 67 [ 3112.655739][ T1294] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3112.655810][ T1294] usb 4-1: no configurations [ 3112.655823][ T1294] usb 4-1: can't read configurations, error -22 [ 3112.805235][ T1294] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3112.955338][ T1294] usb 4-1: device descriptor read/64, error -32 [ 3113.065815][ T1294] usb usb4-port1: attempt power cycle [ 3113.445384][ T1294] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3113.505640][ T1294] usb 4-1: device descriptor read/8, error -32 [ 3113.745355][ T1294] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3113.765643][ T1294] usb 4-1: device descriptor read/8, error -32 [ 3113.785551][T25455] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3113.785603][T25455] usb 3-1: no configurations [ 3113.785610][T25455] usb 3-1: can't read configurations, error -22 [ 3113.897629][ T1294] usb usb4-port1: unable to enumerate USB device [ 3113.915477][T25455] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 3114.045918][T25455] usb 3-1: device descriptor read/64, error -32 [ 3114.156972][T25455] usb usb3-port1: attempt power cycle [ 3114.525289][T25455] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 3114.565487][T25455] usb 3-1: device descriptor read/8, error -32 [ 3114.805294][T25455] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3114.826559][T25455] usb 3-1: device descriptor read/8, error -32 [ 3114.909545][ T6361] binder: 6360:6361 ioctl c0306201 0 returned -14 [ 3114.912912][ T6361] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6780'. [ 3114.935737][T25455] usb usb3-port1: unable to enumerate USB device [ 3115.210407][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 3115.210430][ T37] audit: type=1326 audit(1761331034.649:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3115.210486][ T37] audit: type=1326 audit(1761331034.659:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3115.210533][ T37] audit: type=1326 audit(1761331034.659:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3115.210578][ T37] audit: type=1326 audit(1761331034.659:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3115.210624][ T37] audit: type=1326 audit(1761331034.659:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3115.210669][ T37] audit: type=1326 audit(1761331034.659:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3115.210722][ T37] audit: type=1326 audit(1761331034.659:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3115.210770][ T37] audit: type=1326 audit(1761331034.659:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3115.210818][ T37] audit: type=1326 audit(1761331034.659:10747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3115.210867][ T37] audit: type=1326 audit(1761331034.659:10748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.4.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3116.135302][ T1294] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 3116.330317][ T1294] usb 2-1: config 0 has no interfaces? [ 3116.344265][ T1294] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3116.344298][ T1294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3116.344320][ T1294] usb 2-1: Product: syz [ 3116.344335][ T1294] usb 2-1: Manufacturer: syz [ 3116.344350][ T1294] usb 2-1: SerialNumber: syz [ 3116.387768][ T1294] usb 2-1: config 0 descriptor?? [ 3116.440330][T22403] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 3116.608068][T22403] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3116.608102][T22403] usb 3-1: config 0 has no interface number 0 [ 3116.608156][T22403] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3116.608181][T22403] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3116.608217][T22403] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3116.608245][T22403] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3116.608272][T22403] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3116.608299][T22403] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3116.608348][T22403] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3116.608373][T22403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.731423][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3116.732116][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3116.760191][T22403] usb 3-1: config 0 descriptor?? [ 3116.761676][ T6386] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3116.761979][ T6386] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3116.824026][T22403] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3116.978599][ T6380] team_slave_0: entered promiscuous mode [ 3116.978640][ T6380] team_slave_1: entered promiscuous mode [ 3116.979161][ T6380] vlan2: entered promiscuous mode [ 3116.979172][ T6380] team0: entered promiscuous mode [ 3117.059643][T22403] usb 3-1: USB disconnect, device number 69 [ 3117.059734][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 3117.063531][T22403] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 3117.876293][ T1294] usb 2-1: USB disconnect, device number 68 [ 3118.698987][ T6404] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 3118.699041][ T6404] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 3118.699061][ T6404] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 3120.545299][ T1581] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3120.758208][ T1581] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 3120.758266][ T1581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 3120.758295][ T1581] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 3120.758345][ T1581] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 3120.758369][ T1581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3120.766585][ T1581] usb 4-1: config 0 descriptor?? [ 3121.194314][ T1581] a4tech 0003:09DA:001A.003E: item fetching failed at offset 5/7 [ 3121.199722][ T1581] a4tech 0003:09DA:001A.003E: parse failed [ 3121.199843][ T1581] a4tech 0003:09DA:001A.003E: probe with driver a4tech failed with error -22 [ 3121.340273][ T6429] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 3121.340319][ T6429] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 3121.340341][ T6429] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 3121.771241][ T1581] usb 4-1: USB disconnect, device number 39 [ 3121.855511][T25455] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3122.195188][T25455] usb 5-1: Using ep0 maxpacket: 16 [ 3123.070677][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 3123.070734][ T37] audit: type=1326 audit(1761331042.519:10780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6438 comm="syz.0.6809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb90b6efc9 code=0x0 [ 3123.482585][T22403] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3123.711466][T22403] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3123.711502][T22403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3123.711524][T22403] usb 1-1: Product: syz [ 3123.711540][T22403] usb 1-1: Manufacturer: syz [ 3123.711554][T22403] usb 1-1: SerialNumber: syz [ 3124.379327][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3124.409128][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3124.524446][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6809'. [ 3124.524477][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6809'. [ 3125.355761][ T6439] team0: entered promiscuous mode [ 3125.355784][ T6439] team_slave_0: entered promiscuous mode [ 3125.360831][ T6439] team_slave_1: entered promiscuous mode [ 3125.400540][ T6439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3125.479259][T22403] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 3125.479326][T22403] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 3125.479346][T22403] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3125.530891][T22403] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 3125.535625][T32710] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 3125.561642][T22403] usb 1-1: USB disconnect, device number 59 [ 3125.766322][T32710] usb 4-1: device descriptor read/64, error -71 [ 3126.015513][T32710] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3126.356441][T32710] usb 4-1: device descriptor read/64, error -71 [ 3126.493349][T32710] usb usb4-port1: attempt power cycle [ 3126.709379][ T6453] trusted_key: encrypted_key: key user:syz not found [ 3127.227867][T32710] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 3127.269887][T32710] usb 4-1: device descriptor read/8, error -71 [ 3127.314631][T25455] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3127.314725][T25455] usb 5-1: no configurations [ 3127.314738][T25455] usb 5-1: can't read configurations, error -22 [ 3127.485294][T25455] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3127.618490][T25455] usb 5-1: device descriptor read/64, error -32 [ 3127.729439][T25455] usb usb5-port1: attempt power cycle [ 3128.105294][T25455] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3128.135582][T25455] usb 5-1: device descriptor read/8, error -71 [ 3128.675423][ T6470] binder: BINDER_SET_CONTEXT_MGR already set [ 3128.675440][ T6470] binder: 6462:6470 ioctl 4018620d 200000000040 returned -16 [ 3128.681600][ T6470] syz.3.6817 (6470): drop_caches: 2 [ 3130.475665][ T6489] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6824'. [ 3130.475694][ T6489] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3132.400356][ T6496] ksmbd: Unknown IPC event: 4, ignore. [ 3132.955354][T32710] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3133.178511][T32710] usb 4-1: config 0 has no interfaces? [ 3133.181760][T32710] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3133.181790][T32710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3133.181812][T32710] usb 4-1: Product: syz [ 3133.181827][T32710] usb 4-1: Manufacturer: syz [ 3133.181843][T32710] usb 4-1: SerialNumber: syz [ 3133.210274][T32710] usb 4-1: config 0 descriptor?? [ 3133.472528][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3133.472901][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3133.608344][ T6499] vlan2: entered promiscuous mode [ 3134.209804][T32062] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 3134.267975][ T6514] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 3134.268023][ T6514] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 3134.268044][ T6514] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 3134.385336][T32062] usb 2-1: Using ep0 maxpacket: 8 [ 3134.391182][T32062] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 3134.391216][T32062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3134.391238][T32062] usb 2-1: Product: syz [ 3134.391253][T32062] usb 2-1: Manufacturer: syz [ 3134.391268][T32062] usb 2-1: SerialNumber: syz [ 3134.451939][T32062] usb 2-1: config 0 descriptor?? [ 3134.461474][T32062] gspca_main: se401-2.14.0 probing 047d:5003 [ 3134.688721][T22403] usb 4-1: USB disconnect, device number 44 [ 3134.938051][T32062] gspca_se401: Wrong descriptor type [ 3135.158444][T32062] usb 2-1: USB disconnect, device number 69 [ 3135.735297][T32062] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3135.889318][T32062] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 3135.889352][T32062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3135.921209][T32062] usb 4-1: config 0 descriptor?? [ 3136.139167][T32062] usbhid 4-1:0.0: can't add hid device: -71 [ 3136.139323][T32062] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3136.172491][T32062] usb 4-1: USB disconnect, device number 45 [ 3136.197756][T25359] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 3136.378227][T25359] usb 2-1: device descriptor read/64, error -71 [ 3136.780703][T25359] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 3137.087611][T25359] usb 2-1: device descriptor read/64, error -71 [ 3137.205874][T25359] usb usb2-port1: attempt power cycle [ 3137.355206][T32710] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 3137.530044][T32710] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3137.530078][T32710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.530100][T32710] usb 4-1: Product: syz [ 3137.530138][T32710] usb 4-1: Manufacturer: syz [ 3137.530153][T32710] usb 4-1: SerialNumber: syz [ 3137.533584][T32710] usb 4-1: config 0 descriptor?? [ 3137.575494][T25359] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 3137.605628][T25359] usb 2-1: device descriptor read/8, error -71 [ 3137.823851][T32710] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3137.857448][T25359] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 3137.876387][T25359] usb 2-1: device descriptor read/8, error -71 [ 3138.038505][T25359] usb usb2-port1: unable to enumerate USB device [ 3139.249904][T32710] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3139.255743][T32710] usb 4-1: USB disconnect, device number 46 [ 3140.163223][ T6574] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 3140.163255][ T6574] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3140.197420][ T6574] vhci_hcd vhci_hcd.0: Device attached [ 3140.268157][ T6575] vhci_hcd: cannot find the pending unlink 8 [ 3140.515722][T32710] usb 40-1: SetAddress Request (2) to port 0 [ 3140.515825][T32710] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 3143.258132][ T6595] overlayfs: unescaped trailing colons in lowerdir mount option. [ 3143.631815][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.631903][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3144.075309][T26229] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 3144.235775][ T6575] vhci_hcd: connection reset by peer [ 3144.266166][T26229] usb 2-1: device descriptor read/64, error -71 [ 3144.305205][T24876] vhci_hcd: stop threads [ 3144.307704][T24876] vhci_hcd: release socket [ 3144.308283][T24876] vhci_hcd: disconnect device [ 3144.525300][T26229] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 3144.655416][T26229] usb 2-1: device descriptor read/64, error -71 [ 3144.781443][T26229] usb usb2-port1: attempt power cycle [ 3145.145261][T26229] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 3145.169033][T26229] usb 2-1: device descriptor read/8, error -71 [ 3145.415245][T26229] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 3145.477017][ T6629] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6869'. [ 3145.477045][ T6629] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 3145.493236][ T1294] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3145.523335][T26229] usb 2-1: device descriptor read/8, error -71 [ 3145.615330][T32710] usb 40-1: device descriptor read/8, error -110 [ 3145.630884][T26229] usb usb2-port1: unable to enumerate USB device [ 3145.690786][ T1294] usb 5-1: config 0 has no interfaces? [ 3145.695000][ T1294] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3145.695033][ T1294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3145.695331][ T1294] usb 5-1: Product: syz [ 3145.695348][ T1294] usb 5-1: Manufacturer: syz [ 3145.695361][ T1294] usb 5-1: SerialNumber: syz [ 3145.718469][ T1294] usb 5-1: config 0 descriptor?? [ 3145.927464][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3145.928162][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3145.974006][T22403] usb 5-1: USB disconnect, device number 50 [ 3146.002668][ T6602] udevd[6602]: setting owner of /dev/bus/usb/005/050 to uid=0, gid=0 failed: No such file or directory [ 3146.137672][T32710] usb usb40-port1: attempt power cycle [ 3146.655487][T26229] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 3146.754666][T32710] usb usb40-port1: unable to enumerate USB device [ 3146.822126][T26229] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3146.822160][T26229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3146.822181][T26229] usb 4-1: Product: syz [ 3146.822197][T26229] usb 4-1: Manufacturer: syz [ 3146.822211][T26229] usb 4-1: SerialNumber: syz [ 3146.870228][T26229] usb 4-1: config 0 descriptor?? [ 3147.188425][T26229] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3148.869555][T26229] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3148.889998][T26229] usb 4-1: USB disconnect, device number 47 [ 3150.665342][T32062] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 3151.046771][T32062] usb 2-1: Using ep0 maxpacket: 16 [ 3151.065412][T32062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3151.065434][T32062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3151.065448][T32062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3151.065476][T32062] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3151.065489][T32062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3151.069896][T32062] usb 2-1: config 0 descriptor?? [ 3151.263595][ T6663] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3151.785244][T26229] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3151.950308][T26229] usb 1-1: config 0 has no interfaces? [ 3151.954239][T26229] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3151.954260][T26229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3151.954280][T26229] usb 1-1: Product: syz [ 3151.954295][T26229] usb 1-1: Manufacturer: syz [ 3151.954310][T26229] usb 1-1: SerialNumber: syz [ 3152.004593][T26229] usb 1-1: config 0 descriptor?? [ 3152.207657][T32062] usbhid 2-1:0.0: can't add hid device: -71 [ 3152.207733][T32062] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3152.263074][T32062] usb 2-1: USB disconnect, device number 78 [ 3152.299458][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3152.306173][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3152.395212][T22403] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3152.464492][ T6674] 8021q: VLANs not supported on vcan0 [ 3152.514307][T25512] usb 1-1: USB disconnect, device number 60 [ 3152.577072][T22403] usb 3-1: Using ep0 maxpacket: 16 [ 3152.579013][T22403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3152.579037][T22403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3152.579055][T22403] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3152.579083][T22403] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3152.579093][T22403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3152.590365][T22403] usb 3-1: config 0 descriptor?? [ 3153.148256][T22403] usbhid 3-1:0.0: can't add hid device: -71 [ 3153.148345][T22403] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3153.197671][T22403] usb 3-1: USB disconnect, device number 70 [ 3154.690388][ T6704] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 3154.690435][ T6704] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 3154.690455][ T6704] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 3155.215285][T32710] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3155.385254][T32710] usb 3-1: Using ep0 maxpacket: 16 [ 3156.006256][T26229] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3156.189193][T26229] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 3156.189226][T26229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3156.227838][T26229] usb 5-1: config 0 descriptor?? [ 3156.456234][T26229] usbhid 5-1:0.0: can't add hid device: -71 [ 3156.456368][T26229] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3156.469843][T26229] usb 5-1: USB disconnect, device number 51 [ 3157.438442][ T6726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6895'. [ 3157.745250][T25359] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3157.919400][T25359] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3157.919418][T25359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3157.919427][T25359] usb 5-1: Product: syz [ 3157.919435][T25359] usb 5-1: Manufacturer: syz [ 3157.919443][T25359] usb 5-1: SerialNumber: syz [ 3158.355267][T25359] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 3158.355771][T25359] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3158.364953][T25359] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3158.462249][T25359] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 3158.811221][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3158.813867][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3160.172705][T32710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3160.172757][T32710] usb 3-1: no configurations [ 3160.172764][T32710] usb 3-1: can't read configurations, error -22 [ 3160.411749][T22403] usb 5-1: USB disconnect, device number 52 [ 3160.832589][ T6747] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3161.105294][T22403] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 3161.643597][T22403] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 3161.643617][T22403] usb 2-1: config 0 has no interface number 0 [ 3161.643646][T22403] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3161.643660][T22403] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3161.643675][T22403] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3161.643689][T22403] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3161.643704][T22403] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3161.643719][T22403] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3161.643744][T22403] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3161.643765][T22403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3161.683330][T22403] usb 2-1: config 0 descriptor?? [ 3161.686742][ T6749] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3161.686940][ T6749] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3161.809435][T22403] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3162.693587][T32710] usb 2-1: USB disconnect, device number 79 [ 3162.721165][T32710] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 3163.505256][T22403] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3163.658440][T22403] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 3163.658476][T22403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3163.670168][T22403] usb 5-1: config 0 descriptor?? [ 3163.897034][ T6774] fuse: Unknown parameter 'grou00000000000000000000' [ 3164.044925][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6908'. [ 3164.154316][T22403] usbhid 5-1:0.0: can't add hid device: -71 [ 3164.154470][T22403] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3164.175399][T22403] usb 5-1: USB disconnect, device number 53 [ 3164.975683][T25359] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 3165.158440][T25359] usb 3-1: Using ep0 maxpacket: 16 [ 3165.167735][T25359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3165.167768][T25359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3165.167788][T25359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3165.167830][T25359] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 3165.167852][T25359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3165.173525][T25359] usb 3-1: config 0 descriptor?? [ 3165.649947][T25359] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 3165.649979][T25359] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 3165.649996][T25359] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 3165.650011][T25359] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 3165.650026][T25359] shield 0003:0955:7214.003F: unknown main item tag 0x0 [ 3165.676218][T25359] input: HID 0955:7214 Haptics as /devices/virtual/input/input109 [ 3165.932032][ T6796] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3165.945399][ T6783] random: crng reseeded on system resumption [ 3165.967664][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ab8000: rx timeout, send abort [ 3166.206000][T25246] Bluetooth: hci4: command 0x0406 tx timeout [ 3166.339565][T25359] shield 0003:0955:7214.003F: Registered Thunderstrike controller [ 3166.340000][T25359] shield 0003:0955:7214.003F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 3166.467757][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ab8000: abort rx timeout. Force session deactivation [ 3166.503414][T32710] shield 0003:0955:7214.003F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 3166.503681][T32710] shield 0003:0955:7214.003F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 3166.504008][T32710] shield 0003:0955:7214.003F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 3166.504347][T32710] shield 0003:0955:7214.003F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 3166.604721][T25359] usb 3-1: USB disconnect, device number 73 [ 3167.595552][T25359] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3167.755325][T22403] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 3167.777560][T25359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3167.777579][T25359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3167.777590][T25359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3167.777611][T25359] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3167.777621][T25359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3167.780871][T25359] usb 3-1: config 0 descriptor?? [ 3167.920810][T22403] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3167.920844][T22403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.920864][T22403] usb 4-1: Product: syz [ 3167.920877][T22403] usb 4-1: Manufacturer: syz [ 3167.920889][T22403] usb 4-1: SerialNumber: syz [ 3167.960937][T22403] usb 4-1: config 0 descriptor?? [ 3168.496927][T25359] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 3168.496966][T25359] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 3168.496993][T25359] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 3168.497019][T25359] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 3168.497045][T25359] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 3168.502977][T22403] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3168.936518][ T1294] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 3169.007327][T25359] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3169.036943][T25359] usb 3-1: USB disconnect, device number 74 [ 3169.147700][ T1294] usb 2-1: config 0 has no interfaces? [ 3169.151413][ T1294] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3169.151434][ T1294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3169.151445][ T1294] usb 2-1: Product: syz [ 3169.151453][ T1294] usb 2-1: Manufacturer: syz [ 3169.151462][ T1294] usb 2-1: SerialNumber: syz [ 3169.364892][ T1294] usb 2-1: config 0 descriptor?? [ 3169.404286][ T6810] fido_id[6810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3169.710254][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3169.711032][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3169.833829][ T6808] bond_slave_0: entered promiscuous mode [ 3169.843563][ T6808] bond_slave_1: entered promiscuous mode [ 3169.866062][ T6808] vlan2: entered promiscuous mode [ 3169.866089][ T6808] bond0: entered promiscuous mode [ 3169.988710][T22403] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3169.998080][T22403] usb 4-1: USB disconnect, device number 48 [ 3170.222552][T22403] usb 2-1: USB disconnect, device number 80 [ 3170.915261][T32062] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3171.357358][T32062] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 3171.357393][T32062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3171.415418][T32062] usb 4-1: config 0 descriptor?? [ 3171.666329][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6931'. [ 3171.707021][T32062] usbhid 4-1:0.0: can't add hid device: -71 [ 3171.707158][T32062] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3171.731374][T32062] usb 4-1: USB disconnect, device number 49 [ 3172.925345][ T1294] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3173.075173][ T1294] usb 4-1: Using ep0 maxpacket: 8 [ 3173.077786][ T1294] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3173.077856][ T1294] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3173.081070][ T1294] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3173.081102][ T1294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3173.081123][ T1294] usb 4-1: Product: syz [ 3173.081140][ T1294] usb 4-1: Manufacturer: syz [ 3173.081155][ T1294] usb 4-1: SerialNumber: syz [ 3173.145352][T32062] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 3173.171671][ T1294] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 3173.171778][ T1294] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 3173.301241][T32062] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3173.301276][T32062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3173.301298][T32062] usb 2-1: Product: syz [ 3173.301314][T32062] usb 2-1: Manufacturer: syz [ 3173.301329][T32062] usb 2-1: SerialNumber: syz [ 3173.317579][T32062] usb 2-1: config 0 descriptor?? [ 3173.397653][T25359] usb 4-1: USB disconnect, device number 50 [ 3173.530683][T32062] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3173.827776][T25455] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3174.556757][ T6882] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6948'. [ 3174.556792][ T6882] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3175.088316][T32062] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3175.125788][T32062] usb 2-1: USB disconnect, device number 81 [ 3176.497117][ T6901] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 3176.497147][ T6901] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3176.497261][ T6901] vhci_hcd vhci_hcd.0: Device attached [ 3176.532518][ T6903] vhci_hcd: cannot find the pending unlink 8 [ 3176.775279][T26229] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3176.797449][ T6915] binder: 6906:6915 ioctl c0306201 0 returned -14 [ 3176.801157][ T6915] binder: BINDER_SET_CONTEXT_MGR already set [ 3176.801174][ T6915] binder: 6906:6915 ioctl 4018620d 200000000040 returned -16 [ 3176.865960][ T6915] syz.2.6957 (6915): drop_caches: 2 [ 3176.879669][T22403] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 3176.995340][T25359] usb 42-1: SetAddress Request (2) to port 0 [ 3176.995440][T25359] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 3177.025187][T26229] usb 4-1: Using ep0 maxpacket: 16 [ 3177.028138][T26229] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3177.028166][T26229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3177.031826][T26229] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3177.031854][T26229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3177.031874][T26229] usb 4-1: Product: syz [ 3177.031889][T26229] usb 4-1: Manufacturer: syz [ 3177.031903][T26229] usb 4-1: SerialNumber: syz [ 3177.061051][T22403] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3177.061083][T22403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3177.061102][T22403] usb 1-1: Product: syz [ 3177.061116][T22403] usb 1-1: Manufacturer: syz [ 3177.061129][T22403] usb 1-1: SerialNumber: syz [ 3177.154970][T26229] usb 4-1: config 0 descriptor?? [ 3177.181869][T22403] usb 1-1: config 0 descriptor?? [ 3177.183678][T26229] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3177.183711][T26229] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 3177.451977][T22403] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3177.786369][T26229] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 3177.787674][T26229] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 3177.990028][T26229] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 3177.990054][T26229] em28xx 4-1:0.0: No AC97 audio processor [ 3178.896516][T22403] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3178.925273][T22403] usb 1-1: USB disconnect, device number 62 [ 3179.708416][T26229] usb 4-1: USB disconnect, device number 51 [ 3179.711159][T26229] em28xx 4-1:0.0: Disconnecting em28xx [ 3179.734762][T26229] em28xx 4-1:0.0: Freeing device [ 3180.098590][T22403] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 3180.196359][ T6938] binder: 6930:6938 ioctl c0306201 0 returned -14 [ 3180.198020][ T6938] binder: BINDER_SET_CONTEXT_MGR already set [ 3180.198034][ T6938] binder: 6930:6938 ioctl 4018620d 200000000040 returned -16 [ 3180.211147][ T6938] syz.0.6965 (6938): drop_caches: 2 [ 3180.341526][T22403] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3180.341560][T22403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3180.341579][T22403] usb 3-1: Product: syz [ 3180.341594][T22403] usb 3-1: Manufacturer: syz [ 3180.341609][T22403] usb 3-1: SerialNumber: syz [ 3180.409038][T22403] usb 3-1: config 0 descriptor?? [ 3180.723800][T22403] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3180.835256][T26229] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3181.199664][T26229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3181.199695][T26229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3181.202201][T26229] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3181.202232][T26229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3181.202253][T26229] usb 5-1: SerialNumber: syz [ 3181.677248][T26229] usb 5-1: invalid UAC_HEADER (v1) [ 3181.792272][T26229] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3181.813051][T26229] usb 5-1: USB disconnect, device number 54 [ 3181.927584][ T6653] udevd[6653]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3182.148798][T22403] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3182.193476][T22403] usb 3-1: USB disconnect, device number 75 [ 3182.315370][ T1294] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 3182.507077][ T1294] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 3182.507105][ T1294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3182.525257][T26229] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3182.527851][ T1294] usb 2-1: config 0 descriptor?? [ 3182.695204][T26229] usb 4-1: Using ep0 maxpacket: 16 [ 3182.698015][T26229] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 3182.698044][T26229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3182.698065][T26229] usb 4-1: config 0 has no interface number 0 [ 3182.701668][T26229] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 3182.701709][T26229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3182.701731][T26229] usb 4-1: Product: syz [ 3182.701746][T26229] usb 4-1: Manufacturer: syz [ 3182.701762][T26229] usb 4-1: SerialNumber: syz [ 3182.780007][T26229] usb 4-1: config 0 descriptor?? [ 3182.798195][T26229] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 3182.800136][T26229] uvcvideo 4-1:0.105: No valid video chain found. [ 3182.803399][ T37] audit: type=1326 audit(1761331102.249:10781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3182.871952][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6971'. [ 3182.901525][ T1294] usbhid 2-1:0.0: can't add hid device: -71 [ 3182.901705][ T1294] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3182.925619][ T37] audit: type=1326 audit(1761331102.379:10782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3182.926222][ T37] audit: type=1326 audit(1761331102.379:10783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3182.985449][ T1294] usb 2-1: USB disconnect, device number 82 [ 3183.065687][T32062] usb 4-1: USB disconnect, device number 52 [ 3183.070529][ T37] audit: type=1326 audit(1761331102.519:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3183.071126][ T37] audit: type=1326 audit(1761331102.519:10785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3183.072933][ T37] audit: type=1326 audit(1761331102.519:10786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3183.073246][ T37] audit: type=1326 audit(1761331102.519:10787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3183.325539][ T37] audit: type=1326 audit(1761331102.769:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3183.507339][ T37] audit: type=1326 audit(1761331102.959:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3183.507716][ T37] audit: type=1326 audit(1761331102.959:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.4.6973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff219d6efc9 code=0x7ffc0000 [ 3184.285248][T25455] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 3184.541263][ T6977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 3184.541295][ T6977] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3184.541395][ T6977] vhci_hcd vhci_hcd.0: Device attached [ 3184.550118][T25455] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3184.550154][T25455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3184.550176][T25455] usb 2-1: Product: syz [ 3184.550192][T25455] usb 2-1: Manufacturer: syz [ 3184.550216][T25455] usb 2-1: SerialNumber: syz [ 3184.564802][ T6978] vhci_hcd: cannot find the pending unlink 8 [ 3184.820299][T32062] usb 40-1: SetAddress Request (6) to port 0 [ 3184.820404][T32062] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 3184.827427][ T6970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3184.828075][ T6970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3184.835296][ T1294] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3184.866617][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6975'. [ 3184.985239][ T1294] usb 1-1: Using ep0 maxpacket: 32 [ 3184.998875][ T1294] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 3184.998907][ T1294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3184.998926][ T1294] usb 1-1: config 0 has no interface number 0 [ 3184.998976][ T1294] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 3184.999017][ T1294] usb 1-1: config 0 interface 8 has no altsetting 0 [ 3185.002852][ T1294] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 3185.002880][ T1294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3185.002901][ T1294] usb 1-1: Product: syz [ 3185.002916][ T1294] usb 1-1: Manufacturer: syz [ 3185.002929][ T1294] usb 1-1: SerialNumber: syz [ 3185.020009][ T1294] usb 1-1: config 0 descriptor?? [ 3185.354534][ T6970] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3185.394156][ T1294] ath6kl: Failed to submit usb control message: -71 [ 3185.394212][ T1294] ath6kl: unable to send the bmi data to the device: -71 [ 3185.394226][ T1294] ath6kl: Unable to send get target info: -71 [ 3185.448893][ T1294] ath6kl: Failed to init ath6kl core: -71 [ 3185.450976][ T1294] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 3185.503064][ T1294] usb 1-1: USB disconnect, device number 63 [ 3185.856285][ T1294] ================================================================== [ 3185.856304][ T1294] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 3185.856457][ T1294] Read of size 8 at addr ffffc9001da61008 by task kworker/0:3/1294 [ 3185.856475][ T1294] [ 3185.856487][ T1294] CPU: 0 UID: 0 PID: 1294 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3185.856511][ T1294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3185.856525][ T1294] Workqueue: usb_hub_wq hub_event [ 3185.856652][ T1294] Call Trace: [ 3185.856661][ T1294] [ 3185.856670][ T1294] dump_stack_lvl+0x189/0x250 [ 3185.856764][ T1294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3185.856790][ T1294] ? __pfx__printk+0x10/0x10 [ 3185.856811][ T1294] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 3185.856883][ T1294] ? __virt_addr_valid+0xdc/0x5c0 [ 3185.856941][ T1294] ? __virt_addr_valid+0xdc/0x5c0 [ 3185.856970][ T1294] print_report+0xca/0x240 [ 3185.856993][ T1294] ? __list_add_valid_or_report+0x4e/0x130 [ 3185.857005][ T1294] kasan_report+0x118/0x150 [ 3185.857045][ T1294] ? __list_add_valid_or_report+0x4e/0x130 [ 3185.857060][ T1294] __list_add_valid_or_report+0x4e/0x130 [ 3185.857081][ T1294] kcov_remote_stop+0x52d/0x660 [ 3185.857138][ T1294] hub_event+0x45d2/0x4a20 [ 3185.857169][ T1294] ? do_raw_spin_lock+0x121/0x290 [ 3185.857200][ T1294] ? register_lock_class+0x51/0x320 [ 3185.857220][ T1294] ? __pfx_hub_event+0x10/0x10 [ 3185.857231][ T1294] ? process_scheduled_works+0x9ef/0x17b0 [ 3185.857263][ T1294] ? _raw_spin_unlock_irq+0x23/0x50 [ 3185.857287][ T1294] ? process_scheduled_works+0x9ef/0x17b0 [ 3185.857310][ T1294] ? process_scheduled_works+0x9ef/0x17b0 [ 3185.857334][ T1294] process_scheduled_works+0xae1/0x17b0 [ 3185.857368][ T1294] ? __pfx_process_scheduled_works+0x10/0x10 [ 3185.857388][ T1294] worker_thread+0x8a0/0xda0 [ 3185.857402][ T1294] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3185.857419][ T1294] ? __kthread_parkme+0x7b/0x200 [ 3185.857445][ T1294] kthread+0x711/0x8a0 [ 3185.857475][ T1294] ? __pfx_worker_thread+0x10/0x10 [ 3185.857499][ T1294] ? __pfx_kthread+0x10/0x10 [ 3185.857523][ T1294] ? rt_spin_unlock+0x150/0x200 [ 3185.857543][ T1294] ? rt_spin_unlock+0x161/0x200 [ 3185.857560][ T1294] ? __pfx_kthread+0x10/0x10 [ 3185.857576][ T1294] ret_from_fork+0x4bc/0x870 [ 3185.857597][ T1294] ? __pfx_ret_from_fork+0x10/0x10 [ 3185.857621][ T1294] ? __switch_to_asm+0x39/0x70 [ 3185.857647][ T1294] ? __switch_to_asm+0x33/0x70 [ 3185.857666][ T1294] ? __pfx_kthread+0x10/0x10 [ 3185.857694][ T1294] ret_from_fork_asm+0x1a/0x30 [ 3185.857720][ T1294] [ 3185.857727][ T1294] [ 3185.857733][ T1294] The buggy address belongs to a vmalloc virtual mapping [ 3185.857750][ T1294] Memory state around the buggy address: [ 3185.857757][ T1294] ffffc9001da60f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3185.857765][ T1294] ffffc9001da60f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3185.857773][ T1294] >ffffc9001da61000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3185.857778][ T1294] ^ [ 3185.857785][ T1294] ffffc9001da61080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3185.857797][ T1294] ffffc9001da61100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3185.857806][ T1294] ================================================================== [ 3185.857926][ T1294] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3185.857938][ T1294] CPU: 0 UID: 0 PID: 1294 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3185.857953][ T1294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3185.857960][ T1294] Workqueue: usb_hub_wq hub_event [ 3185.857979][ T1294] Call Trace: [ 3185.857988][ T1294] [ 3185.857996][ T1294] dump_stack_lvl+0x99/0x250 [ 3185.858026][ T1294] ? __asan_memcpy+0x40/0x70 [ 3185.858048][ T1294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3185.858074][ T1294] ? __pfx__printk+0x10/0x10 [ 3185.858101][ T1294] vpanic+0x237/0x6d0 [ 3185.858116][ T1294] ? __pfx_vpanic+0x10/0x10 [ 3185.858126][ T1294] ? preempt_schedule_common+0x83/0xd0 [ 3185.858181][ T1294] ? preempt_schedule+0xae/0xc0 [ 3185.858208][ T1294] panic+0xb9/0xc0 [ 3185.858226][ T1294] ? __pfx_panic+0x10/0x10 [ 3185.858248][ T1294] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3185.858273][ T1294] ? __list_add_valid_or_report+0x4e/0x130 [ 3185.858294][ T1294] check_panic_on_warn+0x89/0xb0 [ 3185.858305][ T1294] ? __list_add_valid_or_report+0x4e/0x130 [ 3185.858318][ T1294] end_report+0x78/0x160 [ 3185.858335][ T1294] kasan_report+0x129/0x150 [ 3185.858361][ T1294] ? __list_add_valid_or_report+0x4e/0x130 [ 3185.858389][ T1294] __list_add_valid_or_report+0x4e/0x130 [ 3185.858414][ T1294] kcov_remote_stop+0x52d/0x660 [ 3185.858442][ T1294] hub_event+0x45d2/0x4a20 [ 3185.858469][ T1294] ? do_raw_spin_lock+0x121/0x290 [ 3185.858483][ T1294] ? register_lock_class+0x51/0x320 [ 3185.858501][ T1294] ? __pfx_hub_event+0x10/0x10 [ 3185.858517][ T1294] ? process_scheduled_works+0x9ef/0x17b0 [ 3185.858543][ T1294] ? _raw_spin_unlock_irq+0x23/0x50 [ 3185.858567][ T1294] ? process_scheduled_works+0x9ef/0x17b0 [ 3185.858590][ T1294] ? process_scheduled_works+0x9ef/0x17b0 [ 3185.858612][ T1294] process_scheduled_works+0xae1/0x17b0 [ 3185.858654][ T1294] ? __pfx_process_scheduled_works+0x10/0x10 [ 3185.858672][ T1294] worker_thread+0x8a0/0xda0 [ 3185.858688][ T1294] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3185.858716][ T1294] ? __kthread_parkme+0x7b/0x200 [ 3185.858746][ T1294] kthread+0x711/0x8a0 [ 3185.858774][ T1294] ? __pfx_worker_thread+0x10/0x10 [ 3185.858796][ T1294] ? __pfx_kthread+0x10/0x10 [ 3185.858820][ T1294] ? rt_spin_unlock+0x150/0x200 [ 3185.858834][ T1294] ? rt_spin_unlock+0x161/0x200 [ 3185.858844][ T1294] ? __pfx_kthread+0x10/0x10 [ 3185.858860][ T1294] ret_from_fork+0x4bc/0x870 [ 3185.858883][ T1294] ? __pfx_ret_from_fork+0x10/0x10 [ 3185.858908][ T1294] ? __switch_to_asm+0x39/0x70 [ 3185.858928][ T1294] ? __switch_to_asm+0x33/0x70 [ 3185.858947][ T1294] ? __pfx_kthread+0x10/0x10 [ 3185.858980][ T1294] ret_from_fork_asm+0x1a/0x30 [ 3185.859006][ T1294] [ 3185.859294][ T1294] Kernel Offset: disabled