last executing test programs: 10.391181834s ago: executing program 0 (id=291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) lseek(r1, 0x1000000004931f, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000d, 0x6031, 0xffffffffffffffff, 0xfded4000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) syz_open_dev$tty1(0xc, 0x4, 0x1) 8.986018106s ago: executing program 0 (id=296): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x48}, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c54d08004500003c00000000040690780a010102ac1414aa00010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac0000004612275166e690e700001312b3e480a7613088fd71106c02"], 0x0) 7.911971128s ago: executing program 0 (id=302): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0xffffff0c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x24041801}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000540)=ANY=[], 0x1000f) 6.443105286s ago: executing program 4 (id=309): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 6.355551722s ago: executing program 2 (id=310): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = eventfd2(0x0, 0x800) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/91, 0x5b}], 0x1) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x19) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x8402) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000280)={0xa, 0x100, 0x2, {0x8003, 0x4001000, 0x85}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, 0x0, 0x0, 0xfb, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f0000000180)}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db3b99ed18fb67c1f75ef7d55b3bb185f5f38665ea5e0918", 0x61}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aaedb987b398dd67a155fc3644e2fda199e2cfaa69af7df7752f3d", 0x7b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f29dc43fa3b00049e57dc568ac4b08be5ccd5fd9dade4f03370a8864cd94f1330572de34181127d23770f57c168a030", 0x9c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a748eb4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a729c384374fce0f4f5cda3b61cc4d61da382c5708f26edb16e9b65d667ed61248dfbed35a6a886adec25361c17d9f30f94db7e3085440df135ddec94f3f01fe2e2f9edb9e19fd8ae0b93363f0dbadc858d8e0a93dea50e89b2d7674b7e0f813c38f70a87554f5d0b95b531ec006716207abc5c34bcf447f0e547516d2fa23e2871db3662c8fb30e93b939aaed219ca9ef4b30f79e3d27e1caece83168292a10c0abf24f5fe97ef6fd46045f6ee3fc33d995a79584426fdac0c663d4991364d450dd71cf86e7d298ec8500eae0fa9b26b9ba3077033e643428ec81ae9192174a0dec405dbf63de3a7c2cc037bab06941dc5b13a00f5f861a4a8a335b52de03c4c977af27c02e7f4ee05d602b5b64c2904fc182a6cdf7f64d0641f4302383cf610fb0a357cd9ebcb078e49d3df19cca93a701373970270e4db98bac98a85cc3a5cdf829fc8ecb102a1aae70bf2149cc551703a012cf9c74e3df24ade472c4dc052415ea494aae8a7424360ffdba83ba584e61d0fd66fba41712628abb00cdf370a97e95004c892cfd42e84561ee569f905d487830cc665392295d9399f28cc2c6f01b209c5d1d64e3d685df89cc428922b819974e42b35b277d5a06671b0bf59b77b9b0a3ce41a579cd8b6b9d08df85787fedde4c7a4ba1ad2d5ae95e5fb208d2f9e842655e9e0cb31310b888c9ad5696c005ed00a0e3d828efd00b715230a0d0609cd550768c3a85c271284e5071f32721b4f20acaf7c150a4a476a38f7896443d50ad7355165745201f541a40dcd44253518933a1e1e0a8542362402a51452bd80ab8cd9a86508fef1fa13c82dabea414c7adc0842783a862f54e99aea012738eea87d7528dabb430a9600fa0b036b63d407ce33bb979a15dea83767c80a60337fd453b57ff5672d975c44c38a00efcbe6161ad649d68305b21a18490f044bdbfec14064ab9e1445b6cc18465a0551b9fe0c45e86adf5f0115d0a876ac4665ca238b20c9338941472d078d67d8c6dfd373d8d0c6312b0b3de42923e973cb20c8623440adc2d5a356656f5d67fec5be82e3adfe092868fd7900b4210a1e3ce2742b2554cea1fead56ef43f6a655e648a66082269a2e666fb4c3645b161c55653f4a38488e29d80bde5b59f57ae1aaf4ffe7dc7b0b1b94a7031b1cde5ac5826e23ea3bf4897701c6cc5245b1d0083a32186ebbac81d20a09b1a127af40a96af882bb3ff7dff036663f5d31099fe71305235019155df58daa20634d9939370113676e0983a81f869f295eb28851337245d146f36c552664d1ffe760e7ca8fc45cce4e85df06874b772decbd0c2ce6d456bb16ffed392bfadb078f941345941a579218a2a0f0d11122a36114ab51b152ca4be83262908475fb6870d9b79a460fd077bcc4dc9858000039c13b4808526dd0f44fe6400612fcf839309f0f85342b35c034ed73cfe077a666d7f851e633b068630da00a8004547682f655b4a765ae9dc3426abf0ab58602476b7d35e90e73dc631d2effed4844abe08df03ef09a6eda93840d3264ece6c6d80fa4a878302fee6f82ba4502c7fa90c4cd0a5bd4db16403be5c3c314457b6630c3260cb75fdbdd14d2dceba65c0541b187c86901294b57db2e284e67c26ae0ac15a4f1a6077c27497f0144a1c7290ce15f83b52d66862fc67cd3cd14ba2e62c2fafa2815767a05a9482b8d217fc2d2a782d658f72d0d0c456493751614e73ee69d908f1e48ff7d2b99e7d65c886b27004b997b745c12854a1f3be8e186eba292c5b49c419a35dbb68dd79a256edc05b254d985570d9e49cfb58f4aeca52741af0648e6698a85e533cc7ad5ddaf4078bb37806efd2c987b8bef2e6a3e09469ca48a84bc8d6d4482119c1231f036c0c3e7718e66a8b42f3c3f975ddcc1c2ec9a1050ea583db659f0be4082175bcdea60c78d31aec6b512a41a94d689e60174507f07c4b0b1bb24bca1be0b5ef17ab5302a951f3c290cc51b284c1a6b147f67e39c0a7d424aac1e4b3eb8a9346afb6a6dfbc8f3ffb729759f1184738bbca38ef65f271154bd68989e9e822855a01fc4e004e9a93bd27f6efcc1e8400a7e57e50130d88c753f0a33315d5e7af16ba3be07a13336c9c71f5c66eb351d8ff5e2279586b3d3eaafe7a1e3cc3d8b910e4557eb8af2ac7e2b06f604293c6cde2271e60af27061066b2b645a5fcfa3c976e6812ed044198e7a83e118fdd66d6aa6efd1e3dacfe3d12050f7e363bd52beeeb304ae0c7d421e039d3ebb3fd579ab8af136f98422b997b91585238b25d864eebdbb26cbb05f6f8c68eb1925abb352f7d2735038bfde18e1771d76b1ba9e568d3b77f747d5bc6b155f59e7ff0c7d1513787dfd9ba7cb084a9de82838564b07b3592a48708d486dddb987b1cf4cea0e2051c2427d9f706c2fe718e521ccca7653b63452c36a83e52fd4a8d48362453d9a1c85f5a32bf6619bad5d82cf9ed3e66683999688f8428d9f8b610f6086ade2b4d5846b1c4625ddd14346a6e6ed79be571fef09f409680150351668609f0ba04c3da81ae5851bc1f5a60c9f4d54ca8e5de4438e8cc8c858337938aabff345b9dd5e2467cb61d337d77a010db2e5acc9f31217d22e734b572e32d642039fa53345da569773c01984b83978f54816709e1a66f7", 0xa51}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x8, 0x5c}) pipe2$watch_queue(&(0x7f00000001c0), 0x80) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) 6.287873086s ago: executing program 4 (id=311): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000140)=0x6, 0x4) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000380), 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) (async, rerun: 32) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040090224000100000000090400000103000000092100000001220b00090581030002ff0800c252ddd1e525a0e8f5a458adb92738b5ea877b0f0df5a96f65ff5afca219"], 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x841) (async, rerun: 64) syz_usb_control_io$hid(r4, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0) 6.048077473s ago: executing program 4 (id=315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'caif0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0xff, 0x8, 0xf, 0x6, 0xfffffff7, 0x5, 0x200, 0x2}}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc979faee00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000b05000000000000000000000000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000007dcbd7d6c300"}}) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.022548995s ago: executing program 2 (id=316): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) syz_usb_connect(0x3, 0x8f, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0) 5.815791975s ago: executing program 3 (id=318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000001080)=""/4096, 0x1000}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x1, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_delete(r2) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_delete(r2) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x7fff}], 0xfffffffffffffe09, 0x8800}, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001a00)=""/201, 0x103}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000000)=""/65, 0x41}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) getsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f0000000000)=""/167, &(0x7f00000000c0)=0xa7) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) (async) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) (async) r8 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000005c0)="cd", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r8, r6, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRESDEC], 0x0) 5.540849796s ago: executing program 3 (id=319): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_usb_connect$cdc_ecm(0x5, 0x7d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0x0, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x1c, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x6, 0x24, 0x6, 0x0, 0x0, 'l'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x6, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x7, 0x10}, @obex={0x5, 0x24, 0x15, 0x8}, @country_functional={0x6, 0x24, 0x7, 0x7, 0xfffe}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x48, 0xad, 0x7, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0xe520800da7e5d8b0, 0x80, 0x84, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x6, 0xf}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x10, 0x9, 0x3, 0xff, 0xb5}, 0x145, &(0x7f0000000340)={0x5, 0xf, 0x145, 0x6, [@generic={0x43, 0x10, 0xa, "c406765c18b0f5fa476c73f28654e856d7fb9b073350f2f3595d3fb44895c3e545851de90c696e5585d637ff439d02b054db70a2c2519446e88543ce61fb56dc"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x71, 0x43, 0x8, 0x7bc, 0x80}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x5, 0x1, 0x7ff, 0x1}, @generic={0x2c, 0x10, 0x1, "2db63175bd9dda09f5e08dc355b5fdf49c133e1cab9b93ce0b9116ebc94e9eacf235dcf16fb90e5aa4"}, @generic={0xa7, 0x10, 0x2, "44fd402ab9898bd38f499c7b130f903da1d66bed73bee87a9e35726b7e94ee4220020cc611a0aea92c907d4be5b942dd8815a025e107d11a1774d2d45a2a21da4f91778997047b2898ef6fee7b76a880e84b284b23cffa858af2e5662e13e8548f169e8e91548797c776ab835ccf42ccaeafd8027a79e5a3c6905159f66965d2f7423441b11cb99ce3f084e2c8afa3f7a60014d8875211b943f1d59f86cc61c230a60231"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "ffe5b572a601e3d8845d1bda2ec5dd5a"}]}, 0x6, [{0xcc, &(0x7f00000005c0)=@string={0xcc, 0x3, "2af76f2fb3ab18d087ad6283624efd9676a5382f267856a53602b95ec5736798437da927733fc049757337bbf697bff1d5cf6f507285339c8c4fbdb1c17b65d3b0d031d02bfcf420490c2da24acc068ec014081ecdf86c360a829d42c28b7fd7ec53306ace01164836a507db7f364f9232f63d9c93a2f4ba6b2f02da454e0fc28f94f35c58a972f120a7f5b8da0aa5d1b2543209a9b3ac536a6173d79277e7afa41db1a962e3232cf9dd23641bb792e96cc916e3fe8ff9978faffe967136fbcacb3a416921a9aa3dec69"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x810}}, {0x6d, &(0x7f0000000b80)=@string={0x6d, 0x3, "5382d174488d46e9857736c50834f35465fb1ffb498d20de588c70d1034bd85a7640b1776cd6daa43ec7dce20132c3606b14a0032d909618bc6233e1f18b04ec07b7d5f41811abf61dcda60ab64293607a52b06c09cfa0659ad78102256c4c6167cda7eca5e22b506b25b7"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x447}}, {0xea, &(0x7f00000008c0)=@string={0xea, 0x3, "a545ce35f3d5ec0ec99baf932c9ef8ead044d4db3aedbe333a8d146119bcf9b2ffdd6cc99ef1da214523305a9b4d577b08bbc732ef97ebd1f86fc80ce131d8ea0cc99289869413dcfeafed064ed43e30eef874520528fcfe28cd89be1415633ec25900d569464a4415010ed82608c4ecc3f3f9ca76af756a30cc4ea17079bcf5948a2d3a5fae8fd99eeba2fb7892746c3ecd8a0ba725b8e084b9cdafcd7b2b013249a24e019379daa0009422e81e08e5fc6cdebddd38fd48ce7d710415334e539d17dc9a2300189397777211a63bba9fb07d69c58d2b2077e274694073f94b9cf0ad421383391d7d"}}]}) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000840)=""/73, 0x49}, {&(0x7f0000000d80)=""/4098, 0x1002}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000100)=""/195, 0xc3}], 0x6}, 0x4}], 0x4, 0x120, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000002180)='./file0\x00', &(0x7f0000002200)=ANY=[@ANYBLOB="ed68"]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100007e4c5b140000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c00010062697477697365003000028008000340000000040800014000000014080002400000001208000580b10a00000c000480080001006eee7e000900010073797a30"], 0x114}}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)) r5 = syz_open_dev$ndb(&(0x7f0000001200), 0x0, 0x2100) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000001340)={'\x00', 0x9, 0x7fff, 0x0, 0xfffffffffffffffe}) r6 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000000)={0xb, @pix_mp={0x40, 0x2, 0x20303159, 0x6, 0x1, [{0x4}, {0x4, 0x8073}, {0x3, 0x7}, {0x6, 0x4}, {0xfffffff9, 0x10000}, {0x1, 0x6}, {0x8, 0x8}, {0x2, 0x893a}], 0x66, 0x9, 0x2, 0x3, 0x5}}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000c00)=0x4) writev(r4, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000000)="8c", 0x1}], 0x2) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40401, 0x0) ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f0000000700)) ppoll(&(0x7f0000000380)=[{r7, 0x4000}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x72b2, &(0x7f0000000b00)={0x0, 0x9f0f, 0x200, 0x1, 0x369, 0x0, r7}, &(0x7f0000000800), &(0x7f00000009c0)) 5.439533051s ago: executing program 4 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x24040800}, 0x44000) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) read$snapshot(r3, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000980)) syz_open_dev$dri(&(0x7f0000000100), 0x1613, 0x80) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0xd, 0x4, "97dc264d"}, 0x0, 0x0, 0x0, 0x0}) 4.71843308s ago: executing program 0 (id=322): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0xec, 0x2, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 4.569945802s ago: executing program 0 (id=323): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220719b7000000a94f5700000000"], 0x0}, 0x0) 3.13585245s ago: executing program 1 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x60, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x2, 0x0, [0x0], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "ffa9"}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000000000080002400000000e08000640000000070900010073797a30000000000900020073797a3200000000c60007"], 0x154}}, 0x40000) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000380), 0x3, 0x2000) ioctl$RTC_WIE_OFF(r1, 0x7010) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) read$FUSE(r2, &(0x7f0000001440)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000300000008ac054e02"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x400}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x80000001}, &(0x7f00000002c0)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 2.88571785s ago: executing program 2 (id=326): r0 = socket$inet6(0xa, 0x2, 0x88) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54593, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) 2.776426934s ago: executing program 2 (id=327): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) (async) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000106d044fc200000000000109022400010000a00009042200010300000009210000050122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x20, 0x1, 0x5, {0x5, 0x10, "ab61c1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, ']$', 0x3a, 'syz', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x50, 0x46, 0x50, 0x50, 0x43, 0x43]}, 0x34) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r7, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) write$P9_RSTATu(r7, &(0x7f0000002280)={0x7a, 0x7d, 0x2, {{0x0, 0x60, 0x9, 0x1, {0x80, 0x1, 0x5}, 0x10000000, 0x8000, 0x400, 0xe4, 0x2, '\xcd(', 0x8, 'keyring\x00', 0x1, '(', 0x22, '/proc/sys/fs/binfmt_misc/register\x00'}, 0x5, 'task\x00', r8, r9, r8}}, 0x7a) getdents(r10, &(0x7f0000001fc0)=""/184, 0x9a) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$PTP_PIN_GETFUNC(r12, 0xc0603d06, &(0x7f0000000200)={'\x00', 0xfffffe01, 0x0, 0xfffffff9}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) 2.292338822s ago: executing program 3 (id=328): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) r5 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x40, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x6, "9b2f6985"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x2, 0x8, "5c99b53f102e"}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xb0, r6, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x14) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000200), 0x4) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) unshare(0x28060400) (async) unshare(0x28060400) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) eventfd2(0x3, 0x801) 2.224257262s ago: executing program 4 (id=329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f000000a440)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2000000, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000dc0)="a71916f18ff4de7673b7002dad864a788b22aaba41d5bcb8171b6e09751cde3a4d30c7f3c48590c491ddf664c6760ac16b1db130d52a6a0823cff16c2a6787a062157169a0ddc106a1feaf5daa87242ce8654a52559c60e6ee810145680449dd687169fbccbb33cc0581ef90ba6e26525ffbb6b928423a2f77a26bb9da70647d903c306d10204efdc9253a7ba7bdf1867644883125c8d056a63bb521db2c63514037344dd533b13d996437a1d995da9d67a47f28ca7c50439512cae81cd9da60e3adf8895397bb7d0e1b0baa7aa25dac60ebb01b550dfb2f67eea60a5f9d14993dceae18151022242764216b092a92508a0bb32d11332f6ab435fb50ea8dd620e91a4b6b6b5561b8c19feb07a2d61ebcdf8e60df00c335e4643495aaa64ac38381b7973ea93a927e9ef23d26af4e3cfbfa0be96fa0496510910e29162b59c9dfc847924de214465ac78132e205de323f4b53d3db373dcfbb9d2a905f35535e6c57a1375ef06a6838f49ba62578ea7684da0fe8c380446c6d3fcf246ddba324f5203f6d6af45a7538dd2ce8719ff4f7cf7578aacfc55d47bb0a962017bc2fa9a55db9f9ed3794135285edce444c5eb397ea2b1a60d12c47356a3ccaca3522611b0c6ff53e7969097de9d17dd509e88954732bdb4375667f74f6210b6c9c3b6fbc33d6c0e83c477884ad4fc5811ee763e014763aaa3b78113102cfcd1d4f14acf9418ec0da3f4df30f5276ebc3dff465a36f7008c535bac65e6d4e7502c8b27c492701ea9b4705f3949a8246e14d6647c35d8c66567d16b038283b980a636cbdcecd", 0x241}], 0x1}}], 0x2, 0x8008801) 2.122475272s ago: executing program 3 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101540, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b010203010902"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newchain={0x8e4, 0x64, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff6}, {0x8, 0x7}, {0xffff, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_RATE={0x6, 0x5, {0xa1}}, @filter_kind_options=@f_bpf={{0x8}, {0x898, 0x2, [@TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0x3}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0xf}}, @TCA_BPF_POLICE={0x874, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x6, 0x0, 0x10001, 0xffffffff, 0xd, 0x2, 0x0, 0x0, 0x5, 0x8f6a, 0x25, 0x1394e96d, 0x6, 0x8, 0x9, 0xeb6e000, 0x7, 0xfffffffc, 0x1, 0x3, 0x5, 0x401, 0xf, 0x10, 0xd, 0x1, 0x3, 0xd, 0x4, 0x7, 0x6, 0x7, 0x385a, 0x80000001, 0x4, 0x37a, 0x7, 0x3, 0x5, 0x5, 0x4, 0x3963, 0x2, 0x80000001, 0x5, 0x2, 0x7ff, 0x9, 0x5, 0x2, 0x40, 0x1, 0x7, 0x10, 0x8000, 0x3, 0x8, 0x5, 0x1, 0x3, 0x200, 0x799e416a, 0x2, 0xfffffff7, 0x0, 0x6, 0x10, 0xbb, 0x7, 0xffff0001, 0x10, 0x7fff, 0x5, 0x78, 0x0, 0x9, 0xcd4, 0xff, 0xd, 0x4, 0x80000001, 0x3, 0xc, 0x200, 0x16, 0x0, 0x6, 0xfffffffc, 0x6, 0x10001, 0x9, 0x3, 0x10001, 0x5, 0x8000, 0x80000001, 0x0, 0x7, 0x669119ec, 0x7, 0xa782, 0x4, 0x0, 0x8, 0x3ff, 0x0, 0x4, 0x6, 0x54, 0x7, 0x4, 0x9, 0x6, 0x2, 0x6, 0x0, 0x7, 0x9, 0x300, 0x1, 0xfffffff3, 0xffff, 0xf, 0x9, 0x7, 0x101, 0x4, 0x401, 0x80000000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x2, 0x7, 0x9, 0x9e7, 0x3, 0x3, 0xffffff01, 0x1000, 0x3e, 0x4, 0x5, 0x7, 0x8000, 0x9, 0x1, 0x0, 0x7, 0x7f, 0x0, 0x2, 0xce1b, 0x3, 0x2dc815d7, 0x3, 0x7, 0x5, 0x5a86, 0x0, 0x0, 0x8, 0x80000000, 0x200, 0x4, 0x38000000, 0x69560000, 0xc3a1, 0x1, 0x68, 0x90ee, 0xe, 0x0, 0x483, 0x2, 0x4, 0xb, 0x7, 0x5, 0x3, 0xd7c, 0x0, 0x80000001, 0x200, 0x51, 0x1, 0x1, 0x1d46, 0x9, 0x5, 0x276c, 0x8, 0x2, 0x4, 0x3, 0x10001, 0x2800000, 0x5, 0x9, 0x5, 0x7, 0x356, 0x9, 0x6c0b5ad5, 0xa5, 0x28, 0xb8, 0x0, 0x1000, 0x8, 0x2, 0x20000, 0x74d, 0x9, 0x7d, 0x9, 0x7fffffff, 0x4, 0x9, 0x5, 0x6, 0x3, 0x5, 0x4, 0x0, 0x7fff, 0x5, 0x6, 0x80, 0x8, 0xff, 0x7, 0xe, 0x3, 0x5, 0xe3, 0x81, 0x90, 0x101, 0x6, 0x0, 0x0, 0x3, 0x2, 0x7ff, 0x200, 0x9, 0x92cc, 0x6, 0x7, 0xc, 0xfffffff8, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0x7, 0x51b, 0x2, 0x9, 0x0, 0x3d5, 0x7, 0xd0, 0x79f7, 0x9a, 0x6, 0x3ff, 0x6, 0x0, 0x518, 0x8, 0x1, 0xb, 0x4, 0x200, 0x0, 0x9, 0x8001, 0x8001, 0x2, 0x9, 0x5, 0x0, 0xff, 0x1, 0x4, 0x800, 0x10001, 0x6, 0x5, 0x9, 0x5, 0x800, 0x3, 0x9b, 0x9, 0xfffffff7, 0x3, 0x101, 0xa, 0x2f5, 0x1, 0xffffff97, 0x10000, 0xf, 0x2, 0xafb, 0xfffffffe, 0x8, 0x60000000, 0xfffffff2, 0x3, 0x5, 0x86, 0x7f, 0x0, 0x6, 0x1, 0x6, 0xfffffffe, 0x136, 0x0, 0xffff, 0x18000000, 0x5, 0xe, 0x5, 0xb, 0x80000001, 0x8, 0x9, 0xff, 0x200, 0x4963, 0x498e, 0x80, 0x5, 0x3, 0x9, 0x7fffffff, 0x400, 0x7, 0x4, 0x8, 0x2, 0xfffffffd, 0x5, 0x8, 0x10001, 0x60cb4ef, 0x81, 0x0, 0x3, 0x7, 0x7, 0x1, 0x9, 0xffff, 0xf127, 0x5d4, 0x1, 0x5, 0x3ff, 0x2, 0x8, 0x4, 0x3ff, 0x3, 0x40, 0x189c0, 0x6, 0xfffffffb, 0xfe, 0x7, 0x7, 0x2, 0x101, 0x8, 0x10001, 0x4, 0xa, 0xf, 0x81, 0x5, 0x5, 0x200, 0xd6, 0x5, 0xffffffff, 0x7, 0x4, 0x80, 0xfffffffa, 0xdc1, 0x12f2, 0x5, 0x1, 0x8, 0x9, 0x9, 0x2, 0x100, 0xfb, 0x610, 0x9, 0x1, 0x5, 0x0, 0x9, 0x8, 0x8, 0x4ec, 0x5, 0x1, 0x4, 0x4, 0xfffffff8, 0xa9, 0x9, 0x1, 0x1, 0x80000001, 0x5, 0x2, 0x6, 0x800, 0x7, 0x4, 0x9, 0x5, 0xfffffff8, 0x9, 0x1ff, 0xffff, 0xffff, 0x6, 0xf, 0x9, 0x9, 0x6, 0x7579, 0x1, 0x4ae6, 0x6, 0x9, 0x13cd1e7e, 0xd, 0xb, 0x1c0000, 0x9, 0x153, 0xff, 0x7, 0x8, 0x1, 0x16f, 0x1, 0x3, 0x16, 0xffff0001, 0x8, 0x3, 0xe79, 0x3c4, 0x3b, 0x0, 0x97, 0x5, 0x7f, 0x1, 0x80000000, 0x6, 0xa, 0xdd34, 0xff, 0x4, 0x8, 0x2, 0x401, 0x5745, 0xfe8, 0x2, 0x4, 0xc2c000, 0x6, 0x8, 0xfc64, 0x9, 0x8, 0x4, 0xfffffffd, 0xc30, 0x5, 0x6, 0x4, 0x10, 0x5, 0x1, 0xfffffff8, 0x800, 0x9, 0x5, 0x6, 0xcea, 0xcfc6, 0x8, 0x7, 0xfff, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0xffff, 0x4, 0x10, {0xa7, 0x0, 0x1, 0x1, 0xf11a, 0x7}, {0x0, 0x0, 0xc, 0x1, 0x38a3, 0x6}, 0x5, 0xffffffff, 0x7fff}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x10001}]}, 0x8e4}}, 0x0) 2.048060454s ago: executing program 1 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYRES32=r0], 0x74}}, 0x0) 2.047796396s ago: executing program 2 (id=332): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 2.02903735s ago: executing program 4 (id=333): syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0], 0xfb}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x5, 0x900, 0x9, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x1, 0x1, 0x6}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x1, 0x20, {0x7}}}}}}}]}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1], 0x48}}, 0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r2, 0x9}, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001340)={r4, &(0x7f00000002c0)="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", &(0x7f00000012c0)=""/99}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd, 0x7}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000040)={0x7}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@mac={{0x30}, {@random="16f9a936c886"}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r8, 0x3) 1.866700098s ago: executing program 1 (id=334): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0xfffffffa, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r7, &(0x7f0000000940), 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0x0, &(0x7f0000000280)=0xffffffffffffffce) mq_open(&(0x7f0000000240)='\xbd\x16 lhOb\xed\xf1~\xe5\x01\xd1h\xfe\xb5\x1d\x90\x933\x9e\x8f\x06J\xc7\xc8y\xfbx\xd0\xee\xc3\xfcv\xf7L\xaa=Q\x18\xffW-\x05\x99.f\x15\xeemn{\xe4R\xfan\xc1\x02\x93\xf9u\x1a\tGa\x15\xc7\xb9\x94\x9d\xf3W\xa3FGr\x82\xa5\xf2\x8fq\xf0\xcf\x82\xc3\xbb~Qw\x8b\xa27\xb6\xb7\x1c\xddD0\xaa)g\n.jL`\x1f~\xe9\xe4N@\xbb\xdb\x80\xcfW\x13\x12\xe2ct\xe9\xf6\\x\x95|\xeab\xceE\xefVyS$\x92\xb5PAXg\xa68mRC\x93l\x86Et\xf9T\xed\x90TS_\xf8m\a)\xd7\x9c-\x00\x00\x00\x00\xd0=\xb8k\xdf\x81,\x04\x00\x00\x00JpD7\xd4\x80G$0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x74, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffe09, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffe08, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x44044) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x6, 0x1, {{0xf, 0x4, 0x0, 0x1a, 0x3c, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x27, 0xf8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @remote, @multicast2, @loopback, @remote, @empty, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x3, 0x9, {{0x30, 0x4, 0x2, 0x23, 0xc0, 0x65, 0x0, 0x1, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0xf9, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010102]}, @cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}, @timestamp_addr={0x44, 0x4c, 0x5a, 0x1, 0xe, [{@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x1}, {@multicast2, 0x80}, {@loopback, 0x600000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@empty, 0x1}]}, @generic={0x88, 0xe, "45b3af5c70abc14926f99006"}, @timestamp_addr={0x44, 0x1c, 0xec, 0x1, 0x4, [{@remote, 0x134f}, {@empty}, {@remote, 0xa}]}, @ssrr={0x89, 0x1b, 0x56, [@dev={0xac, 0x14, 0x14, 0x1e}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x3, 0x8001, {{0x31, 0x4, 0x3, 0x2, 0xc4, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0xb3, 0x1, 0xe, [{@rand_addr=0x64010101, 0xff}, {@multicast2, 0x9}, {@remote, 0xdcb}, {@remote}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x2d, 0x3, 0x8, [{@remote, 0x7}, {@remote, 0x400}, {@empty, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x3d, [@broadcast, @multicast1, @multicast2]}, @lsrr={0x83, 0xf, 0x49, [@private=0xa010100, @private=0xa010100, @empty]}, @timestamp_addr={0x44, 0x3c, 0x36, 0x1, 0x4, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xfffffff9}, {@remote, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x9}, {@broadcast, 0x5}]}, @timestamp={0x44, 0x8, 0x86, 0x0, 0x6, [0x7]}]}}}}}) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x4000080) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r10, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}}, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000008c0)={@loopback, @broadcast, 0x0}, &(0x7f0000000900)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xbc, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24004002}, 0x40001) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000340)={0x1d, r14, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r14, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x2, 0x4c2a, 0x22, @dev={0xfe, 0x80, '\x00', 0x2e}, @rand_addr=' \x01\x00', 0x20, 0x7, 0x0, 0x8}}) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) (rerun: 64) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x150, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x1004}, 0x8000000) 654.470428ms ago: executing program 1 (id=336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r5, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x1, 0x0) socket(0x11, 0x3, 0x0) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000100)={0xffffff24, 0x7}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r6, 0x7277, 0x0, 0x28, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x20, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7ffffeff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x8, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0x8001, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0xc2ea, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x344, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x2, 0x8, 0x800, 0x3}, {0x4, 0xed22, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x0, 0x8, 0xe, 0x7}, {0x10010, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0x8, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x4, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0x4f2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x80, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x45, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x2, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r10, r0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x10000000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 547.286132ms ago: executing program 2 (id=337): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) landlock_restrict_self(r3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SNDCTL_TMR_SOURCE(r6, 0xc0045406) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x24, r5, 0x5, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = signalfd(0xffffffffffffffff, 0x0, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905) close(r9) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fcntl$setstatus(r8, 0x4, 0x2c00) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r9], 0x0) 383.781729ms ago: executing program 1 (id=338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000022000040"]) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b0001006d6163736563000014000280050009000100000005000d"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000005c0)='<', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x8, 0x7fffffff, 0xffffff81, 0x8}, &(0x7f00000001c0)=0x14) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x2, 0x1, 0x2, 0x0, 0xff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_buf(r5, 0x0, 0x30, 0x0, &(0x7f0000000180)) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xf9fd, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xf9fd, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x8f, 0x2, 0x53, 0x40, 0xc45, 0x8003, 0xd6bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6e, 0xe4, 0x4e}}]}}]}}, 0x0) 371.350704ms ago: executing program 3 (id=339): socket$netlink(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x3, 0x98500) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000040)) (async) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0x8) r6 = socket$l2tp(0x2, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000c700000000000000950000"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000904000/0x3000)=nil, 0x1, 0x0, 0x0, 0x2, 0x92, 0x0, 0x1a}) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 57.296492ms ago: executing program 3 (id=340): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@gettaction={0xa4, 0x32, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20044880}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) dup3(r1, r2, 0x0) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000012c0)="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", 0x1e8}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) 0s ago: executing program 1 (id=341): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000540)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 81.908466][ T5832] cgroup: Unknown subsys name 'net' [ 82.061622][ T5832] cgroup: Unknown subsys name 'cpuset' [ 82.070884][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.785409][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.843343][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.851624][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.859467][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.878427][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.887114][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.898896][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.907126][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.915470][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.924126][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.932494][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.959714][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.968758][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.976927][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.985483][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.993696][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.001804][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.009637][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.017488][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.025063][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.048993][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.049480][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.064731][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.078139][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.098295][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.106477][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.651389][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 88.887212][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 88.914513][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 88.945473][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 89.093704][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.101541][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.109170][ T5854] bridge_slave_0: entered allmulticast mode [ 89.116548][ T5854] bridge_slave_0: entered promiscuous mode [ 89.125681][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 89.157806][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.165045][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.173258][ T5854] bridge_slave_1: entered allmulticast mode [ 89.180741][ T5854] bridge_slave_1: entered promiscuous mode [ 89.277007][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.301033][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.309591][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.316926][ T5858] bridge_slave_0: entered allmulticast mode [ 89.324906][ T5858] bridge_slave_0: entered promiscuous mode [ 89.362040][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.386926][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.396899][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.404696][ T5858] bridge_slave_1: entered allmulticast mode [ 89.412982][ T5858] bridge_slave_1: entered promiscuous mode [ 89.486190][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.493698][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.501377][ T5860] bridge_slave_0: entered allmulticast mode [ 89.509422][ T5860] bridge_slave_0: entered promiscuous mode [ 89.533726][ T5854] team0: Port device team_slave_0 added [ 89.540289][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.547680][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.555326][ T5861] bridge_slave_0: entered allmulticast mode [ 89.563227][ T5861] bridge_slave_0: entered promiscuous mode [ 89.608048][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.615227][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.623089][ T5860] bridge_slave_1: entered allmulticast mode [ 89.631271][ T5860] bridge_slave_1: entered promiscuous mode [ 89.656031][ T5854] team0: Port device team_slave_1 added [ 89.662759][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.670004][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.677290][ T5861] bridge_slave_1: entered allmulticast mode [ 89.684766][ T5861] bridge_slave_1: entered promiscuous mode [ 89.694006][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.710500][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.789145][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.796361][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.806926][ T5862] bridge_slave_0: entered allmulticast mode [ 89.814476][ T5862] bridge_slave_0: entered promiscuous mode [ 89.825550][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.854020][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.864032][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.890658][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.932916][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.940227][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.948196][ T5862] bridge_slave_1: entered allmulticast mode [ 89.956225][ T5862] bridge_slave_1: entered promiscuous mode [ 89.966072][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.976895][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.984453][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.011718][ T5856] Bluetooth: hci0: command tx timeout [ 90.016153][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.017524][ T51] Bluetooth: hci1: command tx timeout [ 90.042709][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.055116][ T5858] team0: Port device team_slave_0 added [ 90.109830][ T5860] team0: Port device team_slave_0 added [ 90.118769][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.130525][ T5858] team0: Port device team_slave_1 added [ 90.157602][ T5856] Bluetooth: hci4: command tx timeout [ 90.157813][ T5845] Bluetooth: hci2: command tx timeout [ 90.163481][ T51] Bluetooth: hci3: command tx timeout [ 90.198426][ T5860] team0: Port device team_slave_1 added [ 90.252008][ T5861] team0: Port device team_slave_0 added [ 90.260954][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.274312][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.303012][ T5854] hsr_slave_0: entered promiscuous mode [ 90.309928][ T5854] hsr_slave_1: entered promiscuous mode [ 90.332266][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.339811][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.366085][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.379834][ T5861] team0: Port device team_slave_1 added [ 90.386509][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.393984][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.420655][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.494164][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.503380][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.530064][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.572580][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.579727][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.606846][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.621641][ T5862] team0: Port device team_slave_0 added [ 90.632209][ T5862] team0: Port device team_slave_1 added [ 90.638914][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.645883][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.673076][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.720642][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.727747][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.754254][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.841983][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.850690][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.879027][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.911032][ T5858] hsr_slave_0: entered promiscuous mode [ 90.918081][ T5858] hsr_slave_1: entered promiscuous mode [ 90.924260][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.932494][ T5858] Cannot create hsr debugfs directory [ 90.972336][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.979513][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.005952][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.052007][ T5860] hsr_slave_0: entered promiscuous mode [ 91.059108][ T5860] hsr_slave_1: entered promiscuous mode [ 91.065249][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.073068][ T5860] Cannot create hsr debugfs directory [ 91.122288][ T5861] hsr_slave_0: entered promiscuous mode [ 91.129678][ T5861] hsr_slave_1: entered promiscuous mode [ 91.135912][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.143875][ T5861] Cannot create hsr debugfs directory [ 91.346445][ T5862] hsr_slave_0: entered promiscuous mode [ 91.354605][ T5862] hsr_slave_1: entered promiscuous mode [ 91.361081][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.369130][ T5862] Cannot create hsr debugfs directory [ 91.770851][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.800023][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.825414][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.836498][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.917242][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.950968][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.975971][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.000303][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.077772][ T51] Bluetooth: hci1: command tx timeout [ 92.077976][ T5845] Bluetooth: hci0: command tx timeout [ 92.091504][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.104391][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.116715][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.153263][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.236082][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.242860][ T5845] Bluetooth: hci3: command tx timeout [ 92.242907][ T5845] Bluetooth: hci4: command tx timeout [ 92.256711][ T51] Bluetooth: hci2: command tx timeout [ 92.276365][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.330967][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.342119][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.356408][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.426238][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.463951][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.471245][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.484203][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.513165][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.520430][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.529772][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.541006][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.552431][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.651722][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.726655][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.766565][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.806233][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.854713][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.862073][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.887219][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.894463][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.905057][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.912276][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.949808][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.971737][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.979032][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.022542][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.062030][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.120236][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.127476][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.139710][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.146843][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.213956][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.252084][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.294305][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.301497][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.363028][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.370279][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.396567][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.404408][ T5854] veth0_vlan: entered promiscuous mode [ 93.442035][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.496526][ T5854] veth1_vlan: entered promiscuous mode [ 93.582907][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.635868][ T5854] veth0_macvtap: entered promiscuous mode [ 93.646967][ T5854] veth1_macvtap: entered promiscuous mode [ 93.663194][ T5858] veth0_vlan: entered promiscuous mode [ 93.710042][ T5858] veth1_vlan: entered promiscuous mode [ 93.730317][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.743355][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.772315][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.837070][ T5860] veth0_vlan: entered promiscuous mode [ 93.845946][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.859170][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.868406][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.877154][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.891813][ T5861] veth0_vlan: entered promiscuous mode [ 93.925027][ T5861] veth1_vlan: entered promiscuous mode [ 93.949989][ T5862] veth0_vlan: entered promiscuous mode [ 93.986244][ T5858] veth0_macvtap: entered promiscuous mode [ 93.997225][ T5858] veth1_macvtap: entered promiscuous mode [ 94.020623][ T5860] veth1_vlan: entered promiscuous mode [ 94.036114][ T5862] veth1_vlan: entered promiscuous mode [ 94.083320][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.136918][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.150154][ T5860] veth0_macvtap: entered promiscuous mode [ 94.157821][ T5845] Bluetooth: hci0: command tx timeout [ 94.159685][ T51] Bluetooth: hci1: command tx timeout [ 94.189135][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.202350][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.211207][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.220305][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.248528][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.259824][ T5861] veth0_macvtap: entered promiscuous mode [ 94.271674][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.286237][ T5860] veth1_macvtap: entered promiscuous mode [ 94.321580][ T51] Bluetooth: hci2: command tx timeout [ 94.321614][ T5845] Bluetooth: hci4: command tx timeout [ 94.327039][ T51] Bluetooth: hci3: command tx timeout [ 94.341595][ T5861] veth1_macvtap: entered promiscuous mode [ 94.384351][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.401959][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.411278][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.422865][ T5862] veth0_macvtap: entered promiscuous mode [ 94.449474][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.462768][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.486487][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.501573][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.512944][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.521780][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.530609][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.548761][ T5862] veth1_macvtap: entered promiscuous mode [ 94.580723][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.595454][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.597028][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.627026][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.636153][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.691791][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.700556][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.714745][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.784071][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.844395][ T5862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.854333][ T5862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.865184][ T5862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.874486][ T5862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.903223][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.917000][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.006409][ T4511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.014918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.023715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 95.033744][ T4511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.155043][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.167860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.176529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.211953][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.260702][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.419734][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.514240][ T5946] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.736893][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.751713][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.763877][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.801310][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.991326][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.029195][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.238192][ T51] Bluetooth: hci0: command tx timeout [ 96.248433][ T51] Bluetooth: hci1: command tx timeout [ 96.298409][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.399277][ T5856] Bluetooth: hci2: command tx timeout [ 96.405231][ T5856] Bluetooth: hci3: command tx timeout [ 96.411377][ T51] Bluetooth: hci4: command tx timeout [ 96.476541][ T5955] sctp: [Deprecated]: syz.4.5 (pid 5955) Use of int in max_burst socket option. [ 96.476541][ T5955] Use struct sctp_assoc_value instead [ 96.521127][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.541893][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 96.561544][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.598929][ T9] usb 2-1: Product: syz [ 96.627817][ T9] usb 2-1: Manufacturer: syz [ 96.673175][ T9] usb 2-1: SerialNumber: syz [ 96.758074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 96.767484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 96.775956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 96.851834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.871245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.992823][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.028820][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.101437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.134167][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.147333][ T43] cfg80211: failed to load regulatory.db [ 97.714752][ T5983] Zero length message leads to an empty skb [ 97.846534][ T9] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 97.868919][ T9] usb 2-1: USB disconnect, device number 2 [ 97.938747][ T5929] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 97.956194][ T5989] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9'. [ 98.046415][ T5990] netlink: 'syz.2.9': attribute type 20 has an invalid length. [ 98.078627][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.194111][ T5929] usb 5-1: Invalid ep0 maxpacket: 16 [ 98.389737][ T5929] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 98.641210][ T5993] loop2: detected capacity change from 0 to 7 [ 98.663494][ T5993] loop2: [POWERTEC] p1 p2 p3 [ 98.688821][ T5929] usb 5-1: Invalid ep0 maxpacket: 16 [ 98.698986][ T5993] loop2: p2 start 4294967287 is beyond EOD, truncated [ 98.709370][ T5929] usb usb5-port1: attempt power cycle [ 98.739642][ T5993] loop2: p3 start 1932423285 is beyond EOD, truncated [ 99.051365][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.078728][ T5929] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 99.168406][ T5929] usb 5-1: Invalid ep0 maxpacket: 16 [ 99.309875][ T5929] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 99.348521][ T5929] usb 5-1: Invalid ep0 maxpacket: 16 [ 99.364430][ T5929] usb usb5-port1: unable to enumerate USB device [ 99.455541][ T5997] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.467687][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.476502][ T5997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 99.499643][ T5998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 99.657883][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 99.670477][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.727968][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.740413][ T6005] netlink: zone id is out of range [ 99.746032][ T6005] netlink: zone id is out of range [ 99.752939][ T6005] netlink: zone id is out of range [ 99.755170][ T10] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.759325][ T6005] netlink: zone id is out of range [ 99.779488][ T6005] netlink: del zone limit has 4 unknown bytes [ 99.825311][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.852776][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 99.887829][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.935095][ T10] usb 2-1: config 0 descriptor?? [ 100.321140][ T978] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.373407][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.409396][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.455107][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.504355][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.512461][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 100.564469][ T978] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 100.583028][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.609631][ T978] usb 4-1: config 0 has no interface number 0 [ 100.616525][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.660723][ T978] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 100.683204][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.709775][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.723030][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.740529][ T978] usb 4-1: Product: syz [ 100.744933][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.769125][ T978] usb 4-1: Manufacturer: syz [ 100.780079][ T978] usb 4-1: SerialNumber: syz [ 100.784916][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.797344][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.811178][ T978] usb 4-1: config 0 descriptor?? [ 100.817765][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.833545][ T978] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 100.843411][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.866266][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.890908][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.898702][ T5969] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.918978][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.934326][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.952277][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 100.994744][ T10] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 101.017534][ T10] hid-generic 0003:045E:05DA.0001: unbalanced collection at end of report description [ 101.050871][ T978] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 101.068057][ T10] hid-generic 0003:045E:05DA.0001: probe with driver hid-generic failed with error -22 [ 101.094614][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 101.125087][ T5969] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 101.146480][ T5969] usb 5-1: config 0 has no interface number 0 [ 101.154006][ T978] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 101.172777][ T10] usb 2-1: USB disconnect, device number 3 [ 101.201087][ T5969] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 101.231184][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 49 [ 101.242568][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 49 [ 101.254644][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.284804][ T5969] usb 5-1: Product: syz [ 101.293651][ T5969] usb 5-1: Manufacturer: syz [ 101.305462][ T5969] usb 5-1: SerialNumber: syz [ 101.327202][ T5969] usb 5-1: config 0 descriptor?? [ 101.443989][ T6025] loop2: detected capacity change from 0 to 7 [ 101.454246][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.463610][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.501791][ T6026] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 101.518501][ T5902] loop2: [POWERTEC] p1 p2 p3 [ 101.605058][ T5902] loop2: p2 start 4294967287 is beyond EOD, truncated [ 101.618073][ T5969] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 101.624636][ T5969] usb 5-1: No valid video chain found. [ 101.662427][ T5902] loop2: p3 start 1932423285 is beyond EOD, truncated [ 101.711365][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 101.725597][ T5969] usb 4-1: USB disconnect, device number 2 [ 101.741864][ T6025] loop2: [POWERTEC] p1 p2 p3 [ 101.754859][ T6025] loop2: p2 start 4294967287 is beyond EOD, truncated [ 101.771575][ T6025] loop2: p3 start 1932423285 is beyond EOD, truncated [ 101.792479][ T5969] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 101.827831][ T10] usb 5-1: USB disconnect, device number 6 [ 101.891825][ T5969] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 101.933041][ T5969] quatech2 4-1:0.51: device disconnected [ 102.086800][ T6032] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 102.098138][ T6032] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 102.101868][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 102.176468][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 102.264985][ T6032] bond1: (slave vcan1): making interface the new active one [ 102.309706][ T6032] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 102.392686][ T6035] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.21'. [ 102.485674][ T6035] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `] Iq!>s*!)\+` [ 102.789454][ T43] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 103.073915][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.086261][ T43] usb 4-1: config 0 has no interface number 0 [ 103.103073][ T43] usb 4-1: too many endpoints for config 0 interface 1 altsetting 205: 41, using maximum allowed: 30 [ 103.126520][ T43] usb 4-1: config 0 interface 1 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 103.139943][ T43] usb 4-1: config 0 interface 1 has no altsetting 0 [ 103.196959][ T43] usb 4-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 103.206135][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.235121][ T43] usb 4-1: Product: syz [ 103.242527][ T43] usb 4-1: Manufacturer: syz [ 103.250110][ T43] usb 4-1: SerialNumber: syz [ 103.301329][ T43] usb 4-1: config 0 descriptor?? [ 103.677645][ T6048] use of bytesused == 0 is deprecated and will be removed in the future, [ 103.686321][ T6048] use the actual size instead. [ 103.931028][ T43] cx231xx 4-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 103.942948][ T43] cx231xx 4-1:0.1: Not found matching IAD interface [ 104.369099][ T5916] usb 4-1: USB disconnect, device number 3 [ 104.767830][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.027512][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 105.049889][ T6069] bridge0: entered promiscuous mode [ 105.083028][ T6069] macvlan2: entered promiscuous mode [ 105.101886][ T10] usb 5-1: config 0 has no interfaces? [ 105.134542][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 105.166750][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.225275][ T10] usb 5-1: Product: syz [ 105.240552][ T10] usb 5-1: Manufacturer: syz [ 105.258774][ T10] usb 5-1: SerialNumber: syz [ 105.331636][ T10] usb 5-1: config 0 descriptor?? [ 105.377564][ T5969] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.536036][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 105.628370][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 105.678195][ T6075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.699431][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 105.710525][ T5969] usb 4-1: too many configurations: 169, using maximum allowed: 8 [ 105.723131][ T5969] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 105.731291][ T5969] usb 4-1: can't read configurations, error -61 [ 105.832321][ T6075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.888395][ T5969] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.107987][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 106.125294][ T5969] usb 4-1: too many configurations: 169, using maximum allowed: 8 [ 106.138491][ T5969] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 106.146552][ T5969] usb 4-1: can't read configurations, error -61 [ 106.161628][ T5969] usb usb4-port1: attempt power cycle [ 106.296010][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.449127][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 106.460709][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.475209][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.527047][ T5969] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.550591][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.569856][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 106.576423][ T5969] usb 4-1: too many configurations: 169, using maximum allowed: 8 [ 106.594954][ T6095] program syz.2.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.618823][ T5969] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 106.626649][ T5969] usb 4-1: can't read configurations, error -61 [ 106.647629][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 106.794805][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.817499][ T5969] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.860980][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 106.867336][ T5969] usb 4-1: too many configurations: 169, using maximum allowed: 8 [ 106.890650][ T5969] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 106.901404][ T5969] usb 4-1: can't read configurations, error -61 [ 106.916668][ T5969] usb usb4-port1: unable to enumerate USB device [ 106.918753][ T43] usb 2-1: config 0 descriptor?? [ 107.178632][ T6102] ======================================================= [ 107.178632][ T6102] WARNING: The mand mount option has been deprecated and [ 107.178632][ T6102] and is ignored by this kernel. Remove the mand [ 107.178632][ T6102] option from the mount to silence this warning. [ 107.178632][ T6102] ======================================================= [ 107.213585][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.249949][ T6102] fuse: Bad value for 'fd' [ 107.263920][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.303847][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.320098][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.344474][ T43] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.396530][ T43] microsoft 0003:045E:07DA.0002: unbalanced collection at end of report description [ 107.435820][ T10] usb 5-1: USB disconnect, device number 7 [ 107.449671][ T43] microsoft 0003:045E:07DA.0002: parse failed [ 107.467556][ T43] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 107.467771][ T5969] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.551735][ T43] usb 2-1: USB disconnect, device number 4 [ 107.660124][ T5969] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.708378][ T5969] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.738105][ T5969] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.744795][ T5969] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 107.777542][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.806867][ T5969] usb 3-1: config 0 descriptor?? [ 107.917580][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.932697][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.087598][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 108.099463][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.113140][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.125656][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.136142][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.145484][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.154656][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.163430][ T10] usb 5-1: SerialNumber: syz [ 108.171388][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.182068][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.197471][ T9] usb 1-1: Product: syz [ 108.209073][ T9] usb 1-1: Manufacturer: syz [ 108.214303][ T9] usb 1-1: SerialNumber: syz [ 108.268839][ T5969] aquacomputer_d5next 0003:0C70:F010.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f010] on usb-dummy_hcd.2-1/input0 [ 108.330496][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.499200][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 108.516248][ T43] usb 2-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 108.557326][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 108.568049][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.40 [ 108.577860][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.585907][ T43] usb 2-1: Product: ы [ 108.590297][ T43] usb 2-1: Manufacturer: ࠭ [ 108.594935][ T43] usb 2-1: SerialNumber: 䴒㾐轩ᅵͰ櫵㎵耼귄폾㶙寧爢ﮈ锄ꈽጰ摥锘场쯼⯹੪㊘癣⊁₹際䅬鲽䩴㖬㝙뾭䝢梮젧㔎鯌씥銩䁭휈塦눦፿䕙꫎ᦉ鱍鍳全芓꽼邫냻⪹Ꞅἶ覥䝋锡뿳㠸䟙㱻鸈欣♷沠쾥ᴸ읥杴斎〽䒌㦁꫼蚧惾ڭꎟ䈾䩆䬑棑叾Ä뛛耯洁讳 [ 108.634086][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 108.692866][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.708299][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.734699][ T9] usb 1-1: 0:2 : does not exist [ 108.763122][ T10] usb 5-1: 0:2 : does not exist [ 108.772684][ T9] usb 1-1: USB disconnect, device number 2 [ 108.810103][ T10] usb 5-1: USB disconnect, device number 8 [ 108.897307][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 108.901124][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.003490][ T6112] fuse: Unknown parameter 'room[000000000000' [ 109.143542][ T43] usbhid 2-1:1.0: can't add hid device: -71 [ 109.155573][ T43] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 109.186198][ T43] usb 2-1: USB disconnect, device number 5 [ 109.527689][ T10] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 109.717594][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.887779][ T43] usb 1-1: device descriptor read/64, error -71 [ 110.103336][ T6132] netlink: 14 bytes leftover after parsing attributes in process `syz.1.45'. [ 110.279793][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.419675][ T43] usb 1-1: device descriptor read/64, error -71 [ 110.537790][ T43] usb usb1-port1: attempt power cycle [ 110.680671][ T6143] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.48'. [ 110.898128][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.938232][ T43] usb 1-1: device descriptor read/8, error -71 [ 111.244596][ T6132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.255583][ T9] usb 3-1: USB disconnect, device number 2 [ 111.282347][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.291363][ T6132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.322955][ T6132] bond0 (unregistering): Released all slaves [ 111.552812][ T43] usb 1-1: device descriptor read/8, error -71 [ 111.567751][ T6144] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 111.709392][ T43] usb usb1-port1: unable to enumerate USB device [ 111.904657][ T6156] netlink: 'syz.3.50': attribute type 3 has an invalid length. [ 111.949174][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.50'. [ 111.996024][ T6159] netlink: 'syz.3.50': attribute type 3 has an invalid length. [ 112.095799][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.50'. [ 112.764860][ T6170] netlink: 'syz.0.54': attribute type 29 has an invalid length. [ 112.774638][ T6170] netlink: 'syz.0.54': attribute type 29 has an invalid length. [ 112.789636][ T6170] netlink: 500 bytes leftover after parsing attributes in process `syz.0.54'. [ 112.839627][ T6172] loop6: detected capacity change from 0 to 2560 [ 112.966544][ T5975] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.024924][ T5975] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.063603][ T5975] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.109023][ T6181] syz.0.57 uses obsolete (PF_INET,SOCK_PACKET) [ 113.118709][ T5975] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.159675][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 113.180520][ T5975] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.458581][ T6187] netlink: 4424 bytes leftover after parsing attributes in process `syz.0.59'. [ 113.947995][ T5916] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.140933][ T5916] usb 3-1: device descriptor read/64, error -71 [ 114.398012][ T5916] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.567583][ T5916] usb 3-1: device descriptor read/64, error -71 [ 114.998470][ T5916] usb usb3-port1: attempt power cycle [ 115.113838][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'. [ 115.169739][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'. [ 115.243531][ T6215] tipc: Started in network mode [ 115.289689][ T6215] tipc: Node identity ffe407, cluster identity 4711 [ 115.319988][ T6215] tipc: Node number set to 16770055 [ 115.347650][ T5916] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.409034][ T5916] usb 3-1: device descriptor read/8, error -71 [ 115.627848][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.648264][ T5916] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.690090][ T5916] usb 3-1: device descriptor read/8, error -71 [ 115.767979][ T6236] netlink: 'syz.4.70': attribute type 4 has an invalid length. [ 115.825119][ T5916] usb usb3-port1: unable to enumerate USB device [ 115.843492][ T6237] netlink: 4424 bytes leftover after parsing attributes in process `syz.1.71'. [ 115.872339][ T6234] netlink: 'syz.4.70': attribute type 4 has an invalid length. [ 115.902358][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.947785][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.955870][ T9] usb 1-1: Product: syz [ 115.997608][ T9] usb 1-1: Manufacturer: syz [ 116.020926][ T9] usb 1-1: SerialNumber: syz [ 116.067083][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.155516][ T5969] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.619034][ T9] usb 1-1: USB disconnect, device number 7 [ 117.257601][ T5916] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.277576][ T5969] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 117.284837][ T5969] ath9k_htc: Failed to initialize the device [ 117.335267][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 117.533675][ T6265] FAULT_INJECTION: forcing a failure. [ 117.533675][ T6265] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.548204][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.2.80 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 117.548224][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.548239][ T6265] Call Trace: [ 117.548245][ T6265] [ 117.548252][ T6265] dump_stack_lvl+0x189/0x250 [ 117.548279][ T6265] ? __pfx____ratelimit+0x10/0x10 [ 117.548304][ T6265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.548322][ T6265] ? __pfx__printk+0x10/0x10 [ 117.548344][ T6265] ? __might_fault+0xb0/0x130 [ 117.548370][ T6265] should_fail_ex+0x414/0x560 [ 117.548396][ T6265] _copy_from_user+0x2d/0xb0 [ 117.548416][ T6265] sock_do_ioctl+0x182/0x300 [ 117.548447][ T6265] ? __pfx_sock_do_ioctl+0x10/0x10 [ 117.548469][ T6265] ? __lock_acquire+0xab9/0xd20 [ 117.548497][ T6265] sock_ioctl+0x576/0x790 [ 117.548521][ T6265] ? __pfx_sock_ioctl+0x10/0x10 [ 117.548544][ T6265] ? __fget_files+0x2a/0x420 [ 117.548564][ T6265] ? __fget_files+0x3a0/0x420 [ 117.548584][ T6265] ? __fget_files+0x2a/0x420 [ 117.548606][ T6265] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.548622][ T6265] ? __pfx_sock_ioctl+0x10/0x10 [ 117.548652][ T6265] __se_sys_ioctl+0xf9/0x170 [ 117.548670][ T6265] do_syscall_64+0xfa/0x3b0 [ 117.548684][ T6265] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.548707][ T6265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.548722][ T6265] ? clear_bhb_loop+0x60/0xb0 [ 117.548741][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.548756][ T6265] RIP: 0033:0x7f2b5c98e929 [ 117.548773][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.548786][ T6265] RSP: 002b:00007f2b5a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.548803][ T6265] RAX: ffffffffffffffda RBX: 00007f2b5cbb5fa0 RCX: 00007f2b5c98e929 [ 117.548814][ T6265] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 117.548824][ T6265] RBP: 00007f2b5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.548833][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.548842][ T6265] R13: 0000000000000000 R14: 00007f2b5cbb5fa0 R15: 00007f2b5ccdfa28 [ 117.548864][ T6265] [ 117.774550][ T5916] usb 5-1: config 0 has no interfaces? [ 117.798374][ T5916] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.819370][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.833569][ T6266] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 117.984606][ T5916] usb 5-1: Product: syz [ 118.045280][ T5916] usb 5-1: Manufacturer: syz [ 118.053879][ T5916] usb 5-1: SerialNumber: syz [ 118.119701][ T5916] usb 5-1: config 0 descriptor?? [ 118.208453][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 118.415022][ T6277] netlink: 4424 bytes leftover after parsing attributes in process `syz.3.83'. [ 118.478189][ T6279] loop2: detected capacity change from 0 to 7 [ 118.502625][ T6279] loop2: [POWERTEC] p1 p2 p3 [ 118.533904][ T6279] loop2: p2 start 4294967287 is beyond EOD, truncated [ 118.543821][ T6281] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 118.561705][ T6279] loop2: p3 start 1932423285 is beyond EOD, truncated [ 118.664259][ T6281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.691257][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.818907][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.868052][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.039503][ T5929] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.200121][ T5929] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 119.218630][ T5929] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 119.241867][ T5929] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.256487][ T5929] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.266073][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.283918][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 119.310058][ T5929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.328102][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 119.351077][ T6301] tc_dump_action: action bad kind [ 119.398102][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.412730][ T5929] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 119.483248][ T10] usb 5-1: USB disconnect, device number 9 [ 119.506397][ T5929] usb 1-1: USB disconnect, device number 8 [ 119.572387][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 119.593796][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 119.631134][ T9] usb 4-1: config 0 has no interface number 0 [ 119.644058][ T6304] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.92'. [ 119.648084][ T9] usb 4-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.669538][ T9] usb 4-1: config 0 interface 188 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 119.686238][ T9] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 129, changing to 11 [ 119.704334][ T9] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 10062, setting to 1024 [ 119.716245][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 119.739455][ T9] usb 4-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.755678][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 119.774766][ T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b [ 119.784662][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.799397][ T9] usb 4-1: Product: syz [ 119.803649][ T9] usb 4-1: Manufacturer: syz [ 119.812604][ T9] usb 4-1: SerialNumber: syz [ 119.831306][ T9] usb 4-1: config 0 descriptor?? [ 119.839773][ T6294] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 119.863409][ T9] option 4-1:0.188: GSM modem (1-port) converter detected [ 119.989276][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 120.074740][ T6294] netlink: 'syz.3.89': attribute type 3 has an invalid length. [ 120.088130][ T6318] loop2: detected capacity change from 0 to 7 [ 120.096652][ T6318] loop2: [POWERTEC] p1 p2 p3 [ 120.108133][ T6318] loop2: p2 start 4294967287 is beyond EOD, truncated [ 120.114999][ T6318] loop2: p3 start 1932423285 is beyond EOD, truncated [ 120.149498][ T10] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 120.170154][ T10] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 120.184162][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.198560][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 120.203131][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.223816][ T10] usb 5-1: Product: syz [ 120.236831][ T10] usb 5-1: Manufacturer: syz [ 120.247450][ T10] usb 5-1: SerialNumber: syz [ 120.350428][ T24] usb 4-1: USB disconnect, device number 9 [ 120.363557][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 120.373872][ T24] option 4-1:0.188: device disconnected [ 120.381262][ T6321] netlink: 6 bytes leftover after parsing attributes in process `syz.0.97'. [ 120.390604][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 120.412887][ T9] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 120.427312][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.479613][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.519890][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.528811][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.547664][ T10] usb 5-1: selecting invalid altsetting 1 [ 120.559262][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.559990][ T6325] xt_TCPMSS: Only works on TCP SYN packets [ 120.567307][ T9] usb 2-1: Product: syz [ 120.567327][ T9] usb 2-1: Manufacturer: syz [ 120.567343][ T9] usb 2-1: SerialNumber: syz [ 120.587140][ T10] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 120.587840][ T10] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 120.647754][ T10] usb 5-1: USB disconnect, device number 10 [ 120.682087][ T6327] xt_cgroup: path and classid specified [ 120.693067][ T6329] process 'syz.2.99' launched './file1' with NULL argv: empty string added [ 120.779065][ T6333] syz.0.100 (6333): drop_caches: 0 [ 121.021449][ T9] usb 2-1: 0:2 : does not exist [ 121.053473][ T978] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.070172][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 121.141201][ T9] usb 2-1: USB disconnect, device number 6 [ 121.218901][ T6343] netlink: 'syz.3.103': attribute type 12 has an invalid length. [ 121.237838][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 121.259965][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.264940][ T6343] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.103'. [ 121.293757][ T978] usb 1-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 121.307670][ T978] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.322993][ T978] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 121.335667][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.353451][ T978] usb 1-1: Product: syz [ 121.361316][ T978] usb 1-1: Manufacturer: syz [ 121.366053][ T978] usb 1-1: SerialNumber: syz [ 121.380120][ T978] usb 1-1: config 0 descriptor?? [ 121.387679][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.532553][ T24] usb 3-1: device descriptor read/64, error -71 [ 121.604566][ T6331] program syz.0.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.718180][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.733785][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.777494][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 121.832963][ T6361] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 121.867927][ T5916] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 121.917710][ T24] usb 3-1: device descriptor read/64, error -71 [ 122.037520][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 122.043798][ T24] usb usb3-port1: attempt power cycle [ 122.054903][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.076706][ T43] IPVS: starting estimator thread 0... [ 122.084974][ T5916] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 122.118990][ T5916] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 122.131820][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.210512][ T6367] IPVS: using max 25 ests per chain, 60000 per kthread [ 122.234802][ T5916] usb 5-1: Product: syz [ 122.241187][ T5916] usb 5-1: Manufacturer: syz [ 122.252304][ T5916] usb 5-1: SerialNumber: syz [ 122.402752][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.428444][ T24] usb 3-1: device descriptor read/8, error -71 [ 122.518926][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.544626][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.605602][ T6369] netlink: 4424 bytes leftover after parsing attributes in process `syz.3.110'. [ 122.707529][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 122.740549][ T24] usb 3-1: device descriptor read/8, error -71 [ 122.858202][ T24] usb usb3-port1: unable to enumerate USB device [ 123.692463][ T978] usb 1-1: USB disconnect, device number 9 [ 124.207045][ T6388] input: syz0 as /devices/virtual/input/input5 [ 124.220659][ T6388] input: failed to attach handler leds to device input5, error: -6 [ 124.307688][ T6389] KVM: debugfs: duplicate directory 6389-8 [ 124.680370][ T6396] usb usb8: usbfs: process 6396 (syz.3.114) did not claim interface 0 before use [ 124.803721][ T5916] kvaser_usb 5-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 124.852136][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 124.865840][ T5916] usb 5-1: USB disconnect, device number 11 [ 125.917298][ T6426] netlink: 4424 bytes leftover after parsing attributes in process `syz.0.121'. [ 127.004729][ T5916] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.087171][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 127.108391][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 127.187752][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.217835][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.234818][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.260236][ T5916] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 127.283029][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.296879][ T5916] usb 2-1: config 0 descriptor?? [ 127.389571][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 127.399131][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.413390][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.424914][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.439163][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 127.449259][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.464168][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 127.478633][ T43] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 127.487126][ T43] usb 5-1: Manufacturer: syz [ 127.496290][ T43] usb 5-1: config 0 descriptor?? [ 127.727633][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.753993][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.775268][ T978] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 127.842247][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.922867][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.957797][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 127.963427][ T43] rc_core: IR keymap rc-hauppauge not found [ 127.977592][ T43] Registered IR keymap rc-empty [ 127.994734][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.037657][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.060910][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 128.086539][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.109926][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 128.213071][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.240404][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.283280][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.378346][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 128.384449][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 128.395422][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.489754][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.507885][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.508075][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.550237][ T5916] usb 2-1: USB disconnect, device number 7 [ 128.557804][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.599718][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.618619][ T6474] netlink: 4424 bytes leftover after parsing attributes in process `syz.3.132'. [ 128.650728][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.679618][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.711254][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.728587][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 128.742431][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 128.755869][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.814090][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.815919][ T43] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 128.853793][ T43] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 128.860487][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.895130][ T10] usb 1-1: Product: syz [ 128.903357][ T10] usb 1-1: Manufacturer: syz [ 128.909513][ T43] usb 5-1: USB disconnect, device number 12 [ 128.916589][ T10] usb 1-1: SerialNumber: syz [ 129.043698][ T10] usb 1-1: config 0 descriptor?? [ 129.101984][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 129.137019][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 129.397654][ T5916] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 129.519540][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.577959][ T5916] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 129.592624][ T5916] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 129.620961][ T5916] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 129.663564][ T5916] usb 4-1: config 220 has no interface number 2 [ 129.673846][ T5916] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 129.687285][ T6468] loop2: detected capacity change from 0 to 7 [ 129.699086][ T6468] Dev loop2: unable to read RDB block 7 [ 129.704770][ T6468] loop2: unable to read partition table [ 129.724410][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 129.738027][ T43] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 129.746757][ T5916] usb 4-1: config 220 interface 0 has no altsetting 0 [ 129.756587][ T6468] loop2: partition table beyond EOD, truncated [ 129.769356][ T43] usb 5-1: config 0 has no interface number 0 [ 129.771043][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 129.776173][ T5916] usb 4-1: config 220 interface 76 has no altsetting 0 [ 129.815058][ T43] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 129.827785][ T6468] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 129.830368][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 129.857498][ T5916] usb 4-1: config 220 interface 1 has no altsetting 0 [ 129.864530][ T43] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 129.887040][ T5916] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 129.896796][ T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 129.908508][ T43] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 129.916846][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.925747][ T43] usb 5-1: Product: syz [ 129.930536][ T5916] usb 4-1: Product: syz [ 129.936787][ T43] usb 5-1: SerialNumber: syz [ 129.943755][ T5916] usb 4-1: Manufacturer: syz [ 129.953016][ T5916] usb 4-1: SerialNumber: syz [ 129.969347][ T43] usb 5-1: config 0 descriptor?? [ 129.983487][ T43] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 130.024529][ T43] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 130.198020][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 130.273946][ T5916] usb 4-1: selecting invalid altsetting 0 [ 130.304197][ T5916] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 130.353336][ T5916] usb 4-1: No valid video chain found. [ 130.440338][ T5916] usb 4-1: selecting invalid altsetting 0 [ 130.469253][ T5916] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 130.525677][ T10] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 130.528497][ T5916] usb 4-1: USB disconnect, device number 10 [ 130.528618][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 130.901904][ T978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 130.911118][ T978] usb 3-1: no configurations [ 130.916000][ T978] usb 3-1: can't read configurations, error -22 [ 130.944850][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 130.981109][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 131.009767][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 131.022603][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 131.050486][ T10] usb 1-1: USB disconnect, device number 10 [ 131.227545][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.384151][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 131.397494][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 131.404739][ T9] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 131.413456][ T9] usb 4-1: config 8 has no interface number 0 [ 131.420188][ T9] usb 4-1: config 8 interface 203 has no altsetting 0 [ 131.430055][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 131.439607][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.449126][ T9] usb 4-1: Product: syz [ 131.453331][ T9] usb 4-1: Manufacturer: syz [ 131.458411][ T9] usb 4-1: SerialNumber: syz [ 131.548107][ T978] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 131.726472][ T9] port100 4-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 131.747837][ T978] usb 3-1: config 2 has no interfaces? [ 131.756166][ T6510] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 131.764113][ T6510] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.837994][ T978] usb 3-1: New USB device found, idVendor=1f4d, idProduct=0102, bcdDevice=4e.30 [ 131.862529][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.888156][ T9] usb 4-1: USB disconnect, device number 11 [ 132.073175][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.073452][ T978] usb 5-1: USB disconnect, device number 13 [ 132.080183][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 132.566079][ T978] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 132.826556][ T6527] netlink: 32 bytes leftover after parsing attributes in process `syz.3.146'. [ 133.664616][ T6536] fuse: Bad value for 'rootmode' [ 134.126116][ T5916] usb 3-1: USB disconnect, device number 12 [ 134.687484][ T5916] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.857869][ T6556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.687512][ T978] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 135.757795][ T30] audit: type=1326 audit(1751965047.576:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 135.779996][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.825573][ T30] audit: type=1326 audit(1751965047.616:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 135.847670][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.847742][ T978] usb 5-1: device descriptor read/64, error -71 [ 135.895250][ T30] audit: type=1326 audit(1751965047.616:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 135.917299][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.928058][ T30] audit: type=1326 audit(1751965047.616:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 135.950200][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.960487][ T30] audit: type=1326 audit(1751965047.616:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 135.977828][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.982515][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.998851][ T30] audit: type=1326 audit(1751965047.616:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 136.037651][ T30] audit: type=1326 audit(1751965047.616:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 136.074529][ T30] audit: type=1326 audit(1751965047.616:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 136.096617][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.098454][ T978] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 136.138091][ T30] audit: type=1326 audit(1751965047.616:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 136.177491][ T30] audit: type=1326 audit(1751965047.616:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 136.177598][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 136.199649][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.207527][ T5916] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 136.224592][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 136.237049][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.254647][ T10] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 136.265937][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.297578][ T978] usb 5-1: device descriptor read/64, error -71 [ 136.320090][ T10] usb 2-1: Product: syz [ 136.325560][ T10] usb 2-1: Manufacturer: syz [ 136.356957][ T10] usb 2-1: SerialNumber: syz [ 136.392366][ T10] usb 2-1: config 0 descriptor?? [ 136.407934][ T978] usb usb5-port1: attempt power cycle [ 136.417257][ T5916] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 136.444364][ T5916] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 136.465511][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.483221][ T5916] usb 4-1: config 0 descriptor?? [ 136.501820][ T5916] usb 4-1: bad CDC descriptors [ 136.643121][ T5916] usb 2-1: USB disconnect, device number 9 [ 136.715723][ T43] usb 4-1: USB disconnect, device number 12 [ 136.868621][ T978] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 137.054765][ T978] usb 5-1: device descriptor read/8, error -71 [ 137.308780][ T978] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 137.328213][ T978] usb 5-1: device descriptor read/8, error -71 [ 137.445702][ T978] usb usb5-port1: unable to enumerate USB device [ 137.738636][ T6587] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 137.956528][ T6586] bond0: (slave bridge1): Enslaving as a backup interface with an up link [ 138.097540][ T5916] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.113525][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.120224][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.283034][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 138.357518][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.382630][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.416267][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59152, setting to 1024 [ 138.439947][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.467865][ T5916] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 138.478435][ T5916] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 138.548114][ T5916] usb 1-1: Manufacturer: syz [ 138.589220][ T5916] usb 1-1: config 0 descriptor?? [ 138.897664][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 138.983682][ T6601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.167'. [ 139.039629][ T5916] rc_core: IR keymap rc-hauppauge not found [ 139.052403][ T5916] Registered IR keymap rc-empty [ 139.060106][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.107569][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 139.114864][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.123755][ T43] usb 5-1: config 0 has no interface number 0 [ 139.130922][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.146298][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.160178][ T5916] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 139.188938][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.199809][ T5916] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 139.215834][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 139.237048][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.271206][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.285063][ T43] usb 5-1: config 0 descriptor?? [ 139.290232][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 139.325678][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.368149][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.412002][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.427665][ T10] usb 3-1: device descriptor read/64, error -71 [ 139.468092][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.538109][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.567871][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.587890][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.610682][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.637867][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.657994][ T5916] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 139.667523][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 139.680214][ T5916] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 139.741141][ T5916] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 139.771532][ T5916] usb 1-1: USB disconnect, device number 11 [ 139.812062][ T10] usb 3-1: device descriptor read/64, error -71 [ 139.858456][ T5843] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.938457][ T10] usb usb3-port1: attempt power cycle [ 140.007571][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 140.016923][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.035823][ T43] uclogic 0003:28BD:0071.0004: pen parameters not found [ 140.047740][ T5843] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 140.068750][ T43] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 140.089377][ T5843] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 140.138864][ T43] usb 5-1: USB disconnect, device number 18 [ 140.159215][ T5843] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.179432][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.208832][ T5843] usb 2-1: SerialNumber: syz [ 140.307723][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 140.338302][ T10] usb 3-1: device descriptor read/8, error -71 [ 140.597482][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 140.638689][ T10] usb 3-1: device descriptor read/8, error -71 [ 140.760305][ T10] usb usb3-port1: unable to enumerate USB device [ 141.088587][ T5843] usb 2-1: USB disconnect, device number 10 [ 141.447945][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 141.797555][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.834638][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.879722][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.889133][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.897178][ T10] usb 4-1: SerialNumber: syz [ 142.239177][ T6635] raw_sendmsg: syz.2.176 forgot to set AF_INET. Fix it! [ 142.427057][ T6636] fuse: Bad value for 'fd' [ 143.395816][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806e54dc00: rx timeout, send abort [ 143.587556][ T5843] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 143.706223][ T5969] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.787560][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 143.797778][ T5843] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 143.804149][ T6660] nvme_fabrics: missing parameter 'transport=%s' [ 143.815640][ T5843] usb 3-1: config 0 has no interface number 0 [ 143.827172][ T6660] nvme_fabrics: missing parameter 'nqn=%s' [ 143.877770][ T5969] usb 1-1: Using ep0 maxpacket: 16 [ 143.886938][ T5843] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 143.894526][ T5969] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.199737][ T6669] overlayfs: missing 'lowerdir' [ 144.278905][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 144.314063][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.314581][ T5969] usb 1-1: config 2 has an invalid interface number: 9 but max is 0 [ 144.345289][ T5843] usb 3-1: Product: syz [ 144.351228][ T5843] usb 3-1: Manufacturer: syz [ 144.363396][ T5843] usb 3-1: SerialNumber: syz [ 144.451972][ T5969] usb 1-1: config 2 has no interface number 0 [ 144.465001][ T5843] usb 3-1: config 0 descriptor?? [ 144.484390][ T5969] usb 1-1: config 2 interface 9 altsetting 10 bulk endpoint 0xC has invalid maxpacket 32 [ 144.502387][ T5843] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.848690][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 144.905445][ T5969] usb 1-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 144.917897][ T9] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 144.931461][ T9] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 144.943843][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.954913][ T5969] usb 1-1: config 2 interface 9 has no altsetting 0 [ 145.031049][ T5969] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 145.046235][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 145.076163][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.101460][ T9] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 145.111165][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.122851][ T9] usb 5-1: Product: syz [ 145.127106][ T9] usb 5-1: Manufacturer: syz [ 145.142234][ T5969] usb 1-1: Product: syz [ 145.146527][ T5969] usb 1-1: Manufacturer: syz [ 145.175665][ T9] usb 5-1: SerialNumber: syz [ 145.191960][ T5969] usb 1-1: SerialNumber: syz [ 145.209928][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.248314][ T9] usb 5-1: config 0 descriptor?? [ 145.249439][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.291597][ T6654] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 145.313334][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 145.320530][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 145.434781][ T5843] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 145.531843][ T5969] pn533_usb 1-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 145.588157][ T5969] usb 1-1: USB disconnect, device number 12 [ 145.665881][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 145.982850][ T5843] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 146.004136][ T5843] usb 3-1: USB disconnect, device number 17 [ 146.023868][ T5843] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 146.047743][ T5843] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 146.122514][ T5843] quatech2 3-1:0.51: device disconnected [ 146.454209][ T10] usb 4-1: 0:2 : does not exist [ 146.499961][ T10] usb 4-1: unit 5: unexpected type 0x0b [ 146.636282][ T6681] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.185'. [ 146.650322][ T10] usb 4-1: USB disconnect, device number 13 [ 146.895024][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.535117][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.188'. [ 147.555108][ T6693] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 147.577788][ T5969] usb 5-1: USB disconnect, device number 19 [ 147.897646][ T6677] mmap: syz.1.183 (6677) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.617665][ T5843] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.705012][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 149.797639][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 149.814970][ T5843] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 149.836612][ T5843] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 149.901468][ T5843] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.913338][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.960377][ T5843] usb 1-1: Manufacturer: ꋳⳑ潻볃퇪펃減ﮬ篤꿻⧉ᮭ⊷ꦱ᝟聻ඌᶏ䫷工㱓㶲偫좠韩ᗿ숇럶䥕ഈ纫傎틎墶죚ꂘ才ᏽ餐穥桱흜쯆컟爑哚衁骚㭠䑷旖麑뇷멾阀ﳯ揳氊뫢﫷ಘ쁎噴韉龝譬꿚㣴䛱륃䄆犵䀱폡膢ᤊ픷ᑒdz㶡肖᣽ꜿ郉쉌⑯ᙶ灓귾﯁䢾约緜廘ꀺ㿧ཎ [ 150.063919][ T10] usb 5-1: config 0 has no interfaces? [ 150.228662][ T5843] usb 1-1: SerialNumber: syz [ 150.336296][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 150.345591][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.516139][ T10] usb 5-1: Product: syz [ 150.536455][ T10] usb 5-1: Manufacturer: syz [ 150.563046][ T10] usb 5-1: SerialNumber: syz [ 150.675328][ T10] usb 5-1: config 0 descriptor?? [ 150.693324][ T5843] cdc_ncm 1-1:1.0: bind() failure [ 150.742772][ T5843] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 150.771576][ T5843] cdc_ncm 1-1:1.1: bind() failure [ 150.884235][ T5843] usb 1-1: USB disconnect, device number 13 [ 150.915463][ T6738] netlink: 4424 bytes leftover after parsing attributes in process `syz.1.197'. [ 150.956638][ T6735] capability: warning: `syz.4.194' uses 32-bit capabilities (legacy support in use) [ 151.663902][ T6750] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 151.684308][ T6750] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 152.082537][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 152.082551][ T30] audit: type=1326 audit(1751965063.906:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 152.461348][ T30] audit: type=1326 audit(1751965063.916:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 152.597503][ T5843] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 152.782485][ T30] audit: type=1326 audit(1751965063.916:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 152.887534][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.917982][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 152.960281][ T30] audit: type=1326 audit(1751965063.916:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 153.080776][ T6771] usb usb8: usbfs: process 6771 (syz.2.207) did not claim interface 0 before use [ 153.185129][ T30] audit: type=1326 audit(1751965063.916:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 153.296626][ T30] audit: type=1326 audit(1751965063.916:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 153.349657][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.363671][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.456090][ T30] audit: type=1326 audit(1751965063.916:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 153.480820][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.562107][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.626469][ T5929] usb 5-1: USB disconnect, device number 20 [ 153.674726][ T30] audit: type=1326 audit(1751965063.916:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 153.698067][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.709271][ T30] audit: type=1326 audit(1751965063.916:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 153.733579][ T24] usb 2-1: config 0 descriptor?? [ 154.254662][ T30] audit: type=1326 audit(1751965063.916:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb621d8e929 code=0x7ffc0000 [ 154.952897][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 155.415949][ T6779] bridge0: port 3(netdevsim0) entered blocking state [ 155.472769][ T6779] bridge0: port 3(netdevsim0) entered disabled state [ 155.484647][ T6779] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 155.502401][ T6779] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 155.517178][ T6779] bridge0: port 3(netdevsim0) entered blocking state [ 155.524339][ T6779] bridge0: port 3(netdevsim0) entered forwarding state [ 156.294676][ T5916] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 156.407808][ T5843] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.437548][ T5916] usb 2-1: device descriptor read/64, error -32 [ 156.576062][ T5843] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 156.592597][ T5843] usb 1-1: can't read configurations, error -71 [ 156.828352][ T5916] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 157.007668][ T5916] usb 2-1: device descriptor read/64, error -32 [ 157.048785][ T6804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.215'. [ 157.181145][ T6804] binder: 6803:6804 ioctl c038943b 200000000140 returned -22 [ 157.309919][ T5916] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 157.388995][ T5916] usb 2-1: device descriptor read/8, error -32 [ 157.697520][ T5916] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 157.710123][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 157.710141][ T30] audit: type=1326 audit(1751965069.536:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.2.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b5c98e929 code=0x0 [ 157.777849][ T5916] usb 2-1: device descriptor read/8, error -32 [ 157.893416][ T5916] raw-gadget.2 gadget.1: failed to queue suspend event [ 157.940530][ T24] usb 2-1: USB disconnect, device number 11 [ 158.234607][ T24] raw-gadget.2 gadget.1: failed to queue reset event [ 158.460542][ T24] raw-gadget.2 gadget.1: failed to queue resume event [ 158.492450][ T978] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 158.651334][ T6765] raw-gadget.2 gadget.1: failed to queue suspend event [ 158.669607][ T6765] raw-gadget.2 gadget.1: failed to queue disconnect event [ 158.693449][ T978] usb 4-1: config 0 has no interfaces? [ 158.699151][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.054694][ T978] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.130393][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.176328][ T978] usb 4-1: Product: syz [ 159.187882][ T978] usb 4-1: Manufacturer: syz [ 159.293547][ T978] usb 4-1: SerialNumber: syz [ 159.365900][ T978] usb 4-1: config 0 descriptor?? [ 160.101441][ T6844] tipc: Enabled bearer , priority 10 [ 160.135452][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.146896][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.161920][ T6846] netlink: zone id is out of range [ 160.177138][ T6846] netlink: zone id is out of range [ 160.267330][ T6846] netlink: zone id is out of range [ 160.294289][ T6846] netlink: zone id is out of range [ 160.397657][ T6846] netlink: zone id is out of range [ 160.404732][ T6846] netlink: zone id is out of range [ 160.421847][ T6846] netlink: zone id is out of range [ 160.438311][ T6846] netlink: zone id is out of range [ 160.474220][ T6846] netlink: zone id is out of range [ 160.510219][ T6846] netlink: zone id is out of range [ 160.697677][ T978] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 160.899618][ T978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.960644][ T978] usb 1-1: not running at top speed; connect to a high speed hub [ 160.993393][ T978] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 161.005867][ T978] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 161.019721][ T978] usb 1-1: config 4 has no interface number 0 [ 161.041255][ T978] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 161.162884][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.189749][ T978] usb 1-1: Product: syz [ 161.201103][ T978] usb 1-1: Manufacturer: syz [ 161.215093][ T978] usb 1-1: SerialNumber: syz [ 161.452366][ T978] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 161.462047][ T978] usb 1-1: No streaming interface found for terminal 6. [ 161.523881][ T978] usb 1-1: USB disconnect, device number 16 [ 162.113131][ T978] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 162.135608][ T9] usb 4-1: USB disconnect, device number 14 [ 162.307471][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 162.322620][ T978] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 162.379492][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.407774][ T978] usb 5-1: Product: syz [ 162.412025][ T978] usb 5-1: Manufacturer: syz [ 162.416644][ T978] usb 5-1: SerialNumber: syz [ 162.488346][ T978] usb 5-1: config 0 descriptor?? [ 162.510944][ T978] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 163.318666][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 163.360528][ T978] gspca_sonixj: reg_r err -32 [ 163.365309][ T978] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 163.490994][ T24] usb 4-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 163.525992][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.553280][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.573884][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 163.684161][ T24] usb 4-1: SerialNumber: syz [ 163.739096][ T9] usb 5-1: USB disconnect, device number 21 [ 163.880905][ T6887] binder: 6886:6887 ioctl 8933 200000000140 returned -22 [ 163.926270][ T24] usb 4-1: 0:2 : does not exist [ 164.008873][ T24] usb 4-1: USB disconnect, device number 15 [ 164.090751][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.467510][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 165.130833][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.141772][ T9] usb 5-1: config 0 has no interface number 0 [ 165.155697][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 165.185772][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.239156][ T9] usb 5-1: Product: syz [ 165.246854][ T9] usb 5-1: Manufacturer: syz [ 165.269521][ T9] usb 5-1: SerialNumber: syz [ 165.298734][ T9] usb 5-1: config 0 descriptor?? [ 165.506800][ T9] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 165.533789][ T9] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 165.559739][ T9] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 165.577573][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 165.727555][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 165.738508][ T24] usb 4-1: too many configurations: 44, using maximum allowed: 8 [ 165.768615][ T24] usb 4-1: New USB device found, idVendor=2770, idProduct=2e3a, bcdDevice=a8.ea [ 165.807945][ T24] usb 4-1: New USB device strings: Mfr=213, Product=155, SerialNumber=204 [ 165.825912][ T24] usb 4-1: Product: syz [ 165.831652][ T24] usb 4-1: Manufacturer: syz [ 165.836618][ T24] usb 4-1: SerialNumber: syz [ 165.869729][ T24] usb 4-1: config 0 descriptor?? [ 166.203922][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.407605][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 166.427171][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.435731][ T10] usb 1-1: config 179 has no interface number 0 [ 166.468351][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.527527][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.573867][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.651156][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 166.663094][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.676648][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.685978][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.702347][ T6916] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 167.121335][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input9 [ 168.970091][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 168.978547][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 168.987750][ T5901] usb 1-1: USB disconnect, device number 17 [ 169.274666][ T5949] usb 4-1: USB disconnect, device number 16 [ 169.314107][ T5843] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 169.331165][ T6944] netlink: 388 bytes leftover after parsing attributes in process `syz.0.251'. [ 169.381145][ T6944] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.454072][ T6949] loop2: detected capacity change from 0 to 7 [ 169.467829][ T30] audit: type=1326 audit(1751965081.296:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 169.476986][ T6949] loop2: [POWERTEC] p1 p2 p3 [ 169.507286][ T6949] loop2: p2 start 4294967287 is beyond EOD, truncated [ 169.517819][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 169.523631][ T6949] loop2: p3 start 1932423285 is beyond EOD, truncated [ 169.528867][ T30] audit: type=1326 audit(1751965081.296:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 169.611918][ T5843] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 169.637246][ T5843] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 169.714011][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 169.741216][ T30] audit: type=1326 audit(1751965081.296:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 169.813059][ T5843] usb 2-1: config 1 has no interface number 0 [ 169.913084][ T5843] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.967514][ T30] audit: type=1326 audit(1751965081.296:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 170.067446][ T5843] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.162397][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 170.193144][ T5843] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 170.343704][ T30] audit: type=1326 audit(1751965081.296:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 170.376184][ T5843] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 170.410015][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.425165][ T30] audit: type=1326 audit(1751965081.296:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 170.465670][ T5843] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 170.492248][ T30] audit: type=1326 audit(1751965081.296:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 170.520497][ T30] audit: type=1326 audit(1751965081.296:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 170.563196][ T30] audit: type=1326 audit(1751965081.296:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 170.608877][ T6958] netlink: 452 bytes leftover after parsing attributes in process `syz.2.255'. [ 170.649210][ T30] audit: type=1326 audit(1751965081.296:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 170.692437][ T5843] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 170.718055][ T5843] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 170.736483][ T6962] netlink: 124 bytes leftover after parsing attributes in process `syz.0.256'. [ 170.797277][ T5843] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 170.840082][ T5843] usb 2-1: USB disconnect, device number 13 [ 171.033436][ T6970] netlink: 4424 bytes leftover after parsing attributes in process `syz.0.258'. [ 171.303905][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 172.599612][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 172.930555][ T978] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 173.107588][ T978] usb 2-1: device descriptor read/64, error -71 [ 173.190104][ T7002] CIFS: VFS: Malformed UNC in devname [ 173.358345][ T978] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 173.467493][ T5949] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 173.517837][ T978] usb 2-1: device descriptor read/64, error -71 [ 173.625335][ T7007] netlink: 4424 bytes leftover after parsing attributes in process `syz.4.269'. [ 173.652879][ T978] usb usb2-port1: attempt power cycle [ 173.704069][ T5949] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 173.773159][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.871357][ T5949] usb 3-1: Product: syz [ 173.883943][ T5949] usb 3-1: Manufacturer: syz [ 173.895600][ T5949] usb 3-1: SerialNumber: syz [ 173.921219][ T5949] usb 3-1: config 0 descriptor?? [ 174.017585][ T978] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 174.091609][ T978] usb 2-1: device descriptor read/8, error -71 [ 174.183784][ T5949] usb 3-1: USB disconnect, device number 18 [ 174.367594][ T978] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 174.403842][ T978] usb 2-1: device descriptor read/8, error -71 [ 174.520128][ T978] usb usb2-port1: unable to enumerate USB device [ 174.615188][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 175.047492][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 175.227503][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 175.240774][ T10] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 175.252536][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.268877][ T10] usb 3-1: config 0 has no interfaces? [ 175.278380][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 175.289158][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.328454][ T10] usb 3-1: config 0 descriptor?? [ 175.362307][ T7032] netlink: 'syz.3.276': attribute type 13 has an invalid length. [ 175.517550][ T7032] net_ratelimit: 171 callbacks suppressed [ 175.517563][ T7032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.731370][ T5949] usb 3-1: USB disconnect, device number 19 [ 175.931665][ T7039] netlink: del zone limit has 8 unknown bytes [ 176.063977][ T7041] netlink: 4424 bytes leftover after parsing attributes in process `syz.1.280'. [ 176.206752][ T7043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 176.400776][ T7049] netlink: 224 bytes leftover after parsing attributes in process `syz.1.283'. [ 176.414707][ T7049] openvswitch: netlink: Flow key attr not present in new flow. [ 176.633136][ T7054] vivid-000: disconnect [ 177.052633][ T7044] vivid-000: reconnect [ 177.637670][ T978] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 177.757185][ T5843] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 177.907488][ T5843] usb 3-1: device descriptor read/64, error -71 [ 177.927681][ T978] usb 2-1: device descriptor read/64, error -71 [ 178.157629][ T5843] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 178.169727][ T978] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 178.308205][ T978] usb 2-1: device descriptor read/64, error -71 [ 178.351130][ T7078] loop2: detected capacity change from 0 to 7 [ 178.368458][ T5843] usb 3-1: device descriptor read/64, error -71 [ 178.380119][ T7078] loop2: [POWERTEC] p1 p2 p3 [ 178.391112][ T7078] loop2: p2 start 4294967287 is beyond EOD, truncated [ 178.399092][ T7078] loop2: p3 start 1932423285 is beyond EOD, truncated [ 178.431453][ T7080] usb usb8: usbfs: process 7080 (syz.0.291) did not claim interface 0 before use [ 178.478032][ T5843] usb usb3-port1: attempt power cycle [ 179.066636][ T5843] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 179.168485][ T5843] usb 3-1: device descriptor read/8, error -71 [ 179.179053][ T978] usb usb2-port1: attempt power cycle [ 179.229688][ T7083] netlink: 4424 bytes leftover after parsing attributes in process `syz.3.293'. [ 179.265767][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 179.427498][ T5843] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 179.468290][ T5843] usb 3-1: device descriptor read/8, error -71 [ 179.527724][ T978] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 179.577198][ T978] usb 2-1: device descriptor read/8, error -71 [ 179.597976][ T5843] usb usb3-port1: unable to enumerate USB device [ 179.817562][ T978] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 179.848226][ T978] usb 2-1: device descriptor read/8, error -71 [ 179.867548][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 179.944391][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 179.962339][ T978] usb usb2-port1: unable to enumerate USB device [ 180.027486][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 180.042994][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.057274][ T5901] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 180.067483][ T5901] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 180.078033][ T5901] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 180.087108][ T5901] usb 4-1: config 128 has no interface number 0 [ 180.094403][ T5901] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 180.106031][ T5901] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.117716][ T5901] usb 4-1: config 128 interface 127 has no altsetting 0 [ 180.127706][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.298'. [ 180.136616][ T7095] netlink: 'syz.4.298': attribute type 7 has an invalid length. [ 180.144540][ T7095] netlink: 'syz.4.298': attribute type 8 has an invalid length. [ 180.152382][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 180.165178][ T5901] usb 4-1: language id specifier not provided by device, defaulting to English [ 180.176594][ T5901] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 180.183239][ T7095] erspan0: entered promiscuous mode [ 180.186676][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.198694][ T7095] gretap0: entered promiscuous mode [ 180.202422][ T5901] usb 4-1: Product: syz [ 180.209660][ T5901] usb 4-1: Manufacturer: syz [ 180.215487][ T5901] usb 4-1: SerialNumber: syz [ 180.444287][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.474676][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.699598][ T5901] usb 4-1: USB disconnect, device number 17 [ 180.757184][ T7100] vlan0: entered promiscuous mode [ 180.980857][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.309267][ T7116] loop2: detected capacity change from 0 to 7 [ 181.313568][ T7116] loop2: [POWERTEC] p1 p2 p3 [ 181.315415][ T7116] loop2: p2 start 4294967287 is beyond EOD, truncated [ 181.315444][ T7116] loop2: p3 start 1932423285 is beyond EOD, truncated [ 181.595641][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 181.890850][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'. [ 182.353910][ T7142] netlink: 'syz.4.311': attribute type 5 has an invalid length. [ 182.602146][ T7154] loop2: detected capacity change from 0 to 7 [ 182.620991][ T5975] loop2: [POWERTEC] p1 p2 p3 [ 182.639428][ T5975] loop2: p2 start 4294967287 is beyond EOD, truncated [ 182.656555][ T5975] loop2: p3 start 1932423285 is beyond EOD, truncated [ 182.724279][ T7154] loop2: [POWERTEC] p1 p2 p3 [ 182.766619][ T7154] loop2: p2 start 4294967287 is beyond EOD, truncated [ 182.783641][ T7154] loop2: p3 start 1932423285 is beyond EOD, truncated [ 182.796766][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 182.796784][ T30] audit: type=1326 audit(1751965094.616:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 182.862251][ T30] audit: type=1326 audit(1751965094.676:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 182.927044][ T30] audit: type=1326 audit(1751965094.676:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 182.967272][ T30] audit: type=1326 audit(1751965094.676:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 182.989857][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.998784][ T30] audit: type=1326 audit(1751965094.676:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 183.020980][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.027237][ T5843] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 183.035657][ T30] audit: type=1326 audit(1751965094.676:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 183.058107][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.072102][ T30] audit: type=1326 audit(1751965094.676:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f74c458e929 code=0x7ffc0000 [ 183.078976][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 183.188646][ T5843] usb 3-1: device descriptor read/64, error -71 [ 183.223062][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 183.367586][ T5949] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 183.439389][ T5843] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 183.517654][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 183.527189][ T5949] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 183.537486][ T5949] usb 4-1: config 0 has no interface number 0 [ 183.547134][ T5949] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.562374][ T5949] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 183.575597][ T5949] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.588952][ T5843] usb 3-1: device descriptor read/64, error -71 [ 183.611305][ T5949] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.637245][ T5949] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 183.656825][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.679901][ T5949] usb 4-1: config 0 descriptor?? [ 183.717856][ T5843] usb usb3-port1: attempt power cycle [ 183.742136][ T5949] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 183.915959][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.942978][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.111654][ T5843] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 184.148445][ T5843] usb 3-1: device descriptor read/8, error -71 [ 184.398015][ T5843] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 184.418557][ T5843] usb 3-1: device descriptor read/8, error -71 [ 184.539886][ T5843] usb usb3-port1: unable to enumerate USB device [ 185.707506][ T5901] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 185.894779][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.918429][ T5901] usb 2-1: no configurations [ 185.923108][ T5901] usb 2-1: can't read configurations, error -22 [ 186.221305][ T5949] usb 4-1: USB disconnect, device number 18 [ 186.270063][ T5949] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 186.644070][ T7207] netlink: 84 bytes leftover after parsing attributes in process `syz.1.331'. [ 186.877809][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 186.957064][ T7216] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 186.965854][ T7216] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 186.985905][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 187.067519][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 187.076953][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.086242][ T10] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 187.104077][ T10] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 187.140645][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 187.143349][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.158975][ T24] usb 4-1: config index 0 descriptor too short (expected 55488, got 80) [ 187.168409][ T24] usb 4-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 187.185933][ T24] usb 4-1: config 0 has no interfaces? [ 187.209392][ T10] usb 3-1: Product: syz [ 187.214513][ T10] usb 3-1: Manufacturer: syz [ 187.220132][ T10] usb 3-1: SerialNumber: syz [ 187.223674][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 187.240632][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.251642][ T24] usb 4-1: Product: syz [ 187.255923][ T24] usb 4-1: Manufacturer: syz [ 187.261949][ T24] usb 4-1: SerialNumber: syz [ 187.277999][ T24] usb 4-1: config 0 descriptor?? [ 187.456473][ T10] usb 3-1: Cannot retrieve CPort count: -71 [ 187.477151][ T10] usb 3-1: Cannot retrieve CPort count: -71 [ 187.485409][ T10] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 187.522367][ T10] usb 3-1: USB disconnect, device number 28 [ 187.574651][ T5949] usb 4-1: USB disconnect, device number 19 [ 188.327296][ T7233] netlink: 156 bytes leftover after parsing attributes in process `syz.2.337'. [ 188.361680][ T7233] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 188.602900][ T7242] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 188.614870][ T7242] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 188.617465][ T5949] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 188.623325][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.3.340 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 188.641055][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.651139][ T7242] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 188.656542][ T7242] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 4d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 6a 4f 3e f8 85 [ 188.676165][ T7242] RSP: 0018:ffffc9000c1d7070 EFLAGS: 00010206 [ 188.682248][ T7242] RAX: ffffffff8981dab3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 188.690235][ T7242] RDX: ffffc9000cc8b000 RSI: 0000000000000351 RDI: 0000000000000352 [ 188.698219][ T7242] RBP: dffffc0000000000 R08: ffff8880350d8000 R09: 0000000000000002 [ 188.706198][ T7242] R10: 00000000ffffffff R11: ffffffff8981da90 R12: dffffc0000000000 [ 188.714186][ T7242] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888059698000 [ 188.722171][ T7242] FS: 00007f74c53a26c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 188.731128][ T7242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.737810][ T7242] CR2: 0000200000002340 CR3: 000000007efd8000 CR4: 00000000003526f0 [ 188.745795][ T7242] DR0: 0000000000000081 DR1: 2000000000000006 DR2: 0800001000000002 [ 188.753780][ T7242] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 188.761772][ T7242] Call Trace: [ 188.765071][ T7242] [ 188.768058][ T7242] qdisc_tree_reduce_backlog+0x29c/0x480 [ 188.773719][ T7242] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 188.779467][ T7242] fq_codel_change+0xa96/0xef0 [ 188.784255][ T7242] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 188.789835][ T7242] ? __pfx_fq_codel_change+0x10/0x10 [ 188.795139][ T7242] ? __sock_sendmsg+0x21c/0x270 [ 188.800029][ T7242] fq_codel_init+0x355/0x960 [ 188.804634][ T7242] ? lockdep_rtnl_is_held+0x26/0x40 [ 188.809850][ T7242] ? __pfx_fq_codel_init+0x10/0x10 [ 188.814984][ T7242] qdisc_create+0x7ac/0xea0 [ 188.819526][ T7242] tc_modify_qdisc+0x1426/0x2010 [ 188.824483][ T7242] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 188.829794][ T7242] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 188.835091][ T7242] rtnetlink_rcv_msg+0x779/0xb70 [ 188.840047][ T7242] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 188.845176][ T7242] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.850646][ T7242] ? ref_tracker_free+0x63a/0x7d0 [ 188.855693][ T7242] ? __copy_skb_header+0xa7/0x550 [ 188.860738][ T7242] ? __pfx_ref_tracker_free+0x10/0x10 [ 188.866132][ T7242] ? __skb_clone+0x63/0x7a0 [ 188.870658][ T7242] netlink_rcv_skb+0x208/0x470 [ 188.875435][ T7242] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.880912][ T7242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.886216][ T7242] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.891434][ T7242] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.896650][ T7242] netlink_unicast+0x75b/0x8d0 [ 188.901434][ T7242] netlink_sendmsg+0x805/0xb30 [ 188.906220][ T7242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.911535][ T7242] ? aa_sock_msg_perm+0x94/0x160 [ 188.916509][ T7242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.921819][ T7242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.927126][ T7242] __sock_sendmsg+0x21c/0x270 [ 188.931831][ T7242] ____sys_sendmsg+0x505/0x830 [ 188.936618][ T7242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.941926][ T7242] ? import_iovec+0x74/0xa0 [ 188.946447][ T7242] ___sys_sendmsg+0x21f/0x2a0 [ 188.951147][ T7242] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.956463][ T7242] ? __fget_files+0x2a/0x420 [ 188.961073][ T7242] ? __fget_files+0x3a0/0x420 [ 188.965770][ T7242] __x64_sys_sendmsg+0x19b/0x260 [ 188.970733][ T7242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.976216][ T7242] ? rcu_is_watching+0x15/0xb0 [ 188.981003][ T7242] ? do_syscall_64+0xbe/0x3b0 [ 188.985697][ T7242] do_syscall_64+0xfa/0x3b0 [ 188.990216][ T7242] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.995439][ T7242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.001517][ T7242] ? clear_bhb_loop+0x60/0xb0 [ 189.006212][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.012121][ T7242] RIP: 0033:0x7f74c458e929 [ 189.016589][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.036231][ T7242] RSP: 002b:00007f74c53a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.044680][ T7242] RAX: ffffffffffffffda RBX: 00007f74c47b5fa0 RCX: 00007f74c458e929 [ 189.052685][ T7242] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000009 [ 189.060675][ T7242] RBP: 00007f74c4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 189.068745][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.076725][ T7242] R13: 0000000000000000 R14: 00007f74c47b5fa0 R15: 00007f74c48dfa28 [ 189.084722][ T7242] [ 189.087752][ T7242] Modules linked in: [ 189.091837][ T7242] ---[ end trace 0000000000000000 ]--- [ 189.097407][ T7242] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 189.102820][ T7242] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 4d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 6a 4f 3e f8 85 [ 189.122480][ T7242] RSP: 0018:ffffc9000c1d7070 EFLAGS: 00010206 [ 189.128603][ T7242] RAX: ffffffff8981dab3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 189.136596][ T7242] RDX: ffffc9000cc8b000 RSI: 0000000000000351 RDI: 0000000000000352 [ 189.144604][ T7242] RBP: dffffc0000000000 R08: ffff8880350d8000 R09: 0000000000000002 [ 189.152601][ T7242] R10: 00000000ffffffff R11: ffffffff8981da90 R12: dffffc0000000000 [ 189.160604][ T7242] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888059698000 [ 189.168600][ T7242] FS: 00007f74c53a26c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 189.177631][ T7242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.184224][ T7242] CR2: 0000200000002340 CR3: 000000007efd8000 CR4: 00000000003526f0 [ 189.192234][ T7242] DR0: 0000000000000081 DR1: 2000000000000006 DR2: 0800001000000002 [ 189.200245][ T7242] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 189.208241][ T7242] Kernel panic - not syncing: Fatal exception in interrupt [ 189.215804][ T7242] Kernel Offset: disabled [ 189.220143][ T7242] Rebooting in 86400 seconds..