last executing test programs: 13.70620922s ago: executing program 4 (id=229): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_DIRENT(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0xf}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x7) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4bfa, 0x0) fsetxattr(r0, &(0x7f0000000340)=@random={'user.', '\xff\xff\xff\xff\xff\xff'}, 0x0, 0x0, 0x2) socket$packet(0x11, 0x2, 0x300) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 11.769518366s ago: executing program 2 (id=232): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) io_setup(0xac0f, &(0x7f0000000080)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'wg2\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x81, './file0\x00'}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x65}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4024001}, 0x4080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0x6}) close_range(r0, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x4, 0x81, 0x31, @mcast2, @loopback, 0x7800, 0x10, 0x8, 0xff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x1, 0x81, 0x8, @private1, @loopback, 0x21, 0x7800, 0x5800b48, 0x7}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000880)={@private2, 0x0}, &(0x7f00000008c0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000900)={@remote, @rand_addr, 0x0}, &(0x7f0000000940)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x8, 0x7, 0xfff, 0x268, {{0x18, 0x4, 0x1, 0x2e, 0x60, 0x66, 0x0, 0xf6, 0x2f, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x7c, 0x3, 0xa, [{@rand_addr=0x64010102, 0x2}, {@private=0xa010101, 0x8572}, {@multicast2, 0x80}]}, @generic={0x7, 0x10, "9b8ff7240ec27e83799ee233ff4a"}, @timestamp_addr={0x44, 0x1c, 0x6d, 0x1, 0x7, [{@local, 0xfffffffc}, {@remote, 0x7}, {@empty}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x700, 0x40, 0x8, 0x80, {{0xd, 0x4, 0x1, 0x13, 0x34, 0x66, 0x0, 0x2, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @empty, {[@ssrr={0x89, 0x1f, 0xfa, [@remote, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x32}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000b00)={@private1, 0x0}, &(0x7f0000000b40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x2f, 0xc7, 0x0, 0xaf, 0x4, @local, @remote, 0x8, 0x1, 0xd23, 0xff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={0x1, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d40)={'syztnl0\x00', 0x0, 0x7, 0x80, 0x3ff, 0x4, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x67, 0x0, 0xf, 0x2f, 0x0, @multicast2, @local, {[@rr={0x7, 0xf, 0x63, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1]}, @cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x7, 0xa, "12009c3fb5dd496e"}, {0x5, 0x4, "73b0"}, {0x6, 0xc, "ff8872e13b8235c856af"}, {0x1, 0x11, "808523d729858f3ebce669b718665b"}, {0x6, 0xd, "bc396980e7ed4736f40e1c"}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001440)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000e40)={0x5ac, 0x0, 0xcbb822cb626401b1, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x9, 0x4, 0x3}, {0x10, 0xf4, 0xb9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9dc0}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x60e}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x16d6475f}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0xa, 0xfe, 0x800}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x7, 0x8, 0x9}, {0x6, 0x6, 0x34, 0x226}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfc}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x9, 0x1, 0xffffff80}, {0x40, 0x81, 0x4, 0x6}, {0x0, 0x8, 0x7f, 0x2}]}}}]}}, {{0x8, 0x1, r20}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x400c050}, 0x4004) openat$dsp(0xffffffffffffff9c, &(0x7f0000001480), 0xa05c0, 0x0) accept4$vsock_stream(r0, &(0x7f00000014c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) 11.415219311s ago: executing program 2 (id=233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) r2 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x2170, 0x1, 0x1, 0x1c1}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000a40)=""/87) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='security.apparmor\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000003c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11.39816788s ago: executing program 0 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x701, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) recvmsg(r0, &(0x7f0000002180)={0xfffffffffffffffe, 0x0, &(0x7f0000002140)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/21, 0x15}], 0x3}, 0x40) 11.245933414s ago: executing program 0 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000400)={0x40, 0x11, 0x28, "142e2a9a2a5b4d6b01d1fe3609ef2b3ca7a5c4fd95ac7ab735e94c5370ddda9cdd647730f9e4ef81"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@\aH'], 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10.588425267s ago: executing program 1 (id=237): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32], 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x10, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x72, 0x101, 0x6, 0x1], 0x8000000, 0x141200}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x3, 0x1, 0x0, 0x1, 0xfd, 0x6, 0x9b, 0x4, 0x80, 0x0, 0xb, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0xc, 0x2c, '\x00', 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {r2}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (rerun: 32) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000800)={0x7, 0x8, 0x9, 0x6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) setgroups(0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x48441, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) (async) r5 = syz_open_pts(r4, 0x0) r6 = dup(r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) (async) dup3(r4, r6, 0x0) (async) r7 = dup3(r5, r4, 0x0) io_uring_enter(r7, 0x1c3e, 0xcd65, 0x4e, &(0x7f0000000840)={[0x8]}, 0x8) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x10, 0xda86b176f201a5e8, 0xf, 0x7fffffff, {{0x26, 0x4, 0x3, 0x6, 0x98, 0x67, 0x0, 0x3, 0x2f, 0x0, @local, @broadcast, {[@generic={0x86, 0x8, "ba0c0a997468"}, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0x6, [{@empty, 0x6}]}, @ssrr={0x89, 0xb, 0x87, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0xac, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x49, 0x0, 0xe, [0x5, 0x0, 0x20009, 0x9, 0x1]}, @rr={0x7, 0x17, 0xb7, [@remote, @empty, @broadcast, @local, @multicast1]}, @rr={0x7, 0x1f, 0x9a, [@multicast2, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @private=0xa010100]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0xf, [0x2, 0x7, 0x0]}]}}}}}) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000500)=0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@migrate={0xf8, 0x21, 0x800, 0x70bd2a, 0x25dfdbfd, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x1, r8, r9}, 0x6e6bb3, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0xa5}}, @extra_flags={0x8, 0x18, 0xff}, @extra_flags={0x8, 0x18, 0x4}, @algo_aead={0x83, 0x12, {{'aegis128-aesni\x00'}, 0x1b8, 0x0, "3da4b69289a5134911684d65e80c66a71ae8223a3d1b5811ffbe1fee0e0d8be68f93a12942b317010e8ef22cdd921713a436a99aaa031f"}}, @extra_flags={0x8, 0x18, 0x1}]}, 0xf8}}, 0xc000) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="39ac8469c75e197eba", 0x9}, {&(0x7f0000000340)}], 0x2, 0xffffffff, 0x4) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 10.053894068s ago: executing program 1 (id=238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x3, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) lstat(0x0, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xb71}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x0, 0x7}}}}}]}}]}}, 0x0) connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async, rerun: 64) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (rerun: 64) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0x0) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) r3 = getpid() syz_pidfd_open(r3, 0x0) (async) sched_setattr(r3, 0x0, 0x0) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, 0x0) (async) gettid() (async, rerun: 32) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x602) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) r6 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) (async) r7 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r6, r7, r7}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}}) (async) unshare(0x42040200) 9.901852886s ago: executing program 4 (id=239): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="97e9df73a33b1e000000040000000000000003000000020000002dccd25bc81e7c1e6c044ea1163ad4399749f3f675bfd0090193751e384d0603f0b89ba574ea681a19fce8c64fdd613747738a63a3c04d807014311e16e161303fabbc4da32ad83f72af8f4a3ee7a7c75e5f8583f5c4045e4bdfaff2a06f", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000040000000c00"/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x73}, 0x20008800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) recvmmsg(r3, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) membarrier(0x8, 0x0) poll(&(0x7f0000000380)=[{r8, 0x2201}], 0x1, 0x1) 9.378495618s ago: executing program 2 (id=240): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[], 0xec}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580031000002010800000000000000000a00000a04026400010000000000000006800c00028005000100884b00002c00018014000300fc0000000000000000000000000000010000000003000000000000000000000018c5ef4aeb725a82882b2a8ec6ef670d2c7a9c9947b72373a15e0ebde6e6f3663a3279b322cf65cb49f896cb15aa610c46262286b3fdede07bc3e4ced0bb906b6be324ff2c0955bc76d5673c7788e108057f955948444b24f9d98e7b63d1d57d761094b75d8855b3c2b294a24e4fbec560aa8e754abc9ef3e27bbf"], 0x58}}, 0x4000000) preadv2(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000040), &(0x7f0000000600)=[0x0], &(0x7f0000000200)}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 7.865893915s ago: executing program 1 (id=241): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03120000000000002c0012800c0001006d6163766c616e001c000280080007000800000006ef0200010000001ffe02000000100008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 7.654299536s ago: executing program 3 (id=242): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x88400, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x50, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20048000) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000000)={{0xb4, 0x6}, 0x48}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x6, 0x32e, 0x38, 0x0, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) socket$inet_smc(0x2b, 0x1, 0x0) 7.443692194s ago: executing program 3 (id=243): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70009058a", @ANYRES64], 0x0) r0 = syz_usb_connect$uac1(0x0, 0xc9, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x5, 0xa, "43761d"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xff}, @as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "839253"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x0, 0x0, "8a72012f619991247e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "7a1d4b", "0f3f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x1, 0x31, {0x7, 0x25, 0x1, 0x100, 0x40, 0x8}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x0, 0x80}, 0xbf, &(0x7f0000000180)={0x5, 0xf, 0xbf, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "10123ee0edf71955ca288abaf2b151f3"}, @generic={0xa6, 0x10, 0x0, "c68f076287737e3601cd9076313000b57a84d31489e6c7316e5f57bd1a8b9e032bedddb73216ba827d25965448f106245f5fdc59659a58a65dc1022fa78d764611f5a059d74f48c694147fed9c2e18d0130c1df7740e453ea7d74b392e7f35e7dfd7d159e9ed48348dd1a7dc45b82c65543fd4d12192bbbff5b61ca60b37050bedc1c528d2efc351da341ada6f0e901a46bc6585431cbda419bfbc49f6e1e0a9566870"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x59, &(0x7f00000006c0)=@string={0x59, 0x3, "28b65b74cb17d799c157999e51702cc7a0b65115fca548b85012b37390607aded24d569cde225da4eae0735725c040268e65e4b6e119496a1ddee0be5e38ade96084c8085e9bec47ce977fb2e8a8484bfdaa7eb2c38667"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x21, &(0x7f0000000280)=@string={0x21, 0x3, "743363d9d796c59899b9864f46b177de44b280b4e06b07bf05d55043caf992"}}, {0x6d, &(0x7f0000000340)=@string={0x6d, 0x3, "f5e0c2ea3bfb4a90eef6005e4dd437b85aa63cee0450baa685175139621b8a8cd5ebd2064681472342ca1d8c1c01c744c91d4cc7acea104a3f17a1cb6fdd594df12b083e4f83af0cb515a4b680f69cd100f72ffb978ba266b6c71f6ff25b00e0ea67f752f4f654cfaa6ab8"}}, {0xcc, &(0x7f00000003c0)=@string={0xcc, 0x3, "008dcfd4fb50eae4cd12a129f1dafaf35956f605065ec7e914b9c5328969fb65076fef84ac32e36d0640becced8e1db27a34c8dba0528b85eb0aada3553a2f599fef4c39caab8515bea97f640cdbbf1aa9189660c3f58a6b81e7cfcd718bf18b9a03fdd5cc81e9e0e9122aa3df9df4a267c72b8355f93c698c781f8d45c8fb9fc19840ac8fa9690ee33022e66c14d5b6991677623846decb63efcb3618da506dfad1b9ee0d7e838144b74a6af29f5e5d8f1b0e0ac7ee125ffa997e8841f845d627f868f267fb6f803544"}}]}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async, rerun: 32) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r2, 0x0, 0x0) (rerun: 32) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000001840)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0}) 5.474727019s ago: executing program 2 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x101, '\x00', r2, r0, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2ff, {@in6_addr=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.158193105s ago: executing program 0 (id=245): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0x9, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x5, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010000100ffffffff"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0xb0000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x2) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100090000000000800001afbf0b0c0001800600010002000000080003007f000001"], 0x28}}, 0x34020840) 4.069856485s ago: executing program 2 (id=246): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x0) getpriority(0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/14, 0xe}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f00000002c0)={@host, 0x7fffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "d3ec9f2d164aaf6bfd59e25ceda02ae02c7a3ae7f4b0482098e21d1bae929b81", "db389695e1500c5090c78dece199044d531aab227aa6681ffc6614b2423d8cb6", "ea5366ca32cd855b6a989ba558e09f9714a142d96853a20d72e61d875e3efdf8", "5c9440b293df83a1765902539d8fd09e7d2ac6472de363ab0ffe220b60b9a4bf", "5749e0dd77fb91f5a03387d38be5db17d15fa8f59dcdc74a94edc5f14e0ae944", "3887ca14bbbb41c522b2aad9", 0x0, 0xe8, 0xfffffff8, 0x0, 0x7}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) unshare(0x20040600) syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r8, 0x21, 0x0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 4.057544818s ago: executing program 3 (id=247): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) r3 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) write$binfmt_misc(r2, &(0x7f0000001440)="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", 0x1000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xffff) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) 3.970779753s ago: executing program 1 (id=248): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresuid(0x0, &(0x7f0000000300), 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) munmap(&(0x7f000025d000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x1, 0xb, 0x0, 'queue0\x00', 0x2}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x2, 0x52, &(0x7f0000000140)=ANY=[], 0x0) 3.89738784s ago: executing program 4 (id=249): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000300)={0x28, 0x4, r1, r1, 0x3a7f37, 0xffffffffffffffff, 0x9, 0x2e24fd}) unshare(0x22020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xcfa6c000) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000080), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r5, 0xfe, 0x0, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @ib={0x1b, 0x0, 0x8, {"00000080010000000400"}, 0x80000001}}}, 0x118) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x1d, r7}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x2, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "09206e033457783a"}, 0x10}, 0x1, 0x0, 0x0, 0x4044894}, 0x40408c0) socket$nl_route(0x10, 0x3, 0x0) fallocate(r3, 0xa508bc75a7490fcb, 0x400000000000000, 0x7) r8 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000240)={0x9, 0x201, 0x4, {0x2, 0x0, 0x1e, 0xa}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') socket$inet6(0xa, 0x6, 0xa2d) preadv(r10, &(0x7f0000000540)=[{&(0x7f0000000140)=""/205, 0xcd}], 0x1, 0xfffffffb, 0xbf6b) read$snddsp(r10, &(0x7f0000000200)=""/125, 0x7d) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r10, 0xc02c564a, &(0x7f0000000100)={0x5, 0x55595659, 0x1, @discrete={0x6, 0x9}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000002c0)={0x5, 0x5, 0x2}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.523298714s ago: executing program 4 (id=250): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) r2 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x2170, 0x1, 0x1, 0x1c1}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000a40)=""/87) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='security.apparmor\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000003c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.129205088s ago: executing program 0 (id=251): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@delnexthop={0x20, 0x69, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x25, 0x1832b, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0xffffffff, 'ip6gretap0\x00', 'veth1\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x0, [0x1b, 0x32, 0x28, 0x28, 0x221, 0x2d, 0x33, 0x2c, 0x2, 0x1d, 0x2f, 0x3c, 0x33, 0x26, 0x4, 0x1d], 0x2, 0x3, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.12854008s ago: executing program 3 (id=252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xffffffff, 0x8, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x40000]}}) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 2.822043131s ago: executing program 2 (id=253): ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x40, 0x0, {}, {0x5, 0x1, 0x0, 0x9, 0x0, 0x81, '|m%+'}, 0x6, 0x2, {&(0x7f0000000140)=[{0x9, 0xe2, {&(0x7f00000000c0)}, 0x100}, {0x5, 0x8, {&(0x7f0000000100)}, 0xca0}]}, 0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x1a, 0x2, 0x8, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x2, 0x42) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900), 0x4000}], 0xe) getresuid(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40202, 0x0) write$sequencer(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="9200b00000f8fffffe01"], 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002100002800c00028008000180000000000c0004400000"], 0xec}}, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x800) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109960400000000100009045902019b1e2a00090582020002000000"], 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1}, 0x4}], 0x2, 0x10022, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) 2.727209634s ago: executing program 0 (id=254): ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x40, 0x0, {}, {0x5, 0x1, 0x0, 0x9, 0x0, 0x81, '|m%+'}, 0x6, 0x2, {&(0x7f0000000140)=[{0x9, 0xe2, {&(0x7f00000000c0)}, 0x100}, {0x5, 0x8, {&(0x7f0000000100)}, 0xca0}]}, 0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x1a, 0x2, 0x8, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200), 0x2, 0x42) writev(r2, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900), 0x4000}], 0xe) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000000040)) getresuid(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x60}}, 0x0) getsockopt$sock_buf(r6, 0x1, 0x37, &(0x7f0000000280)=""/57, &(0x7f00000002c0)=0x39) 2.354607468s ago: executing program 3 (id=255): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000920e00"/16, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000ebb39d4850e93900f8ca44dfaa0000fe00"/30], 0x48}, 0x1, 0x0, 0x0, 0x4044894}, 0x40080d0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xfffffffffffffe21, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4001) close(0xffffffffffffffff) r4 = getpid() syz_pidfd_open(r4, 0x0) sched_setattr(r4, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, 0x0) gettid() r5 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x600) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) r8 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r8, r9, r9}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}}) unshare(0x42040200) 1.236643932s ago: executing program 0 (id=256): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000e6ffff7810a8000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) syz_usb_connect(0x0, 0xc5f, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x55, 0xf, 0xe, 0x20, 0x19d2, 0x161, 0x2faf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4d, 0x4, 0xfc, 0x3, 0x80, 0x8, [{{0x9, 0x4, 0xd0, 0x4, 0x5, 0xff, 0xff, 0xff, 0xfe, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f4fc45"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0xfffc, 0x8}, [@obex={0x5, 0x24, 0x15, 0xb}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x7, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x14}]}], [{{0x9, 0x5, 0xd, 0xb, 0x10, 0x2, 0xa5}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xf, 0x5, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x3e, 0x8, 0x8, [@generic={0x9d, 0xb, "e923841db09930ca17be9895579ddfc154671c9f019d29cdd6d5e2ecfc708ea2794e7375e4547ede05aa86b946ec5a312fe4643d6561ce6bbecefc520a4481a65a2aa5b50cd5a8b0ad40602e279fbbfefef6efc304b66c3a6404380f719cf7ea4c49bf38306260287a75cffe55253d968dab33f265cf9988b71f0bb2bd5019ba171a7860d2d34f3a4a46ada1787b56159e151449685b9a164a5848"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x1, 0x7f, 0xb}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xf0, 0x0, 0x1, [@generic={0x6d, 0x6, "631464d4d19c46d2721635e2039ec6e34f50fbc36323eea11a0616e81b4161aef169b3711a7a04afabdc2b980ec16f7ebf29fd921f6512506b2a423b6cf135102bb146e3f7bd15a6fa3591d41de14ed602d7627d646f4ff1ac10f5612a932187350dc3d419eabdfc23f93e"}]}}]}}, {{0x9, 0x4, 0x78, 0xc, 0xc, 0xf1, 0x62, 0x32, 0x2, [@hid_hid={0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x5ea}}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0xf, 0x4, 0xf}}, {{0x9, 0x5, 0xb, 0x1d, 0x20, 0x9, 0xf, 0xae, [@generic={0xdb, 0x3, "4b5cbe086f8fd63fe3313364cf7902294e37385f0be918a38f09969ca0b8589de81de01f12d9b7c2a3a3a646fd5a9e1e615fe68037fb58042312d3c082fb02abcb5567e38d8134df8022f22bdf3df1af8b045c6df603acd30ff3531f2a12fd3a4349c3272c35dae63d7cd0bf3df5074687c322233c81b9dd51b2d97b999f1e133d77f4625209209ed2043fbcff6e8097cf5eeeb7421097cbbea3a748c7c592887fd91d88ac19d72de582bae21db95985694b9d4bad6fcbc6b1aed17d6cc5fdadd1a27d3bfe604393db4f42a6a0502b543d7f2de169d7cf2535"}, @generic={0x54, 0x9, "2d963904feb69bd1159e6e3c9016848b0d9113a8b0bfc94c0cc82d6b84e20c9fb3c4d097d6f2d78f45c831f402d222a17f4e23d709178e5eeee3f1b4e8331943c6970a325b2362e93daa0e18f6cef6b3fc67"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x8, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x96ee}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x0, 0x3, 0x6, [@generic={0xcb, 0x9, "58a3340129775c024101de92fb783b25620080f6a86f7089fb9c7f09cae2da1e583a3c62d1455ae5f89bcf4548cae786c962f6ad6c2900b1179b0f46d2dc818cac1487b0a9e0ea2a6dfdc34e8d305f8ad6b562854f6a746a16123aa3271fe101b3840235f0ff7a20cc9d76407f461a25a0c05c9578076e914681d51dd711978c8baece090088a0081113f65da6352506bb60eff9bd2b185bec121c8857873f706b6fe58526c2f75dbbfa71f5ed1020edd8d230da7e279d8becc4c2eeabcedff4c4bad7bb42d7a9b231"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x0, 0xd, 0x3, [@generic={0x92, 0x23, "2209804274f783bfa763d61ddaeac0001ee625a42a986fc5dd3fc230280472d96d34b223a86b77f584257a07ce9769c2207cad1aa584f2abd5e5611f14fff8ed00cd8fae2e4c8e5c8de3439428415ff6727da4cec34533b6ea62314738dbbe338254955fde5fee034a48fefd67e5f226a19751fe5ddbf41e84beea0c3a7500f2e537b6acc0562b4bfdb591039fa6bafe"}, @generic={0x31, 0xc, "b33161f4fb911e20ca46dd5e3d3a7f4c75c6854dd9b390315b0778b9e10ba296990e576d986c40fdf22f5665a5bca3"}]}}, {{0x9, 0x5, 0x9, 0x18, 0x8, 0x1, 0x40, 0xa9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x2, 0x5, 0x5, [@generic={0x39, 0x7, "7ba64b3ffe4678ee9edcbcb3ffddd29c8df548e5a8ba7ecad5bf560fe7fdb9fd91579a899f6feb03c8d41fe8aa01d0e869b4e3798f0ad8"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x8, 0xb1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xfffa}]}}, {{0x9, 0x5, 0xfb3cce101a4faff1, 0x10, 0x20, 0xa5, 0x3, 0x5}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x4, 0x0, 0x5}}, {{0x9, 0x5, 0x34e88ebe33471b54, 0x0, 0x400, 0x7, 0xd, 0x4, [@generic={0xdb, 0x5, "902759ecafe56f3dd132384296346d8d71664724e7883b235cdf06b22c330e4d6a2348afe39ed25a3821d6e127751e11fa9db12bb0f934096d538bf82e31060803579c2d50d9466b7f2b3fc482597a08e53df5ae1ad76708986b4cf76138f288a782ee155ce5a1a77f98656d855c755946e0d4ebc2cbfe665d806da2e32ddeb7bb4a9afb1b544d3d5a4592abb1e961c835712a5d58d83ec3a3b5b3baef2b626215b1eb1ab2e380c5f4a0d37ff26015f3ee4a07dfaaacec7215a9105c1c8af85b371b08799c16c20ce274c58d2653d65b4f4a1415a87f59799e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0xa}]}}]}}, {{0x9, 0x4, 0x99, 0x9, 0x7, 0x8, 0x1, 0x50, 0x7, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xbc, 0x4, 0x5, 0x9, "64f21387"}]}, @generic={0x3d, 0x0, "d260b74eba0dd916b0e998ce7efc874b3e853829b3b7458056b83dd42aad6809b4c64ad5cd1fb6654c5cbf9ec8718f99c401e14da4f128c84081d5"}], [{{0x9, 0x5, 0x2, 0x4, 0x8, 0x5, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x182, 0x3, 0x81}]}}, {{0x9, 0x5, 0xf, 0xe, 0x20, 0x7, 0xcb, 0xf9, [@generic={0xd2, 0xe, "477611a328d17d3a2c3114528d417e5c0f44e92bc126aed786d7c224dcc65c0340f2cd21439c22851b7de7fc701381af2422d7d9b94ff016abb130e3872354716a65376a5ec1ed10904d4715e1f8c4944f18107d112983101ca5dbe6fe8c6b028d44d7b2a4e48650adb2f5a407937ad7ff753363ca84a372c43f34dbd400735727e8aa4be67f67dd94d587be58a9b338412e564e2ee5c4491518e56f09c0a1d929cc30b7398ad641c3a6e898ae77d3a0ab55a582df1f56b66514e1e3ff227b3fdc495ff35931a75c7d80f570a88dac26"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x5, 0x0, 0xd}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0x7, 0x1}}, {{0x9, 0x5, 0x14909ca38f0d9cba, 0x1, 0x40, 0x5, 0xff, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xfff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x66, 0x0, 0xa, [@generic={0xf8, 0x23, "4c9f23cfecd533a43f20b08101f574dc855df51faa0cdeca12fd618f7cf8f36296a0eb2a8e0e4c6ed7d1421a657bee28d35bbfe80b61f9b897e7932358932d53cade2f45d7e0573e7529f05502fb65db88a8cae55369fc69ecd77a42b2113ab21f12ff2fe22b52ef8b7eb3aa3c917376e94ca6f5aec7d279dc68ce9fcfb6c73c9bae44181b89bd84dbf8502d1c68312fcc6ba6a0f8ce17e56cf62f554bb0d179208e7967dc3a9efd3bdae873335a9e4ad43ed576ddd478233968992b2eac1482b14243d0681c521131f2446e473715b0aadcd1e75083c9eb665b88b91b6c26b3bf47522ff9af2df8a3e23e81e078fd720f618099faca"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x1, 0x6, 0x2, [@generic={0x5f, 0x45, "a05a3101a1ecb7b08092a4a5937a270f7fff78b1a641300408760c3b6fe83db8aca0b011c914f9bda769b0d22eb0ddbbb0d96d9c1528cdd4dc53a818d02cb05d602b69729c50a2ffe524d57ae6fbe600a23a523a9ad6643311192649fd"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x6}]}}]}}, {{0x9, 0x4, 0x33, 0x0, 0xa, 0xff, 0xff, 0xff, 0xa, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "997a6c8b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x9e, 0x3, 0x6}, [@country_functional={0x12, 0x24, 0x7, 0x7, 0x9, [0x3, 0x2079, 0x7, 0x3, 0x5, 0x8]}]}], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x8, 0x4, 0x8, [@generic={0xa, 0x6, "b6d3a7732e674c95"}, @generic={0x14, 0x22, "58aa5e3c2aed666004f51007aae2db7a477b"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0xb, 0x4, 0x8}}, {{0x9, 0x5, 0x2, 0x2, 0x208, 0xff, 0x2, 0x6, [@generic={0xd8, 0x10, "fee01ff7d8876c1ad125750eefa92a0cddf1caaeff41f9a5bd90afb1a19f9fe8644fef47906d96be50508fe5123327b2a4e935d56939b480e24a6d87700267440530885fe7b434f85a336fc7360ba16611d970ab8e06c16be639952af47e96b7080498360c409ea70fc3f8a785265affd5cfc0b93356a38a7d7864b54a1e5cc63f182126f0ad61a8f1981d607cdb145e83a5b774a5dc303f333424236ce75da30501e480bbf5e0a98f65ce709bdda7654d869fe274ecd4c937485478daf2103e643363e86a3a347c4165f11702dc5d5c82cba7b01a8f"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0xe, 0x4, 0x0, [@generic={0xbb, 0x3, "3dacb8a609f00d1f134d55db41f4b042ceecb59c40976928af60b29b7e1be741e0a47486a04f6b3ce1f940bb3ab1e2e2753d4f62b268b4e121f658f7639c469b0c016952ae48507f79c5887e820ae13040aa98f1e39fb7e60416ad35619a30de5ad6aa1a71a678cb44ea89d1d703691037e27c33f64ec24ebc67b102eb61a95f147ded590fdaed32b0d31ee60c6e07a49becfd30b6a94a9c8dc4233cd70865358d7b3977643944919dc0464cc41c7425965628ddbc21c26b85"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x0, 0x0, 0x5, [@generic={0x19, 0x11, "84b365bc6843cff086788fe09cd2390c1bec6bd9827df3"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x10, 0x2, 0x8, [@generic={0x60, 0x24, "0f312aa7aba3d16e1684e02f60cc7c4fcd320a1cd33f6b0d655b5d0f63e708aec220c24606271aeaffd69928fb45b6d3f3d5efc7649de5e8ff6a0ff94e4316b9adf8d02d8caae98e6d539d9705fcef35a27b6c555369c553447d836a95f3"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x848}]}}, {{0x9, 0x5, 0xe, 0x10, 0x1ff, 0x7f, 0x4, 0x3}}, {{0x9, 0x5, 0xf, 0x14, 0x10, 0x61, 0x2, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x8, 0x3, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x4}, @generic={0x96, 0x2, "4e46a593bc1b5029163eb4a46ce06b67b5ce59ab0d57672161c52c741d43eed80d8a2347a41f57ad5d3b9f1941472a25d67b4cf7b7986d5089bd4dfac8ef66a2b0ba6464d5ae247dad5f37370f4b368487c0d40796fa5bbbdf46befb584c3d69d142f99df004bf637cbe91fcab14409f4fe1b390d3230c72a1aebd704f6f22eb92958e078c1b265177403a9037f341f536c1e52f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x33, 0x7, 0x1}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8927, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96", 0x1}, {&(0x7f0000000500)="fc", 0x1}], 0x2}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000005940)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000056c0)=[{{&(0x7f00000000c0)=@caif, 0x80, &(0x7f0000001500)=[{&(0x7f0000000140)=""/87, 0x57}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000001400)=""/240, 0xf0}], 0x7, &(0x7f0000001580)=""/44, 0x2c}, 0xb}, {{&(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001640)=""/214, 0xd6}], 0x1, &(0x7f0000001780)=""/165, 0xa5}, 0x5}, {{&(0x7f0000001840)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/59, 0x3b}, {&(0x7f0000002900)=""/6, 0x6}, {&(0x7f0000002940)=""/196, 0xc4}, {&(0x7f0000002a40)=""/69, 0x45}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x6, &(0x7f0000003b40)=""/214, 0xd6}, 0x8}, {{&(0x7f0000003c40)=@qipcrtr, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000003d00)=""/106, 0x6a}, {&(0x7f0000003d80)=""/66, 0x42}, {&(0x7f0000003e00)=""/233, 0xe9}], 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003f40)=""/37, 0x25}, {&(0x7f0000003f80)=""/109, 0x6d}], 0x2, &(0x7f0000004040)=""/215, 0xd7}, 0x8}, {{&(0x7f0000004140)=@x25, 0x80, &(0x7f0000004400)=[{&(0x7f00000041c0)=""/168, 0xa8}, {&(0x7f0000004280)=""/126, 0x7e}, {&(0x7f0000004300)=""/242, 0xf2}], 0x3, &(0x7f0000004440)=""/129, 0x81}, 0xe0cc}, {{&(0x7f0000004500)=@caif=@rfm, 0x80, &(0x7f0000004680)=[{&(0x7f0000004580)=""/224, 0xe0}], 0x1, &(0x7f00000046c0)=""/232, 0xe8}, 0x7}, {{&(0x7f00000047c0)=@tipc=@id, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004840)=""/36, 0x24}, {&(0x7f0000004880)=""/157, 0x9d}, {&(0x7f0000004940)=""/182, 0xb6}, {&(0x7f0000004a00)=""/13, 0xd}, {&(0x7f0000004a40)=""/19, 0x13}, {&(0x7f0000004a80)=""/235, 0xeb}, {&(0x7f0000004b80)=""/58, 0x3a}, {&(0x7f0000004bc0)=""/74, 0x4a}, {&(0x7f0000004c40)=""/46, 0x2e}], 0x9, &(0x7f0000004d40)=""/174, 0xae}, 0x4}, {{&(0x7f0000004e00)=@un=@abs, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004e80)=""/19, 0x13}], 0x1, &(0x7f0000004f00)=""/169, 0xa9}, 0x8}, {{&(0x7f0000004fc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000005600)=[{&(0x7f0000005040)=""/69, 0x45}, {&(0x7f00000050c0)=""/240, 0xf0}, {&(0x7f00000051c0)=""/33, 0x21}, {&(0x7f0000005200)=""/60, 0x3c}, {&(0x7f0000005240)=""/199, 0xc7}, {&(0x7f0000005340)=""/63, 0x3f}, {&(0x7f0000005380)=""/17, 0x11}, {&(0x7f00000053c0)=""/188, 0xbc}, {&(0x7f0000005480)=""/209, 0xd1}, {&(0x7f0000005580)=""/107, 0x6b}], 0xa}, 0x7}], 0xa, 0x2, &(0x7f0000005980)={r4, r5+10000000}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000005d40)={0x8, 0x23, &(0x7f00000059c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd9, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@alu={0x7, 0x0, 0x6, 0xa, 0x2, 0xc, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xcc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000005b00)='syzkaller\x00', 0x92f5, 0xee, &(0x7f0000005b40)=""/238, 0x40f00, 0x30, '\x00', r6, @fallback=0x22, r0, 0x8, &(0x7f0000005c40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000005c80)={0x2, 0xe, 0x4, 0xffff0001}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000005cc0)=[0x1], &(0x7f0000005d00)=[{0x0, 0x1, 0x1, 0x5}], 0x10, 0x3, @void, @value}, 0x94) fsync(r7) 798.637963ms ago: executing program 4 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x404d01, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x401, 0xfffffffc, 0x4}) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000002e00)=[{&(0x7f0000001980)=""/128, 0x80}], 0x1, 0x372, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008a02"]) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000180)=0x4) 582.681448ms ago: executing program 1 (id=258): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) readv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_misc(r2, &(0x7f0000001440)="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", 0x1000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xffff) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) 456.3866ms ago: executing program 3 (id=259): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03120000000000002c0012800c0001006d6163766c616e001c000280080007000800000006ef0200010000001ffe02000000000108000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 265.590362ms ago: executing program 4 (id=260): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000ff6000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$tipc(r1, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000005000000000030c00014000000000000001010800044000000001"], 0xf4}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_int(r9, 0x29, 0xb, 0x0, &(0x7f00007d0000)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r10 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) ppoll(&(0x7f0000000180)=[{r10, 0x4000}, {r10, 0x4}], 0x2, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xd931d3864d39ddfa) 0s ago: executing program 1 (id=261): r0 = fanotify_init(0x202, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000140)=@req3={0x0, 0xffffff7f, 0x3, 0xfffffffe, 0x2, 0x10, 0x7}, 0x1c) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 426.590640][ T5857] cgroup: Unknown subsys name 'net' [ 426.730049][ T5857] cgroup: Unknown subsys name 'cpuset' [ 426.739268][ T5857] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 428.385718][ T5857] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 430.972962][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.981775][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.989624][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.998036][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.005933][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.008429][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 431.027000][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 431.034819][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 431.043003][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 431.051062][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.117952][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.126415][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.134140][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.143682][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.154875][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.176050][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.196585][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.197224][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 431.206234][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 431.212542][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 431.222696][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 431.227726][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 431.235027][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.240493][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 431.262690][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.865490][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 431.967522][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 432.052312][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 432.068520][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 432.189904][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 432.269990][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.277296][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.285882][ T5876] bridge_slave_0: entered allmulticast mode [ 432.293340][ T5876] bridge_slave_0: entered promiscuous mode [ 432.352418][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.359899][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.367220][ T5876] bridge_slave_1: entered allmulticast mode [ 432.374774][ T5876] bridge_slave_1: entered promiscuous mode [ 432.388126][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.395500][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.402694][ T5874] bridge_slave_0: entered allmulticast mode [ 432.410915][ T5874] bridge_slave_0: entered promiscuous mode [ 432.482498][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.489959][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.497507][ T5874] bridge_slave_1: entered allmulticast mode [ 432.505078][ T5874] bridge_slave_1: entered promiscuous mode [ 432.517927][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.525141][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.532327][ T5884] bridge_slave_0: entered allmulticast mode [ 432.540036][ T5884] bridge_slave_0: entered promiscuous mode [ 432.607721][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.615416][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.622612][ T5884] bridge_slave_1: entered allmulticast mode [ 432.630405][ T5884] bridge_slave_1: entered promiscuous mode [ 432.657000][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.666535][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.673693][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.681657][ T5882] bridge_slave_0: entered allmulticast mode [ 432.689884][ T5882] bridge_slave_0: entered promiscuous mode [ 432.732827][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.744790][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.751936][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.760644][ T5882] bridge_slave_1: entered allmulticast mode [ 432.768318][ T5882] bridge_slave_1: entered promiscuous mode [ 432.792388][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.820320][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.833588][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.892136][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.929483][ T5876] team0: Port device team_slave_0 added [ 432.938409][ T5876] team0: Port device team_slave_1 added [ 432.948357][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.971721][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.979119][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.987092][ T5883] bridge_slave_0: entered allmulticast mode [ 432.994622][ T5883] bridge_slave_0: entered promiscuous mode [ 433.031039][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.055046][ T5869] Bluetooth: hci0: command tx timeout [ 433.055192][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.068908][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.076241][ T5883] bridge_slave_1: entered allmulticast mode [ 433.083637][ T5883] bridge_slave_1: entered promiscuous mode [ 433.093653][ T5884] team0: Port device team_slave_0 added [ 433.132178][ T5874] team0: Port device team_slave_0 added [ 433.137973][ T5869] Bluetooth: hci1: command tx timeout [ 433.179751][ T5884] team0: Port device team_slave_1 added [ 433.186834][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.193804][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.220208][ T5869] Bluetooth: hci2: command tx timeout [ 433.226192][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.239064][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.246359][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.272993][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.294702][ T5869] Bluetooth: hci4: command tx timeout [ 433.294738][ T55] Bluetooth: hci3: command tx timeout [ 433.310244][ T5874] team0: Port device team_slave_1 added [ 433.333019][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.346091][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.380099][ T5882] team0: Port device team_slave_0 added [ 433.443289][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.450862][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.477826][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.495225][ T5882] team0: Port device team_slave_1 added [ 433.501876][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.508957][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.535434][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.550389][ T5883] team0: Port device team_slave_0 added [ 433.557212][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.564191][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.590601][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.628943][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.636473][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.662898][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.678971][ T5883] team0: Port device team_slave_1 added [ 433.713632][ T5876] hsr_slave_0: entered promiscuous mode [ 433.721255][ T5876] hsr_slave_1: entered promiscuous mode [ 433.750024][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.757356][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.783411][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.857930][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.865817][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.892262][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.912697][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.919772][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.946639][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.959553][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.966742][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.992970][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.010715][ T5884] hsr_slave_0: entered promiscuous mode [ 434.017958][ T5884] hsr_slave_1: entered promiscuous mode [ 434.024302][ T5884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.032095][ T5884] Cannot create hsr debugfs directory [ 434.127224][ T5874] hsr_slave_0: entered promiscuous mode [ 434.133714][ T5874] hsr_slave_1: entered promiscuous mode [ 434.140329][ T5874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.148067][ T5874] Cannot create hsr debugfs directory [ 434.246629][ T5882] hsr_slave_0: entered promiscuous mode [ 434.253040][ T5882] hsr_slave_1: entered promiscuous mode [ 434.260822][ T5882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.268482][ T5882] Cannot create hsr debugfs directory [ 434.322696][ T5883] hsr_slave_0: entered promiscuous mode [ 434.329214][ T5883] hsr_slave_1: entered promiscuous mode [ 434.335832][ T5883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.343435][ T5883] Cannot create hsr debugfs directory [ 434.884402][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.906373][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.919484][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 434.940012][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.000364][ T5884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 435.011369][ T5884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 435.022537][ T5884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 435.050072][ T5884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.134883][ T55] Bluetooth: hci0: command tx timeout [ 435.142235][ T5882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.168708][ T5882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 435.185394][ T5882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.214426][ T55] Bluetooth: hci1: command tx timeout [ 435.236354][ T5883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.255046][ T5882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.282940][ T5883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.295183][ T55] Bluetooth: hci2: command tx timeout [ 435.300600][ T5883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.312471][ T5883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.374735][ T5869] Bluetooth: hci4: command tx timeout [ 435.380286][ T55] Bluetooth: hci3: command tx timeout [ 435.467439][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 435.483594][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 435.516054][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.522982][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 435.550022][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 435.619717][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.662531][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.669820][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.697098][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.709085][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.716267][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.753841][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.780229][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.801835][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.809009][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.860196][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.903154][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.910365][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.923746][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.930919][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.959783][ T5876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.970504][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.012474][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.019657][ T5894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.039756][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.099211][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.150331][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.181964][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.189152][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.201373][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.208541][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.238442][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.351849][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.382743][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.390056][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.410481][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.471489][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.478749][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.497187][ T5876] veth0_vlan: entered promiscuous mode [ 436.512165][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.581099][ T5876] veth1_vlan: entered promiscuous mode [ 436.637186][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.675244][ T5876] veth0_macvtap: entered promiscuous mode [ 436.699101][ T5884] veth0_vlan: entered promiscuous mode [ 436.707840][ T5883] veth0_vlan: entered promiscuous mode [ 436.717586][ T5876] veth1_macvtap: entered promiscuous mode [ 436.745708][ T5883] veth1_vlan: entered promiscuous mode [ 436.771010][ T5884] veth1_vlan: entered promiscuous mode [ 436.840990][ T5882] veth0_vlan: entered promiscuous mode [ 436.857478][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.869971][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.896335][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.917141][ T5882] veth1_vlan: entered promiscuous mode [ 436.925403][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.934597][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.943325][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.952469][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.988516][ T5883] veth0_macvtap: entered promiscuous mode [ 437.019941][ T5883] veth1_macvtap: entered promiscuous mode [ 437.030050][ T5884] veth0_macvtap: entered promiscuous mode [ 437.041169][ T5884] veth1_macvtap: entered promiscuous mode [ 437.101486][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.118365][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.131293][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.160833][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.171802][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.183745][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.209473][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.215832][ T55] Bluetooth: hci0: command tx timeout [ 437.228185][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.238629][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.249283][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.260908][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.276485][ T5884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.285508][ T5884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.294622][ T55] Bluetooth: hci1: command tx timeout [ 437.297710][ T5884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.309123][ T5884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.339684][ T5882] veth0_macvtap: entered promiscuous mode [ 437.362602][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.374792][ T55] Bluetooth: hci2: command tx timeout [ 437.381606][ T5882] veth1_macvtap: entered promiscuous mode [ 437.389216][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.392471][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.407544][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.417795][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.428763][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.440044][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.454796][ T55] Bluetooth: hci3: command tx timeout [ 437.460284][ T55] Bluetooth: hci4: command tx timeout [ 437.502692][ T5883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.512010][ T5883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.521238][ T5883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.530349][ T5883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.582903][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.594496][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.604414][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.615539][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.626096][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.636613][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.647985][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.661788][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.665663][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.681669][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.681667][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.681692][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.710690][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.720879][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.731511][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.743046][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.750955][ T5874] veth0_vlan: entered promiscuous mode [ 437.806415][ T5882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.817360][ T5882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.831105][ T5882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.840207][ T5882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.871561][ T5874] veth1_vlan: entered promiscuous mode [ 437.917123][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.930649][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.971199][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 438.085829][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.093716][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.161117][ T5874] veth0_macvtap: entered promiscuous mode [ 438.172075][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 438.243300][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.249309][ T5874] veth1_macvtap: entered promiscuous mode [ 438.281683][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.310789][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.329509][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.456392][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.496104][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.506577][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.517471][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.527934][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.528967][ T5928] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 438.540214][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.568432][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.592708][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.606979][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.642744][ T5922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.646251][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.667687][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.679334][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.689440][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.702089][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.713399][ T5922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.714293][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.733143][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.744671][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.755312][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.766269][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.778010][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.793582][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.806535][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.815820][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.816329][ T976] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 438.825247][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.984508][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 439.009275][ T976] usb 5-1: config 5 has an invalid interface number: 162 but max is 0 [ 439.040307][ T976] usb 5-1: config 5 has no interface number 0 [ 439.059224][ T976] usb 5-1: config 5 interface 162 has no altsetting 0 [ 439.087255][ T976] usb 5-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 439.119873][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.157278][ T976] usb 5-1: Product: syz [ 439.170646][ T976] usb 5-1: Manufacturer: syz [ 439.184999][ T976] usb 5-1: SerialNumber: syz [ 439.193921][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.240936][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.295138][ T55] Bluetooth: hci0: command tx timeout [ 439.357355][ T5943] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 439.375104][ T55] Bluetooth: hci1: command tx timeout [ 439.397270][ T5922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.411599][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 439.422044][ T5943] vcan0: entered promiscuous mode [ 439.427720][ T5943] vcan0: entered allmulticast mode [ 439.451757][ T5922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.456154][ T55] Bluetooth: hci2: command tx timeout [ 439.499942][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.536031][ T5869] Bluetooth: hci3: command tx timeout [ 439.542093][ T55] Bluetooth: hci4: command tx timeout [ 439.563635][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.611586][ T5949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7'. [ 439.633424][ T5950] ip6t_srh: unknown srh match flags B153 [ 439.677926][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.708351][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.834811][ T976] usb-storage 5-1:5.162: USB Mass Storage device detected [ 439.855199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 439.890529][ T976] usb-storage 5-1:5.162: This device (04e6,0009,0200 S 4b P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 439.890529][ T976] Please send a copy of this message to and [ 439.959539][ T5957] TCP: TCP_TX_DELAY enabled [ 440.020736][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.028527][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.078294][ T976] usb 5-1: USB disconnect, device number 2 [ 440.185104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 440.784106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 440.793401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 440.897177][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.924356][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 441.055080][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.265101][ T976] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 441.306532][ T5870] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 441.336350][ T5973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12'. [ 441.356157][ T5870] usb 2-1: config 0 has no interface number 0 [ 441.362338][ T5870] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.411123][ T5982] netlink: 452 bytes leftover after parsing attributes in process `syz.0.13'. [ 441.421941][ T5870] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.437610][ T976] usb 5-1: device descriptor read/all, error -61 [ 442.186961][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 442.216332][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.258218][ T5870] usb 2-1: config 0 descriptor?? [ 442.304407][ T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 442.344985][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 442.434398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 442.444385][ T976] usb 5-1: device descriptor read/64, error -71 [ 442.554596][ T5958] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 442.615072][ T976] usb usb5-port1: attempt power cycle [ 442.655362][ T5845] usb 3-1: Using ep0 maxpacket: 8 [ 442.664282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 442.703854][ T5845] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 442.708107][ T5870] logitech-djreceiver 0003:046D:C71B.0001: unknown main item tag 0x0 [ 442.714206][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.731129][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 442.773219][ T5845] usb 3-1: config 0 descriptor?? [ 442.816713][ T5870] logitech-djreceiver 0003:046D:C71B.0001: unknown main item tag 0x0 [ 442.824098][ T5845] usblcd 3-1:0.0: USBLCD model not supported. [ 442.842024][ T5870] logitech-djreceiver 0003:046D:C71B.0001: unknown main item tag 0x0 [ 442.865930][ T5870] logitech-djreceiver 0003:046D:C71B.0001: unknown main item tag 0x0 [ 442.874084][ T5870] logitech-djreceiver 0003:046D:C71B.0001: unknown main item tag 0x0 [ 442.921956][ T5870] logitech-djreceiver 0003:046D:C71B.0001: unknown main item tag 0x0 [ 442.931349][ T5870] logitech-djreceiver 0003:046D:C71B.0001: unknown main item tag 0x0 [ 442.951566][ T5870] logitech-djreceiver 0003:046D:C71B.0001: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.1-1/input32 [ 443.036021][ T5870] usb 2-1: USB disconnect, device number 2 [ 443.054653][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 443.095308][ T976] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 443.125590][ T976] usb 5-1: device descriptor read/8, error -71 [ 443.135550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 443.155328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 443.225018][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 443.238138][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.242235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 443.255755][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.275996][ T5920] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 443.288502][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.306032][ T5920] usb 1-1: config 0 descriptor?? [ 443.345598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 443.414732][ T976] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 443.447662][ T976] usb 5-1: device descriptor read/8, error -71 [ 443.565164][ T976] usb usb5-port1: unable to enumerate USB device [ 443.647770][ T5989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15'. [ 443.779871][ T5920] usbhid 1-1:0.0: can't add hid device: -71 [ 443.802382][ T5920] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 443.831356][ T5920] usb 1-1: USB disconnect, device number 2 [ 444.010406][ T5958] usb 4-1: unable to get BOS descriptor or descriptor too short [ 444.056534][ T5958] usb 4-1: no configurations [ 444.074917][ T5958] usb 4-1: can't read configurations, error -22 [ 444.141469][ T5996] netlink: 80 bytes leftover after parsing attributes in process `syz.3.18'. [ 444.399214][ T6009] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 444.488665][ T5880] usb 3-1: USB disconnect, device number 2 [ 444.546366][ T5845] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 444.714352][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 445.118472][ T5880] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 445.242188][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 445.316230][ T5845] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 445.323902][ T5845] usb 2-1: can't read configurations, error -71 [ 445.348658][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 445.378303][ T6033] fuse: Unknown parameter '' [ 445.685131][ T5958] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 445.874509][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 445.904956][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 445.917754][ T5958] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 445.926670][ T5958] usb 5-1: config 0 has no interface number 0 [ 445.932962][ T5958] usb 5-1: config 0 interface 184 has no altsetting 0 [ 445.945006][ T5958] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 445.954986][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.963094][ T5958] usb 5-1: Product: syz [ 445.980337][ T5958] usb 5-1: Manufacturer: syz [ 446.145117][ T24] usb 1-1: device descriptor read/64, error -71 [ 446.216145][ T5958] usb 5-1: SerialNumber: syz [ 446.286896][ T5958] usb 5-1: config 0 descriptor?? [ 446.310253][ T5958] smsc75xx v1.0.0 [ 446.333906][ T6045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.394381][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 446.554512][ T24] usb 1-1: device descriptor read/64, error -71 [ 446.684638][ T24] usb usb1-port1: attempt power cycle [ 446.784020][ T5924] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 446.821967][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 446.923410][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 446.936506][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 446.995617][ T5924] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 447.019914][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.056426][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 447.076371][ T5924] usb 2-1: config 0 has no interface number 0 [ 447.118138][ T24] usb 1-1: device descriptor read/8, error -71 [ 447.133720][ T5924] usb 2-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 447.169540][ T5924] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 447.178852][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.193379][ T5924] usb 2-1: Product: syz [ 447.201136][ T5924] usb 2-1: Manufacturer: syz [ 447.209450][ T5924] usb 2-1: SerialNumber: syz [ 447.263374][ T5924] usb 2-1: config 0 descriptor?? [ 447.285737][ T5924] usb-storage 2-1:0.20: USB Mass Storage device detected [ 447.317555][ T5924] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 447.328053][ T5924] usb-storage 2-1:0.20: This device (04e6,000b,0100 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 447.328053][ T5924] Please send a copy of this message to and [ 447.384689][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 447.425468][ T24] usb 1-1: device descriptor read/8, error -71 [ 447.488610][ T5924] usb 2-1: USB disconnect, device number 5 [ 447.555629][ T24] usb usb1-port1: unable to enumerate USB device [ 447.956051][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 447.976023][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 448.011704][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 448.029087][ T5958] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 448.098005][ T5958] usb 5-1: USB disconnect, device number 7 [ 448.242926][ T6063] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 448.414404][ T976] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 448.636673][ T976] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 448.656602][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 448.665387][ T976] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 448.690845][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 448.713930][ T976] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 448.720144][ T5880] usb 3-1: can't read configurations, error -71 [ 448.724584][ T5920] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 448.773206][ T976] usb 2-1: config 220 has no interface number 2 [ 448.804544][ T976] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 448.839121][ T976] usb 2-1: config 220 interface 0 has no altsetting 0 [ 448.896410][ T976] usb 2-1: config 220 interface 76 has no altsetting 0 [ 448.910256][ T976] usb 2-1: config 220 interface 1 has no altsetting 0 [ 448.927942][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 448.945746][ T976] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 448.967938][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.993440][ T5920] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 449.038536][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.053522][ T976] usb 2-1: Product: syz [ 449.066142][ T976] usb 2-1: Manufacturer: syz [ 449.070969][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.148484][ T976] usb 2-1: SerialNumber: syz [ 449.190071][ T5920] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.195508][ T6084] veth1_macvtap: left promiscuous mode [ 449.221603][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.243512][ T5920] usb 4-1: Product: syz [ 449.247649][ T6083] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 449.262773][ T5920] usb 4-1: Manufacturer: syz [ 449.280434][ T5920] usb 4-1: SerialNumber: syz [ 449.536909][ T976] usb 2-1: selecting invalid altsetting 0 [ 449.568613][ T976] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 449.596777][ T976] usb 2-1: No valid video chain found. [ 449.636198][ T976] usb 2-1: selecting invalid altsetting 0 [ 449.711810][ T976] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 449.775548][ T5920] usb 4-1: 0:2 : does not exist [ 449.794340][ T976] usb 2-1: USB disconnect, device number 6 [ 450.094464][ T5880] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 450.388776][ T5924] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 450.474537][ T5880] usb 3-1: config 0 has no interfaces? [ 450.500576][ T5880] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 450.521734][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.628811][ T5880] usb 3-1: Product: syz [ 450.648328][ T5924] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 450.670044][ T5880] usb 3-1: Manufacturer: syz [ 450.679384][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.754378][ T5880] usb 3-1: SerialNumber: syz [ 450.783051][ T6065] loop4: detected capacity change from 0 to 7 [ 450.832753][ T6065] Dev loop4: unable to read RDB block 7 [ 450.841859][ T5880] usb 3-1: config 0 descriptor?? [ 450.852031][ T6065] loop4: AHDI p1 p2 [ 450.861117][ T5924] usb 2-1: config 0 has no interface number 0 [ 450.876703][ T6065] loop4: partition table partially beyond EOD, truncated [ 450.887258][ T5924] usb 2-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 450.891521][ T6065] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 450.948166][ T5924] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 450.972534][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.041294][ T5924] usb 2-1: Product: syz [ 451.061328][ T5924] usb 2-1: Manufacturer: syz [ 451.084776][ T5924] usb 2-1: SerialNumber: syz [ 451.120998][ T5924] usb 2-1: config 0 descriptor?? [ 451.506925][ T5920] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 451.522364][ T5924] usb-storage 2-1:0.20: USB Mass Storage device detected [ 451.618432][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 451.641056][ T5924] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 451.648812][ T5924] usb-storage 2-1:0.20: This device (04e6,000b,0100 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 451.648812][ T5924] Please send a copy of this message to and [ 451.902000][ T5924] usb 2-1: USB disconnect, device number 7 [ 451.972541][ T5920] usb 4-1: USB disconnect, device number 4 [ 452.769269][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.535867][ T5924] usb 3-1: USB disconnect, device number 5 [ 453.637778][ T6124] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 453.644430][ T6124] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 453.664611][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 453.700156][ T6124] vhci_hcd vhci_hcd.0: Device attached [ 453.839609][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 453.848721][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 453.917908][ T6125] vhci_hcd: connection closed [ 453.932818][ T24] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.949836][ T5880] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 453.967366][ T5916] vhci_hcd: stop threads [ 453.991443][ T5916] vhci_hcd: release socket [ 454.076893][ T24] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.099399][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 454.106476][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 454.115904][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.130012][ T5916] vhci_hcd: disconnect device [ 454.195562][ T24] usb 5-1: config 0 descriptor?? [ 454.294981][ T6135] netlink: 452 bytes leftover after parsing attributes in process `syz.2.49'. [ 454.933305][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.46'. [ 455.051464][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.251845][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.612755][ T5845] usb 5-1: USB disconnect, device number 8 [ 455.637910][ T6146] hsr0: entered promiscuous mode [ 455.724514][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 455.835639][ T6146] hsr_slave_0: left promiscuous mode [ 455.960118][ T6146] hsr_slave_1: left promiscuous mode [ 456.277071][ T6146] hsr0 (unregistering): left promiscuous mode [ 456.814734][ T5924] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 456.954830][ T6160] x_tables: duplicate underflow at hook 4 [ 456.968126][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.981268][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.994592][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 457.004997][ T5924] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 457.023593][ T5924] usb 3-1: config 0 has no interface number 0 [ 457.030368][ T5924] usb 3-1: config 0 interface 12 has no altsetting 0 [ 457.045451][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.054992][ T5924] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 457.084691][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.087419][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.113158][ T5924] usb 3-1: Product: syz [ 457.118162][ T976] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 457.140735][ T5924] usb 3-1: Manufacturer: syz [ 457.160966][ T5924] usb 3-1: SerialNumber: syz [ 457.180931][ T5924] usb 3-1: config 0 descriptor?? [ 457.204825][ T5845] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 457.282732][ T976] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 457.298533][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.342048][ T6172] netlink: 'syz.4.58': attribute type 10 has an invalid length. [ 457.344493][ T976] usb 4-1: config 0 has no interface number 0 [ 457.376145][ T976] usb 4-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.396577][ T5845] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.410618][ T976] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 457.430216][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.437685][ T5845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.468356][ T6172] team0: Device ipvlan1 failed to register rx_handler [ 457.493098][ T5845] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 457.507861][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 457.544525][ T5845] usb 2-1: SerialNumber: syz [ 457.573524][ T5845] usb 2-1: 0:2 : does not exist [ 457.649627][ T976] usb 4-1: Product: syz [ 457.658513][ T976] usb 4-1: Manufacturer: syz [ 457.663171][ T976] usb 4-1: SerialNumber: syz [ 457.682900][ T976] usb 4-1: config 0 descriptor?? [ 457.690780][ T976] usb-storage 4-1:0.20: USB Mass Storage device detected [ 457.716878][ T976] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 457.730436][ T976] usb-storage 4-1:0.20: This device (04e6,000b,0100 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 457.730436][ T976] Please send a copy of this message to and [ 457.802178][ T5845] usb 2-1: USB disconnect, device number 8 [ 457.855335][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.855580][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.901132][ T5924] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 457.901195][ T5924] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 457.901215][ T5924] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 457.901302][ T5924] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 457.906410][ T5924] usb 3-1: USB disconnect, device number 6 [ 458.023068][ T976] usb 4-1: USB disconnect, device number 5 [ 458.062359][ T6179] tty tty20: ldisc open failed (-12), clearing slot 19 [ 458.116590][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.734826][ T5958] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 458.934631][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 458.951488][ T5958] usb 2-1: config 1 has an invalid interface number: 10 but max is 1 [ 458.965918][ T5958] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 458.974862][ T5958] usb 2-1: config 1 has an invalid interface number: 59 but max is 1 [ 459.158672][ T5958] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 459.229329][ T5880] vhci_hcd: vhci_device speed not set [ 459.255893][ T6195] netlink: 68 bytes leftover after parsing attributes in process `syz.3.63'. [ 459.297766][ T5958] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 459.347686][ T5958] usb 2-1: config 1 has no interface number 0 [ 459.383126][ T5958] usb 2-1: config 1 has no interface number 1 [ 459.411663][ T5958] usb 2-1: config 1 interface 10 altsetting 12 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 459.461639][ T5958] usb 2-1: config 1 interface 10 altsetting 12 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 459.499044][ T5958] usb 2-1: config 1 interface 10 altsetting 12 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 459.535583][ T5958] usb 2-1: config 1 interface 10 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 459.546768][ T5958] usb 2-1: config 1 interface 10 altsetting 12 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 459.558080][ T5958] usb 2-1: config 1 interface 10 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 32 [ 459.568992][ T5958] usb 2-1: config 1 interface 10 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 459.590461][ T5958] usb 2-1: config 1 interface 10 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 459.611715][ T5958] usb 2-1: config 1 interface 10 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 459.694997][ T5958] usb 2-1: config 1 interface 59 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 459.719787][ T5958] usb 2-1: config 1 interface 59 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 459.773318][ T5958] usb 2-1: config 1 interface 59 altsetting 128 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 459.824339][ T5958] usb 2-1: config 1 interface 59 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 459.864478][ T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 459.873105][ T55] Bluetooth: hci1: Injecting HCI hardware error event [ 459.881657][ T55] Bluetooth: hci1: hardware error 0x00 [ 459.889309][ T5958] usb 2-1: config 1 interface 59 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 459.903270][ T5958] usb 2-1: config 1 interface 59 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 459.914703][ T5958] usb 2-1: config 1 interface 59 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 459.926031][ T5958] usb 2-1: config 1 interface 59 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 459.938520][ T5958] usb 2-1: config 1 interface 10 has no altsetting 0 [ 459.945608][ T5958] usb 2-1: config 1 interface 59 has no altsetting 0 [ 459.957667][ T5958] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=84.cb [ 459.968657][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.977224][ T5958] usb 2-1: Product: { [ 459.983785][ T5958] usb 2-1: Manufacturer:   [ 459.989019][ T5958] usb 2-1: SerialNumber: ﳓ쓺樳쁙煏轴亿닞ᴌ쫸贱댏簟預䭞ૺ你칢韓莐䡧뱼翓皫䫤뿼㓋滙᯦㛶㝆罾䨶ᒪᅿ롢닜慃薋碏矓슻溥쥕歚ꞙ㛔䗭ꂼיִ䑙킈᤮肩阱 [ 460.015545][ T6189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 460.864358][ T5845] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 460.954529][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 461.125218][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.142525][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.197386][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 461.217156][ T10] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 461.238306][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.269873][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.308799][ T10] usb 5-1: config 0 has no interface number 0 [ 461.320419][ T5845] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.347443][ T10] usb 5-1: config 0 interface 228 has no altsetting 0 [ 461.359023][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.384341][ T10] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 461.397133][ T5845] usb 3-1: config 0 descriptor?? [ 461.511689][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.515907][ T5958] pn533_usb 2-1:1.10: NFC: Could not find bulk-in or bulk-out endpoint [ 461.563241][ T10] usb 5-1: config 0 descriptor?? [ 461.597916][ T10] usb 5-1: selecting invalid altsetting 0 [ 461.615194][ T5958] pn533_usb 2-1:1.59: NFC: Could not find bulk-in or bulk-out endpoint [ 461.631635][ T5845] plantronics 0003:047F:FFFF.0002: collection stack underflow [ 461.676677][ T5845] plantronics 0003:047F:FFFF.0002: item 0 4 0 12 parsing failed [ 461.806092][ T5880] usb 5-1: USB disconnect, device number 9 [ 461.812221][ T5958] usb 2-1: USB disconnect, device number 9 [ 461.830420][ T5845] plantronics 0003:047F:FFFF.0002: parse failed [ 461.870216][ T5845] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 462.179941][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 462.401628][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.986727][ T5920] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 463.064332][ T5958] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 463.080822][ T976] usb 3-1: USB disconnect, device number 7 [ 463.166579][ T5920] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 463.205484][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.226619][ T5958] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 463.271421][ T5958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.320346][ T5920] usb 2-1: config 0 descriptor?? [ 463.337360][ T5958] usb 5-1: config 0 has no interface number 0 [ 463.356628][ T5958] usb 5-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.421181][ T5958] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 463.437794][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.485423][ T5920] cp210x 2-1:0.0: cp210x converter detected [ 463.521984][ T5958] usb 5-1: Product: syz [ 463.584425][ T5958] usb 5-1: Manufacturer: syz [ 463.599194][ T5958] usb 5-1: SerialNumber: syz [ 463.648507][ T5958] usb 5-1: config 0 descriptor?? [ 463.713723][ T5958] usb-storage 5-1:0.20: USB Mass Storage device detected [ 463.764094][ T5958] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 463.796577][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 463.826169][ T5920] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 463.833723][ T5920] cp210x 2-1:0.0: querying part number failed [ 463.850890][ T5958] usb-storage 5-1:0.20: This device (04e6,000b,0100 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 463.850890][ T5958] Please send a copy of this message to and [ 463.851473][ T5920] usb 2-1: cp210x converter now attached to ttyUSB0 [ 463.878983][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.918607][ T5920] usb 2-1: USB disconnect, device number 10 [ 463.980438][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 463.990860][ T5920] cp210x 2-1:0.0: device disconnected [ 464.204086][ T5958] usb 5-1: USB disconnect, device number 10 [ 464.488830][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'. [ 465.619756][ T6266] process 'syz.2.81' launched './file2' with NULL argv: empty string added [ 465.631730][ T6265] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 465.639752][ T6265] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.82'. [ 465.976170][ T5920] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 466.167646][ T5920] usb 5-1: string descriptor 0 read error: -22 [ 466.247444][ T5920] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 466.267251][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.294878][ T5920] usb 5-1: config 0 descriptor?? [ 466.582562][ T6261] netlink: 'syz.4.80': attribute type 4 has an invalid length. [ 466.736744][ T5845] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 466.884378][ T5870] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 466.906448][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.922813][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.933716][ T5845] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 466.946433][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.958640][ T5845] usb 2-1: config 0 descriptor?? [ 466.974566][ T976] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 467.014349][ T5870] usb 4-1: device descriptor read/64, error -71 [ 467.124505][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 467.140315][ T976] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 467.148880][ T976] usb 1-1: config 0 has no interface number 0 [ 467.155475][ T976] usb 1-1: config 0 interface 167 has no altsetting 0 [ 467.165307][ T976] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 467.174734][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.182898][ T976] usb 1-1: Product: syz [ 467.189161][ T976] usb 1-1: Manufacturer: syz [ 467.193922][ T976] usb 1-1: SerialNumber: syz [ 467.205703][ T976] usb 1-1: config 0 descriptor?? [ 467.264361][ T5870] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 467.343099][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.353706][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.394617][ T5870] usb 4-1: device descriptor read/64, error -71 [ 467.446121][ T976] usbtest 1-1:0.167: couldn't get endpoints, -22 [ 467.457381][ T976] usbtest 1-1:0.167: probe with driver usbtest failed with error -22 [ 467.472401][ T5845] usbhid 2-1:0.0: can't add hid device: -71 [ 467.478376][ T976] usb 1-1: USB disconnect, device number 8 [ 467.490626][ T5845] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 467.507244][ T5845] usb 2-1: USB disconnect, device number 11 [ 467.512112][ T5870] usb usb4-port1: attempt power cycle [ 467.864372][ T5870] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 467.890259][ T5870] usb 4-1: device descriptor read/8, error -71 [ 467.967269][ T5920] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 468.027318][ T5920] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 468.074377][ T5920] dib0700: firmware download failed at 7 with -22 [ 468.134398][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 468.142117][ T5920] usb 5-1: USB disconnect, device number 11 [ 468.180072][ T5870] usb 4-1: device descriptor read/8, error -71 [ 468.294950][ T5870] usb usb4-port1: unable to enumerate USB device [ 468.594349][ T5920] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 468.724318][ T5920] usb 5-1: device descriptor read/64, error -71 [ 469.024540][ T5920] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 469.164433][ T5920] usb 5-1: device descriptor read/64, error -71 [ 469.201346][ T6310] Zero length message leads to an empty skb [ 469.276543][ T5920] usb usb5-port1: attempt power cycle [ 469.644328][ T5920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 469.675027][ T5920] usb 5-1: device descriptor read/8, error -71 [ 469.934518][ T5920] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 469.965309][ T5920] usb 5-1: device descriptor read/8, error -71 [ 470.119430][ T6320] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 470.150051][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 470.191497][ T6320] vcan0: entered promiscuous mode [ 470.202119][ T6320] vcan0: entered allmulticast mode [ 470.202374][ T5920] usb usb5-port1: unable to enumerate USB device [ 470.207378][ T5958] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 470.283070][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 470.372536][ T6320] ip6t_srh: unknown srh match flags B153 [ 470.395914][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 470.410814][ T5958] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 470.427140][ T5958] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 470.440544][ T5958] usb 4-1: config 5 has no interface number 0 [ 470.447040][ T5958] usb 4-1: config 5 interface 168 has no altsetting 0 [ 470.458868][ T5958] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 470.468245][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.485182][ T5958] usb 4-1: Product: syz [ 470.492928][ T5958] usb 4-1: Manufacturer: syz [ 470.504530][ T5958] usb 4-1: SerialNumber: syz [ 470.758681][ T5958] pn533_usb 4-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 470.813040][ T5958] usb 4-1: USB disconnect, device number 10 [ 471.108171][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 471.175831][ T6327] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 471.403039][ T6332] netlink: 452 bytes leftover after parsing attributes in process `syz.2.102'. [ 471.564351][ T976] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 471.674485][ T5845] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 471.730229][ T976] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 471.741970][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.765394][ T976] usb 5-1: config 0 has no interface number 0 [ 471.771795][ T976] usb 5-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 471.787912][ T976] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 471.800569][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.816651][ T976] usb 5-1: Product: syz [ 471.824802][ T976] usb 5-1: Manufacturer: syz [ 471.835346][ T976] usb 5-1: SerialNumber: syz [ 471.849812][ T976] usb 5-1: config 0 descriptor?? [ 471.854639][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 471.865535][ T976] usb-storage 5-1:0.20: USB Mass Storage device detected [ 471.879566][ T5845] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 471.901290][ T5845] usb 4-1: config 0 has no interface number 0 [ 471.905720][ T976] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 471.917174][ T976] usb-storage 5-1:0.20: This device (04e6,000b,0100 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 471.917174][ T976] Please send a copy of this message to and [ 471.948289][ T5845] usb 4-1: config 0 interface 167 has no altsetting 0 [ 471.987381][ T5845] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 472.034418][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.069477][ T976] usb 5-1: USB disconnect, device number 16 [ 472.080450][ T5845] usb 4-1: Product: syz [ 472.096525][ T5845] usb 4-1: Manufacturer: syz [ 472.114276][ T5845] usb 4-1: SerialNumber: syz [ 472.136958][ T5845] usb 4-1: config 0 descriptor?? [ 472.389378][ T5845] usbtest 4-1:0.167: couldn't get endpoints, -22 [ 472.413709][ T5845] usbtest 4-1:0.167: probe with driver usbtest failed with error -22 [ 472.465694][ T5845] usb 4-1: USB disconnect, device number 11 [ 472.714483][ T5920] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 472.930192][ T5920] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.956381][ T5920] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 472.969965][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.980442][ T5920] usb 1-1: Product: syz [ 472.993708][ T5920] usb 1-1: Manufacturer: syz [ 473.001667][ T5920] usb 1-1: SerialNumber: syz [ 473.044471][ T976] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 473.194414][ T976] usb 5-1: device descriptor read/64, error -71 [ 473.250562][ T5920] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 473.494445][ T976] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 474.148122][ T6352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.162629][ T6352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.215170][ T976] usb 5-1: device descriptor read/64, error -71 [ 474.346317][ T976] usb usb5-port1: attempt power cycle [ 474.478907][ T10] usb 1-1: USB disconnect, device number 9 [ 474.491657][ T10] usblp0: removed [ 474.774348][ T976] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 474.845139][ T976] usb 5-1: device descriptor read/8, error -71 [ 475.104470][ T976] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 475.175080][ T976] usb 5-1: device descriptor read/8, error -71 [ 475.334720][ T976] usb usb5-port1: unable to enumerate USB device [ 475.762503][ T6394] wg1: entered promiscuous mode [ 475.772550][ T6394] wg1: entered allmulticast mode [ 476.554483][ T5845] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 476.641225][ T6407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.120'. [ 476.662095][ T6407] fuse: Bad value for 'fd' [ 476.776399][ T5845] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 476.784802][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.832117][ T5845] usb 4-1: config 0 has no interface number 0 [ 476.997486][ T5845] usb 4-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.275084][ T5845] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 477.308649][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.338983][ T5845] usb 4-1: Product: syz [ 477.364332][ T5845] usb 4-1: Manufacturer: syz [ 477.369020][ T5845] usb 4-1: SerialNumber: syz [ 477.404075][ T5845] usb 4-1: config 0 descriptor?? [ 477.485441][ T5845] usb-storage 4-1:0.20: USB Mass Storage device detected [ 477.597571][ T5845] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 477.644303][ T5845] usb-storage 4-1:0.20: This device (04e6,000b,0100 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 477.644303][ T5845] Please send a copy of this message to and [ 477.789670][ T5845] usb 4-1: USB disconnect, device number 12 [ 477.868587][ T30] audit: type=1326 audit(1745472720.071:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e76d8e969 code=0x7ffc0000 [ 477.974378][ T30] audit: type=1326 audit(1745472720.081:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e76d8e969 code=0x7ffc0000 [ 478.233862][ T6423] netlink: 'syz.2.124': attribute type 10 has an invalid length. [ 478.291801][ T6425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.412923][ T6423] team0: Port device wlan1 added [ 479.104327][ T5958] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 479.432296][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 479.464956][ T5958] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 479.493462][ T5958] usb 3-1: config 0 has no interface number 0 [ 479.509951][ T5958] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 479.587094][ T5958] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 479.640417][ T5958] usb 3-1: config 0 interface 126 has no altsetting 0 [ 479.694575][ T5958] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 479.724263][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.762971][ T5958] usb 3-1: Product: syz [ 479.783295][ T5958] usb 3-1: Manufacturer: syz [ 479.844281][ T5958] usb 3-1: SerialNumber: syz [ 479.906052][ T5958] usb 3-1: config 0 descriptor?? [ 479.963086][ T6438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 479.981172][ T6438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 480.428136][ T5958] ir_usb 3-1:0.126: IR Dongle converter detected [ 480.553001][ T6448] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 480.660281][ T6448] vcan0: tx drop: invalid sa for name 0x0000400000000000 [ 480.689201][ T5958] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 480.773773][ T6452] wg1: entered promiscuous mode [ 480.789396][ T6452] wg1: entered allmulticast mode [ 480.860389][ T5924] usb 3-1: USB disconnect, device number 8 [ 480.871475][ T5924] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 480.905666][ T5924] ir_usb 3-1:0.126: device disconnected [ 481.402034][ T6450] sctp: failed to load transform for md5: -2 [ 481.629521][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.637776][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.894798][ T6469] fuse: Bad value for 'fd' [ 482.249109][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.265105][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.387600][ T6473] Cannot find add_set index 0 as target [ 482.677649][ T6460] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.724494][ T6460] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.742023][ T6460] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.761827][ T6460] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.843058][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.135'. [ 483.315116][ T5924] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 483.527025][ T5924] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 483.537830][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.550312][ T5924] usb 1-1: config 0 has no interface number 0 [ 483.556786][ T5924] usb 1-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 483.604471][ T5958] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 483.627835][ T5924] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 483.679730][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.730496][ T5924] usb 1-1: Product: syz [ 483.744410][ T5958] usb 3-1: device descriptor read/64, error -71 [ 483.757554][ T5924] usb 1-1: Manufacturer: syz [ 483.796088][ T5924] usb 1-1: SerialNumber: syz [ 483.805152][ T5924] usb 1-1: config 0 descriptor?? [ 483.812748][ T5924] usb-storage 1-1:0.20: USB Mass Storage device detected [ 483.829838][ T5924] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 483.882417][ T5924] usb-storage 1-1:0.20: This device (04e6,000b,0100 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 483.882417][ T5924] Please send a copy of this message to and [ 483.994334][ T5958] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 484.085628][ T5924] usb 1-1: USB disconnect, device number 10 [ 484.134294][ T5958] usb 3-1: device descriptor read/64, error -71 [ 484.245798][ T5958] usb usb3-port1: attempt power cycle [ 484.646302][ T5958] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 484.702954][ T5958] usb 3-1: device descriptor read/8, error -71 [ 484.984758][ T5958] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 485.027074][ T5958] usb 3-1: device descriptor read/8, error -71 [ 485.117936][ T6525] fuse: Bad value for 'fd' [ 485.144626][ T5958] usb usb3-port1: unable to enumerate USB device [ 485.804526][ T5880] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 485.967887][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 485.986902][ T5880] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 485.995617][ T5880] usb 5-1: config 0 has no interface number 0 [ 486.012111][ T5880] usb 5-1: config 0 interface 167 has no altsetting 0 [ 486.031550][ T5880] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 486.042122][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.069509][ T5880] usb 5-1: Product: syz [ 486.085968][ T5880] usb 5-1: Manufacturer: syz [ 486.249659][ T5880] usb 5-1: SerialNumber: syz [ 486.285608][ T5880] usb 5-1: config 0 descriptor?? [ 486.651130][ T5880] usbtest 5-1:0.167: couldn't get endpoints, -22 [ 486.666653][ T5880] usbtest 5-1:0.167: probe with driver usbtest failed with error -22 [ 486.693449][ T5880] usb 5-1: USB disconnect, device number 21 [ 486.974399][ T5958] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 487.174488][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 487.190823][ T5958] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 487.199533][ T5958] usb 3-1: config 0 has no interface number 0 [ 487.287177][ T5958] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 487.346280][ T5958] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 487.390400][ T5958] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 487.399984][ T5958] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 487.408327][ T5958] usb 3-1: Product: syz [ 487.420881][ T5958] usb 3-1: Manufacturer: syz [ 487.432942][ T5958] usb 3-1: SerialNumber: syz [ 487.473385][ T5958] usb 3-1: config 0 descriptor?? [ 487.492316][ T5958] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 487.500870][ T5958] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 487.536497][ T5958] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 487.599037][ T5958] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 487.656144][ T5958] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 487.694536][ T5924] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 487.713915][ T5958] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 487.761225][ T5958] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 487.797969][ T5958] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 487.829152][ T5958] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 487.866849][ T5924] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 487.875430][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.892330][ T5958] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 487.924501][ T5924] usb 5-1: config 0 has no interface number 0 [ 487.935971][ T5958] usb 3-1: USB disconnect, device number 13 [ 487.944459][ T5924] usb 5-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.965772][ T5958] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 487.977580][ T5924] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 487.987028][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.012252][ T5958] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 488.023191][ T5924] usb 5-1: Product: syz [ 488.042793][ T5924] usb 5-1: Manufacturer: syz [ 488.063132][ T5924] usb 5-1: SerialNumber: syz [ 488.081553][ T5958] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 488.111020][ T5924] usb 5-1: config 0 descriptor?? [ 488.143944][ T5924] usb-storage 5-1:0.20: USB Mass Storage device detected [ 488.157672][ T5958] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 488.170985][ T5924] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 488.207886][ T5958] keyspan 3-1:0.107: device disconnected [ 488.213800][ T5924] usb-storage 5-1:0.20: This device (04e6,000b,0100 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 488.213800][ T5924] Please send a copy of this message to and [ 488.474668][ T5924] usb 5-1: USB disconnect, device number 22 [ 488.751692][ T5958] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 488.929528][ T5958] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 489.189330][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.414288][ T5958] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 489.452182][ T5958] usb 3-1: config 0 has no interface number 1 [ 489.471627][ T5958] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 489.491745][ T5958] usb 3-1: config 0 interface 197 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 489.535237][ T5845] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 489.567008][ T5958] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 489.608056][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.635760][ T5958] usb 3-1: Product: syz [ 489.639987][ T5958] usb 3-1: Manufacturer: syz [ 489.664576][ T5924] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 489.693913][ T5958] usb 3-1: SerialNumber: syz [ 489.699565][ T5845] usb 1-1: device descriptor read/64, error -71 [ 489.721978][ T5958] usb 3-1: config 0 descriptor?? [ 489.735236][ T6565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.746356][ T5958] qmi_wwan 3-1:0.197: probe with driver qmi_wwan failed with error -22 [ 489.836462][ T5924] usb 5-1: config 0 has no interfaces? [ 489.856453][ T5924] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 489.869585][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.900363][ T5924] usb 5-1: Product: syz [ 489.920951][ T5924] usb 5-1: Manufacturer: syz [ 489.931222][ T5924] usb 5-1: SerialNumber: syz [ 489.957754][ T5845] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 489.988203][ T5924] usb 5-1: config 0 descriptor?? [ 490.114301][ T5845] usb 1-1: device descriptor read/64, error -71 [ 490.253249][ T5845] usb usb1-port1: attempt power cycle [ 490.274437][ T976] usb 5-1: USB disconnect, device number 23 [ 490.606778][ T5845] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 490.639263][ T5845] usb 1-1: device descriptor read/8, error -71 [ 490.754377][ T5924] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 490.830874][ T6594] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 490.871943][ T6594] kvm: pic: non byte read [ 490.877447][ T6594] kvm: pic: level sensitive irq not supported [ 490.877603][ T6594] kvm: pic: non byte read [ 490.888741][ T5845] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 490.909185][ T6594] kvm: pic: level sensitive irq not supported [ 490.909282][ T6594] kvm: pic: non byte read [ 490.941387][ T5924] usb 4-1: config 1 interface 0 has no altsetting 0 [ 490.952243][ T5845] usb 1-1: device descriptor read/8, error -71 [ 490.969484][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 491.026368][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.104329][ T5924] usb 4-1: Product: syz [ 491.115164][ T5845] usb usb1-port1: unable to enumerate USB device [ 491.131938][ T5924] usb 4-1: Manufacturer: syz [ 491.142079][ T5924] usb 4-1: SerialNumber: syz [ 491.537594][ T6612] tc_dump_action: action bad kind [ 491.761052][ T5924] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 491.864304][ T976] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 491.993896][ T6615] fuse: Bad value for 'fd' [ 492.033984][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.108735][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.186292][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.201853][ T976] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.251942][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.307710][ T976] usb 2-1: config 0 descriptor?? [ 492.370521][ C1] usblp0: nonzero write bulk status received: -71 [ 492.393447][ T5924] usb 4-1: USB disconnect, device number 13 [ 492.604928][ T6584] usblp0: removed [ 492.777019][ T976] plantronics 0003:047F:FFFF.0003: invalid report_size -1041009569 [ 492.785402][ T5919] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 492.810258][ T976] plantronics 0003:047F:FFFF.0003: item 0 4 1 7 parsing failed [ 492.822544][ T976] plantronics 0003:047F:FFFF.0003: parse failed [ 492.832449][ T976] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 492.966498][ T5919] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 492.975322][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.005032][ T10] usb 2-1: USB disconnect, device number 12 [ 493.048164][ T5919] usb 5-1: config 0 has no interface number 0 [ 493.076693][ T5919] usb 5-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.116217][ T5919] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 493.137002][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.160346][ T5919] usb 5-1: Product: syz [ 493.168045][ T5919] usb 5-1: Manufacturer: syz [ 493.172775][ T5919] usb 5-1: SerialNumber: syz [ 493.190861][ T5919] usb 5-1: config 0 descriptor?? [ 493.201423][ T5919] usb-storage 5-1:0.20: USB Mass Storage device detected [ 493.237105][ T5919] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 493.247364][ T5919] usb-storage 5-1:0.20: This device (04e6,000b,0100 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc3-syzkaller-00032-ga79be02bba5c) [ 493.247364][ T5919] Please send a copy of this message to and [ 493.403955][ T5919] usb 5-1: USB disconnect, device number 24 [ 493.477941][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.504843][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.521568][ T6648] dns_resolver: Unsupported content type (8) [ 493.537721][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.550736][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.572096][ T6666] netlink: 80 bytes leftover after parsing attributes in process `syz.0.183'. [ 495.084412][ T5924] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 495.294522][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 495.328033][ T5924] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 495.336760][ T5924] usb 5-1: config 0 has no interface number 0 [ 495.352793][ T5924] usb 5-1: config 0 interface 167 has no altsetting 0 [ 495.382463][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 495.391984][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.577284][ T5924] usb 5-1: Product: syz [ 495.643446][ T5924] usb 5-1: Manufacturer: syz [ 495.649013][ T5924] usb 5-1: SerialNumber: syz [ 495.659852][ T5924] usb 5-1: config 0 descriptor?? [ 495.897513][ T5924] usbtest 5-1:0.167: couldn't get endpoints, -22 [ 495.905811][ T5924] usbtest 5-1:0.167: probe with driver usbtest failed with error -22 [ 495.929142][ T5924] usb 5-1: USB disconnect, device number 25 [ 497.032006][ T6695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.042350][ T6695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.664489][ T5919] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 497.710547][ T5924] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 497.993832][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 498.020877][ T5924] usb 4-1: config 128 has an invalid interface number: 80 but max is 0 [ 498.039488][ T5924] usb 4-1: config 128 has no interface number 0 [ 498.058251][ T5924] usb 4-1: config 128 interface 80 altsetting 4 endpoint 0x83 has invalid maxpacket 512, setting to 64 [ 498.078571][ T5919] usb 5-1: config 0 has no interfaces? [ 498.090015][ T5919] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 498.092046][ T5924] usb 4-1: config 128 interface 80 has no altsetting 0 [ 498.131256][ T5924] usb 4-1: New USB device found, idVendor=19d2, idProduct=1113, bcdDevice=54.d5 [ 498.172266][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.185482][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.191321][ T6706] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 498.223031][ T5919] usb 5-1: Product: syz [ 498.227840][ T5924] usb 4-1: Product: 뼕㲫휿렕ꆒ朡뭿镥쑑㇂ザ쐘퓔㳰ுឝ䏼帋霺Ⰺآ檞ꀱ [ 498.237514][ T5919] usb 5-1: Manufacturer: syz [ 498.251650][ T5919] usb 5-1: SerialNumber: syz [ 498.275783][ T5919] usb 5-1: config 0 descriptor?? [ 498.311932][ T5924] usb 4-1: Manufacturer: 㐁 [ 498.318216][ T5924] usb 4-1: SerialNumber: syz [ 498.896880][ T5924] option 4-1:128.80: GSM modem (1-port) converter detected [ 498.917377][ T5924] usb 4-1: USB disconnect, device number 14 [ 498.932426][ T5924] option 4-1:128.80: device disconnected [ 498.955897][ T6713] netlink: 80 bytes leftover after parsing attributes in process `syz.1.194'. [ 499.624509][ T976] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 499.814805][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 499.841999][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 499.919256][ T976] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 499.963536][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.012855][ T976] usb 2-1: config 0 descriptor?? [ 500.208751][ T5919] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 500.495303][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 500.510795][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 500.531834][ T976] usb 2-1: USB disconnect, device number 13 [ 500.874478][ T5919] usb 4-1: device descriptor read/64, error -71 [ 500.905254][ T5924] usb 5-1: USB disconnect, device number 26 [ 501.164445][ T5919] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 501.367620][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 501.415914][ T5919] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 501.444726][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.462461][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.469078][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.479465][ T5919] usb 4-1: Product: syz [ 501.486982][ T5919] usb 4-1: Manufacturer: syz [ 501.498698][ T5919] usb 4-1: SerialNumber: syz [ 501.590625][ T5919] usb 4-1: config 0 descriptor?? [ 501.622073][ T5919] as10x_usb: device has been detected [ 501.632866][ T5919] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 501.692120][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.205'. [ 501.848588][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 501.898496][ T5919] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 502.127356][ T5919] as10x_usb: error during firmware upload part1 [ 502.226182][ T5919] Registered device Abilis Systems DVB-Titan [ 502.228089][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 502.258132][ T5919] usb 4-1: USB disconnect, device number 16 [ 502.363854][ T5919] Unregistered device Abilis Systems DVB-Titan [ 502.369193][ T5919] as10x_usb: device has been disconnected [ 503.114795][ T5919] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 503.132442][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 503.396538][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 503.403291][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.420948][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 503.451719][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.820763][ T5919] usb 4-1: config 0 descriptor?? [ 503.934965][ T5919] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 504.077872][ T6777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.122883][ T6777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.400460][ T5958] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 504.666751][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 504.674165][ T5958] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.689578][ T5958] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 504.699187][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.745840][ T5958] usb 2-1: Product: syz [ 504.819964][ T5958] usb 2-1: Manufacturer: syz [ 504.859362][ T5958] usb 2-1: SerialNumber: syz [ 504.898543][ T5958] usb 2-1: config 0 descriptor?? [ 504.919832][ T5958] xr_serial 2-1:0.0: failed to claim sibling interface: -16 [ 504.935484][ T5958] xr_serial 2-1:0.0: probe with driver xr_serial failed with error -16 [ 505.116373][ T5958] usb 2-1: USB disconnect, device number 14 [ 505.475530][ T5919] gspca_vc032x: reg_w err -110 [ 505.480583][ T5919] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 506.363520][ T5920] usb 4-1: USB disconnect, device number 17 [ 506.407638][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.434639][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.454392][ T5958] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 506.515401][ T5919] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 506.654922][ T5919] usb 2-1: device descriptor read/64, error -71 [ 506.674395][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 506.685717][ T5958] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 506.721139][ T5958] usb 5-1: config 0 has no interface number 1 [ 506.730952][ T5958] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 506.743275][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.753459][ T5958] usb 5-1: Product: syz [ 506.758750][ T5958] usb 5-1: Manufacturer: syz [ 506.763522][ T5958] usb 5-1: SerialNumber: syz [ 506.776726][ T5958] usb 5-1: config 0 descriptor?? [ 506.868730][ T5958] snd-usb-audio 5-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 506.895107][ T5919] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 506.966084][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.994106][ T24] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 507.087752][ T5919] usb 2-1: device descriptor read/64, error -71 [ 507.178837][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.207447][ T24] usb 4-1: config 0 has no interface number 0 [ 507.222228][ T5919] usb usb2-port1: attempt power cycle [ 507.227838][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 507.424360][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 507.734351][ T5919] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 507.760776][ T5919] usb 2-1: device descriptor read/8, error -71 [ 507.767374][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 507.822058][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.894986][ T24] usb 4-1: config 0 descriptor?? [ 507.901865][ T6808] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 508.014380][ T5919] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 508.048889][ T5920] usb 5-1: USB disconnect, device number 27 [ 508.070914][ T5919] usb 2-1: device descriptor read/8, error -71 [ 508.140750][ T24] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 508.195934][ T5919] usb usb2-port1: unable to enumerate USB device [ 508.208975][ T6807] netlink: 'syz.3.219': attribute type 10 has an invalid length. [ 508.380178][ T6807] team0: Port device dummy0 added [ 508.433218][ T5920] usb 4-1: USB disconnect, device number 18 [ 510.174394][ T5924] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 510.324448][ T5924] usb 2-1: device descriptor read/64, error -71 [ 510.480196][ T6834] netlink: 264 bytes leftover after parsing attributes in process `syz.3.225'. [ 510.494037][ T6834] netlink: 56 bytes leftover after parsing attributes in process `syz.3.225'. [ 510.584485][ T5924] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 510.585871][ T6847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.654319][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.681146][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.754319][ T5924] usb 2-1: device descriptor read/64, error -71 [ 510.880227][ T5924] usb usb2-port1: attempt power cycle [ 511.054391][ T5919] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 511.234380][ T5924] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 511.258547][ T5919] usb 5-1: config 0 has no interfaces? [ 511.267134][ T5919] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 511.286287][ T5924] usb 2-1: device descriptor read/8, error -71 [ 511.292675][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.325157][ T5919] usb 5-1: Product: syz [ 511.329380][ T5919] usb 5-1: Manufacturer: syz [ 511.335244][ T5919] usb 5-1: SerialNumber: syz [ 511.345002][ T5919] usb 5-1: config 0 descriptor?? [ 511.584765][ T5924] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 511.635128][ T5924] usb 2-1: device descriptor read/8, error -71 [ 511.691832][ T6858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.721198][ T6858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.775338][ T5924] usb usb2-port1: unable to enumerate USB device [ 512.734315][ T5924] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 512.804280][ T5958] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 512.904367][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 512.919702][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 512.935546][ T5924] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 512.947895][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.008815][ T5924] usb 1-1: Product: syz [ 513.028835][ T5924] usb 1-1: Manufacturer: syz [ 513.061408][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.102998][ T5924] usb 1-1: SerialNumber: syz [ 513.138322][ T5924] usb 1-1: config 0 descriptor?? [ 513.170874][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.201254][ T5919] usb 5-1: USB disconnect, device number 28 [ 513.548265][ T5924] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 513.956734][ T5924] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 514.443333][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.465154][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.729211][ T5958] usb 4-1: unable to get BOS descriptor or descriptor too short [ 515.901751][ T5958] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 515.941046][ T5958] usb 4-1: can't read configurations, error -71 [ 516.006092][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 516.594352][ T5958] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 516.756368][ T5958] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 516.765116][ T5958] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 516.776658][ T5958] usb 4-1: config 0 has no interface number 0 [ 516.782832][ T5958] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 65535, setting to 64 [ 516.794709][ T5958] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.808403][ T5958] usb 4-1: config 0 interface 52 has no altsetting 0 [ 516.825716][ T5958] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 516.846207][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 516.863668][ T5958] usb 4-1: Product: syz [ 516.874237][ T5958] usb 4-1: SerialNumber: syz [ 516.887756][ T5958] usb 4-1: config 0 descriptor?? [ 517.105767][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.119574][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.251754][ T6905] team_slave_0: entered promiscuous mode [ 519.257768][ T6905] team_slave_1: entered promiscuous mode [ 519.271201][ T6905] macvlan0: entered allmulticast mode [ 519.277636][ T6905] team0: entered allmulticast mode [ 519.282963][ T6905] team_slave_0: entered allmulticast mode [ 519.291340][ T6905] team_slave_1: entered allmulticast mode [ 519.299517][ T6905] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 519.311698][ T6905] team0: left allmulticast mode [ 519.317118][ T6905] team_slave_0: left allmulticast mode [ 519.322652][ T6905] team_slave_1: left allmulticast mode [ 519.330164][ T6905] team_slave_0: left promiscuous mode [ 519.335706][ T6905] team_slave_1: left promiscuous mode [ 519.356166][ T5919] usb 1-1: USB disconnect, device number 15 [ 519.494091][ T5958] usb 4-1: Can not set alternate setting to 1, error: -71 [ 519.529720][ T5958] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 519.587044][ T5958] usb 4-1: USB disconnect, device number 20 [ 519.643659][ T6917] netlink: 200 bytes leftover after parsing attributes in process `syz.0.245'. [ 520.304345][ T5845] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 520.877295][ T5845] usb 2-1: device descriptor read/64, error -71 [ 520.967070][ T6947] netlink: 'syz.3.252': attribute type 10 has an invalid length. [ 521.034916][ T6947] syz_tun: entered promiscuous mode [ 521.053072][ T6947] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 521.288109][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.297153][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.307361][ T5845] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 521.464589][ T5845] usb 2-1: device descriptor read/64, error -71 [ 521.656397][ T5919] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 521.776907][ T5845] usb usb2-port1: attempt power cycle [ 521.839509][ T5919] usb 4-1: config 0 has no interfaces? [ 521.848309][ T5919] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 521.860707][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.871250][ T5919] usb 4-1: Product: syz [ 521.881928][ T5919] usb 4-1: Manufacturer: syz [ 521.911305][ T5919] usb 4-1: SerialNumber: syz [ 521.958160][ T5919] usb 4-1: config 0 descriptor?? [ 522.154985][ T5845] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 522.246873][ T5845] usb 2-1: device descriptor read/8, error -71 [ 522.468228][ T5958] usb 4-1: USB disconnect, device number 21 [ 522.552505][ T5845] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 522.595116][ T5845] usb 2-1: device descriptor read/8, error -71 [ 522.664355][ T5919] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 522.724916][ T5845] usb usb2-port1: unable to enumerate USB device [ 522.845921][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 522.874065][ T5919] usb 1-1: unable to get BOS descriptor or descriptor too short [ 522.918957][ T5919] usb 1-1: config 252 has an invalid interface number: 208 but max is 3 [ 522.947289][ T5919] usb 1-1: config 252 has an invalid interface number: 120 but max is 3 [ 522.977138][ T5919] usb 1-1: config 252 has an invalid interface number: 153 but max is 3 [ 523.059210][ T5919] usb 1-1: config 252 has an invalid interface number: 51 but max is 3 [ 523.134533][ T5919] usb 1-1: config 252 contains an unexpected descriptor of type 0x2, skipping [ 523.163882][ T5919] usb 1-1: config 252 has no interface number 0 [ 523.203687][ T5919] usb 1-1: config 252 has no interface number 1 [ 523.243027][ T5919] usb 1-1: config 252 has no interface number 2 [ 523.278569][ T5919] usb 1-1: config 252 has no interface number 3 [ 523.312580][ T5919] usb 1-1: config 252 interface 208 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 523.335653][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.259'. [ 523.370749][ T5919] usb 1-1: config 252 interface 120 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 523.408328][ T6989] team_slave_0: entered promiscuous mode [ 523.414157][ T6989] team_slave_1: entered promiscuous mode [ 523.420005][ T6989] dummy0: entered promiscuous mode [ 523.444506][ T5919] usb 1-1: config 252 interface 120 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 523.475526][ T5919] usb 1-1: config 252 interface 120 altsetting 12 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 523.499472][ T6989] macvlan2: entered allmulticast mode [ 523.537116][ T5919] usb 1-1: config 252 interface 120 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 523.559001][ T6989] team0: entered allmulticast mode [ 523.584311][ T6989] team_slave_0: entered allmulticast mode [ 523.591981][ T5919] usb 1-1: config 252 interface 120 altsetting 12 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 523.618022][ T6989] team_slave_1: entered allmulticast mode [ 523.642205][ T5919] usb 1-1: config 252 interface 120 altsetting 12 has a duplicate endpoint with address 0x8, skipping [ 523.656711][ T6989] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 523.682751][ T5919] usb 1-1: config 252 interface 120 altsetting 12 has an endpoint descriptor with address 0x54, changing to 0x4 [ 523.699511][ T6989] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 6989, name: syz.3.259 [ 523.718476][ T5919] usb 1-1: config 252 interface 120 altsetting 12 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 523.734946][ T6989] preempt_count: 0, expected: 0 [ 523.739866][ T6989] RCU nest depth: 1, expected: 0 [ 523.753028][ T5919] usb 1-1: config 252 interface 120 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 523.769262][ T6989] 3 locks held by syz.3.259/6989: [ 523.784291][ T5919] usb 1-1: config 252 interface 120 altsetting 12 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 523.798815][ T6989] #0: ffffffff8f86d040 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 523.825473][ T6989] #1: ffffffff900fd848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 523.838021][ T5919] usb 1-1: config 252 interface 153 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 523.863559][ T5919] usb 1-1: config 252 interface 153 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 523.882345][ T6989] #2: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 523.900946][ T5919] usb 1-1: config 252 interface 153 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 523.929996][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.3.259 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 523.930035][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 523.930052][ T6989] Call Trace: [ 523.930061][ T6989] [ 523.930071][ T6989] dump_stack_lvl+0x241/0x360 [ 523.930112][ T6989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.930162][ T6989] __might_resched+0x558/0x6c0 [ 523.930188][ T6989] ? dev_set_rx_mode+0x57/0x2e0 [ 523.930219][ T6989] ? __pfx___might_resched+0x10/0x10 [ 523.930238][ T6989] ? __netdev_printk+0x19e/0x4d0 [ 523.930261][ T6989] ? __pfx__printk+0x10/0x10 [ 523.930304][ T6989] __mutex_lock+0x12c/0x10c0 [ 523.930332][ T6989] ? __pfx___dev_notify_flags+0x10/0x10 [ 523.930365][ T6989] ? __local_bh_enable_ip+0x168/0x200 [ 523.930403][ T6989] ? dev_set_allmulti+0x11c/0x270 [ 523.930431][ T6989] ? netif_set_allmulti+0x224/0x380 [ 523.930460][ T6989] ? __pfx___mutex_lock+0x10/0x10 [ 523.930493][ T6989] ? netif_set_allmulti+0x264/0x380 [ 523.930532][ T6989] dev_set_allmulti+0x11c/0x270 [ 523.930568][ T6989] team_change_rx_flags+0x1a8/0x330 [ 523.930600][ T6989] ? team_change_rx_flags+0x29/0x330 [ 523.930634][ T6989] ? __pfx_team_change_rx_flags+0x10/0x10 [ 523.930664][ T6989] netif_set_allmulti+0x20e/0x380 [ 523.930703][ T6989] dev_set_allmulti+0x143/0x270 [ 523.930739][ T6989] macvlan_change_rx_flags+0xdb/0x220 [ 523.930766][ T6989] ? __pfx_macvlan_change_rx_flags+0x10/0x10 [ 523.930788][ T6989] netif_set_allmulti+0x20e/0x380 [ 523.930827][ T6989] __dev_change_flags+0x57b/0x700 [ 523.930864][ T6989] ? __pfx___dev_change_flags+0x10/0x10 [ 523.930897][ T6989] ? rtnl_create_link+0x95b/0xc90 [ 523.930927][ T6989] rtnl_newlink_create+0x63f/0xcb0 [ 523.930972][ T6989] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 523.931019][ T6989] ? __pfx___mutex_lock+0x10/0x10 [ 523.931053][ T6989] ? ns_capable+0x8a/0xf0 [ 523.931077][ T6989] rtnl_newlink+0x18b0/0x1fe0 [ 523.931107][ T6989] ? stack_depot_save_flags+0x44/0x940 [ 523.931157][ T6989] ? __pfx_rtnl_newlink+0x10/0x10 [ 523.931182][ T6989] ? __netlink_deliver_tap+0x561/0x7f0 [ 523.931207][ T6989] ? netlink_deliver_tap+0x19d/0x1b0 [ 523.931231][ T6989] ? netlink_unicast+0x7c6/0x9a0 [ 523.931251][ T6989] ? netlink_sendmsg+0x8c3/0xcd0 [ 523.931276][ T6989] ? __sock_sendmsg+0x221/0x270 [ 523.931299][ T6989] ? ____sys_sendmsg+0x523/0x860 [ 523.931328][ T6989] ? __sys_sendmsg+0x271/0x360 [ 523.931358][ T6989] ? do_syscall_64+0xf3/0x210 [ 523.931379][ T6989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.931441][ T6989] ? kasan_quarantine_put+0xdc/0x230 [ 523.931470][ T6989] ? lockdep_hardirqs_on+0x9d/0x150 [ 523.931496][ T6989] ? nlmon_xmit+0xaf/0x100 [ 523.931535][ T6989] ? __local_bh_enable_ip+0x168/0x200 [ 523.931566][ T6989] ? lockdep_hardirqs_on+0x9d/0x150 [ 523.931596][ T6989] ? aa_get_newest_label+0x101/0x6f0 [ 523.931631][ T6989] ? __lock_acquire+0xad5/0xd80 [ 523.931685][ T6989] ? __pfx_rtnl_newlink+0x10/0x10 [ 523.931714][ T6989] rtnetlink_rcv_msg+0x80f/0xd70 [ 523.931740][ T6989] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 523.931773][ T6989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 523.931808][ T6989] ? ref_tracker_free+0x63e/0x7e0 [ 523.931837][ T6989] netlink_rcv_skb+0x208/0x480 [ 523.931866][ T6989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 523.931895][ T6989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.931942][ T6989] ? netlink_deliver_tap+0x2e/0x1b0 [ 523.931972][ T6989] ? netlink_deliver_tap+0x2e/0x1b0 [ 523.932001][ T6989] netlink_unicast+0x7f8/0x9a0 [ 523.932041][ T6989] ? __pfx_netlink_unicast+0x10/0x10 [ 523.932067][ T6989] ? skb_put+0x114/0x1f0 [ 523.932103][ T6989] netlink_sendmsg+0x8c3/0xcd0 [ 523.932145][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.932177][ T6989] ? aa_sock_msg_perm+0x91/0x160 [ 523.932211][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.932236][ T6989] __sock_sendmsg+0x221/0x270 [ 523.932266][ T6989] ____sys_sendmsg+0x523/0x860 [ 523.932307][ T6989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.932338][ T6989] ? __fget_files+0x2a/0x420 [ 523.932360][ T6989] ? __fget_files+0x2a/0x420 [ 523.932391][ T6989] __sys_sendmsg+0x271/0x360 [ 523.932421][ T6989] ? __pfx_futex_wake+0x10/0x10 [ 523.932455][ T6989] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.932548][ T6989] ? do_syscall_64+0xb6/0x210 [ 523.932574][ T6989] do_syscall_64+0xf3/0x210 [ 523.932596][ T6989] ? clear_bhb_loop+0x45/0xa0 [ 523.932620][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.932640][ T6989] RIP: 0033:0x7f693338e969 [ 523.932668][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.932686][ T6989] RSP: 002b:00007f6934148038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.932707][ T6989] RAX: ffffffffffffffda RBX: 00007f69335b5fa0 RCX: 00007f693338e969 [ 523.932721][ T6989] RDX: 000000000000c010 RSI: 00002000000002c0 RDI: 000000000000000f [ 523.932734][ T6989] RBP: 00007f6933410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 523.932747][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.932759][ T6989] R13: 0000000000000000 R14: 00007f69335b5fa0 R15: 00007f69336dfa28 [ 523.932792][ T6989] [ 524.430954][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.440449][ T5919] usb 1-1: config 252 interface 153 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 524.453080][ T5919] usb 1-1: config 252 interface 153 altsetting 9 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 524.465043][ T5919] usb 1-1: config 252 interface 153 altsetting 9 has a duplicate endpoint with address 0x8A, skipping [ 524.469218][ T6989] [ 524.476064][ T5919] usb 1-1: config 252 interface 153 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 524.478325][ T6989] ============================= [ 524.478335][ T6989] [ BUG: Invalid wait context ] [ 524.489270][ T5919] usb 1-1: config 252 interface 51 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.494006][ T6989] 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 Tainted: G W [ 524.499014][ T5919] usb 1-1: config 252 interface 51 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 524.509756][ T6989] ----------------------------- [ 524.509770][ T6989] syz.3.259/6989 is trying to lock: [ 524.509782][ T6989] ffff88806c7ced30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 524.518549][ T5919] usb 1-1: config 252 interface 51 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 524.529480][ T6989] other info that might help us debug this: [ 524.529494][ T6989] context-{5:5} [ 524.529505][ T6989] 3 locks held by syz.3.259/6989: [ 524.529517][ T6989] #0: ffffffff8f86d040 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 524.534444][ T5919] usb 1-1: config 252 interface 51 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 524.539588][ T6989] #1: ffffffff900fd848 [ 524.551082][ T5919] usb 1-1: config 252 interface 51 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 524.560375][ T6989] (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 524.560434][ T6989] #2: ffffffff8ed3df20 (rcu_read_lock [ 524.566392][ T5919] usb 1-1: config 252 interface 51 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 524.569769][ T6989] ){....}-{1:3} [ 524.574824][ T5919] usb 1-1: config 252 interface 51 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 524.584219][ T6989] , at: team_change_rx_flags+0x29/0x330 [ 524.584257][ T6989] stack backtrace: [ 524.584273][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.3.259 Tainted: G W 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 524.584303][ T6989] Tainted: [W]=WARN [ 524.584310][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 524.584323][ T6989] Call Trace: [ 524.584334][ T6989] [ 524.584344][ T6989] dump_stack_lvl+0x241/0x360 [ 524.584382][ T6989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.584416][ T6989] ? __pfx__printk+0x10/0x10 [ 524.584449][ T6989] __lock_acquire+0xc30/0xd80 [ 524.584486][ T6989] lock_acquire+0x116/0x2f0 [ 524.584516][ T6989] ? dev_set_allmulti+0x11c/0x270 [ 524.584554][ T6989] __mutex_lock+0x1a5/0x10c0 [ 524.584578][ T6989] ? dev_set_allmulti+0x11c/0x270 [ 524.584610][ T6989] ? __pfx___dev_notify_flags+0x10/0x10 [ 524.584643][ T6989] ? __local_bh_enable_ip+0x168/0x200 [ 524.584687][ T6989] ? dev_set_allmulti+0x11c/0x270 [ 524.584717][ T6989] ? netif_set_allmulti+0x224/0x380 [ 524.584748][ T6989] ? __pfx___mutex_lock+0x10/0x10 [ 524.584775][ T6989] ? netif_set_allmulti+0x264/0x380 [ 524.584810][ T6989] dev_set_allmulti+0x11c/0x270 [ 524.584845][ T6989] team_change_rx_flags+0x1a8/0x330 [ 524.584878][ T6989] ? team_change_rx_flags+0x29/0x330 [ 524.584911][ T6989] ? __pfx_team_change_rx_flags+0x10/0x10 [ 524.584944][ T6989] netif_set_allmulti+0x20e/0x380 [ 524.584986][ T6989] dev_set_allmulti+0x143/0x270 [ 524.585020][ T6989] macvlan_change_rx_flags+0xdb/0x220 [ 524.585047][ T6989] ? __pfx_macvlan_change_rx_flags+0x10/0x10 [ 524.585072][ T6989] netif_set_allmulti+0x20e/0x380 [ 524.585107][ T6989] __dev_change_flags+0x57b/0x700 [ 524.585142][ T6989] ? __pfx___dev_change_flags+0x10/0x10 [ 524.585175][ T6989] ? rtnl_create_link+0x95b/0xc90 [ 524.585201][ T6989] rtnl_newlink_create+0x63f/0xcb0 [ 524.585240][ T6989] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 524.585274][ T6989] ? __pfx___mutex_lock+0x10/0x10 [ 524.585302][ T6989] ? ns_capable+0x8a/0xf0 [ 524.585322][ T6989] rtnl_newlink+0x18b0/0x1fe0 [ 524.585351][ T6989] ? stack_depot_save_flags+0x44/0x940 [ 524.585394][ T6989] ? __pfx_rtnl_newlink+0x10/0x10 [ 524.585421][ T6989] ? __netlink_deliver_tap+0x561/0x7f0 [ 524.585449][ T6989] ? netlink_deliver_tap+0x19d/0x1b0 [ 524.585475][ T6989] ? netlink_unicast+0x7c6/0x9a0 [ 524.585497][ T6989] ? netlink_sendmsg+0x8c3/0xcd0 [ 524.585523][ T6989] ? __sock_sendmsg+0x221/0x270 [ 524.585547][ T6989] ? ____sys_sendmsg+0x523/0x860 [ 524.585580][ T6989] ? __sys_sendmsg+0x271/0x360 [ 524.585622][ T6989] ? do_syscall_64+0xf3/0x210 [ 524.585645][ T6989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.585685][ T6989] ? kasan_quarantine_put+0xdc/0x230 [ 524.585716][ T6989] ? lockdep_hardirqs_on+0x9d/0x150 [ 524.585739][ T6989] ? nlmon_xmit+0xaf/0x100 [ 524.585774][ T6989] ? __local_bh_enable_ip+0x168/0x200 [ 524.585809][ T6989] ? lockdep_hardirqs_on+0x9d/0x150 [ 524.585835][ T6989] ? aa_get_newest_label+0x101/0x6f0 [ 524.585868][ T6989] ? __lock_acquire+0xad5/0xd80 [ 524.585908][ T6989] ? __pfx_rtnl_newlink+0x10/0x10 [ 524.585937][ T6989] rtnetlink_rcv_msg+0x80f/0xd70 [ 524.585963][ T6989] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 524.585999][ T6989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 524.586031][ T6989] ? ref_tracker_free+0x63e/0x7e0 [ 524.586056][ T6989] netlink_rcv_skb+0x208/0x480 [ 524.586083][ T6989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 524.586112][ T6989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.586148][ T6989] ? netlink_deliver_tap+0x2e/0x1b0 [ 524.586177][ T6989] ? netlink_deliver_tap+0x2e/0x1b0 [ 524.586204][ T6989] netlink_unicast+0x7f8/0x9a0 [ 524.586233][ T6989] ? __pfx_netlink_unicast+0x10/0x10 [ 524.586258][ T6989] ? skb_put+0x114/0x1f0 [ 524.586292][ T6989] netlink_sendmsg+0x8c3/0xcd0 [ 524.586327][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.586358][ T6989] ? aa_sock_msg_perm+0x91/0x160 [ 524.586388][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.586415][ T6989] __sock_sendmsg+0x221/0x270 [ 524.586443][ T6989] ____sys_sendmsg+0x523/0x860 [ 524.586481][ T6989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.586515][ T6989] ? __fget_files+0x2a/0x420 [ 524.586537][ T6989] ? __fget_files+0x2a/0x420 [ 524.586562][ T6989] __sys_sendmsg+0x271/0x360 [ 524.586594][ T6989] ? __pfx_futex_wake+0x10/0x10 [ 524.586627][ T6989] ? __pfx___sys_sendmsg+0x10/0x10 [ 524.586687][ T6989] ? do_syscall_64+0xb6/0x210 [ 524.586712][ T6989] do_syscall_64+0xf3/0x210 [ 524.586735][ T6989] ? clear_bhb_loop+0x45/0xa0 [ 524.586760][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.586782][ T6989] RIP: 0033:0x7f693338e969 [ 524.586804][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.586823][ T6989] RSP: 002b:00007f6934148038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.586847][ T6989] RAX: ffffffffffffffda RBX: 00007f69335b5fa0 RCX: 00007f693338e969 [ 524.586864][ T6989] RDX: 000000000000c010 RSI: 00002000000002c0 RDI: 000000000000000f [ 524.586878][ T6989] RBP: 00007f6933410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 524.586892][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.586905][ T6989] R13: 0000000000000000 R14: 00007f69335b5fa0 R15: 00007f69336dfa28 [ 524.586929][ T6989] [ 524.717907][ T6989] dummy0: entered allmulticast mode [ 524.721111][ T5919] usb 1-1: config 252 interface 51 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 524.748156][ T6989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 524.753304][ T5919] usb 1-1: config 252 interface 51 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 524.770946][ T6989] team0: left allmulticast mode [ 524.773270][ T5919] usb 1-1: config 252 interface 51 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 524.779705][ T6989] team_slave_0: left allmulticast mode [ 524.784399][ T5919] usb 1-1: config 252 interface 208 has no altsetting 0 [ 524.784423][ T5919] usb 1-1: config 252 interface 120 has no altsetting 0 [ 524.784443][ T5919] usb 1-1: config 252 interface 153 has no altsetting 0 [ 524.786555][ T5919] usb 1-1: New USB device found, idVendor=19d2, idProduct=0161, bcdDevice=2f.af [ 524.791687][ T6989] team_slave_1: left allmulticast mode [ 524.794414][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.794438][ T5919] usb 1-1: Product: syz [ 524.794454][ T5919] usb 1-1: Manufacturer: syz [ 524.891168][ T6989] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 524.893884][ T5919] usb 1-1: SerialNumber: syz [ 525.289113][ T6989] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 6989, name: syz.3.259 [ 525.298537][ T6989] preempt_count: 0, expected: 0 [ 525.303441][ T6989] RCU nest depth: 1, expected: 0 [ 525.308815][ T6989] INFO: lockdep is turned off. [ 525.313660][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.3.259 Tainted: G W 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 525.313696][ T6989] Tainted: [W]=WARN [ 525.313704][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 525.313716][ T6989] Call Trace: [ 525.313725][ T6989] [ 525.313734][ T6989] dump_stack_lvl+0x241/0x360 [ 525.313769][ T6989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.313793][ T6989] ? __pfx__printk+0x10/0x10 [ 525.313814][ T6989] ? __irq_work_queue_local+0x137/0x410 [ 525.313851][ T6989] __might_resched+0x558/0x6c0 [ 525.313872][ T6989] ? dev_set_rx_mode+0x57/0x2e0 [ 525.313901][ T6989] ? __pfx___might_resched+0x10/0x10 [ 525.313919][ T6989] ? __netdev_printk+0x19e/0x4d0 [ 525.313936][ T6989] ? __pfx__printk+0x10/0x10 [ 525.313959][ T6989] __mutex_lock+0x12c/0x10c0 [ 525.313983][ T6989] ? __pfx___dev_notify_flags+0x10/0x10 [ 525.314016][ T6989] ? dev_set_allmulti+0x11c/0x270 [ 525.314043][ T6989] ? netif_set_allmulti+0x224/0x380 [ 525.314071][ T6989] ? __pfx___mutex_lock+0x10/0x10 [ 525.314086][ T6989] ? do_raw_spin_unlock+0x13c/0x8b0 [ 525.314104][ T6989] ? veth_set_multicast_list+0x9/0x10 [ 525.314132][ T6989] ? netif_set_allmulti+0x264/0x380 [ 525.314165][ T6989] dev_set_allmulti+0x11c/0x270 [ 525.314202][ T6989] team_change_rx_flags+0x1a8/0x330 [ 525.314232][ T6989] ? team_change_rx_flags+0x29/0x330 [ 525.314263][ T6989] ? __pfx_team_change_rx_flags+0x10/0x10 [ 525.314294][ T6989] netif_set_allmulti+0x20e/0x380 [ 525.314328][ T6989] dev_set_allmulti+0x143/0x270 [ 525.314358][ T6989] macvlan_stop+0x20f/0x420 [ 525.314379][ T6989] ? __pfx_macvlan_stop+0x10/0x10 [ 525.314401][ T6989] __dev_close_many+0x3d7/0x760 [ 525.314428][ T6989] ? __pfx___dev_close_many+0x10/0x10 [ 525.314453][ T6989] ? __asan_memset+0x23/0x50 [ 525.314481][ T6989] ? __netdev_walk_all_upper_dev+0x33a/0x3a0 [ 525.314511][ T6989] dev_close_many+0x250/0x4c0 [ 525.314548][ T6989] ? __pfx_dev_close_many+0x10/0x10 [ 525.314574][ T6989] ? udp_tunnel_nic_netdevice_event+0x192/0x12f0 [ 525.314603][ T6989] unregister_netdevice_many_notify+0x87f/0x2640 [ 525.314633][ T6989] ? __netdev_upper_dev_unlink+0x754/0x8e0 [ 525.314666][ T6989] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 525.314695][ T6989] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 525.314722][ T6989] ? unregister_netdevice_queue+0x2c4/0x400 [ 525.314745][ T6989] ? netdev_upper_dev_unlink+0x86/0xd0 [ 525.314775][ T6989] ? netdev_upper_dev_unlink+0x94/0xd0 [ 525.314807][ T6989] ? macvlan_dellink+0x407/0x4a0 [ 525.314832][ T6989] rtnl_newlink_create+0x951/0xcb0 [ 525.314869][ T6989] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 525.314901][ T6989] ? __pfx___mutex_lock+0x10/0x10 [ 525.314929][ T6989] ? ns_capable+0x8a/0xf0 [ 525.314950][ T6989] rtnl_newlink+0x18b0/0x1fe0 [ 525.314977][ T6989] ? stack_depot_save_flags+0x44/0x940 [ 525.315018][ T6989] ? __pfx_rtnl_newlink+0x10/0x10 [ 525.315044][ T6989] ? __netlink_deliver_tap+0x561/0x7f0 [ 525.315070][ T6989] ? netlink_deliver_tap+0x19d/0x1b0 [ 525.315095][ T6989] ? netlink_unicast+0x7c6/0x9a0 [ 525.315115][ T6989] ? netlink_sendmsg+0x8c3/0xcd0 [ 525.315139][ T6989] ? __sock_sendmsg+0x221/0x270 [ 525.315162][ T6989] ? ____sys_sendmsg+0x523/0x860 [ 525.315191][ T6989] ? __sys_sendmsg+0x271/0x360 [ 525.315221][ T6989] ? do_syscall_64+0xf3/0x210 [ 525.315241][ T6989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.315279][ T6989] ? kasan_quarantine_put+0xdc/0x230 [ 525.315308][ T6989] ? lockdep_hardirqs_on+0x9d/0x150 [ 525.315330][ T6989] ? nlmon_xmit+0xaf/0x100 [ 525.315363][ T6989] ? __local_bh_enable_ip+0x168/0x200 [ 525.315397][ T6989] ? lockdep_hardirqs_on+0x9d/0x150 [ 525.315421][ T6989] ? aa_get_newest_label+0x101/0x6f0 [ 525.315452][ T6989] ? __lock_acquire+0xad5/0xd80 [ 525.315493][ T6989] ? __pfx_rtnl_newlink+0x10/0x10 [ 525.315522][ T6989] rtnetlink_rcv_msg+0x80f/0xd70 [ 525.315555][ T6989] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 525.315585][ T6989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 525.315615][ T6989] ? ref_tracker_free+0x63e/0x7e0 [ 525.315640][ T6989] netlink_rcv_skb+0x208/0x480 [ 525.315667][ T6989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 525.315695][ T6989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.315730][ T6989] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.315758][ T6989] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.315786][ T6989] netlink_unicast+0x7f8/0x9a0 [ 525.315813][ T6989] ? __pfx_netlink_unicast+0x10/0x10 [ 525.315838][ T6989] ? skb_put+0x114/0x1f0 [ 525.315870][ T6989] netlink_sendmsg+0x8c3/0xcd0 [ 525.315905][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.315936][ T6989] ? aa_sock_msg_perm+0x91/0x160 [ 525.315965][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.315991][ T6989] __sock_sendmsg+0x221/0x270 [ 525.316018][ T6989] ____sys_sendmsg+0x523/0x860 [ 525.316057][ T6989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.316090][ T6989] ? __fget_files+0x2a/0x420 [ 525.316111][ T6989] ? __fget_files+0x2a/0x420 [ 525.316134][ T6989] __sys_sendmsg+0x271/0x360 [ 525.316167][ T6989] ? __pfx_futex_wake+0x10/0x10 [ 525.316198][ T6989] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.316251][ T6989] ? do_syscall_64+0xb6/0x210 [ 525.316275][ T6989] do_syscall_64+0xf3/0x210 [ 525.316299][ T6989] ? clear_bhb_loop+0x45/0xa0 [ 525.316324][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.316345][ T6989] RIP: 0033:0x7f693338e969 [ 525.316365][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.316385][ T6989] RSP: 002b:00007f6934148038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.316409][ T6989] RAX: ffffffffffffffda RBX: 00007f69335b5fa0 RCX: 00007f693338e969 [ 525.316424][ T6989] RDX: 000000000000c010 RSI: 00002000000002c0 RDI: 000000000000000f [ 525.316438][ T6989] RBP: 00007f6933410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 525.316453][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.316466][ T6989] R13: 0000000000000000 R14: 00007f69335b5fa0 R15: 00007f69336dfa28 [ 525.316490][ T6989] [ 525.906084][ T6989] dummy0: left allmulticast mode [ 525.911290][ T6989] team_slave_0: left promiscuous mode [ 525.916806][ T6989] team_slave_1: left promiscuous mode [ 525.922341][ T6989] dummy0: left promiscuous mode [ 526.330590][ T5919] option 1-1:252.208: GSM modem (1-port) converter detected [ 526.358617][ T5919] usb-storage 1-1:252.153: USB Mass Storage device detected [ 526.429333][ T5919] option 1-1:252.51: GSM modem (1-port) converter detected [ 526.452019][ T5919] usb 1-1: USB disconnect, device number 16 [ 526.460435][ T5919] option 1-1:252.208: device disconnected [ 526.469944][ T5919] option 1-1:252.51: device disconnected