last executing test programs: 13.42661084s ago: executing program 4 (id=63): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000cd98bf200a1a0801524d01020301090212000154aede610904"], 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) syz_emit_ethernet(0x1086, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @remote, @void, {@ipv4={0x88fb, @igmp={{0x1c, 0x4, 0x0, 0x3, 0x1078, 0x64, 0x0, 0x6, 0x2, 0x0, @multicast1, @local, {[@cipso={0x86, 0x58, 0x2, [{0x4, 0x8, "0c2774ee7226"}, {0x0, 0xd, "7a206e4d6b84860d44cb66"}, {0x2, 0x8, "427863cb2ff2"}, {0x0, 0x2}, {0x7, 0x11, "93bc053bf644e50000000000000000"}, {0x2, 0x8, "fe451d3f67e5"}, {0x6, 0xe, "ed13d7a343ffca33dfda1d8e"}, {0x5, 0xc, "7aa6c2f6490682e5f8dc"}]}, @noop]}}, {0x17, 0x3, 0x0, @broadcast, "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"}}}}}, 0x0) 11.85144464s ago: executing program 4 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000fd02000300008ec506001d000003000005001b0011000000"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b010510"], 0xe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0xc0182101, 0x20000000) r3 = socket$l2tp6(0xa, 0x2, 0x73) io_destroy(0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@remote, @loopback, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000080)={@mcast2, r4}, 0x14) 10.890166627s ago: executing program 4 (id=67): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100034fef6808433757010700108609045d00022126ef0409050d000000ff060e0905040120000106000200"/54], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x22, 0x14, {0x14, 0x4, "756578c955d665b07635af58a9497f64cd21"}}, &(0x7f0000000080)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "153a21954d18b865f47b81c7a654d5194626e69945af72cea1084d"}}, &(0x7f0000000200)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x8, 0x9}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0xff, 0x8, "a66b6c81", "8ca6cbc2"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x3, 0x2a, 0x9, 0x5, 0x5}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0x14, 0x64, "cfff9f9b713ff18dcf0614bc92e0affb31b25e4cfa2dcdf98b7ea3900a91a85355cb9b37bf4b7c50300de5bc8945a3948a5cabeafb690f997f1d784e7391262374a09da6b07ceea7a7d8b03974f8f16f319ecd46a218910364d32889f199754979d9b1ef"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x1e0, 0x11, [0xf000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xfffb}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "039d"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x200}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, '>u'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, 0x0, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000000c0)=""/210, &(0x7f00000001c0)=0x18) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x50c2, 0x63}) 7.750467723s ago: executing program 4 (id=82): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x11, 0x800000003, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$binfmt_script(r4, &(0x7f0000000080), 0x76e5467) write$tun(0xffffffffffffffff, &(0x7f0000000b40)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @generic={0x0, 0x5, "d58838"}, @generic={0x22, 0x3, 'k'}]}}}}}}, 0x42) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') setns(r7, 0x40000000) 6.084020325s ago: executing program 4 (id=90): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x20023, r3}) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b2704582", 0xbe}, {&(0x7f0000000800)="6a8fa35a5ac69c", 0x7}], 0x2}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)='#\x00', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7d", 0xc3}], 0x1}}], 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000000)={0x0}) (async, rerun: 64) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x0) (rerun: 64) sendto$inet(r0, &(0x7f00000012c0)="09268a927f", 0x5, 0x11, 0x0, 0x0) 5.585950017s ago: executing program 3 (id=96): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000000000000070000000703ec441410b02e8f3acfbadd732d0e5863cdd86b2206dc"], 0x28}, 0x20000000) r1 = syz_usb_connect(0x3, 0x32f, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x9, 0x29, 0xa0, 0x8, 0x46d, 0x8ae, 0x334c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31d, 0x2, 0x0, 0x5a, 0x10, 0xa, [{{0x9, 0x4, 0xea, 0x6, 0x4, 0x1, 0x1, 0x7e, 0x7f, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "001623134b00"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x30}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0xb6, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @acm={0x4}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0xe, 0xce, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0xa7, 0x8, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x8, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x7, 0xb}}]}}, {{0x9, 0x4, 0x8e, 0x6, 0x6, 0xdc, 0x20, 0x81, 0x7f, [@generic={0x6, 0xc, "e5050b20"}], [{{0x9, 0x5, 0x9, 0xc, 0x200, 0xe, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x90, 0xfff9}, @generic={0x83, 0x9, "67dff4ddb539752b8edd8d10d4c9999ab1dd92f223bdae0e98c2607a78f6d19922d95ed433e315279e9fbdbc660677a0efcfc63bdbb65dc9238d041f9ceda219d782856b590e1fb35c090f78e9148567c80858d3a14bc5712145e4bed987a293d8ac06883776d094c54f570138f1281b351b2ebb143983823dbc5eb2227beb5ecd"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x7fff}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x5, 0x5, 0x9, [@generic={0x2c, 0xd, "b5f44a48260bb8a90aa21f129db0ffcd8c364162a145c7b18a8b6eeb0908dc18227baa3f88756fca6722"}, @generic={0x97, 0xf, "a0b70c53ce30d60f23efdfbea511bb76b4829c48265d35dcdd9511c54ef3c55a1714011da5918b983d8f77f4630649080d3ccd2715b979d489ed677b4b4df0607f107b75534418cad2a9fd22240e6e3d2ea8ff64f721f87da6fa80403b5e7640916265c75ed25e60f25cb8502fb486a8e4b585d637b9c39918798dbf739fe8e71c934310040a9ce5a9471f414c0fb9dfba04013e30"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0xd9, 0x2, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x7d, 0x70, 0x8, [@generic={0xf0, 0x6e, "e3724eb2ebfc4d037199fea8ff8a70c9b72f4fd421d7ba0959376081acbd352640ce77ce5343654bbcfd77268889d4f32feb88972ced06b880e62adc8d225002563ff5a918c858a31886a5f934ee7407c7979a8af63037121cfefb7d8dcb5af0823a7c27034b19fa6438940339436f74087e516ce7a8f119f4d9691d81d993d89e7d96c7952bcf1189866dca3e13b1277fda1678bd7b2df339a13e06e3e9c728696c1e9da3f97598f15e8221e595f4dee83890bf6ab3655a5d2c21a0a35f9ed55374c4c5a7730d98e35b16d4329e1f2c9ec01879a57cf7412b522cf0d8188dc1c49516efe8ade7c63f51096ba291"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x47, 0x9, 0x6}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x40, 0x31, 0x14, "58cbc3b4819e115141e0cc1977eb513f5a7d3d9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0xca0, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0xc9, 0xc1, 0xe4, 0xff, 0x2019, 0xab29, 0x6550, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8e, 0x3, 0x0, 0x3, 0x10, 0x6, [{{0x9, 0x4, 0xc7, 0x6, 0x4, 0x2a, 0xce, 0xd4, 0x1, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "5ade7f2713"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x6}, [@country_functional={0xe, 0x24, 0x7, 0x81, 0x6, [0x8, 0x100, 0x5, 0x8001]}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '.'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x24, 0x99f, 0x7f}, [@dmm={0x7, 0x24, 0x14, 0x51e9, 0x400}]}], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x91, 0x0, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xb91}, @generic={0x86, 0x1, "b88e9a533276140716eb1bf06b7d70e332c03d82185d17d6915e8e83339a8ee727d9e4fcd70741568f4e504ee7afc0732d3960344ae3f105b9a729e6a39f2497d717e88691edd43afd7d1813a568e1b78042463633bd9c48c279e27045ece9bc1349275bbcbd1b54d57028532e77f20f93a41800f24857f5b3e6f1e0ab561aeb74829329"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xfa, 0x5, 0x1, [@generic={0x99, 0xa, "2ccfcb4cb6c16ca90ee459240d8c33a1fbc12fd6568485af93707e8f866394dc6df21f3baa2f45981da71789937ab238c55cf5c3268295d6252d08e80d2999c72ee3c9921f7389975a3d5b12c72620aedbffd02e1a81a385a16583df31ae86ec6b9922a7073c69b54be0e1a03b821971c81d73b97d35d1f5894cd03c56f9b546aac7a27343716c14bea1b3fe19070d57de315559964ed6"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x3}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x4, 0x1, 0xf9}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xe, 0x7, 0x6, [@generic={0xc6, 0x24, "3f0a27c6e2a958b13a8ff546cd2a5b8fc40c5e6e2f6daffe5e089943eee88b39d950c026a51910d6ce77d77486949a3401743d5d835cadc59b7ae507d69820d36f8697ecefbbeff5f8d7a06155643ebaccedff00c4f742f5cb088b7244ee8907074a397dff75f9c0f7272b04d729ea1f1734df9c74137341a28c4a3afd8b736fb980d47a3a04c3598ac435eef3303279e5ba82e8f345a6ae01706b226e3d07a6947ac0fc776e9a8778278857e5a929f5cc86e486f653daaeb8d17d2f233872f9349b99f7"}]}}]}}, {{0x9, 0x4, 0x3, 0x6, 0x7, 0xf2, 0x92, 0x4f, 0x1, [], [{{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x7, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}, @generic={0xf9, 0x5, "79f98b3127e5c59b149b1ca6d6c94e345d2885ab9ed5fb401c0b782f28e1cf4d862cabfbd561340c7d42faee81ff22a54f6695273f4c016786b5790f93b67c253c21c10ca266988fc4734517ffc32b6419cee15862179b4dd0be6ab9f9d211c3f7e14473d58bf8c659a9cf414577b994d413bc830f2da468819736434a972612face6e0903f51d15b1e72d23fe03ba09ce0b9b48bb0d606cbbae4f3a69d5840542489b46f0b4be14882a5b382ca6ecb020b222043cbcf3a69362f52408c9397403d188bb522ae321856324ebf1dd25502a4c1204fe10c873f3127333bb0677d9c86b7d7479cdb08f02cf482095f538add3b3dd4f8d1422"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x5, 0x6e, 0x8, [@generic={0xe6, 0x1b, "ed4ee106cb8612f60e88916a51f3c3f942a609a12ad65961dfb50c39539052199631be4cac8d5f716eccf6518eb97131442a701d6f760a7c3d6d6918016b54b1df6d7d4d264b1e6c72b9a610bd4e2e1b68aef085836a01ebdd44fbdec57d2de993ee41798a8c09046cd7221bd6a41c5e334a5514a90d6031b2f045057260f74930d2a34e3bed3b13fd241c2f54d1f1884a9d421c709c8f1ba7d537c6951374728f45f875d3ff5d5c89277e75b61313435a7e8ceab892b16639b921352b729a4705732408f48dac077169cf98bc7e8f937cddd21c13f9a80a78e5fe4f4ba966c31d4f9e78"}, @generic={0xd3, 0x10, "379f07acb97d157d91f9045e1302c285c411103e98a656b4defec2e563cd11772f7331b79e7b4afc0e98b332372f1e7934099825c1621fdc4e6043a262f25cc94bb70a4ca4c859a41248a2fb8e14a2c09fc2169ab6efc84618b09215f56d964ae74ef1815ddb43df8132c96066603aa532639e95b090ed3d87ebf1b764edd8b25bebba4fab9f91a81219517d4a83d6e6473abdea408cad6cb0f6dd1e9b6ce917173557d88da4a72e460146e4e33f6a93e9e8a60445ceac70c0d81d2751ea20cfeda80e43e09848ed92e8b04589ac25812f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0x6, 0x9b}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x4, 0x9, 0xf, [@generic={0x80, 0x18d0537123fe0a54, "e54887c953bfbe7c254604ec17d246bdc9fd9dd97cbb0c2024656e01922d836207afdd46e594ee085e1e23bdbe82cea949b0d5ee75ca06d9718e1a2c2cd39c4287d0c44d2a8cdc00d05d1a9ba234d2d2e1eeadb78079b4f40be47c963e74a55b4a866451dfcf3ee10e669429d7e9f8ca8c98f65de03bba311714e04cd16d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x3}]}}, {{0x9, 0x5, 0xa67d56bc42fe8a1, 0xc, 0x8, 0x5a, 0xe, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7fe}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x40, 0x3, 0x2}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xfc, 0x7, 0x6}}]}}, {{0x9, 0x4, 0x26, 0x7, 0x10, 0xff, 0xff, 0x40, 0x8, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "f0df1414"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe, 0x9d, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x94, 0x80, 0x2f}, @network_terminal={0x7, 0x24, 0xa, 0x4a, 0x1, 0x7}, @mdlm_detail={0xed, 0x24, 0x13, 0x7, "1c1e425a9680775783afc3c93a72e34df9a91ada0dfe86d86c1ad5ec007427b65322f0ddf8c2cd74d06889224f6c3975ec441289eb730043c6d41ad82e828b80acb4a0a073db1bcc7928e844ff24d1076b3c41c4ca24eccc19379ff3910f36e2365ea216a068d984c9f26d391290cbaf8a09895cb4e1a10ce6ff536513c2d3ee7a3ab68b695e6248c6271e0106512cea4112d4c532e15f79ff19a75a7b259adb7baac70be5f35b06572199f4eb351bf07ac72b55b7db1cc8e9d81d9273a08c23812645dcf51ad6e4d22ed29249a6b59f4de5e56732db20ce46ed4283bf0801f02a30c424c7a097b679"}]}, @generic={0x1a, 0x11, "a75c47f4ce400b398f7e6e8dcc68059db1de63785a1263d8"}], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0x3f, 0x4, 0x1, [@generic={0xaa, 0x9, "e56cd5d18b54bc83f4975108291bb0cce565c778e860e76ed1b787bb689de6990f7042d2d659eca62d020096788c6278745731c8a2e34b104b3383234ca055f6f22496fcb3e6d0157b2a2e460fc68489a38df5dad7fd2d7009bc442026433274e7e7536cbd8b7434e798ad7d4c951cc57056a170b8f0e5de7fed8c9db207a71c138a42e796d52f4cc5f47ddd38dce558f67dba16820b601fe36620baac17b365361625a4e7dbca29"}, @generic={0xdc, 0x2e, "fc7c6d5a809702dc4a3e714bfcec19ab6c86715ba6e0b67f358c9a8d130bd9c85f18e97fd02140997ccb4ba543386d906b4fa307295e0d65e2310b8077e2a8372028dfad74cd90d01e98433ebfef0d2e5d9c3fb7f383a15ebecb2a712b8ded7bafd6bee43e6bcf8a22b83ee4faf89406a24205522fdf3f1761b0d4815490cb8074c6b42b88d80292614e79e87fe71bc4d428080d00f7f3b52a77465f5e0be9f7f95900ef2b720de3e05db8251876868c9ecde4e4d7109a4f2c77730cb95bd8f9cc38fe0b84799784350f577f8d84a61792fc7ee8c71167a475e1"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xf, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xd}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x6, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x7, 0xd, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x9}, @generic={0xda, 0xb, "9e00d66efb6f856ca03fae81e93be8b6de8fb4c4a0fa3affa1fc06f9fcaa6788483068f128de30010b13b2bc9b6706c5a108d842b5dbb72feda54f48c1d2d8619329a7bf2ecba8cc63efadb3481d9cbef4009b5a2f962709948909b090e12c04cdb184c5555df5effe678e964089c86c8efdc2972d9cb6bb29b04aafe79345ba529d42ed1ff1a22ebe02cca7d4a2263a9642be507dabb07c13d8c121e2dfc4a9784f7e095569a070174706911936cc55858c37d83bfc0036eeaf7df2be76ba6c02b3f98bb643921f3a373bc0e404784d9927100acbcfc539"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x80, 0xa9, 0xdf, [@generic={0x1c, 0x22, "0fa91e650e7c3ad12fbdc7dfb075eeaabd79320779b100c2b44b"}]}}, {{0x9, 0x5, 0x6, 0x14, 0x400, 0x40, 0xd, 0x4, [@generic={0x9d, 0x22, "a57af8f0d71ab5458c13b080ddfd3fd92bbb2a5519ccfa68922ea2ab822b0d3fbfe760ba8874c917c2d445bc00650b03776f2e1e5e009e22232e434d45ede97afa524d9664e35a04d9a7336b983fd6025c402a694a7c3d6edfd9c1edf0a8a232f7453cbd3c59c75b10b7c955f6066b7ccf43dd3343ed6d0e9a7a4979a5b83e1ababeb2d4a38eb307c7c446e8d42ea6a8cff9f6d230207b86dc4d4e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x6}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0xe, 0x6, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x92, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa3, 0x1}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x4, 0xe6, 0x40}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x4, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x3}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x7, 0x7, 0x60}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0xd1, 0x13, 0x7, [@generic={0xec, 0xa, "ee71f8328dca62c5f351d9c17060fcba5fd98f230fda7dc916c5ca75c0eae1469e9b0914204ad7198117de164fc9e70e38607302b3ea8d000dc1c49cfccce98c4c227a02fdfab6acc1f43d2a60ac60d67f7976fdf5e2613fe89d83d0b74036b6d208cf6a68317e27590d3b7a6d26a715b340acb590bdc68b16e12e28a02573c9f9273ab177c6cb31179cb1e6d150b9b3f6f71cee899106e737f06d7f7c0de00cdf2d8022e224cf519990548831e206592708df0ac9bd012c7cc5db2445c38afb75512f9c810352949b1e1eda4a4e19eb634e699ba7b365818539181a74dfd17e38d8e1f1fec1a72dc887"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6c, 0x8}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xce, 0x9, 0x40}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x8, 0x2, 0x9, [@generic={0x66, 0x23, "c8246c76c23f2738499bbebca7b590be93cefc0907d3fec850ea2ce6a3a2a0f4aecb8d301039e9e16377f295f02891182b71a7f983ea27e352d235a347f9a2975fc8667cd273617708588ec76caf65ac7805618b772c5ffade274e7aa8d213e485471209"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x7, 0x5f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc0, 0x1}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x7, 0x2, 0xff}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8, 0x8, 0x81, 0x10, 0x6}, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x9, 0x5, 0x200}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x29, 0xe, 0x4, 0x1, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x7, 0xf}]}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x42b}}, {0x81, &(0x7f00000000c0)=@string={0x81, 0x3, "599c88304b61796191aeaef22e5cf594d40f6ee5fd7490e61d9283260aa4fcc433e7cfb315191294d0257527d88bdeb6431481c3a0ea922c3de4773658572ad8190c1412df5c6992a5ae60bdd77d08e805da7ac4aa058206062bde98ec3ac8cfd293df130f9f4d6b2aa8ee654cb0f997a12beba2f82375565d054d8e2def41"}}, {0xd, &(0x7f00000001c0)=@string={0xd, 0x3, "e2fdf9b5d7cb39baf33ddc"}}, {0x36, &(0x7f0000000240)=@string={0x36, 0x3, "ba0e7ad37f2cb44959090b1aca77ef7bb4ae4c3986d536569073b096e2ebdd36facce3cc2af55cfb1745263531d64a5bf34468f2"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}]}) socket$kcm(0x2, 0x3, 0x2) (async) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000000000000070000000703ec441410b02e8f3acfbadd732d0e5863cdd86b2206dc"], 0x28}, 0x20000000) (async) syz_usb_connect(0x3, 0x32f, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x9, 0x29, 0xa0, 0x8, 0x46d, 0x8ae, 0x334c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31d, 0x2, 0x0, 0x5a, 0x10, 0xa, [{{0x9, 0x4, 0xea, 0x6, 0x4, 0x1, 0x1, 0x7e, 0x7f, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "001623134b00"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x30}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0xb6, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @acm={0x4}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0xe, 0xce, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0xa7, 0x8, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x8, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x7, 0xb}}]}}, {{0x9, 0x4, 0x8e, 0x6, 0x6, 0xdc, 0x20, 0x81, 0x7f, [@generic={0x6, 0xc, "e5050b20"}], [{{0x9, 0x5, 0x9, 0xc, 0x200, 0xe, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x90, 0xfff9}, @generic={0x83, 0x9, "67dff4ddb539752b8edd8d10d4c9999ab1dd92f223bdae0e98c2607a78f6d19922d95ed433e315279e9fbdbc660677a0efcfc63bdbb65dc9238d041f9ceda219d782856b590e1fb35c090f78e9148567c80858d3a14bc5712145e4bed987a293d8ac06883776d094c54f570138f1281b351b2ebb143983823dbc5eb2227beb5ecd"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x7fff}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x5, 0x5, 0x9, [@generic={0x2c, 0xd, "b5f44a48260bb8a90aa21f129db0ffcd8c364162a145c7b18a8b6eeb0908dc18227baa3f88756fca6722"}, @generic={0x97, 0xf, "a0b70c53ce30d60f23efdfbea511bb76b4829c48265d35dcdd9511c54ef3c55a1714011da5918b983d8f77f4630649080d3ccd2715b979d489ed677b4b4df0607f107b75534418cad2a9fd22240e6e3d2ea8ff64f721f87da6fa80403b5e7640916265c75ed25e60f25cb8502fb486a8e4b585d637b9c39918798dbf739fe8e71c934310040a9ce5a9471f414c0fb9dfba04013e30"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0xd9, 0x2, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x7d, 0x70, 0x8, [@generic={0xf0, 0x6e, "e3724eb2ebfc4d037199fea8ff8a70c9b72f4fd421d7ba0959376081acbd352640ce77ce5343654bbcfd77268889d4f32feb88972ced06b880e62adc8d225002563ff5a918c858a31886a5f934ee7407c7979a8af63037121cfefb7d8dcb5af0823a7c27034b19fa6438940339436f74087e516ce7a8f119f4d9691d81d993d89e7d96c7952bcf1189866dca3e13b1277fda1678bd7b2df339a13e06e3e9c728696c1e9da3f97598f15e8221e595f4dee83890bf6ab3655a5d2c21a0a35f9ed55374c4c5a7730d98e35b16d4329e1f2c9ec01879a57cf7412b522cf0d8188dc1c49516efe8ade7c63f51096ba291"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x47, 0x9, 0x6}}]}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x40, 0x31, 0x14, "58cbc3b4819e115141e0cc1977eb513f5a7d3d9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x3, 0xca0, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0xc9, 0xc1, 0xe4, 0xff, 0x2019, 0xab29, 0x6550, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8e, 0x3, 0x0, 0x3, 0x10, 0x6, [{{0x9, 0x4, 0xc7, 0x6, 0x4, 0x2a, 0xce, 0xd4, 0x1, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "5ade7f2713"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x6}, [@country_functional={0xe, 0x24, 0x7, 0x81, 0x6, [0x8, 0x100, 0x5, 0x8001]}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '.'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x24, 0x99f, 0x7f}, [@dmm={0x7, 0x24, 0x14, 0x51e9, 0x400}]}], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x91, 0x0, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xb91}, @generic={0x86, 0x1, "b88e9a533276140716eb1bf06b7d70e332c03d82185d17d6915e8e83339a8ee727d9e4fcd70741568f4e504ee7afc0732d3960344ae3f105b9a729e6a39f2497d717e88691edd43afd7d1813a568e1b78042463633bd9c48c279e27045ece9bc1349275bbcbd1b54d57028532e77f20f93a41800f24857f5b3e6f1e0ab561aeb74829329"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xfa, 0x5, 0x1, [@generic={0x99, 0xa, "2ccfcb4cb6c16ca90ee459240d8c33a1fbc12fd6568485af93707e8f866394dc6df21f3baa2f45981da71789937ab238c55cf5c3268295d6252d08e80d2999c72ee3c9921f7389975a3d5b12c72620aedbffd02e1a81a385a16583df31ae86ec6b9922a7073c69b54be0e1a03b821971c81d73b97d35d1f5894cd03c56f9b546aac7a27343716c14bea1b3fe19070d57de315559964ed6"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x3}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x4, 0x1, 0xf9}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xe, 0x7, 0x6, [@generic={0xc6, 0x24, "3f0a27c6e2a958b13a8ff546cd2a5b8fc40c5e6e2f6daffe5e089943eee88b39d950c026a51910d6ce77d77486949a3401743d5d835cadc59b7ae507d69820d36f8697ecefbbeff5f8d7a06155643ebaccedff00c4f742f5cb088b7244ee8907074a397dff75f9c0f7272b04d729ea1f1734df9c74137341a28c4a3afd8b736fb980d47a3a04c3598ac435eef3303279e5ba82e8f345a6ae01706b226e3d07a6947ac0fc776e9a8778278857e5a929f5cc86e486f653daaeb8d17d2f233872f9349b99f7"}]}}]}}, {{0x9, 0x4, 0x3, 0x6, 0x7, 0xf2, 0x92, 0x4f, 0x1, [], [{{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x7, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}, @generic={0xf9, 0x5, "79f98b3127e5c59b149b1ca6d6c94e345d2885ab9ed5fb401c0b782f28e1cf4d862cabfbd561340c7d42faee81ff22a54f6695273f4c016786b5790f93b67c253c21c10ca266988fc4734517ffc32b6419cee15862179b4dd0be6ab9f9d211c3f7e14473d58bf8c659a9cf414577b994d413bc830f2da468819736434a972612face6e0903f51d15b1e72d23fe03ba09ce0b9b48bb0d606cbbae4f3a69d5840542489b46f0b4be14882a5b382ca6ecb020b222043cbcf3a69362f52408c9397403d188bb522ae321856324ebf1dd25502a4c1204fe10c873f3127333bb0677d9c86b7d7479cdb08f02cf482095f538add3b3dd4f8d1422"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x5, 0x6e, 0x8, [@generic={0xe6, 0x1b, "ed4ee106cb8612f60e88916a51f3c3f942a609a12ad65961dfb50c39539052199631be4cac8d5f716eccf6518eb97131442a701d6f760a7c3d6d6918016b54b1df6d7d4d264b1e6c72b9a610bd4e2e1b68aef085836a01ebdd44fbdec57d2de993ee41798a8c09046cd7221bd6a41c5e334a5514a90d6031b2f045057260f74930d2a34e3bed3b13fd241c2f54d1f1884a9d421c709c8f1ba7d537c6951374728f45f875d3ff5d5c89277e75b61313435a7e8ceab892b16639b921352b729a4705732408f48dac077169cf98bc7e8f937cddd21c13f9a80a78e5fe4f4ba966c31d4f9e78"}, @generic={0xd3, 0x10, "379f07acb97d157d91f9045e1302c285c411103e98a656b4defec2e563cd11772f7331b79e7b4afc0e98b332372f1e7934099825c1621fdc4e6043a262f25cc94bb70a4ca4c859a41248a2fb8e14a2c09fc2169ab6efc84618b09215f56d964ae74ef1815ddb43df8132c96066603aa532639e95b090ed3d87ebf1b764edd8b25bebba4fab9f91a81219517d4a83d6e6473abdea408cad6cb0f6dd1e9b6ce917173557d88da4a72e460146e4e33f6a93e9e8a60445ceac70c0d81d2751ea20cfeda80e43e09848ed92e8b04589ac25812f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0x6, 0x9b}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x4, 0x9, 0xf, [@generic={0x80, 0x18d0537123fe0a54, "e54887c953bfbe7c254604ec17d246bdc9fd9dd97cbb0c2024656e01922d836207afdd46e594ee085e1e23bdbe82cea949b0d5ee75ca06d9718e1a2c2cd39c4287d0c44d2a8cdc00d05d1a9ba234d2d2e1eeadb78079b4f40be47c963e74a55b4a866451dfcf3ee10e669429d7e9f8ca8c98f65de03bba311714e04cd16d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x3}]}}, {{0x9, 0x5, 0xa67d56bc42fe8a1, 0xc, 0x8, 0x5a, 0xe, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7fe}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x40, 0x3, 0x2}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xfc, 0x7, 0x6}}]}}, {{0x9, 0x4, 0x26, 0x7, 0x10, 0xff, 0xff, 0x40, 0x8, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "f0df1414"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe, 0x9d, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x94, 0x80, 0x2f}, @network_terminal={0x7, 0x24, 0xa, 0x4a, 0x1, 0x7}, @mdlm_detail={0xed, 0x24, 0x13, 0x7, "1c1e425a9680775783afc3c93a72e34df9a91ada0dfe86d86c1ad5ec007427b65322f0ddf8c2cd74d06889224f6c3975ec441289eb730043c6d41ad82e828b80acb4a0a073db1bcc7928e844ff24d1076b3c41c4ca24eccc19379ff3910f36e2365ea216a068d984c9f26d391290cbaf8a09895cb4e1a10ce6ff536513c2d3ee7a3ab68b695e6248c6271e0106512cea4112d4c532e15f79ff19a75a7b259adb7baac70be5f35b06572199f4eb351bf07ac72b55b7db1cc8e9d81d9273a08c23812645dcf51ad6e4d22ed29249a6b59f4de5e56732db20ce46ed4283bf0801f02a30c424c7a097b679"}]}, @generic={0x1a, 0x11, "a75c47f4ce400b398f7e6e8dcc68059db1de63785a1263d8"}], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0x3f, 0x4, 0x1, [@generic={0xaa, 0x9, "e56cd5d18b54bc83f4975108291bb0cce565c778e860e76ed1b787bb689de6990f7042d2d659eca62d020096788c6278745731c8a2e34b104b3383234ca055f6f22496fcb3e6d0157b2a2e460fc68489a38df5dad7fd2d7009bc442026433274e7e7536cbd8b7434e798ad7d4c951cc57056a170b8f0e5de7fed8c9db207a71c138a42e796d52f4cc5f47ddd38dce558f67dba16820b601fe36620baac17b365361625a4e7dbca29"}, @generic={0xdc, 0x2e, "fc7c6d5a809702dc4a3e714bfcec19ab6c86715ba6e0b67f358c9a8d130bd9c85f18e97fd02140997ccb4ba543386d906b4fa307295e0d65e2310b8077e2a8372028dfad74cd90d01e98433ebfef0d2e5d9c3fb7f383a15ebecb2a712b8ded7bafd6bee43e6bcf8a22b83ee4faf89406a24205522fdf3f1761b0d4815490cb8074c6b42b88d80292614e79e87fe71bc4d428080d00f7f3b52a77465f5e0be9f7f95900ef2b720de3e05db8251876868c9ecde4e4d7109a4f2c77730cb95bd8f9cc38fe0b84799784350f577f8d84a61792fc7ee8c71167a475e1"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xf, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xd}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x6, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x7, 0xd, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x9}, @generic={0xda, 0xb, "9e00d66efb6f856ca03fae81e93be8b6de8fb4c4a0fa3affa1fc06f9fcaa6788483068f128de30010b13b2bc9b6706c5a108d842b5dbb72feda54f48c1d2d8619329a7bf2ecba8cc63efadb3481d9cbef4009b5a2f962709948909b090e12c04cdb184c5555df5effe678e964089c86c8efdc2972d9cb6bb29b04aafe79345ba529d42ed1ff1a22ebe02cca7d4a2263a9642be507dabb07c13d8c121e2dfc4a9784f7e095569a070174706911936cc55858c37d83bfc0036eeaf7df2be76ba6c02b3f98bb643921f3a373bc0e404784d9927100acbcfc539"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x80, 0xa9, 0xdf, [@generic={0x1c, 0x22, "0fa91e650e7c3ad12fbdc7dfb075eeaabd79320779b100c2b44b"}]}}, {{0x9, 0x5, 0x6, 0x14, 0x400, 0x40, 0xd, 0x4, [@generic={0x9d, 0x22, "a57af8f0d71ab5458c13b080ddfd3fd92bbb2a5519ccfa68922ea2ab822b0d3fbfe760ba8874c917c2d445bc00650b03776f2e1e5e009e22232e434d45ede97afa524d9664e35a04d9a7336b983fd6025c402a694a7c3d6edfd9c1edf0a8a232f7453cbd3c59c75b10b7c955f6066b7ccf43dd3343ed6d0e9a7a4979a5b83e1ababeb2d4a38eb307c7c446e8d42ea6a8cff9f6d230207b86dc4d4e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x6}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0xe, 0x6, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x92, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa3, 0x1}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x4, 0xe6, 0x40}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x4, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x3}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x7, 0x7, 0x60}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0xd1, 0x13, 0x7, [@generic={0xec, 0xa, "ee71f8328dca62c5f351d9c17060fcba5fd98f230fda7dc916c5ca75c0eae1469e9b0914204ad7198117de164fc9e70e38607302b3ea8d000dc1c49cfccce98c4c227a02fdfab6acc1f43d2a60ac60d67f7976fdf5e2613fe89d83d0b74036b6d208cf6a68317e27590d3b7a6d26a715b340acb590bdc68b16e12e28a02573c9f9273ab177c6cb31179cb1e6d150b9b3f6f71cee899106e737f06d7f7c0de00cdf2d8022e224cf519990548831e206592708df0ac9bd012c7cc5db2445c38afb75512f9c810352949b1e1eda4a4e19eb634e699ba7b365818539181a74dfd17e38d8e1f1fec1a72dc887"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6c, 0x8}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xce, 0x9, 0x40}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x8, 0x2, 0x9, [@generic={0x66, 0x23, "c8246c76c23f2738499bbebca7b590be93cefc0907d3fec850ea2ce6a3a2a0f4aecb8d301039e9e16377f295f02891182b71a7f983ea27e352d235a347f9a2975fc8667cd273617708588ec76caf65ac7805618b772c5ffade274e7aa8d213e485471209"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x7, 0x5f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc0, 0x1}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x7, 0x2, 0xff}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8, 0x8, 0x81, 0x10, 0x6}, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x9, 0x5, 0x200}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x29, 0xe, 0x4, 0x1, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x7, 0xf}]}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x42b}}, {0x81, &(0x7f00000000c0)=@string={0x81, 0x3, "599c88304b61796191aeaef22e5cf594d40f6ee5fd7490e61d9283260aa4fcc433e7cfb315191294d0257527d88bdeb6431481c3a0ea922c3de4773658572ad8190c1412df5c6992a5ae60bdd77d08e805da7ac4aa058206062bde98ec3ac8cfd293df130f9f4d6b2aa8ee654cb0f997a12beba2f82375565d054d8e2def41"}}, {0xd, &(0x7f00000001c0)=@string={0xd, 0x3, "e2fdf9b5d7cb39baf33ddc"}}, {0x36, &(0x7f0000000240)=@string={0x36, 0x3, "ba0e7ad37f2cb44959090b1aca77ef7bb4ae4c3986d536569073b096e2ebdd36facce3cc2af55cfb1745263531d64a5bf34468f2"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}]}) (async) 4.7378157s ago: executing program 2 (id=97): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x6c, 0x0, &(0x7f0000001100)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001080)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/4096, 0x1000, 0x0, 0x6}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x100b, 0x2}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x1}, @acquire, @decrefs={0x40046307, 0x5}], 0x12, 0x0, &(0x7f0000001180)="d56ff551ae344d82397091a7b13131ae3b6e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 4.562680931s ago: executing program 2 (id=98): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'macsec0\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x5, 0x2}}) r2 = mmap$IORING_OFF_SQES(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x3, 0x81, 0x0, 0x3, "ad1b880cdc9bd88f571754546e9023b70a7ee6", 0x2, 0xe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x1c1921) r5 = dup(r4) r6 = syz_io_uring_setup(0xceb, &(0x7f0000000140)={0x0, 0x4297, 0x0, 0xfffffffc, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x400, 0x8, 0x40, 0x0, r6}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 3.877708385s ago: executing program 3 (id=100): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x11, 0x800000003, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$binfmt_script(r4, &(0x7f0000000080), 0x76e5467) write$tun(0xffffffffffffffff, &(0x7f0000000b40)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @generic={0x0, 0x5, "d58838"}, @generic={0x22, 0x3, 'k'}]}}}}}}, 0x42) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') setns(r7, 0x40000000) 3.613707252s ago: executing program 1 (id=102): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xd) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 3.437423364s ago: executing program 1 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000540)={0x1, 0x0, 0x2, 0xbd}) fcntl$lock(r1, 0x24, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x40001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r4, 0x301, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa31a70763e94e9ea}]}]}]}, 0x24}}, 0x4004810) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r4, 0x301, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa31a70763e94e9ea}]}]}]}, 0x24}}, 0x4004810) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x3b0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x384, 0x4, 0x0, 0x1, [{0x380, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x36c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DATA={0x20c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "60b396b2740a120011f8d762db6251c2c71099eaaf9452fc935ebf0919c823387688614bcd6fdf674bdbc73f0508e77a381329cf99ab9b5f2d18cc299fbf52ed61e37e7ebb8d11b8c45afecb5f091c943e8573f9eb2b70ae5a7f66407dfa55913d40713830720a70932ed3c29f1fde0022ada0fb82c045c8c1b9473bafb5c24b8352c18ad8b5b7e3ac6b2f96a4828f7bfc15ece187614b52edaa448f486f9088d55c3a7dbbe1f6a186d3018c"}, @NFTA_DATA_VALUE={0x49, 0x1, "ef54ecd2bfb31e72ed9bf8bf6cd58f1a21fb97e42d2a9e57b8114146a36bcde29e0da73e6b0ba99958cd0b826128fd05e4d377a1f0f932aa77f1504a620d3b16a222f88665"}, @NFTA_DATA_VALUE={0x32, 0x1, "46982348183c687a40b8b24f2645b3e858ca50323acd7f81b4ea7dd834065aab18ad72e553d2180797975a3914c7"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DATA={0x120, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfb, 0x1, "a9785a9fc45d22844a5cb564e8888cfb90d37bc988db635d637597081ed470dd49aa9360a629c4d81ce27a8550f324e6c41caa94ac51b893b8954197625cc7b67d99a4cfddbf64bab8f8cd8e401b00cc62bc891c1917c0174d496ab8308d04e8a88699a9391d90d87103601645ac0210aa59c6ce9c73411a631045a7a6c2c05d3f24971a8c826051f1a237be5b2819a04e65a7feca64719e5dee8f73bd20f73c59688a9bd2c65c15edafa45e77fb3e4f052fdf7068279f65c4e66c9b6c51da027d7e0704d4c95b941853afcbbd4cdb70b39bbb9f438be183ae7286de24b98be16b51a5b1e47f401c2009a752ce7e5496a9e2ab3be08b75"}, @NFTA_DATA_VALUE={0x20, 0x1, "01fdac63da4ca49ca98a054aa70421383544a51a5719562285a3eb45"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14}], {0x14}}, 0x3ec}}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40880) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0xc2303, 0x0) (async) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0xc2303, 0x0) sendmsg$nl_netfilter(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x4c4, 0x1, 0x4, 0x201, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x5}, [@nested={0x15b, 0x4f, 0x0, 0x1, [@nested={0x4, 0x12e}, @typed={0x8, 0x48, 0x0, 0x0, @pid}, @nested={0x4, 0x131}, @nested={0x4, 0x121}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x9}, @typed={0x9, 0x9a, 0x0, 0x0, @str='syz2\x00'}, @generic="320f3d06e01b953b00d21e519bd5e4460e11ae68c51ecbd95e8626210c005130f28109aaf58c23d0248df8343b18a05df701fe04835500805db8cfeed8d6609c2c6b3d302ca54997e96dcfe753e29767f500a2b5df0b7441958f1a5ae6c3e8f0e91465d26f8f080a691d14cde0263ffcd0a1f7189da965b1b1e3d7da934869c00d01dc5091edb4f1e30a385d0fc8d10d832aab225924b14346cc1dab6d6b4d840b135c5d319257384d7a3849fb186c0a09cb33c4145681f9cb374e8b63848707588afe53133bd13115048f31d708095ec236e419e1885a9c9d92f5805f740ff01a2ed431", @generic="a12d3da40f1a5154c0d0767693fb1fe818400ede80ce168ef9323039610c1338201c7baa3365a1a4b1a1f94330b1b6314930d318db13bc6600c222866eb0ff0e5e0c3d7b964c7c"]}, @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@broadcast}, @generic="aec5b65d44962c7c5236f9fd2073627e673bf066c9c6438b4a8c6275cb89b748d499f0440364be5c1e90e2e24a49993c7d0bc0d6e704a114a51f5aa55b6f53", @generic="791e8ff5c53df8eb6d6ae7377cc7bccb6eb2debf7b7e6c03d600cc2a92bb948fb8b94f8c1392728453897e52a62529a450ed1a77d9891edef731334793c7b85167858ad23e04020f01b01e91ccf171478fae2dd3df7dfb72b7b14565207bc4a28018bda06bb8936b1440c44a5537330cceb8a315141118adf6cb696ecdd91bc34caa5cf350a539dd1ffa98f5393bfd84dede14c9659b0eab16ad08c8b3c95aa3461324305fbcbf1da183f18df7b3957a6c8c09bef52364c6f692ba51f1b0df1e6721e57d41d9ba6fd04cf281fff09abe3a75008002fea78f1b2c0c5e79429afc76f039e718de612fd271877af27c679f724eca2a85cb5c70", @typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x201, 0x55, 0x0, 0x1, [@generic="f479d6d75ee39d13588799d52468a86d0662581fada7cf60046acc006fdf71c708d04e496ae6fa555a743d9ee32415b531aeba0a2f44b9af5ddbc8d22a5f30711d02196961acd14c6bcf0fb1fbe25ddf253873b96630ee45cc803bdcf08779a075e5c6e5da4cd824e1f01f5321a787c98b451b32dc5f0f2a84b800969c32e2309cbc17e1aa7eb42ac1e4778596484c76cfb5f4e2a3fa3ca31709d8e3ece19552b43fe4a61ab1be30cf0dbbb2c6beef08dd1c9ac9ae", @generic="b986c70830e4ecd0c737a830c3fe0fef4969037d2be20c03d3de57f0abb3679f4c40bc26508f2bf9cc46a6c352c32b9ac72f94930ee8a27b75fd7e8c46c0d147a4adec6ae84dcf06879b6af06e50487b97b623dd6998239c6b52bd6c04db36d40d55a80d37a3cfe35d6c2c1e6239f15bc37a3655b7", @generic="b74cd4b207c6058a373cbf", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@private1}, @generic="0f2e9ea4bdbad5b7472ec39e294dd8173235e59df21ccc4c656eac1b09592e3553f86dbe5d786a6e71f946d02b1a7860930b657ded22b6eb472963eb33982246ea20af80c32c7203095188b993067de3c8c221f6af5bc94e3e0468a637d2ccfd8412d24529440fd20507fdf2fcd695c0afddc0e6be6b84ef36d60a00af1c71939c806938ed0e4302f8b667e090e2b1f32055", @generic="b6fa4985da19e9ce3fe06bd7220e83483c4b", @typed={0x4, 0xe2}, @nested={0x4, 0xa6}, @typed={0x8, 0xad, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @typed={0x8, 0xb1, 0x0, 0x0, @fd=r6}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000091}, 0x82) 3.210791078s ago: executing program 1 (id=104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000000000aa00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028006002700000000000a001400ffffffffffff0000"], 0x48}}, 0x0) 3.204000717s ago: executing program 2 (id=105): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401c1b0d1c00000000000109022d000100000000090400000203ffff000921000000012205000905810300000000000905d853de84"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x2c060000) openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) unshare(0x24020400) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000340)="2437460f1c2bc4a2f99c9022000000c4a2f10027460f38e741c44240f29a3b470000a5c43b3be5c436fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r6, 0x9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f0000000080)=0x1ff) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "ca0400"}]}}, 0x0}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x41, 0x91, 0xdc, 0x10, 0xfcf, 0x1003, 0x59f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x67, 0x0, 0x6, [{{0x9, 0x4, 0xb1, 0x5, 0x2, 0xd, 0x83, 0x34, 0x4, [], [{{0x9, 0x5, 0x87, 0x3, 0x10, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x6, 0x4, 0xcf}}]}}]}}]}}, 0x0) 2.927350948s ago: executing program 1 (id=106): socket$netlink(0x10, 0x3, 0x13) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x80802) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x90083, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000240)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x8, 0x1, 0xfffffffe, 0xfffffff9, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x67, 0xffff, 0x13, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102}}}}) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x90) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x20008080) madvise(&(0x7f000041a000/0x4000)=nil, 0x4000, 0xe) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xdc1861aa) r6 = socket(0x1, 0x803, 0x2) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffe34, &(0x7f00000002c0)={&(0x7f0000001900)=ANY=[@ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x46, &(0x7f0000000100), 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="2e65260f01f1f23e0f3066b808000f00d866b81f000f00d0f20f07c481ddeb06f3f2f3410f01dfc126b7f247ad260f38f186edda8a4f", 0x36}], 0xaaaaaaaaaaaad39, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.800520794s ago: executing program 4 (id=108): r0 = msgget$private(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x33, 0x57, 0xc0, 0x40, 0xeb1, 0x7007, 0x208, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x0, 0x30, [{{0x9, 0x4, 0xa1, 0xd2, 0x0, 0xc5, 0x4c, 0xa0, 0x54}}]}}]}}, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}], 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000c2000095000027f99cafd0a3fe152afcce5bc3cf910956461e14e3af9fcfc8bd45cab52d5e48ce973bf3751633ab2c0727463a03601a3784b47332d68db90e75f52911d9418ad380b2e7a5b89276141b53f17d5c9063388255f02e8f62fb3414058bb5893ba48758e8b0b0be994fbb7c0fb2"], 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {r6, r7}}, './file0\x00'}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, r9, r7, 0x0, r10}, 0x0, 0x0, 0x5, 0x7, 0x2, 0x0, 0x3, 0x7, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) 1.92359008s ago: executing program 0 (id=111): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffc, 0x1b5}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) (async) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, 0x40073, 0x60824}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xccd, 0x87, 0x8100}}, {0x14, 0x1, {0x10, 0xdc1, 0x68, 0x8100}}]}]}]}, @IFLA_IFALIASn={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) writev(r7, 0xfffffffffffffffd, 0x1) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.89553263s ago: executing program 3 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=@newlink={0x28, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}}, 0x0) 1.758863426s ago: executing program 3 (id=113): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x0, 0x0, 0x80004, 0x4}) preadv(r0, &(0x7f0000001100)=[{&(0x7f00000033c0)=""/4094, 0xffe}], 0x1, 0x3d, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{0x0, 0xe}, {0x0}], 0x2, 0x8, 0x800) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%.,c\xbe\xfbL:', 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.593622892s ago: executing program 0 (id=114): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYRES64=r1], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) (async) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') fcntl$lock(r4, 0x25, &(0x7f0000000000)) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x2, 0x0, 0x800}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000300)=""/72, 0x48}], 0x2, 0x400, 0x10000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xa}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xa}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x200102, 0x0) (async) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x200102, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001580)={0x2020}, 0x2020) (async) read$FUSE(r7, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x3}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000080)=[r5, r6, r7], 0x3) (async) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000080)=[r5, r6, r7], 0x3) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xfeedcafe, 0xfdc, 0x3131354f, 0x7, 0xc3, 0x0, 0xa, 0x80, 0x0, 0x1, 0x1, 0x1}}) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000000c0)=0x272) 1.593253064s ago: executing program 3 (id=115): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000004c0)={0x4, 0x2, 0x4, 0x3, 0x5, 0x2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './bus\x00'}) faccessat(r4, &(0x7f0000000400)='./bus\x00', 0x149) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x80000000, 0x7fe2, 0x1, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={[&(0x7f0000000240)='O\x94\x03 \xd0\xc2\x94\xd7\xa8#\'W\xa2\f0j7,\x02\x9bzSp\xf7\x04K\xa1\xb2\xf6r\xebp\xb6@.\\\xbcv\x96e\x84\xc9\x91\xcf\xdd\x9dT\x91\xed\x1fAMO\x11\x8f9\xd4\x956)\xad8\x91\xd0\xee`L\xcb\x96:|\xac\xe2Y\x8f\xaf\xc6\xce\x9d\x9a\xc8\x1a.\x1c\xfd\x8eh\x11\xaeN\x019f\x16\xa3\xb3\x0eID\xab\x86l\xee\xb2f1\'c\x05W\xd7\xf4\xd5\xd1\x96\x90\xcf\x7fW\x03\x87c*P\x99\xf20\xbd5\xe3k\"\x05\x88\xdfLJ', 0x0]}) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000040)={r5, 0x0, 0x0}, 0x20) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000300)="3fb05f3e108f1c88a071aa2dab855a3760393bbae580b12f9e4aa4a5accea83160c284c8496cc776cca90c0db4ed32882aebf224afb36b638cb29d482e6c83f9538b66aa415e5db18945088f3995e2c0868872a546b4198908429b99b55b01bb2e3f0f3334339b93244f358581080370437621d60a461d139e1326ec22845b99d0b2137cf4689937f9bb291f2fee5e6d30ec5543316ca61f4dd6bf7230ac60e3b83ee0c3945e12d5d3c741a11534102d4d97b9723ad628976b7bc007e1963394e1d0828d88b3403c7746f8ced08c02643b0dfeea1a638f332f2dbe915b0043875214435cfb998ee8427d9759025cdb8185bfeca86e75e4", 0xde) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0xd7, 0xc, 0xf4, 0x20, 0xc45, 0x6024, 0x1c45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x81, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0xa2, 0x18, 0x2, 0x93, 0x47, 0x8c, 0x4, [@generic={0x7, 0x5, "d55f66cde5"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x8, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xfc, 0x0, 0x4a}}]}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x78}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000500)=0x20000) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd344) mq_open(&(0x7f0000000040)='.[&\x00', 0x40, 0x4, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@getrule={0x14, 0x22, 0x20, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c0001800600060086dd000004"], 0x528}}, 0xc000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) 1.498764947s ago: executing program 0 (id=116): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x400000000007f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008004"]) (async) r5 = accept4$unix(r4, &(0x7f0000000280), &(0x7f0000000040)=0x6e, 0x80000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x609, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22002}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7ff}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@broadcast, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x26b9ffe36856e205, 0x2f}, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) io_uring_setup(0x2ad6, &(0x7f0000000100)={0x0, 0x400ffb1, 0x800}) connect$unix(r5, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 1.25226991s ago: executing program 1 (id=117): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = landlock_create_ruleset(&(0x7f0000002080)={0xd404}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$alg(r2, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000000000002900000003"], 0xd8}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 1.149637581s ago: executing program 0 (id=118): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_emit_vhci(&(0x7f0000000e00)=ANY=[@ANYBLOB="040e040c0f0809"], 0x7) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (async) write$uinput_user_dev(r1, &(0x7f0000001100)={'syz0\x00', {0xfbff, 0x9, 0x3}, 0x33, [0x0, 0x0, 0xd, 0x6, 0x6859fcc5, 0x3, 0xa, 0x8, 0x7, 0x0, 0x0, 0x1000000, 0x1, 0x5, 0xd989, 0x9533, 0xffffffff, 0x2, 0x3, 0x0, 0x40, 0x7, 0x0, 0x5, 0x9f, 0x0, 0x909c, 0x5, 0x2, 0x10000003, 0x75059434, 0x31b8, 0xffffff00, 0x6, 0x8, 0x1, 0x0, 0x40000000, 0x5, 0x7fff, 0x4, 0x5, 0x8, 0xfe6, 0x2, 0xc0000000, 0x8, 0x40, 0x80000000, 0x3, 0xc985, 0xb, 0xb3c, 0x3, 0x10, 0x1, 0x3, 0x0, 0x0, 0x4000040, 0x347, 0xd, 0x5, 0x1], [0x1000, 0x4, 0x0, 0x9, 0x10000000, 0xffff, 0x4f, 0xffff, 0x3, 0x9, 0x3bd, 0x1, 0x0, 0x401, 0x81, 0x233583d1, 0x1, 0x8, 0x8, 0x80000001, 0xc511, 0x1a83, 0x4, 0x8, 0x585, 0x878, 0xdf4, 0x3, 0x52df, 0x2, 0x10001, 0x3, 0xfffff000, 0x8000, 0x0, 0xe4c, 0x85, 0xa, 0x9, 0x8, 0x2, 0x5, 0x2, 0xc, 0x6, 0x1, 0x8, 0x9, 0x4, 0x0, 0x8, 0xc80, 0x6, 0x5, 0x20, 0x10, 0x9, 0x1000, 0x8, 0xa, 0x9, 0xffffff80, 0x2, 0x2], [0x800, 0x7, 0x5, 0x800, 0x209a4, 0xeff, 0x9, 0x8, 0x94, 0x4d4, 0x6, 0xff, 0x100, 0x6, 0x81, 0x1, 0x2, 0x40, 0x6, 0x32ee9bc6, 0x3, 0x0, 0x7f, 0xa8, 0x1000, 0x4, 0x4, 0x6, 0x8, 0x5, 0x9, 0x1, 0x400, 0x2, 0x2, 0x8, 0x6, 0x6, 0x800, 0x6, 0x10, 0x7, 0xa, 0x7, 0x2, 0x2, 0x3, 0x7, 0x100, 0xffffffff, 0x9, 0x80, 0x7f, 0x8, 0xce9, 0x1ff, 0xc, 0x0, 0xe, 0x11, 0x40, 0x9, 0x94, 0x4], [0x1, 0xc8, 0x688, 0x9, 0xffffffff, 0x438, 0x6, 0x1ff, 0x3, 0x7, 0x5, 0xffff7fff, 0x1, 0xd1c, 0x7, 0x4, 0x3, 0x8001, 0xffff, 0xfffffeff, 0xfffffffc, 0x780, 0xb, 0x4, 0x3452, 0x6, 0x8, 0x6, 0x39, 0x9, 0x4, 0x8, 0x0, 0xc, 0x400, 0x9, 0x5e, 0x3, 0x1, 0x800800, 0x48, 0x81, 0x2, 0x0, 0x0, 0x3, 0x1, 0xa, 0xed70, 0x1, 0x6, 0x6, 0x0, 0x4, 0x1, 0xfe4, 0x8, 0xfffffffd, 0x46f, 0x6, 0x35, 0x1, 0x1, 0x3]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000100)='syz0\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x2000000) (async) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 1.098867939s ago: executing program 1 (id=119): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0010100109050b362f"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000200)=[0x0, 0x3], 0x2) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc84}, 0x20004000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.073390671s ago: executing program 0 (id=120): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 937.620692ms ago: executing program 2 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r2, 0xaea2, &(0x7f0000000040)={[{0x2, 0x81, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeef0000, 0x1000, &(0x7f0000001000/0x1000)=nil}) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa04aa0180c200000086dd6000020000140600fc00000000000000000000c70000000201fe80ac73d8a96bc8dc0000000000000000200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2007990780000"], 0x0) 879.005846ms ago: executing program 0 (id=122): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x134, 0x6a, 0xfcdfa0f79c183163, 0x70bd27, 0x0, "", [@nested={0x124, 0x0, 0x0, 0x1, [@nested={0xc, 0x99, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @typed={0x8, 0x126, 0x0, 0x0, @u32=0x37fffe}, @generic="8e0e45ff3993061b738546bed6014210b0fcb210787ac5662ab4ebad2510d80a3d56ea38e8e3d6b0137571282744e6ffad2adf056ae94987ee206351b3d30513d7a4a58c2d32b486ba8c96a41681af8ab0c7df2151db9d7c050e4304d21db58f90cb27a6b5b822ff9c12170bf1fd43ac74ea55d6b8d5824dfd39b03c335983659ea705c39c287c603688560003d1c4c01a32326c90fb07f915c0461ec4d8bb11e38e549bd9594f7ad576482319786deb6a9245d2359e0aef27d4a87693ef03636ee705096296c6d735f990abf1", @typed={0x4, 0x53}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="b99e48a0a6847d9338d864f1e35a47945ac165d9eebd1f3337ceae60ab08cea8070cfef6a8268b"]}]}, 0x134}], 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x17a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x0, 0xffffff6c, 0x0}) (async) syz_usb_connect(0x2, 0x17a, &(0x7f0000000240)=ANY=[@ANYBLOB="1201010298b1a110240430cf1a3f010203010902680101d602100109049f05081f29d47f0905050c080000000e072501050206000905800200020902782c3162f3928f9bc1cb1a803eb26eda45997da8050a211e55c5a34d3a67604972d20e7b91fb4a0d450fb32bdd0725010107040009050f00000006057609050a100002cd0410910f8e5a788135aed6a1dc890270dfa86d4593aedbce6c68d9c20bead71427663e17eafdf05fdf5629c0601d931d067b538a59b4d75874c6ef1b5975fa5626d58b9e60dfcada447ed1cad8fe41c6cda0d19653c673bab757b7b4aa33bb44a5ab40a8ad5baba2a8097c2915a22e47b8d06a7db345e906f567c7d3a4a7a060a9389c8df8fffffff9a8b1c976faaad203bf3809050a09200008ff0909050c04180000ea3f09050b1008000200033c22644b5d37a126565627886e6555d18e47364dd73837d8f4849ab2287d2e91a5897ab0ecdac5ed963aca6d9dbd7b96f09148d79a2ef798b5fa252b0725018103080009050b011000080d07"], &(0x7f0000000200)={0x0, 0x0, 0xffffff6c, 0x0}) 531.604879ms ago: executing program 2 (id=123): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x0, 0xe9}, 0x0) 385.701174ms ago: executing program 2 (id=124): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002500)={0x14, 0x0, 0x3, 0x301, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) geteuid() add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000004ff6943b80000000800000028f2000000008607004000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d8d4f18ebc4ba9e51029282fb", 0x48, r0) 0s ago: executing program 3 (id=125): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000480)=""/89, 0x59}, {&(0x7f0000000200)=""/51, 0x33}], 0x3, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x20) sendto$l2tp(r1, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) (async) recvmmsg(r0, &(0x7f0000020f00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x122, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) (async, rerun: 32) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000180), 0x2, 0x402001) r6 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, r6}, {0x0, 0x600000000, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x400}, {0x0, 0x1, 0x0, 0x80000000}, 0x0, 0xfffffffa, 0x1}, {{@in6=@remote, 0x2, 0x6c}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x2}}, 0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) (async) r8 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r11, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x2400c042) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) (async, rerun: 32) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, 0x0) (async, rerun: 32) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x410, &(0x7f0000001880)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[], [{@fsname={'fsname', 0x3d, '(](#(\xb2e\xce!\x18\xc2\\\xb9\xc5\xb3\xbb\xf6\fZ\xd1\xbf\xb9z\xc1\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xd6*\x15\xf0\x82\xf0\xee\xd0\xe6\x80\x1c\xc7Z\xefP\xc0 :%;\xc7\x87\xf1\r\x1f\xe6\xf1\xad\xcc\xe1\x93!w7M\b*\xaeG\x93\xb38\xe1\x93\xfa\xd1\xa9\nP\xf6\a9\xcfA\x9b\x8b5\x1a\f5\x01\xc8VP\x90\xaa\xeb4\xaf\x1d\x0f:d\xb1X\x10\x82\xcc\x10\xcd\xd5\xa0\x8bm\x87\x85\x8d~\x8d\xfc'}}]}}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0xfffffffffffffeec) (async, rerun: 32) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) (async, rerun: 32) sendmsg$kcm(r4, 0x0, 0x9cdc2384256f8178) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0xfffffffffffffcaf, 0x10, 0x633, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@rand_addr=0x1, 0x0, 0x32}, @in=@private=0xa010101, {0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x20}, {}, {0x10}, 0x0, 0x0, 0x2, 0x1, 0x7}, [@algo_crypt={0xbb, 0x2, {{'ecb(cast6)\x00'}, 0x398, "cadd3ad01e5b652afedcc9380577cf4f38f7af69830f41badfaec6b987f10e186e8da2531739db8fc8db1aaf78f376c24a5303cb75fdc16b8589c7f9642b9b41b635aa7fce829d5a612448964cae1fc037c3eb72090e9c5ea1acc0492830d65c7efe00006aed4b92503e41bcc6d62d31a8817e"}}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x1b4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.53' (ED25519) to the list of known hosts. [ 62.942028][ T5824] cgroup: Unknown subsys name 'net' [ 63.093048][ T5824] cgroup: Unknown subsys name 'cpuset' [ 63.101112][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.475623][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.708431][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.742680][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.745593][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.751107][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.759277][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.765572][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.772239][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.779280][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.786465][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.794793][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.801100][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.808332][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.814889][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.822128][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.837341][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.848703][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.856259][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.864283][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.874549][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.891715][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.898906][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.906861][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.914543][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.921749][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.990579][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.011316][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.020557][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.031379][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.041127][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.049435][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.372460][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 67.429537][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 67.492822][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 67.512067][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 67.618049][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.626535][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.635100][ T5851] bridge_slave_0: entered allmulticast mode [ 67.642198][ T5851] bridge_slave_0: entered promiscuous mode [ 67.651437][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.658784][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.666398][ T5851] bridge_slave_1: entered allmulticast mode [ 67.673302][ T5851] bridge_slave_1: entered promiscuous mode [ 67.715931][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.723355][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.731058][ T5849] bridge_slave_0: entered allmulticast mode [ 67.737700][ T5849] bridge_slave_0: entered promiscuous mode [ 67.751842][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.759756][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.767286][ T5849] bridge_slave_1: entered allmulticast mode [ 67.777830][ T5849] bridge_slave_1: entered promiscuous mode [ 67.822585][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.834651][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.881741][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 67.912352][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.925551][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.952652][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.960449][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.968204][ T5848] bridge_slave_0: entered allmulticast mode [ 67.975637][ T5848] bridge_slave_0: entered promiscuous mode [ 67.987024][ T5851] team0: Port device team_slave_0 added [ 67.994020][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.002256][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.009788][ T5854] bridge_slave_0: entered allmulticast mode [ 68.016697][ T5854] bridge_slave_0: entered promiscuous mode [ 68.046329][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.053709][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.061112][ T5848] bridge_slave_1: entered allmulticast mode [ 68.067894][ T5848] bridge_slave_1: entered promiscuous mode [ 68.076681][ T5851] team0: Port device team_slave_1 added [ 68.085938][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.093779][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.101725][ T5854] bridge_slave_1: entered allmulticast mode [ 68.108411][ T5854] bridge_slave_1: entered promiscuous mode [ 68.126903][ T5849] team0: Port device team_slave_0 added [ 68.172650][ T5849] team0: Port device team_slave_1 added [ 68.193612][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.234372][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.252544][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.263191][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.272658][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.301610][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.313965][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.321308][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.348462][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.361943][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.369074][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.395687][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.427862][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.437993][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.445975][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.473067][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.504874][ T5854] team0: Port device team_slave_0 added [ 68.556025][ T5854] team0: Port device team_slave_1 added [ 68.604853][ T5849] hsr_slave_0: entered promiscuous mode [ 68.611406][ T5849] hsr_slave_1: entered promiscuous mode [ 68.628643][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.636389][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.644560][ T5853] bridge_slave_0: entered allmulticast mode [ 68.652254][ T5853] bridge_slave_0: entered promiscuous mode [ 68.660692][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.668156][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.676132][ T5853] bridge_slave_1: entered allmulticast mode [ 68.683622][ T5853] bridge_slave_1: entered promiscuous mode [ 68.693005][ T5848] team0: Port device team_slave_0 added [ 68.709885][ T5851] hsr_slave_0: entered promiscuous mode [ 68.716849][ T5851] hsr_slave_1: entered promiscuous mode [ 68.724200][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.732273][ T5851] Cannot create hsr debugfs directory [ 68.738672][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.746220][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.774065][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.794908][ T5848] team0: Port device team_slave_1 added [ 68.818538][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.826455][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.853514][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.881023][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.881162][ T5840] Bluetooth: hci1: command tx timeout [ 68.888099][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.921019][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.953710][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.963044][ T5840] Bluetooth: hci0: command tx timeout [ 68.964149][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.976657][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.003645][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.032764][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.042351][ T5842] Bluetooth: hci2: command tx timeout [ 69.048465][ T5840] Bluetooth: hci3: command tx timeout [ 69.108626][ T5853] team0: Port device team_slave_0 added [ 69.120217][ T5840] Bluetooth: hci4: command tx timeout [ 69.158835][ T5853] team0: Port device team_slave_1 added [ 69.173077][ T5848] hsr_slave_0: entered promiscuous mode [ 69.181025][ T5848] hsr_slave_1: entered promiscuous mode [ 69.187827][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.196482][ T5848] Cannot create hsr debugfs directory [ 69.216395][ T5854] hsr_slave_0: entered promiscuous mode [ 69.225769][ T5854] hsr_slave_1: entered promiscuous mode [ 69.232324][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.243333][ T5854] Cannot create hsr debugfs directory [ 69.295877][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.303155][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.329923][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.343148][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.350446][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.377155][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.560880][ T5853] hsr_slave_0: entered promiscuous mode [ 69.568575][ T5853] hsr_slave_1: entered promiscuous mode [ 69.575761][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.583799][ T5853] Cannot create hsr debugfs directory [ 69.695974][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.717779][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.737962][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.762259][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.837879][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.852006][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.877363][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.889203][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.954992][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.968714][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.978467][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.993147][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.089017][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.098355][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.109921][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.147656][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.191754][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.229793][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.245619][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.266237][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.282636][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.313112][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.365973][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.392641][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.400004][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.417160][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.432157][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.439753][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.467866][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.475431][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.495804][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.530510][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.537960][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.586271][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.623844][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.631995][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.656475][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.678820][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.686197][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.767265][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.801061][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.835106][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.842318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.852593][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.859904][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.882910][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.914444][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.941815][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.949036][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.959801][ T5840] Bluetooth: hci1: command tx timeout [ 70.968875][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.996654][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.014627][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.022717][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.039898][ T5840] Bluetooth: hci0: command tx timeout [ 71.120202][ T5840] Bluetooth: hci3: command tx timeout [ 71.126114][ T5840] Bluetooth: hci2: command tx timeout [ 71.137575][ T5851] veth0_vlan: entered promiscuous mode [ 71.159226][ T5848] veth0_vlan: entered promiscuous mode [ 71.199940][ T5840] Bluetooth: hci4: command tx timeout [ 71.213163][ T5851] veth1_vlan: entered promiscuous mode [ 71.221238][ T5848] veth1_vlan: entered promiscuous mode [ 71.248776][ T5849] veth0_vlan: entered promiscuous mode [ 71.278092][ T5849] veth1_vlan: entered promiscuous mode [ 71.306343][ T5848] veth0_macvtap: entered promiscuous mode [ 71.316537][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.334883][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.352919][ T5848] veth1_macvtap: entered promiscuous mode [ 71.395338][ T5851] veth0_macvtap: entered promiscuous mode [ 71.405452][ T5851] veth1_macvtap: entered promiscuous mode [ 71.421668][ T5849] veth0_macvtap: entered promiscuous mode [ 71.433695][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.450591][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.466036][ T5849] veth1_macvtap: entered promiscuous mode [ 71.489206][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.504457][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.513719][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.524052][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.542298][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.554215][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.567786][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.593426][ T5854] veth0_vlan: entered promiscuous mode [ 71.617010][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.633676][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.646543][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.657902][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.667075][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.676915][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.692348][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.699301][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.700955][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.732582][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.746358][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.758024][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.770338][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.785036][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.813576][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.824890][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.835533][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.847407][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.859287][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.867831][ T5853] veth0_vlan: entered promiscuous mode [ 71.884530][ T5854] veth1_vlan: entered promiscuous mode [ 71.907682][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.918043][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.927967][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.939905][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.972615][ T5853] veth1_vlan: entered promiscuous mode [ 72.055455][ T5854] veth0_macvtap: entered promiscuous mode [ 72.074724][ T5853] veth0_macvtap: entered promiscuous mode [ 72.095367][ T5854] veth1_macvtap: entered promiscuous mode [ 72.117228][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.140796][ T5853] veth1_macvtap: entered promiscuous mode [ 72.154333][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.158427][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.182559][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.196331][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.207614][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.218042][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.229482][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.241868][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.251873][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.267389][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.296273][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.307635][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.318868][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.333424][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.344277][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.355556][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.366869][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.379123][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.389069][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.399076][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.408843][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.427502][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.439074][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.450329][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.461211][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.473312][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.485006][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.495841][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.506701][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.519412][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.536767][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.548197][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.558714][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.571037][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.581485][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.593397][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.604510][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.616653][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.629719][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.652982][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.661242][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.661281][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.661306][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.661332][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699448][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.713527][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.727514][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.844595][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.861389][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.869279][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.933252][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.948897][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.056399][ T5840] Bluetooth: hci1: command tx timeout [ 73.120462][ T5840] Bluetooth: hci0: command tx timeout [ 73.150113][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.158106][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.205634][ T5840] Bluetooth: hci2: command tx timeout [ 73.211618][ T5842] Bluetooth: hci3: command tx timeout [ 73.230929][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.246876][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.279818][ T5840] Bluetooth: hci4: command tx timeout [ 73.336221][ T1621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.344408][ T1621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.366887][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.403650][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.438032][ T29] audit: type=1326 audit(1734791520.474:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.451963][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.503336][ T5889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.527734][ T29] audit: type=1326 audit(1734791520.484:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.551211][ T5834] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 73.572663][ T29] audit: type=1326 audit(1734791520.484:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.615395][ T29] audit: type=1326 audit(1734791520.484:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.672223][ T29] audit: type=1326 audit(1734791520.484:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.695318][ T29] audit: type=1326 audit(1734791520.504:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.700175][ T5834] usb 2-1: device descriptor read/64, error -71 [ 73.719049][ T29] audit: type=1326 audit(1734791520.574:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.740340][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 73.750226][ T29] audit: type=1326 audit(1734791520.574:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.778544][ T29] audit: type=1326 audit(1734791520.624:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.800920][ T29] audit: type=1326 audit(1734791520.714:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 73.874157][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.906622][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.947172][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.983438][ T5889] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 74.020174][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.049232][ T5889] usb 4-1: config 0 descriptor?? [ 74.051530][ T5913] : renamed from bond0 (while UP) [ 74.106532][ T5916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8'. [ 74.148369][ T5834] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 74.249756][ T5915] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8'. [ 74.300441][ T5834] usb 2-1: device descriptor read/64, error -71 [ 74.423053][ T5834] usb usb2-port1: attempt power cycle [ 74.496648][ T5889] hid-multitouch 0003:0457:07DA.0001: unexpected long global item [ 74.522931][ T5889] hid-multitouch 0003:0457:07DA.0001: probe with driver hid-multitouch failed with error -22 [ 74.640366][ T5885] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 74.702151][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.712525][ T5932] syz.4.12 (5932) used greatest stack depth: 17856 bytes left [ 74.790689][ T5834] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 74.804768][ T5891] usb 4-1: USB disconnect, device number 2 [ 74.822617][ T5834] usb 2-1: device descriptor read/8, error -71 [ 74.831243][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.842137][ T5885] usb 1-1: not running at top speed; connect to a high speed hub [ 74.855055][ T5885] usb 1-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.868599][ T5885] usb 1-1: config 1 interface 0 has no altsetting 0 [ 74.883682][ T5885] usb 1-1: string descriptor 0 read error: -22 [ 74.893626][ T5885] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 74.910069][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.069812][ T5834] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 75.090687][ T5834] usb 2-1: device descriptor read/8, error -71 [ 75.110175][ T5889] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 75.120095][ T5840] Bluetooth: hci1: command tx timeout [ 75.133071][ T8] usb 1-1: USB disconnect, device number 2 [ 75.199928][ T5840] Bluetooth: hci0: command tx timeout [ 75.206539][ T5834] usb usb2-port1: unable to enumerate USB device [ 75.261965][ T5889] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 75.278089][ T5889] usb 5-1: config 0 has no interface number 0 [ 75.284602][ T5840] Bluetooth: hci2: command tx timeout [ 75.290246][ T5840] Bluetooth: hci3: command tx timeout [ 75.299928][ T5889] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 75.310831][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.329750][ T5889] usb 5-1: config 0 descriptor?? [ 75.339278][ T5889] lan78xx 5-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 75.350722][ T5889] lan78xx 5-1:0.168: probe with driver lan78xx failed with error -5 [ 75.360240][ T5840] Bluetooth: hci4: command tx timeout [ 75.552477][ T5889] usb 5-1: USB disconnect, device number 2 [ 75.769732][ T5890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.960775][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 75.968689][ T5890] usb 4-1: config 2 has an invalid interface number: 157 but max is 0 [ 75.977751][ T5890] usb 4-1: config 2 has no interface number 0 [ 75.991453][ T5890] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 76.015238][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.031750][ T5890] usb 4-1: Product: syz [ 76.036159][ T5890] usb 4-1: Manufacturer: syz [ 76.043666][ T5890] usb 4-1: SerialNumber: syz [ 76.053497][ T5890] imon 4-1:2.157: unable to register, err -19 [ 76.252787][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.279901][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.303726][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.343476][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.376665][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.415211][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.450570][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.459725][ T8] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 76.482931][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.515107][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.549917][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.623076][ T25] usb 4-1: USB disconnect, device number 3 [ 76.661739][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 76.680232][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.696521][ T8] usb 5-1: config 1 interface 0 altsetting 14 endpoint 0x1 is Bulk; changing to Interrupt [ 76.708509][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 76.719361][ T8] usb 5-1: string descriptor 0 read error: -22 [ 76.726190][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.736542][ T5961] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 76.748153][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.769257][ T5944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 77.011013][ T5889] usb 5-1: USB disconnect, device number 3 [ 77.041372][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.203536][ T5890] usb 3-1: device descriptor read/64, error -71 [ 77.280008][ T5885] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 77.469852][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 77.470279][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.482691][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.483438][ T5885] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 77.516801][ T5885] usb 2-1: config 1 interface 0 altsetting 253 bulk endpoint 0x82 has invalid maxpacket 64 [ 77.527545][ T5885] usb 2-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 8 [ 77.552116][ T5885] usb 2-1: config 1 interface 0 has no altsetting 0 [ 77.575200][ T5885] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.585241][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.595378][ T5885] usb 2-1: Product: Ф [ 77.606387][ T5885] usb 2-1: Manufacturer: 鶵髅䟢䁣偲ᙘ樫 [ 77.617236][ T5885] usb 2-1: SerialNumber: ⵖ뷵 [ 77.630326][ T5890] usb 3-1: device descriptor read/64, error -71 [ 77.637121][ T5966] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 77.640951][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.653131][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 77.661433][ T5966] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 77.672454][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.691678][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.710208][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.738879][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 77.748159][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.792323][ T25] usb 4-1: config 0 descriptor?? [ 77.797663][ T5890] usb usb3-port1: attempt power cycle [ 77.805763][ T25] hub 4-1:0.0: USB hub found [ 77.920686][ T5888] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.939789][ T5891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.020199][ T25] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 78.089131][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 78.104220][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.119786][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 78.132256][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 78.143973][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 78.155336][ T5890] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.163458][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.179415][ T5888] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 78.188929][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.197373][ T5888] usb 1-1: Product: syz [ 78.202306][ T5890] usb 3-1: device descriptor read/8, error -71 [ 78.211591][ T5888] usb 1-1: Manufacturer: syz [ 78.217883][ T5888] usb 1-1: SerialNumber: syz [ 78.226164][ T5888] usb 1-1: config 0 descriptor?? [ 78.242711][ T5888] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 78.253136][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 78.259315][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 78.299266][ T5966] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.329904][ T5966] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.354760][ T25] usb 4-1: USB disconnect, device number 4 [ 78.451223][ T5888] usb 1-1: USB disconnect, device number 3 [ 78.451241][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 78.469791][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 78.492773][ T5890] usb 3-1: device descriptor read/8, error -71 [ 78.620188][ T5890] usb usb3-port1: unable to enumerate USB device [ 78.760853][ T5885] cdc_ether 2-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 79.129827][ T5885] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 79.312353][ T5885] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 79.335804][ T5885] usb 4-1: config 0 has no interface number 0 [ 79.358178][ T5885] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 79.384931][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.406307][ T5885] usb 4-1: Product: syz [ 79.418675][ T5885] usb 4-1: Manufacturer: syz [ 79.429411][ T5885] usb 4-1: SerialNumber: syz [ 79.461613][ T5885] usb 4-1: config 0 descriptor?? [ 79.917135][ T5885] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 79.941969][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 79.941986][ T29] audit: type=1326 audit(1734791526.994:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.0.32" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x0 [ 79.951766][ T5885] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 80.032472][ T5890] usb 2-1: USB disconnect, device number 6 [ 80.047428][ T5890] cdc_ether 2-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 80.059803][ T5885] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 80.098474][ T5885] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 80.149969][ T5885] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 80.212096][ T5885] usb 4-1: USB disconnect, device number 5 [ 80.283784][ T5885] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 80.314824][ T5885] keyspan 4-1:0.133: device disconnected [ 81.041315][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.231344][ T5885] usb 1-1: config 4 has an invalid descriptor of length 185, skipping remainder of the config [ 81.258905][ T5885] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 81.296770][ T5885] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 81.308574][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.338201][ T5885] usb 1-1: Product: syz [ 81.348600][ T5885] usb 1-1: Manufacturer: syz [ 81.374882][ T5885] usb 1-1: SerialNumber: syz [ 81.386421][ T6056] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.497663][ T29] audit: type=1326 audit(1734791528.534:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14f185d29 code=0x7ffc0000 [ 81.520489][ T29] audit: type=1326 audit(1734791528.534:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14f185d29 code=0x7ffc0000 [ 81.543294][ T29] audit: type=1326 audit(1734791528.534:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fa14f185d29 code=0x7ffc0000 [ 81.565804][ T29] audit: type=1326 audit(1734791528.534:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14f185d29 code=0x7ffc0000 [ 81.588318][ T29] audit: type=1326 audit(1734791528.534:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa14f185d29 code=0x7ffc0000 [ 81.611189][ T29] audit: type=1326 audit(1734791528.534:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14f185d29 code=0x7ffc0000 [ 81.634695][ T29] audit: type=1326 audit(1734791528.534:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa14f185d29 code=0x7ffc0000 [ 81.848026][ T6068] process 'syz.0.35' launched '/dev/fd/12' with NULL argv: empty string added [ 81.965828][ T9] cfg80211: failed to load regulatory.db [ 82.099762][ T29] audit: type=1326 audit(1734791529.124:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14f185d29 code=0x7ffc0000 [ 82.399945][ T29] audit: type=1326 audit(1734791529.124:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14f185d29 code=0x7ffc0000 [ 82.580955][ T5889] usb 1-1: USB disconnect, device number 4 [ 82.872442][ T6076] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 84.112421][ T6139] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 84.124052][ T6139] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 84.250574][ T5889] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.328694][ T6151] netlink: 56 bytes leftover after parsing attributes in process `syz.4.56'. [ 84.426660][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 84.434796][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.468013][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.502588][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 84.515848][ T5889] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 84.559749][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.595006][ T5889] usb 1-1: config 0 descriptor?? [ 84.827928][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.881868][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.038939][ T6177] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 85.189739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.198139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.209636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.230430][ T6181] syz.2.61 uses obsolete (PF_INET,SOCK_PACKET) [ 85.259787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.343320][ T5889] asus 0003:0B05:1866.0002: unknown main item tag 0x0 [ 85.355676][ T5889] asus 0003:0B05:1866.0002: unknown main item tag 0x0 [ 85.372049][ T5889] asus 0003:0B05:1866.0002: unknown main item tag 0x0 [ 85.399440][ T5889] asus 0003:0B05:1866.0002: unknown main item tag 0x0 [ 85.434912][ T5889] asus 0003:0B05:1866.0002: unknown main item tag 0x0 [ 85.478673][ T5889] asus 0003:0B05:1866.0002: hidraw0: USB HID vff.00 Device [HID 0b05:1866] on usb-dummy_hcd.0-1/input0 [ 85.546820][ T5889] asus 0003:0B05:1866.0002: Asus input not registered [ 85.571556][ T5889] asus 0003:0B05:1866.0002: probe with driver asus failed with error -12 [ 85.579754][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 85.599751][ T5890] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.620985][ T5889] usb 1-1: USB disconnect, device number 5 [ 85.780706][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 85.809793][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 85.837165][ T5891] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 85.845450][ T5890] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52 [ 85.858970][ T5891] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 85.869898][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.888291][ T5890] usb 5-1: Product: syz [ 85.893686][ T5891] usb 2-1: config 0 has no interface number 0 [ 85.907998][ T5890] usb 5-1: Manufacturer: syz [ 85.912736][ T5891] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 85.924852][ T5890] usb 5-1: SerialNumber: syz [ 85.949432][ T5891] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 85.979781][ T5891] usb 2-1: config 0 interface 48 has no altsetting 0 [ 86.087762][ T5891] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 86.146939][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.187036][ T5891] usb 2-1: Product: syz [ 86.216225][ T5891] usb 2-1: Manufacturer: syz [ 86.233500][ T5890] usb_ehset_test 5-1:84.0: probe with driver usb_ehset_test failed with error -32 [ 86.247730][ T5891] usb 2-1: SerialNumber: syz [ 86.265215][ T5890] usb 5-1: USB disconnect, device number 5 [ 86.276585][ T5891] usb 2-1: config 0 descriptor?? [ 86.490386][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.517610][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.852088][ T6194] netlink: 34 bytes leftover after parsing attributes in process `syz.4.66'. [ 86.909788][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.918933][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 86.918952][ T29] audit: type=1326 audit(1734791533.944:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.66" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc716785d29 code=0x0 [ 87.019468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.112496][ T5890] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.123341][ T5890] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.129951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.146050][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.200330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.201464][ T6192] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 87.208853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.224971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.233492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.264927][ T5890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.480376][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.521673][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.806748][ T5890] usb 1-1: USB disconnect, device number 6 [ 88.099842][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.264842][ T5891] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 88.273095][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 88.278558][ T5891] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 88.291703][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.340281][ T5891] gspca_pac7302 2-1:0.48: probe with driver gspca_pac7302 failed with error -71 [ 88.355019][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 88.384790][ T25] usb 5-1: can't read configurations, error -61 [ 88.393592][ T5891] usb 2-1: USB disconnect, device number 7 [ 88.540478][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.679863][ T3074] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.719788][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 88.735568][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.757708][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 88.772109][ T25] usb 5-1: can't read configurations, error -61 [ 88.785579][ T25] usb usb5-port1: attempt power cycle [ 88.839778][ T3074] usb 1-1: Using ep0 maxpacket: 16 [ 88.851846][ T3074] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.861170][ T3074] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 88.872947][ T3074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.889394][ T3074] usb 1-1: config 0 descriptor?? [ 89.139819][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.162917][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 89.175280][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.184563][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 89.193988][ T25] usb 5-1: can't read configurations, error -61 [ 89.345275][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 89.420471][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 89.431340][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.452682][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 89.462898][ T29] audit: type=1326 audit(1734791536.514:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.74" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4eda385d29 code=0x0 [ 89.464911][ T6225] syz.0.71 (6225): drop_caches: 4 [ 89.494988][ T25] usb 5-1: can't read configurations, error -61 [ 89.539397][ T25] usb usb5-port1: unable to enumerate USB device [ 90.450726][ T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 90.601627][ T25] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 90.616971][ T25] usb 3-1: config 0 has no interface number 0 [ 90.623809][ T25] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 90.638170][ T25] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 90.649119][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.658087][ T25] usb 3-1: Product: syz [ 90.665029][ T25] usb 3-1: Manufacturer: syz [ 90.672951][ T25] usb 3-1: SerialNumber: syz [ 90.697305][ T25] usb 3-1: config 0 descriptor?? [ 90.702509][ T3074] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 90.712140][ T6241] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 90.724486][ T25] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 90.803784][ T25] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 90.870600][ T3074] usb 4-1: Using ep0 maxpacket: 8 [ 90.883433][ T3074] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.894384][ T3074] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.902046][ T3074] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 90.913038][ T3074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.923301][ T3074] usb 4-1: config 0 descriptor?? [ 90.934776][ T5891] usb 3-1: USB disconnect, device number 6 [ 90.949776][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 91.141312][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.151305][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.165880][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.197863][ T6251] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 91.210495][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.396560][ T3074] lenovo 0003:17EF:6067.0003: unknown main item tag 0x0 [ 91.413731][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.435866][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.461158][ T3074] lenovo 0003:17EF:6067.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 91.533585][ T25] usb 1-1: USB disconnect, device number 7 [ 91.707159][ T6265] IPv6: sit1: Disabled Multicast RS [ 91.731763][ T6265] sit1: entered allmulticast mode [ 91.754834][ T6272] SET target dimension over the limit! [ 91.774350][ T6249] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.799186][ T5891] IPVS: starting estimator thread 0... [ 91.800051][ T5889] usb 2-1: USB disconnect, device number 8 [ 91.909918][ T6273] IPVS: using max 26 ests per chain, 62400 per kthread [ 92.143013][ T6269] netlink: 'syz.3.80': attribute type 49 has an invalid length. [ 92.176387][ T5889] usb 4-1: USB disconnect, device number 6 [ 92.830472][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 92.849774][ T5889] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 92.869913][ T5891] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.980106][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 92.989794][ T5889] usb 1-1: device descriptor read/64, error -71 [ 92.999170][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=b4.99 [ 93.013653][ T5891] usb 5-1: device descriptor read/64, error -71 [ 93.034529][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.049752][ T25] usb 3-1: Product: syz [ 93.053960][ T25] usb 3-1: Manufacturer: syz [ 93.066879][ T25] usb 3-1: SerialNumber: syz [ 93.081771][ T25] usb 3-1: config 0 descriptor?? [ 93.210352][ T25] rtsx_usb 3-1:0.0: probe with driver rtsx_usb failed with error -22 [ 93.251691][ T5889] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 93.255848][ T6305] pim6reg: entered allmulticast mode [ 93.280119][ T5891] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 93.302843][ T5890] usb 3-1: USB disconnect, device number 7 [ 93.330358][ T5885] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 93.413243][ T5889] usb 1-1: device descriptor read/64, error -71 [ 93.419839][ T5891] usb 5-1: device descriptor read/64, error -71 [ 93.509974][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 93.519084][ T5885] usb 4-1: config 0 has an invalid interface number: 234 but max is 1 [ 93.530459][ T5891] usb usb5-port1: attempt power cycle [ 93.536169][ T5885] usb 4-1: config 0 has an invalid interface number: 142 but max is 1 [ 93.546338][ T5889] usb usb1-port1: attempt power cycle [ 93.559823][ T5885] usb 4-1: config 0 has no interface number 0 [ 93.570150][ T5885] usb 4-1: config 0 has no interface number 1 [ 93.577154][ T5885] usb 4-1: config 0 interface 234 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 93.588730][ T5885] usb 4-1: config 0 interface 142 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 93.603640][ T5885] usb 4-1: config 0 interface 142 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 93.615355][ T5885] usb 4-1: config 0 interface 142 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 93.626432][ T5885] usb 4-1: config 0 interface 142 altsetting 6 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 93.637663][ T5885] usb 4-1: config 0 interface 142 altsetting 6 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 93.649626][ T5885] usb 4-1: config 0 interface 234 has no altsetting 0 [ 93.656555][ T5885] usb 4-1: config 0 interface 142 has no altsetting 0 [ 93.668159][ T5885] usb 4-1: Dual-Role OTG device on HNP port [ 93.677151][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=33.4c [ 93.694496][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.705624][ T5885] usb 4-1: Product: syz [ 93.710135][ T5885] usb 4-1: Manufacturer: syz [ 93.715090][ T5885] usb 4-1: SerialNumber: syz [ 93.723962][ T5885] usb 4-1: config 0 descriptor?? [ 93.731715][ T6302] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 93.881116][ T5891] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 93.909930][ T5889] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 93.920475][ T5891] usb 5-1: device descriptor read/8, error -71 [ 93.930911][ T5889] usb 1-1: device descriptor read/8, error -71 [ 93.937617][ T6307] binder: 6306:6307 ioctl c0306201 0 returned -14 [ 93.947618][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.961886][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.030035][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.049119][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.078475][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.091287][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.129347][ T5885] hub 4-1:0.234: bad descriptor, ignoring hub [ 94.140740][ T5885] hub 4-1:0.234: probe with driver hub failed with error -5 [ 94.154254][ T5885] usb 4-1: unknown interface protocol 0x7e, assuming v1 [ 94.161685][ T5885] usb 4-1: cannot find UAC_HEADER [ 94.169775][ T5891] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 94.189093][ T5885] snd-usb-audio 4-1:0.234: probe with driver snd-usb-audio failed with error -22 [ 94.199757][ T5889] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 94.233883][ T5885] hub 4-1:0.142: bad descriptor, ignoring hub [ 94.237172][ T5891] usb 5-1: device descriptor read/8, error -71 [ 94.243791][ T5889] usb 1-1: device descriptor read/8, error -71 [ 94.253033][ T5885] hub 4-1:0.142: probe with driver hub failed with error -5 [ 94.295637][ T5885] usb 4-1: USB disconnect, device number 7 [ 94.346432][ T5900] udevd[5900]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.234/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.382904][ T5889] usb usb1-port1: unable to enumerate USB device [ 94.385330][ T5891] usb usb5-port1: unable to enumerate USB device [ 95.817662][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 95.850445][ T5885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 96.033001][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.059179][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.069337][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 96.081828][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 96.100441][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 34014, setting to 1024 [ 96.111972][ T5885] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 96.129820][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 96.135011][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.145916][ T5889] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 96.173740][ T5885] usb 3-1: config 0 descriptor?? [ 96.210307][ T6334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.313325][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 96.333277][ T5889] usb 2-1: config 0 has no interfaces? [ 96.345512][ T5889] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 96.358072][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.368067][ T5889] usb 2-1: Product: syz [ 96.378363][ T8] IPVS: starting estimator thread 0... [ 96.387416][ T5889] usb 2-1: Manufacturer: syz [ 96.398121][ T5889] usb 2-1: SerialNumber: syz [ 96.420770][ T5889] usb 2-1: config 0 descriptor?? [ 96.469845][ T6347] IPVS: using max 38 ests per chain, 91200 per kthread [ 96.541773][ T25] usb 5-1: config 3 has an invalid interface number: 161 but max is 0 [ 96.551125][ T25] usb 5-1: config 3 has no interface number 0 [ 96.557243][ T25] usb 5-1: config 3 interface 161 has no altsetting 0 [ 96.611909][ T25] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 96.621556][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.649190][ T25] usb 5-1: Product: syz [ 96.655076][ T25] usb 5-1: Manufacturer: syz [ 96.664728][ T25] usb 5-1: SerialNumber: syz [ 96.770336][ T5885] corsair-psu 0003:1B1C:1C0D.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 96.810633][ T8] usb 2-1: USB disconnect, device number 9 [ 96.842894][ T6354] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.850341][ T5885] corsair-psu 0003:1B1C:1C0D.0004: unable to initialize device (-38) [ 96.891307][ T5885] corsair-psu 0003:1B1C:1C0D.0004: probe with driver corsair-psu failed with error -38 [ 96.945821][ T6359] kAFS: unable to lookup cell '.,cL' [ 96.976400][ T5890] usb 3-1: USB disconnect, device number 8 [ 97.369776][ T3074] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 97.398586][ T6374] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 97.454725][ T29] audit: type=1326 audit(1734791544.504:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 97.478363][ T6377] tty tty1: ldisc open failed (-12), clearing slot 0 [ 97.539081][ T29] audit: type=1326 audit(1734791544.504:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 97.561599][ T3074] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 97.570817][ T3074] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.581690][ T29] audit: type=1326 audit(1734791544.504:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 97.604033][ T29] audit: type=1326 audit(1734791544.504:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 97.626356][ T29] audit: type=1326 audit(1734791544.504:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f171ed85d29 code=0x7ffc0000 [ 97.648517][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.690001][ T3074] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.699142][ T3074] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.707309][ T3074] usb 4-1: Manufacturer: syz [ 97.731358][ T3074] usb 4-1: config 0 descriptor?? [ 97.763606][ T3074] igorplugusb 4-1:0.0: incorrect number of endpoints [ 97.815790][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.851900][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.860364][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 97.947594][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.956421][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.975669][ T6363] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.115'. [ 97.988494][ T6363] openvswitch: netlink: Missing key (keys=40, expected=100) [ 98.012961][ T5889] usb 4-1: USB disconnect, device number 8 [ 98.032002][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.042031][ T5885] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 98.062701][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.075580][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.095785][ T6381] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.114868][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.222106][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.232957][ T5885] usb 1-1: not running at top speed; connect to a high speed hub [ 98.235588][ T29] audit: type=1326 audit(1734791545.284:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394b85d29 code=0x7ffc0000 [ 98.252546][ T5885] usb 1-1: config 214 has an invalid interface number: 159 but max is 0 [ 98.263159][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.263564][ T29] audit: type=1326 audit(1734791545.284:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394b85d29 code=0x7ffc0000 [ 98.286103][ T5885] usb 1-1: config 214 has no interface number 0 [ 98.299929][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.300705][ T29] audit: type=1326 audit(1734791545.284:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa394b85d29 code=0x7ffc0000 [ 98.323937][ T5885] usb 1-1: config 214 interface 159 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 98.335559][ T29] audit: type=1326 audit(1734791545.284:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394b85d29 code=0x7ffc0000 [ 98.368779][ T29] audit: type=1326 audit(1734791545.284:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa394b85d29 code=0x7ffc0000 [ 98.386167][ T5885] usb 1-1: config 214 interface 159 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0 [ 98.424008][ T5885] usb 1-1: config 214 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 98.436403][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.445192][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.453586][ T5885] usb 1-1: config 214 interface 159 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 98.464936][ T5885] usb 1-1: config 214 interface 159 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 98.476114][ T5885] usb 1-1: config 214 interface 159 has no altsetting 0 [ 98.485623][ T5885] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=3f.1a [ 98.496382][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.504608][ T5885] usb 1-1: Product: syz [ 98.508958][ T5885] usb 1-1: Manufacturer: syz [ 98.513732][ T5885] usb 1-1: SerialNumber: syz [ 98.536522][ T6388] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 98.718829][ T5889] usb 2-1: USB disconnect, device number 10 [ 98.814739][ T5885] usb 1-1: USB disconnect, device number 12 [ 98.843117][ T5885] ================================================================== [ 98.851226][ T5885] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0 [ 98.858912][ T5885] Read of size 8 at addr ffff88807b8fd898 by task kworker/0:4/5885 [ 98.866829][ T5885] [ 98.869188][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/0:4 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 98.879954][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.890027][ T5885] Workqueue: usb_hub_wq hub_event [ 98.895090][ T5885] Call Trace: [ 98.898390][ T5885] [ 98.901334][ T5885] dump_stack_lvl+0x241/0x360 [ 98.906044][ T5885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.911269][ T5885] ? __pfx__printk+0x10/0x10 [ 98.915888][ T5885] ? _printk+0xd5/0x120 [ 98.920064][ T5885] ? __virt_addr_valid+0x183/0x530 [ 98.925200][ T5885] ? __virt_addr_valid+0x183/0x530 [ 98.930337][ T5885] print_report+0x169/0x550 [ 98.934865][ T5885] ? __virt_addr_valid+0x183/0x530 [ 98.940003][ T5885] ? __virt_addr_valid+0x183/0x530 [ 98.945138][ T5885] ? __virt_addr_valid+0x45f/0x530 [ 98.950272][ T5885] ? __phys_addr+0xba/0x170 [ 98.954798][ T5885] ? hdm_disconnect+0x10d/0x1c0 [ 98.959676][ T5885] kasan_report+0x143/0x180 [ 98.964211][ T5885] ? kobject_put+0x272/0x480 [ 98.968837][ T5885] ? hdm_disconnect+0x10d/0x1c0 [ 98.973713][ T5885] hdm_disconnect+0x10d/0x1c0 [ 98.978428][ T5885] usb_unbind_interface+0x25b/0x940 [ 98.983649][ T5885] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 98.989397][ T5885] ? __pfx_usb_unbind_interface+0x10/0x10 [ 98.995143][ T5885] device_release_driver_internal+0x503/0x7c0 [ 99.001238][ T5885] bus_remove_device+0x34f/0x420 [ 99.006211][ T5885] device_del+0x57a/0x9b0 [ 99.010563][ T5885] ? kobject_put+0x272/0x480 [ 99.015188][ T5885] ? __pfx_device_del+0x10/0x10 [ 99.020054][ T5885] ? kobject_put+0x44d/0x480 [ 99.024672][ T5885] usb_disable_device+0x3bf/0x850 [ 99.029727][ T5885] usb_disconnect+0x340/0x950 [ 99.034523][ T5885] hub_event+0x1ebc/0x5150 [ 99.038965][ T5885] ? debug_object_deactivate+0x2d5/0x390 [ 99.044622][ T5885] ? do_raw_spin_unlock+0x13c/0x8b0 [ 99.049854][ T5885] ? __pfx_hub_event+0x10/0x10 [ 99.054646][ T5885] ? __pfx_lock_acquire+0x10/0x10 [ 99.059696][ T5885] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.065708][ T5885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.072059][ T5885] ? process_scheduled_works+0x976/0x1840 [ 99.077794][ T5885] process_scheduled_works+0xa66/0x1840 [ 99.083345][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.089358][ T5885] ? assign_work+0x364/0x3d0 [ 99.093965][ T5885] worker_thread+0x870/0xd30 [ 99.098579][ T5885] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 99.104532][ T5885] ? __kthread_parkme+0x169/0x1d0 [ 99.109578][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 99.114718][ T5885] kthread+0x2f0/0x390 [ 99.118901][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 99.124075][ T5885] ? __pfx_kthread+0x10/0x10 [ 99.128713][ T5885] ret_from_fork+0x4b/0x80 [ 99.133153][ T5885] ? __pfx_kthread+0x10/0x10 [ 99.137747][ T5885] ret_from_fork_asm+0x1a/0x30 [ 99.142541][ T5885] [ 99.145569][ T5885] [ 99.147899][ T5885] Allocated by task 5885: [ 99.152225][ T5885] kasan_save_track+0x3f/0x80 [ 99.156921][ T5885] __kasan_kmalloc+0x98/0xb0 [ 99.161517][ T5885] __kmalloc_cache_noprof+0x243/0x390 [ 99.166895][ T5885] hdm_probe+0x98/0x13e0 [ 99.171153][ T5885] usb_probe_interface+0x641/0xbb0 [ 99.176262][ T5885] really_probe+0x2b8/0xad0 [ 99.180769][ T5885] __driver_probe_device+0x1a2/0x390 [ 99.186067][ T5885] driver_probe_device+0x50/0x430 [ 99.191182][ T5885] __device_attach_driver+0x2d6/0x530 [ 99.196575][ T5885] bus_for_each_drv+0x24e/0x2e0 [ 99.201446][ T5885] __device_attach+0x333/0x520 [ 99.206215][ T5885] bus_probe_device+0x189/0x260 [ 99.211091][ T5885] device_add+0x856/0xbf0 [ 99.215434][ T5885] usb_set_configuration+0x1976/0x1fb0 [ 99.220907][ T5885] usb_generic_driver_probe+0x88/0x140 [ 99.226368][ T5885] usb_probe_device+0x1b8/0x380 [ 99.231235][ T5885] really_probe+0x2b8/0xad0 [ 99.235737][ T5885] __driver_probe_device+0x1a2/0x390 [ 99.241037][ T5885] driver_probe_device+0x50/0x430 [ 99.246083][ T5885] __device_attach_driver+0x2d6/0x530 [ 99.251476][ T5885] bus_for_each_drv+0x24e/0x2e0 [ 99.256356][ T5885] __device_attach+0x333/0x520 [ 99.261127][ T5885] bus_probe_device+0x189/0x260 [ 99.265984][ T5885] device_add+0x856/0xbf0 [ 99.270325][ T5885] usb_new_device+0x104a/0x19a0 [ 99.275170][ T5885] hub_event+0x2d6d/0x5150 [ 99.279600][ T5885] process_scheduled_works+0xa66/0x1840 [ 99.285170][ T5885] worker_thread+0x870/0xd30 [ 99.289782][ T5885] kthread+0x2f0/0x390 [ 99.293875][ T5885] ret_from_fork+0x4b/0x80 [ 99.298309][ T5885] ret_from_fork_asm+0x1a/0x30 [ 99.303094][ T5885] [ 99.305421][ T5885] Freed by task 5885: [ 99.309500][ T5885] kasan_save_track+0x3f/0x80 [ 99.314198][ T5885] kasan_save_free_info+0x40/0x50 [ 99.319245][ T5885] __kasan_slab_free+0x59/0x70 [ 99.324029][ T5885] kfree+0x196/0x430 [ 99.327945][ T5885] device_release+0x99/0x1c0 [ 99.332565][ T5885] kobject_put+0x22f/0x480 [ 99.337016][ T5885] hdm_disconnect+0xf3/0x1c0 [ 99.341675][ T5885] usb_unbind_interface+0x25b/0x940 [ 99.346984][ T5885] device_release_driver_internal+0x503/0x7c0 [ 99.353088][ T5885] bus_remove_device+0x34f/0x420 [ 99.358057][ T5885] device_del+0x57a/0x9b0 [ 99.362414][ T5885] usb_disable_device+0x3bf/0x850 [ 99.367466][ T5885] usb_disconnect+0x340/0x950 [ 99.372177][ T5885] hub_event+0x1ebc/0x5150 [ 99.376617][ T5885] process_scheduled_works+0xa66/0x1840 [ 99.382185][ T5885] worker_thread+0x870/0xd30 [ 99.386797][ T5885] kthread+0x2f0/0x390 [ 99.390891][ T5885] ret_from_fork+0x4b/0x80 [ 99.395325][ T5885] ret_from_fork_asm+0x1a/0x30 [ 99.400204][ T5885] [ 99.402541][ T5885] The buggy address belongs to the object at ffff88807b8fc000 [ 99.402541][ T5885] which belongs to the cache kmalloc-8k of size 8192 [ 99.416619][ T5885] The buggy address is located 6296 bytes inside of [ 99.416619][ T5885] freed 8192-byte region [ffff88807b8fc000, ffff88807b8fe000) [ 99.430630][ T5885] [ 99.432967][ T5885] The buggy address belongs to the physical page: [ 99.439383][ T5885] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b8f8 [ 99.448165][ T5885] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 99.456688][ T5885] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 99.464605][ T5885] page_type: f5(slab) [ 99.468607][ T5885] raw: 00fff00000000040 ffff88801ac42280 ffffea0000d03600 0000000000000003 [ 99.477212][ T5885] raw: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 99.485819][ T5885] head: 00fff00000000040 ffff88801ac42280 ffffea0000d03600 0000000000000003 [ 99.494514][ T5885] head: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 99.503212][ T5885] head: 00fff00000000003 ffffea0001ee3e01 ffffffffffffffff 0000000000000000 [ 99.511911][ T5885] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 99.520607][ T5885] page dumped because: kasan: bad access detected [ 99.527072][ T5885] page_owner tracks the page as allocated [ 99.532805][ T5885] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6204, tgid 6203 (syz.0.71), ts 88419525430, free_ts 88375753008 [ 99.553872][ T5885] post_alloc_hook+0x1f3/0x230 [ 99.558670][ T5885] get_page_from_freelist+0x365c/0x37a0 [ 99.564244][ T5885] __alloc_pages_noprof+0x292/0x710 [ 99.569463][ T5885] alloc_pages_mpol_noprof+0x3e8/0x680 [ 99.574939][ T5885] alloc_slab_page+0x6a/0x110 [ 99.579630][ T5885] allocate_slab+0x5a/0x2b0 [ 99.584151][ T5885] ___slab_alloc+0xc27/0x14a0 [ 99.588852][ T5885] __slab_alloc+0x58/0xa0 [ 99.593197][ T5885] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 99.599723][ T5885] kmalloc_reserve+0x111/0x2a0 [ 99.604516][ T5885] __alloc_skb+0x1f3/0x440 [ 99.608941][ T5885] nf_tables_set_notify+0x100/0x360 [ 99.614157][ T5885] nf_tables_commit+0x613a/0x9140 [ 99.619201][ T5885] nfnetlink_rcv+0xc77/0x2ab0 [ 99.623900][ T5885] netlink_unicast+0x7f6/0x990 [ 99.628671][ T5885] netlink_sendmsg+0x8e4/0xcb0 [ 99.633440][ T5885] page last free pid 5207 tgid 5207 stack trace: [ 99.639775][ T5885] free_unref_page+0xd3f/0x1010 [ 99.644652][ T5885] __put_partials+0x160/0x1c0 [ 99.649352][ T5885] put_cpu_partial+0x17c/0x250 [ 99.654136][ T5885] __slab_free+0x290/0x380 [ 99.658569][ T5885] qlist_free_all+0x9a/0x140 [ 99.663172][ T5885] kasan_quarantine_reduce+0x14f/0x170 [ 99.668628][ T5885] __kasan_slab_alloc+0x23/0x80 [ 99.673487][ T5885] kmem_cache_alloc_noprof+0x1d9/0x380 [ 99.678963][ T5885] getname_flags+0xb7/0x540 [ 99.683477][ T5885] vfs_fstatat+0x3f/0x130 [ 99.687815][ T5885] __x64_sys_newfstatat+0x11d/0x1a0 [ 99.693039][ T5885] do_syscall_64+0xf3/0x230 [ 99.697566][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.703485][ T5885] [ 99.705824][ T5885] Memory state around the buggy address: [ 99.711470][ T5885] ffff88807b8fd780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.719549][ T5885] ffff88807b8fd800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.727633][ T5885] >ffff88807b8fd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.735714][ T5885] ^ [ 99.740684][ T5885] ffff88807b8fd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.748770][ T5885] ffff88807b8fd980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.756846][ T5885] ================================================================== [ 99.801845][ T5885] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 99.809095][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/0:4 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 99.819887][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.830007][ T5885] Workqueue: usb_hub_wq hub_event [ 99.835079][ T5885] Call Trace: [ 99.838378][ T5885] [ 99.841330][ T5885] dump_stack_lvl+0x241/0x360 [ 99.846051][ T5885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.851283][ T5885] ? __pfx__printk+0x10/0x10 [ 99.855906][ T5885] ? preempt_schedule+0xe1/0xf0 [ 99.860875][ T5885] ? vscnprintf+0x5d/0x90 [ 99.865230][ T5885] panic+0x349/0x880 [ 99.869155][ T5885] ? check_panic_on_warn+0x21/0xb0 [ 99.874302][ T5885] ? __pfx_panic+0x10/0x10 [ 99.878755][ T5885] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 99.884807][ T5885] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.891190][ T5885] ? print_report+0x502/0x550 [ 99.895884][ T5885] check_panic_on_warn+0x86/0xb0 [ 99.900826][ T5885] ? hdm_disconnect+0x10d/0x1c0 [ 99.905679][ T5885] end_report+0x77/0x160 [ 99.909943][ T5885] kasan_report+0x154/0x180 [ 99.914471][ T5885] ? kobject_put+0x272/0x480 [ 99.919088][ T5885] ? hdm_disconnect+0x10d/0x1c0 [ 99.923954][ T5885] hdm_disconnect+0x10d/0x1c0 [ 99.928642][ T5885] usb_unbind_interface+0x25b/0x940 [ 99.933845][ T5885] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 99.939561][ T5885] ? __pfx_usb_unbind_interface+0x10/0x10 [ 99.945276][ T5885] device_release_driver_internal+0x503/0x7c0 [ 99.951351][ T5885] bus_remove_device+0x34f/0x420 [ 99.956288][ T5885] device_del+0x57a/0x9b0 [ 99.960786][ T5885] ? kobject_put+0x272/0x480 [ 99.965378][ T5885] ? __pfx_device_del+0x10/0x10 [ 99.970222][ T5885] ? kobject_put+0x44d/0x480 [ 99.974813][ T5885] usb_disable_device+0x3bf/0x850 [ 99.979841][ T5885] usb_disconnect+0x340/0x950 [ 99.984521][ T5885] hub_event+0x1ebc/0x5150 [ 99.988956][ T5885] ? debug_object_deactivate+0x2d5/0x390 [ 99.994615][ T5885] ? do_raw_spin_unlock+0x13c/0x8b0 [ 99.999822][ T5885] ? __pfx_hub_event+0x10/0x10 [ 100.004589][ T5885] ? __pfx_lock_acquire+0x10/0x10 [ 100.009612][ T5885] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.015604][ T5885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.021939][ T5885] ? process_scheduled_works+0x976/0x1840 [ 100.027657][ T5885] process_scheduled_works+0xa66/0x1840 [ 100.033209][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.039186][ T5885] ? assign_work+0x364/0x3d0 [ 100.043769][ T5885] worker_thread+0x870/0xd30 [ 100.048356][ T5885] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 100.054279][ T5885] ? __kthread_parkme+0x169/0x1d0 [ 100.059316][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 100.064431][ T5885] kthread+0x2f0/0x390 [ 100.068521][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 100.073627][ T5885] ? __pfx_kthread+0x10/0x10 [ 100.078213][ T5885] ret_from_fork+0x4b/0x80 [ 100.082626][ T5885] ? __pfx_kthread+0x10/0x10 [ 100.087212][ T5885] ret_from_fork_asm+0x1a/0x30 [ 100.091974][ T5885] [ 100.095229][ T5885] Kernel Offset: disabled [ 100.099545][ T5885] Rebooting in 86400 seconds..