last executing test programs: 44.159897152s ago: executing program 3 (id=72): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x3) 43.941777184s ago: executing program 3 (id=76): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x14, &(0x7f0000002480)='\a', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000017c0)={0xc, 0x0, 0x0}) unshare(0x2a020400) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=r5], 0x4c}}, 0x40000) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabb0000000000000800450200280065000003069078ac1414bbac1414bb4e210652", @ANYRES8=r0, @ANYRES32=0x41424344, @ANYBLOB="51c2003c5c805d2cef39eeb11de6a712a58a0290780004"], 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "0300", "fcffffff", ['\x00', "808f7e000000000000ff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x3ae9, 0xfffffffa, 0xd, "9899b4a4d5bfb2b8b5ec67a9883d45f4", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) semget(0x1, 0x0, 0x425) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005d5b121f7aaf86b234d0ea43699866639b7d67b43c65fd8146893a91fc15bc8d58a72d5a00213f603816c717dd5fba0bfdf0ef61610d3d24c1897505b688a5d02bd5e4ba837a5de5bda256352825e65597fd353162863d0751e6212ba11ceaba66ff809abf200add6b3402ec8143c72c39ceabfacb486c1bef4747ace6bacfde3a0a66c4c19fac4b607a11f66cffbe9ba98c6591e4e2609b02e7595fe8c9f17ea5f5d63acedf246a460e6d0ae1f1b0348b5768179bfb6a0775b59e48f2141d99e91e640cca59480ec69e4e08ad3a3e5f7bae616588e7dc120df753c0e4b3850580104b5a30dea812e510b28a0ae567661bd1e1636ba1dfa54f270a605d04ad0534ebe1"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200c7ea6600dfff0000850020008600", @ANYRESDEC=r6, @ANYRESDEC=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='netfs_rreq_ref\x00', r11}, 0x18) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r12, 0x5607, 0x4) r13 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r13, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ed\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') eventfd(0x0) 43.668802263s ago: executing program 3 (id=80): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="ad"], &(0x7f0000000140)='GPL\x00', 0x0, 0x8e, &(0x7f0000000180)=""/142, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x22020600) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200403a00fc020000000000000000000000000000f9202a18000000000000a3000000000104009078000000006097430000000000000000000001fe8000000000000000000000000000aa0001000000000000013300"/118], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14937e, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28}]]}, 0x44}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfb, 0xc0, 0xc3, 0x20, 0xc72, 0xd, 0x92f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x1, 0xf3, 0x20, 0x38, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x36) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r4) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {0x3}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) readv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000740)=""/218, 0xda}], 0x1) syz_io_uring_setup(0x7cdb, &(0x7f0000000000)={0x0, 0x31fb, 0x1000, 0x0, 0x3b4, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000240)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000300)={0x12}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x6, @void}, 0x10) unshare(0x2000680) 40.556505871s ago: executing program 3 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x15060e0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44800) r4 = syz_io_uring_setup(0x3667, &(0x7f0000000100)={0x0, 0x8f57, 0x13791}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001900)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x689, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000002800048024000180080001006c6f6700180002800a00024021237d5d5d00000006000140152c00000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a0f277fdd4c8f4d239fc2e97b0c61904d4a6fcae8641cea89fdf20e6092f03977f4d97689324f54e6125e0fe149"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000420", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 40.371168552s ago: executing program 3 (id=96): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) 40.063873981s ago: executing program 3 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (async) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/53, 0x35) 39.817380509s ago: executing program 32 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (async) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/53, 0x35) 6.51005301s ago: executing program 5 (id=308): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001c40)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48800) (async) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x12c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fdaead40ad25f3fb8fd54f5f72ae1d4fb4eb99c2b23896ff4e211612c495844206"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ID={0x9d, 0x3, "8f54511f72c539adcfa6013359ec28c1ad3cec97cd6bf68020ef42ded52834a155f0fe71f16aac6d42ac4e9bcedb8fdac58a827f48811ba91182089710f7f26718005dd95a0eacb38835d05d1c2728a87674c772a69c28ea58207794d80599e5ab8af1729e2be481c735c156723fcfea1a79ad1128277f857d68dd0be3e667c478fea145b632d32d279387ffba1535f639d28c5a983cdbcb2a"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4044094}, 0x4c004) (async) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000f2cff4)={0x77540947ed9a168d}) (async) epoll_wait(r3, &(0x7f00000018c0)=[{}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r5, 0x200}, 0x8) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) (async) ioctl$PPPIOCSNPMODE(r6, 0xc008744c, &(0x7f00000000c0)={0x21, 0x1}) (async) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x10, 0x0, 0x7f, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000040)=""/254, 0xfe, 0x0, &(0x7f0000000140)=""/229, 0xe5}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, 0x0, 0x25, 0x4, @val=@tracing={r8, 0xbc}}, 0x20) (async) mlock(&(0x7f00005f5000/0x4000)=nil, 0x4000) 6.135926134s ago: executing program 2 (id=310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000002d2e14aa00000000000000001400020002000000e000000200000000002004000d0001007564703a73"], 0x54}}, 0x0) 6.071143545s ago: executing program 5 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000050000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) 5.952745277s ago: executing program 2 (id=312): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getgroups(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "0a74de5ec3"}, @input_terminal={0xc, 0x24, 0x2, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x4, 0x0, "30e9d48c"}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, '?*'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0xfd, 0x40}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r5 = socket$inet6(0xa, 0x40000080806, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={&(0x7f0000000600), 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=@can_newroute={0x14, 0x18, 0x1}, 0x14}}, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000000c0)) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCEXCL(r7, 0x540c) 5.876732743s ago: executing program 5 (id=314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000002400000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800d00010073796e70726f7879000000000c000280080003"], 0xc0}}, 0x0) 5.659706053s ago: executing program 5 (id=316): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcf, 0xc5, 0xb6, 0x10, 0x456, 0xf000, 0xf37f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x25, 0xea}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x6) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000005c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg$sock(r3, &(0x7f0000003000)=[{{&(0x7f0000000000)=@generic={0x26, "493b1499631948b99155a5d39ca1fcd5762e452bf3054f432c4594ad85bdab6274879aa989f4a6122852d9a121cca73044c3bc62a59cbb14af5598a4fc49408ed2d5851e2969cd3892be9548996efa82cbb3af041c0d16654b7b4b7c07695a071b30ca741657582c6113088162bb71cdc9dc3af71a935395a3a4df12c8d6"}, 0x80, 0x0}}], 0x1, 0x4000800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 3.860769735s ago: executing program 1 (id=329): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x1c, r2, 0xc4fc9e906872338b, 0x0, 0x25dfdbfe, {{0x15}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@local, 0x7d}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x806}) syz_usb_connect(0x0, 0x56, &(0x7f0000002d80)={{0x12, 0x1, 0x0, 0xc9, 0xd1, 0xc4, 0x8, 0x499, 0x500a, 0xe7b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xd, 0xd5, 0xce, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "a3f6d2fb5b"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x41, 0x6, 0xcf, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000540)={&(0x7f0000000100)={{@any, 0x1}, {@host, 0x8}, 0x400, "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"}, 0x418, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x145082, 0x0) 3.416896877s ago: executing program 5 (id=332): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000fffe00000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 2.819880252s ago: executing program 5 (id=335): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fremovexattr(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r0 = socket(0x6, 0x3, 0x0) getpeername$l2tp6(r0, 0x0, &(0x7f0000000140)) syz_usb_connect(0x5, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12011001ac2f6b2037210100e50c0102030109021b0001030bc0020904ab6c013c3a0c03090501104000070600"], 0x0) socket$kcm(0x11, 0xf, 0x300) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008819}, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) fremovexattr(0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) (async) socket(0x6, 0x3, 0x0) (async) getpeername$l2tp6(r0, 0x0, &(0x7f0000000140)) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12011001ac2f6b2037210100e50c0102030109021b0001030bc0020904ab6c013c3a0c03090501104000070600"], 0x0) (async) socket$kcm(0x11, 0xf, 0x300) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008819}, 0x1) (async) 2.24896195s ago: executing program 2 (id=338): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001600), 0xc) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200300, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000540)={0x0, @adiantum, 0x0, @desc1}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) 2.156070055s ago: executing program 0 (id=339): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000000000006000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.053658816s ago: executing program 1 (id=340): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2]) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2]) (async) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) (async) 1.867946169s ago: executing program 0 (id=342): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000040000003000000000800040001000000", 0x24) 1.856401028s ago: executing program 0 (id=343): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000600000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}}, 0x0) 1.856256144s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000002d2e14aa00000000000000001400020002000000e000000200000000002804000d0001007564703a73"], 0x54}}, 0x0) 1.567995846s ago: executing program 1 (id=346): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0bc5310, &(0x7f0000000300)={0x18, 0xffffffff, 0x0, 'queue1\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x62}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.567056516s ago: executing program 0 (id=347): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) r3 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x800}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c00068008"], 0x34}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="001349580000b9c8dfca50c29f593d780e5ed55acca967b6a28516a54914e6dc26086384af5205ad0e5cc13b495ae2688052f2c1df00295d09250f30b013dd08d7b0e94d8e2c4587338d3c3a835f949b700900462b9904518307d779c1f55d152730633971ffc163541922f388f5ca10330d646c2d9ef2c40f5d67222222cc07710c84a6559d20d47d80990476dbaa728911be56168fd9531908ee289278d8a2b0b551baab90282c5cfa52b6112908e830d2af3e1772fc9ce91bcfe51fb73ff8002244eee48b421418c01e49b05a989efb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10, r3, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, 0x0, &(0x7f0000000040)) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@updsa={0x13c, 0x18, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @private0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0) r12 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r12, 0x10d, 0xae, &(0x7f0000000000), &(0x7f0000000200)=0x4) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@ifindex, 0xffffffffffffffff, 0x5, 0x24, 0x0, @void, @void, @void, @value}, 0x20) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88"], 0x0) 1.552505313s ago: executing program 4 (id=348): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xb, r1, 0x0, r2}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000140)={0x107, 0x4, 0x9, 0xd0, "cadec1729d34befafba55e3683a65941b3f5913e847fff40d4ba860f45266d81fb89dd029ecd6b91df63f20865aeadc5501604826f1c1ad7c3839021a0b5eb801e66e16cc5348e4b9544323083066609530e5e128f7313f53a5c808a4ac3bb4e0058eb59e85239547eed4c214837d102ab484517df9cebfba500f4b4d66d367939244abd36629a0c2ab3a333c0b776957e90feedc5f74e0289bfaacbb7e6c5ded9315db56dc7c5bc4824f7d32dd860b75639e6530b7328cd8580bba83f0e626b94c455754e6a10f03204fd2777087b72807ad6871e0812a71273d324096602f0d8241898ee1a7983484198f92b583a"}) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x9, 0xb00) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'nicvf0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0/file0\x00'}) write$vga_arbiter(r5, &(0x7f0000000340)=@unlock_all, 0xb) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x30080, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f00000004c0)={0x20, 0x3, &(0x7f00000003c0)="925b681babc79fc1a480ea0aa3c88073565448174bb997498f4d4812d4a0aae810c08c3906b012dd3d62d019ea42f22c1483c2ae072fe0503944ffb74e12bea92f0d3f738ee25f22e076bf9142b891cafdf2e2ff135cab608b6c1549a1f9d6ff1fa815d1f5b938b920ee9fbd5fd72f8f216b259391cb8375e964c5edf88004cbd7f52cb4f70d3004c27356bee1ad6981c468241414c59e28bf1bf86b8d80db404d27fa3de62e29b0c26fd5dddd0bac4cecdda0fb6a437feafa1fdda65e295544c15c63362fb4d4b11bf77c4161794a77682974b279", 0x81, 0x7}) syz_clone3(&(0x7f0000000700)={0x400, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x30}, &(0x7f00000005c0)=""/141, 0x8d, &(0x7f0000000680)=""/55, &(0x7f00000006c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x2010, r7, 0x9c48000) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x9, 0xa04, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) accept$inet(r5, &(0x7f0000000880)={0x2, 0x0, @loopback}, &(0x7f00000008c0)=0x10) connect$pppl2tp(r5, &(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x0, 0x1, 0x2}}, 0x26) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000940)=@generic={0x2, 0x9, 0x7}) sendfile(r3, r5, 0x0, 0x8) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000980), 0x80000, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x3) getrlimit(0xf, &(0x7f00000009c0)) socket$inet6(0xa, 0x80000, 0xd9) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x20}}, 0x80c1) statx(r1, &(0x7f0000000b40)='./file0\x00', 0x100, 0x8, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1dc, 0x1e, 0x100, 0x70bd2a, 0x25dfdbfc, {0x14}, [@nested={0x130, 0xa0, 0x0, 0x1, [@nested={0x4, 0xc}, @nested={0x4, 0xcc}, @nested={0x4, 0xdd}, @generic="aefa904972d256041d0b278947cfab7512403a3786831f700354e5d11390fa34f873acda22a10192a2c46b054d020d7df8a9215d96d31215057748c2c1f6f11e30cd87a72d07ea079f67ce545e15ab197effa5908d3721bae00651e9eaf36b3a313008d139250cdcad7be6e82073c0bf61dc8abf335358916642dca95c0e778075", @typed={0x8, 0x12, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x52}, @typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="3f87dfc0217ec588ef5269a851646f01b3b9f0d787f0129df6661fa4bb5e44cde584fe9eb0a97c3ca36015767f65a822c8441c036db3f3cc8fc307c0f0d7e2d75794286726a08ffac6f02a27ce300aa928fad6b3d8cc0915bbc4d9b6e3b9cf0c3f99babbfe6fff740be008f7831bbb871a91ad33442608f97fbf68", @nested={0x4, 0x126}]}, @nested={0x97, 0xde, 0x0, 0x1, [@nested={0x4, 0x130}, @generic="39bd1a9b2e21fa2878b7dcfcb5f53b1c783574ccc71f7be46a12cd7db21e826fc1e1cbffa9f4130f7dc5cda3", @nested={0x4, 0x82}, @generic="cae90048270511f4fb187710b2433f3ab8dd", @typed={0x8, 0xaf, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="a535defc2631c71aec62ee90cb0a5ae079555acf10f4e98f51f14e085ee65db2a430226254db67d007ade589d2eabefe61", @typed={0xc, 0x70, 0x0, 0x0, @u64=0x4}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000f00)={0x2, 0x3, 0xf8b5, 0x8001, 0x55e5335d, 0x79}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000f40), &(0x7f0000000f80), 0x2, 0x1) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001000), r1) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, r10, 0x2, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FAMILY={0x5, 0xd, 0x21}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) bind$vsock_stream(r5, &(0x7f0000001140)={0x28, 0x0, 0xffffffff, @local}, 0x10) 1.515903422s ago: executing program 2 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000020000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010076657468305f746f5f627269646765001400010067656e6576653000000000000000000090000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000580003800800014000000000080002400000000308000240000000062c0003801400010065727370616e300000000000000000001400010062726964676530000000000000000000080002400000000008000240000000fd0c0005"], 0x144}}, 0x0) 1.379998644s ago: executing program 1 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x200000000000000, 0x4014}, 0x0) 1.379724329s ago: executing program 2 (id=351): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x50, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xc, 0x9d, 0xc}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x1, 0x6}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x211, 0xf7, 0xb0, 0x5, 0x8, 0x3}, 0x9c, &(0x7f0000000080)={0x5, 0xf, 0x9c, 0x2, [@generic={0x87, 0x10, 0x4, "696307e6fdd30a9076f94f183986285a743fde4d49a1c3fe2b7b6f2f39c5c3cac0297e3560d3324d364707fe7a05725199d7ae6f502bbbdbb9c5f7bf0c353e397a08da5fdcdcfeacc1e97d2f7ff962f99a5b916ecec9285c5efdb211311f97f6333a8500a757bb172cece9047149166eb0ceb8807bdfb62c90a32aecccb7aeaf3abb1e97"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x80, 0xf, 0x5, [0xff3f0f]}]}, 0x6, [{0x9e, &(0x7f0000000140)=@string={0x9e, 0x3, "965c79dcec38d32e6ace904f0d0925f7c430b9703baacf46f4f00e6faa7ade90ef81ca24e66ce130ed2f426490b51183ece96d46e158a62eea491ffc51eb8aef834090ffd9bd8a3efdbb949893954673f92bb4afda6edebae95410fdc86863a0044392e73ab58c4baa7658e804a937219b668638cc523d4e03571fe4bfe23cb9bc1e36300c47165c055361462e7d0c0f0620cf497be3b3fa14c04a46"}}, {0xc3, &(0x7f0000000200)=@string={0xc3, 0x3, "ca81f0de8094347b9c81937b05e9f1af4b5ed563df24dc0ddb6e24b41632c92a180ee299cd60948534ea0da435401fc90fde195bffdae76304758f11f5a17d78786948047c333c4221b395e9fa8e1f4235676e37dc3d0ba29f8fa0b76d8a99394ac357fae09d8a68df0a43d6ad4cce402ef8f256debc9dca2429bf05154177dfcfb7401ace8c84cd478403fa452b3d9d8572dbc1534b8bfdcf48a4a7e98e51ff230c976ece53dc5af66bbcba3b96ef249ce87952c38e000a61aec6acaeb0ecae23"}}, {0xce, &(0x7f0000000300)=@string={0xce, 0x3, "65c5d24bec7efb90518bf4021fc7d2f3c1e0e4773a8b1a293fa054fe9898057cd50df370bd498c63952b51e5e213d11a8c1b514d5a8eb853cd05a7163bcf3d75c31e7000efc340b05a7306d79d8c815479e34db422aaeef044c73ef9ed22d38f5b930b46a031ef743fb1fe8beb402fd0146792ff3a5c5f3e0dee8e193b99f415c4d1a66f3ab4c88bfe7cdc545468f5c566b06cc11a168f8456208e10fe8fca96d9ef1dd3be2697eaa71099e1a17f6f26cc878ed92920b2867b044fbb0eaf1ee682e68a96dcd76e40d15f0f8f"}}, {0xbd, &(0x7f0000000400)=@string={0xbd, 0x3, "539b8ac92a70a04c366ece379229e7fa4f2641c445eaf5dc75f73629751dd0d4fab4f73d272121225385868015c5668a97bc6bd8f2fdd3b5d3a8b0dfdd59e9e381acb9c3595b28756ee17a76cc43ae3ed5f1cd14ba9f1bcf3ac38d3e6bdf7a5e2303f73d90ba9a78ed84ae9176e2ec8ea4cb180ce1f3214e9a41fed3caebaaac537e07c510ec8ba913fb78496985c736e0c58ec30d0baf97286663a57f25ee26cda997636585f1d1b0f96d1dc21c4c76e6706de661808bdc4b1df4"}}, {0xb0, &(0x7f00000004c0)=@string={0xb0, 0x3, "d8c9bfe666b980ab34abd9465e4532e889fae24cee55961b7975056bece6626fef73e6ca8bf8723dc9b3d228a7c33a4dd0bb51bb79e7cd56f2a645142dd569aef8cde5eaff25edcd0fbd49d779d71a90b0c295bc3e5f146a2e6b78a336a5ca062405f1c5d065fd587f76ae42fa8070fd6d5e62940281fece6df193b47f726ca4222861e19497f813152db378681ff72875684ef33ec654a153b30c67ed518e97facad3c115b96288aa213ae699d6"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x418}}]}) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x0, 0x22, 0x77, {0x77, 0xe, "d38da1d23a4965e781039d107125c9f4430c7ddd3408fd97113c798816c53dc94f2834ee377d64fb3e85a2c433c11955acf2e886fd01df50309337d99238bec87419d459e1f233307e27f9d8f63ac0d62afa3106a7b2b1e4eac787626d47976e9843865f41b4ff580ebaf1ca837f2d6bbde7e67c7b"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x9, 0x3, "cc8b999e", "dff6612f"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x7c, 0x5, 0x8, 0x2, 0x8000, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x40, 0xe, 0x7, "3d428d7b9d7d7b"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x9f}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1c70, 0x2}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0xb, 0x2, 'Pk'}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x71e7}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x17, 0x6}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "c5bb"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xf6}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x17}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000bc0)={0x40, 0x21, 0x1}}) 1.25314148s ago: executing program 1 (id=352): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) listen(r1, 0xfffffffb) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e01400004fcff", 0x58}], 0x1) 1.156939172s ago: executing program 4 (id=353): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc0000000000000000000ec000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.103765532s ago: executing program 1 (id=354): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xd090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x2, 0x2c2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100), 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400488d8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x200) 1.034479265s ago: executing program 4 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop14', 0x0, 0x0) getdents64(r1, &(0x7f0000000040)=""/63, 0x3f) setsockopt(r0, 0x10001, 0x200, &(0x7f0000000100)="1129907c2b4a67367d3ecd35c1e65c1aaff5d578a906e702fc26e8764f9aaca3ab1f7e00ed62c61ecc4a5a99b34b99ffb169a5b568968c84a29dd15e3dfc82f4bde41587cd2dd9f12ed3d33eeb4895c7115fa7aa46159a687e2d4c4c0e1927821cc1877d4d0bdcf14a6d2a8773d511c0d752b4bc1ddc1d0959381ec0d1e61d4ecf7a2f89dc2d408fbb47fa0cc2ef0e0e9cfa90fe928f53004e91779861332c833f4afa5900f58ebab0f20efef677c479350a71e7", 0xb4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x88, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x6}, @IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xe}]}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x88}}, 0x0) 971.912009ms ago: executing program 4 (id=356): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x412a81, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0xffffffffffffffb3, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r2, 0x5c699870, 0x0, [0x7d2, 0x101, 0x39d, 0x80000000, 0x7], [0x3, 0x0, 0x3, 0x80000001, 0x1000, 0x3ff, 0x4, 0x3ff, 0x0, 0x4fa, 0x0, 0x8, 0x0, 0x7, 0xff11, 0xb31a, 0x7, 0x80, 0x0, 0x1, 0x4, 0x1, 0x5, 0x7fffffff, 0x3, 0x6, 0x3, 0x2, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x7fff, 0xf, 0xf05e, 0x1622, 0x200, 0x5, 0xb, 0x5, 0xffffffff, 0x9, 0x5, 0xfffffffffffffffa, 0x101, 0x6, 0x8000000000000000, 0x4, 0x3, 0x6, 0x3, 0x1, 0x5796, 0x6, 0x1ff, 0x1, 0x800, 0x40451ff5, 0xaa, 0x2, 0x6, 0x7f, 0x72f, 0xf, 0x4, 0x7, 0x10, 0x0, 0x3, 0x9, 0xfffffffffffffbff, 0x7, 0x782, 0x8000000000000001, 0x6, 0x0, 0xff, 0xfff, 0x1bfe, 0x57be8e5a, 0xfffffffffffffff9, 0x9, 0x3, 0x2, 0x5fa0026e, 0x10001, 0x7, 0x0, 0x0, 0x8, 0x0, 0x6, 0xf964, 0xd7, 0x8ef, 0xfea, 0x2, 0xffffffffffffff99, 0xfffffffffffffff5, 0x0, 0x0, 0x6, 0x7f, 0x8, 0x1, 0x229bc654, 0x1, 0x1, 0x1000000, 0x9, 0xffffffffffffffff, 0x8, 0x4, 0x4, 0x744031f1, 0x3, 0x45, 0x1ff, 0xfffffffffffffff8]}) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r3, &(0x7f00000008c0)='ns/user\x00') r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x4081, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r0, &(0x7f0000000940)="e73901d71f95a07c9be079f88fc15182af361304bf2a82404baa38a22392b9b47fa14f6cfa1e2d2f15a2114ec7a74c19caf5ef9a7531ce0db3c590b4b5bcc951c75962b4a75799302134bc47402e13f779c04d80809b65647e53742e3f98320ebace2d60484c0a0e0b8b8fe7d88062444ba6dfffabaa96f79d7819b9997bb9b5c052ead8903b822c741b15132553a61256a2211d", 0x94) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000a00)) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000a40)={0xcd, r0, 0x2}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000a80)={0x1, 0x100000001}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000ac0)={0x6, 'bond0\x00', {0x3}, 0xffff}) pipe2$watch_queue(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000b40)={0x0, 0x6, 0x5, 0x3, 0x9, 0xda}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000b80)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r6) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f0000000dc0)={0x2001, 0x5, 0x8, 0x6}) ioctl$SNDCTL_TMR_STOP(r6, 0x5403) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000e00)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000e80), 0x1, 0x52082) ioctl$EVIOCGABS3F(r8, 0x8018457f, &(0x7f0000000ec0)=""/160) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000f80)) connect$inet6(r6, &(0x7f0000000fc0)={0xa, 0x4e24, 0xb, @private1, 0x10001}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000001000)=@sack_info={0x0, 0x9, 0xfffffff7}, 0xc) 871.708655ms ago: executing program 4 (id=357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-/'}, {0x20, 'n[!'}, {0x20, '{@@)\\'}, {0x20, '/'}, {0x20, '&.'}, {0x20, '{'}, {0x20, '%%]`\'#-,'}, {0x20, '+\\'}], 0xa, "7254d1b7fcd0cf86ebc0c6425e6131996cfdf058842269694537b03d9ce72634855d12a5664700bf5a6a48041474df5d31bef9c50646285a0ae8704755fda117daf90b098648f1cccfe7ae25f540479877269c7a66f104544caa328631a9f178a7643c09bb57d1827bca26aafd9850763c9b1a5e198515e4d9e81975b907c110eedf379bd917de"}, 0xb3) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-/'}, {0x20, 'n[!'}, {0x20, '{@@)\\'}, {0x20, '/'}, {0x20, '&.'}, {0x20, '{'}, {0x20, '%%]`\'#-,'}, {0x20, '+\\'}], 0xa, "7254d1b7fcd0cf86ebc0c6425e6131996cfdf058842269694537b03d9ce72634855d12a5664700bf5a6a48041474df5d31bef9c50646285a0ae8704755fda117daf90b098648f1cccfe7ae25f540479877269c7a66f104544caa328631a9f178a7643c09bb57d1827bca26aafd9850763c9b1a5e198515e4d9e81975b907c110eedf379bd917de"}, 0xb3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) read$rfkill(r1, &(0x7f0000000180), 0x8) (async) read$rfkill(r1, &(0x7f0000000180), 0x8) sendto(r1, &(0x7f00000001c0)="22f9334ebcf83ab20e8b3a0c31115a6b1d36d9ea910cffd01cdfa9f151ad57edc9aec9aee264b27f9d0263a033860cd200de8e860d67500b140ed96f", 0x3c, 0x800, &(0x7f0000000200)=@sco, 0x80) (async) sendto(r1, &(0x7f00000001c0)="22f9334ebcf83ab20e8b3a0c31115a6b1d36d9ea910cffd01cdfa9f151ad57edc9aec9aee264b27f9d0263a033860cd200de8e860d67500b140ed96f", 0x3c, 0x800, &(0x7f0000000200)=@sco, 0x80) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000280)={0x2, 0x3, 0x625, 0xf, 0x80000001, 0x1}) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f00000002c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xc, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7fa35566360b37ca84e3614203db8ebbda71b3957718e091c85f916d57fc"}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x86, 0x0, {0x8}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000740)) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000780)=0x4, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000007c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, {0x306, @link_local}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}, 'wg0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x80, 0x400}, 0x90) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x2c000884) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x2c000884) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000a40)={@dev, @remote}, &(0x7f0000000a80)=0xc) (async) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000a40)={@dev, @remote, 0x0}, &(0x7f0000000a80)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0xa010}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@deltclass={0x40, 0x29, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0xa}, {0x10, 0xb}, {0x1, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x62, 0x82}}, @TCA_RATE={0x6, 0x5, {0x80, 0xff}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x48011) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000b80)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000bc0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000c00)={0x28, 0x10000, r5, r6, 0x33edf1, 0x7ff, 0x4, 0x1279f9}) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000c40)={{0x1, 0x3}, 0x100, './file0\x00'}) r7 = socket(0x11, 0x4, 0x7) sendmsg$nl_route_sched(r1, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)=@deltaction={0x178, 0x31, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffdcd}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0xa0}, 0x20000800) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r8, &(0x7f0000001300)={&(0x7f0000000fc0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001000)="1277540d3d7fc94e1f115f54bc396cdb69044db3322db6bae42b8ef4fa088ab0d988fec4127c511c8de5cf0b3041996f049599434e84035749eac36b56bc6921e9abd81bd965a521257b95ba9417d817f3f00b2693cf5c9c57f0de04ebab266a92c2022ed1c6fee33f1c122402ca8b7591d2dc5d9383ae2e0c1690e079c2bd587eb7230d18618d6a633628fe16d271c7886f54f96ac677", 0x97}, {&(0x7f00000010c0)="ca63abd3313ca86ea28dc3cd03f9d602e521492efa22df36af719726e77529f2fc187f269919bed89aef9d3fdc3ba1b97d4f0291d5414bd67105ccf97cb95477efe49aee367f65409db2a33f3cb786aef4e11ef0aa191b09bf34a11814c005775acb1651efcb8e98eba8d9c0786eb12cc8936a2129a0eeb74710553ccc38d898976f", 0x82}, {&(0x7f0000001180)="9c6b69f1d7517f934668fa866b0633b455145b4a6b2f595a143bafe56fff59f5a3481eeff71370debb27f92c", 0x2c}], 0x3, &(0x7f0000001200)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x3a, 0x1, 0x7, [{@empty, 0x8}, {@multicast2, 0x8}, {@local, 0x6}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x74, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @multicast2]}, @cipso={0x86, 0x18, 0x3, [{0x2, 0x12, "ba83b4cf55903df0b877a63897cdfaf0"}]}, @generic={0x86, 0xb, "fd485d58ab3936cc13"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x5d, 0x0, 0xc, [0x5, 0x8, 0x4, 0x8001, 0x1, 0x6, 0x3]}, @rr={0x7, 0x7, 0x1d, [@rand_addr=0x64010102]}, @ssrr={0x89, 0xb, 0xfe, [@rand_addr=0x64010101, @empty]}, @cipso={0x86, 0x20, 0x3, [{0x0, 0x9, "eba45d194a7f63"}, {0x1, 0x5, "db64cc"}, {0x1, 0xc, "28b5189c19baa54677f6"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa}}], 0x100}, 0x20000080) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000001380)={0x1, 0x10, 0xfa00, {&(0x7f0000001340)}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000001380)={0x1, 0x10, 0xfa00, {&(0x7f0000001340)}}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000001400), r1) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001400), r1) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r9, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4c801) readahead(r3, 0x9, 0x9) sendmsg$nl_netfilter(r7, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x70, 0x7, 0x1, 0x5, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x4}, [@nested={0x5a, 0xa8, 0x0, 0x1, [@nested={0x4, 0x43}, @nested={0x4, 0xfe}, @typed={0x8, 0x31, 0x0, 0x0, @str='{*}\x00'}, @generic="d962c4ecb009046442280020770f9fd32027be5f23447d4f09e96093c51a92ce20c02d462787", @typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x8d}, @typed={0x14, 0x120, 0x0, 0x0, @ipv6=@empty}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_netfilter(r7, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x70, 0x7, 0x1, 0x5, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x4}, [@nested={0x5a, 0xa8, 0x0, 0x1, [@nested={0x4, 0x43}, @nested={0x4, 0xfe}, @typed={0x8, 0x31, 0x0, 0x0, @str='{*}\x00'}, @generic="d962c4ecb009046442280020770f9fd32027be5f23447d4f09e96093c51a92ce20c02d462787", @typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x8d}, @typed={0x14, 0x120, 0x0, 0x0, @ipv6=@empty}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) 860.665534ms ago: executing program 4 (id=358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000400000000000e00000020000000000000000000000000000000000000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendfile(r3, r3, 0x0, 0xff) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000002880)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d000005240000010524"], 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x208ac0, 0x8, 0x5}, 0x18) getdents64(r8, &(0x7f00000001c0)=""/63, 0x3f) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c00028006"], 0x24}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000006f030000000008000700000000000000"]) 771.652003ms ago: executing program 0 (id=359): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, &(0x7f0000000740)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) syz_usb_connect(0x1aacaeae0f976534, 0xffffffffffffff69, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x73, 0xd7, 0x24, 0x20, 0x19d2, 0xfffb, 0x1345, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x6, 0xed, 0x0, 0xff, 0xff, 0xff, 0x9, [@cdc_ncm={{0x0, 0x24, 0x6, 0x0, 0x1, "04"}, {0x0, 0x24, 0x0, 0x401}, {0x0, 0x24, 0xf, 0x1, 0x100, 0xe428, 0xb, 0x5}, {0x0, 0x24, 0x1a, 0x5}, [@mbim_extended={0x0, 0x24, 0x1c, 0x5, 0x4, 0x3bb}, @obex={0x0, 0x24, 0x15, 0xfff}, @mbim_extended={0x0, 0x24, 0x1c, 0x1ff, 0x4, 0x3}, @mbim={0x0, 0x24, 0x1b, 0xe, 0x8, 0x5, 0x3, 0x2, 0x89}, @mbim_extended={0x0, 0x24, 0x1c, 0x9, 0x1, 0x4399}, @mdlm_detail={0x0, 0x24, 0x13, 0x8, "ed1513bcb429afbd8a82e24aa2d760248d3f30ddd7d6c3a7c421e95730da3dbbebeced33d487c69449d43af5a64377d30e6725d89703449bbe7f1f5a71c462cac8ef1d44a6bd1e1801512a5609fb216a1fbe9a9e2832b2de6c1f5843011050f01df07cda022b4609eca189847828910aac5d12f3964906f99ba233c748fda971319a30a55d6994a4d4d324ba914fae964a186accb1e20c0a8649f40096740cef9ff9afbe8149b5484b64aed64ac581b46b94f7f4756499e154718ff6ae8423edd6a224f8b7346b399be9683f4c0aa95b94011239037a7716a8d2d6ae9b317f0a35311f830a3d1e"}]}], [{{0x9, 0x5, 0x4, 0xc, 0x5bf, 0x3, 0xc, 0x1, [@uac_iso={0x0, 0x25, 0x1, 0x2, 0x8, 0x6}]}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xc, 0x3f, 0xf7, [@uac_iso={0x0, 0x25, 0x1, 0x80, 0xd, 0x6}, @uac_iso={0x0, 0x25, 0x1, 0x84, 0x7, 0x178}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x91, 0x3, 0x40}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x2, 0x0, 0xff, [@generic={0x0, 0x8, "a13b4565392b04502dddc6b5d7d3bfa3606bed8874283bdb93ea209abeccb0d9552dcd6bc5606d2d7233a5ec92f51cce24740bb1bceba4cd88641c04dc66b9f5de1c08d43e197edb1a7e7b64fe9cf48bfd3c6d9415066c40cdb870dfd14e550fb2e11fb3ec7e4ec80fe5721edad40bf51b195bb1fd25cdb70170b619ead9fab025a2187862d57f2d0dd4801dbc481ee8afb5e56b23b9a73ec229f430a9e917eee78971a86951dd51bf327da312f960da8d953e7efa97de3730f572a28277795c8ea00e6a776f30c52e06c79b5afb49cbceaa6bb0e6fae68457234bba"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x13, 0x80, 0x5}}, {{0x9, 0x5, 0xc, 0x1, 0x307f8538152f044c, 0xdb, 0x0, 0xb, [@uac_iso={0x0, 0x25, 0x1, 0x82, 0x8, 0xab7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x7, 0x6f, 0x3}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x7, 0x1, 0x2c}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0xf7, 0x6, 0x3, [@uac_iso={0x0, 0x25, 0x1, 0x3, 0x7, 0x6}]}}]}}, {{0x9, 0x4, 0x56, 0x4, 0x0, 0x5f, 0xdc, 0x41, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0xf7}, [@feature_unit={0x0, 0x24, 0x6, 0x6, 0x2, 0x0, [0x9, 0x3, 0x9, 0x9, 0x8], 0x50}, @extension_unit={0x0, 0x24, 0x8, 0x3, 0x5, 0x6, "9689"}, @processing_unit={0x0, 0x24, 0x7, 0x6, 0x6, 0xee, "d9decf9970f6"}, @input_terminal={0x0, 0x24, 0x2, 0x2, 0x203, 0x6, 0x3, 0xb1, 0x1, 0x4}]}, @cdc_ecm={{0x0, 0x24, 0x6, 0x0, 0x0, '5'}, {0x0, 0x24, 0x0, 0x5}, {0x0, 0x24, 0xf, 0x1, 0x3, 0x2, 0x2, 0x8}, [@mdlm_detail={0x0, 0x24, 0x13, 0xa5, "82c7b90669bb0a7383c8cb383399b75f06988dc00207e818de7946b19e572c4276f6f23225138129537424d47c46db71dea069edb701495c8ba254361e306ab389cd5ed882c0b9fad7174fc34d25acc397d8e8eb9a72c9a931efb7"}, @dmm={0x0, 0x24, 0x14, 0x9, 0x8}, @mdlm={0x0, 0x24, 0x12, 0x8}]}], [{{0x9, 0x5, 0x8, 0x1, 0x10, 0xbb, 0x2a, 0x5}}]}}]}}]}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e22, @empty}}, 0x1, 0x0, 0x0, 0x0, 0x5a1}, 0x9c) r4 = dup2(r1, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0x2, &(0x7f0000000180)='/\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='#\x00\x00\x00 \x00\x00\x00', @ANYRES32=r4, @ANYBLOB="3f70d050acd2f08b97007748a83a96d2312b4b270ec5e459c4802b4cb812d6a08370e4ce421c8e5c5d01580d332bb5b28df358da05a9434f2460530c3f744db9737e3abd7bf8d5cf194eb13cbaf02fa3fb107500ac8b6c7faa89115d462fe3ea2d323eeaa1ea886868749a780835bcd86b79a88bde7f6d7eac9f401c8bf3df14016388000000000000000568b167cf6b7a980187f380abb88e8b757ea79e14f057b08f4a4db4701b6d4740fa9c8e580cfe08ccf74eb7e41834", @ANYRES32=r5, @ANYRES64=0x0], 0x20) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, 0x7, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x13, 0x7, 0x1, 0x0, "4c7168988018deeb8e518e74857cf0"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r11 = accept4(r10, 0x0, 0x0, 0x0) recvmsg$unix(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1}, 0x21) sendmsg$nl_route_sched_retired(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x30, r8, 0x9476faf4e11b2c25, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r8, 0x0, 0x10, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xff, 0xb}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x8000, 0x40, 0x2, 0x40, 0x0, 0x100, 0x8000, 0x5, 0x4, 0xfffc, 0x1, 0x2, 0x2ae, 0x2, 0x0, 0xa754]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x17, {0x100, 0x2, 0x7, 0x6}}}]}, 0x74}}, 0x8000) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8000000000000001, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000006c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 0s ago: executing program 0 (id=360): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$unix(r0, 0x0, 0x0, 0x40000, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async) socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): 91][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.951732][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.017825][ T5843] team0: Port device team_slave_0 added [ 69.058478][ T5843] team0: Port device team_slave_1 added [ 69.072294][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 69.094186][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.101197][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.127213][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.155990][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 69.164867][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 69.175335][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.182487][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.209521][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.244988][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.253231][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.260498][ T5846] bridge_slave_0: entered allmulticast mode [ 69.267171][ T5846] bridge_slave_0: entered promiscuous mode [ 69.302369][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.309645][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.316865][ T5846] bridge_slave_1: entered allmulticast mode [ 69.323804][ T5846] bridge_slave_1: entered promiscuous mode [ 69.436569][ T5843] hsr_slave_0: entered promiscuous mode [ 69.444173][ T5843] hsr_slave_1: entered promiscuous mode [ 69.453091][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.482584][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.489951][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.497087][ T5848] bridge_slave_0: entered allmulticast mode [ 69.504155][ T5848] bridge_slave_0: entered promiscuous mode [ 69.517563][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.527954][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.535360][ T5849] bridge_slave_0: entered allmulticast mode [ 69.543063][ T5849] bridge_slave_0: entered promiscuous mode [ 69.551119][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.582687][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.590690][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.597850][ T5848] bridge_slave_1: entered allmulticast mode [ 69.604734][ T5848] bridge_slave_1: entered promiscuous mode [ 69.620031][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.627095][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.634527][ T5849] bridge_slave_1: entered allmulticast mode [ 69.641364][ T5849] bridge_slave_1: entered promiscuous mode [ 69.661346][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.669590][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.676741][ T5850] bridge_slave_0: entered allmulticast mode [ 69.683809][ T5850] bridge_slave_0: entered promiscuous mode [ 69.692653][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.700083][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.707239][ T5850] bridge_slave_1: entered allmulticast mode [ 69.714532][ T5850] bridge_slave_1: entered promiscuous mode [ 69.747761][ T5846] team0: Port device team_slave_0 added [ 69.771527][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.782600][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.805111][ T5846] team0: Port device team_slave_1 added [ 69.813143][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.849800][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.863789][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.904446][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.919788][ T5848] team0: Port device team_slave_0 added [ 69.934789][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.942589][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.969597][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.982083][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.989112][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.015086][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.043277][ T5848] team0: Port device team_slave_1 added [ 70.058584][ T5849] team0: Port device team_slave_0 added [ 70.095288][ T5849] team0: Port device team_slave_1 added [ 70.106707][ T5850] team0: Port device team_slave_0 added [ 70.123527][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.130644][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.156863][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.187133][ T5850] team0: Port device team_slave_1 added [ 70.193833][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.201273][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.228430][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.256194][ T5846] hsr_slave_0: entered promiscuous mode [ 70.262931][ T5846] hsr_slave_1: entered promiscuous mode [ 70.269551][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.277368][ T5846] Cannot create hsr debugfs directory [ 70.338480][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.345454][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.375436][ T5833] Bluetooth: hci2: command tx timeout [ 70.375443][ T5842] Bluetooth: hci3: command tx timeout [ 70.378260][ T5842] Bluetooth: hci4: command tx timeout [ 70.381229][ T5840] Bluetooth: hci1: command tx timeout [ 70.386933][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.418666][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.425734][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.451769][ T5840] Bluetooth: hci0: command tx timeout [ 70.457370][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.470023][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.476990][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.503976][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.523484][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.534376][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.561398][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.583159][ T5848] hsr_slave_0: entered promiscuous mode [ 70.590326][ T5848] hsr_slave_1: entered promiscuous mode [ 70.596406][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.604207][ T5848] Cannot create hsr debugfs directory [ 70.686261][ T5849] hsr_slave_0: entered promiscuous mode [ 70.693139][ T5849] hsr_slave_1: entered promiscuous mode [ 70.699646][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.707209][ T5849] Cannot create hsr debugfs directory [ 70.725308][ T5850] hsr_slave_0: entered promiscuous mode [ 70.734675][ T5850] hsr_slave_1: entered promiscuous mode [ 70.741374][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.749119][ T5850] Cannot create hsr debugfs directory [ 70.799259][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.825594][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.863975][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.890723][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.024439][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.071090][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.098554][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.110782][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.176837][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.186636][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.197374][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.207908][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.222029][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.262921][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.312800][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.326502][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.333842][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.364335][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.379728][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.393072][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.400181][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.418568][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.435384][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.460616][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.491160][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.501778][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.577610][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.659671][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.672469][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.709564][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.723828][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.742517][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.749700][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.771987][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.779159][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.789219][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.796341][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.812744][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.819576][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.855750][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.868507][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.876333][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.883483][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.911647][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.936132][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.982153][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.989324][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.005429][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.012598][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.042174][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.068995][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.076211][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.099142][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.113217][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.120393][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.143499][ T5843] veth0_vlan: entered promiscuous mode [ 72.167215][ T5843] veth1_vlan: entered promiscuous mode [ 72.194412][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.270848][ T5843] veth0_macvtap: entered promiscuous mode [ 72.293280][ T5843] veth1_macvtap: entered promiscuous mode [ 72.321841][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.335759][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.362072][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.380825][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.389906][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.399337][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.409741][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.431271][ T5846] veth0_vlan: entered promiscuous mode [ 72.442046][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.449558][ T5833] Bluetooth: hci2: command tx timeout [ 72.455079][ T5840] Bluetooth: hci1: command tx timeout [ 72.458448][ T5842] Bluetooth: hci3: command tx timeout [ 72.466179][ T5833] Bluetooth: hci4: command tx timeout [ 72.476888][ T5849] veth0_vlan: entered promiscuous mode [ 72.490601][ T5849] veth1_vlan: entered promiscuous mode [ 72.510920][ T5846] veth1_vlan: entered promiscuous mode [ 72.529478][ T5833] Bluetooth: hci0: command tx timeout [ 72.546947][ T5848] veth0_vlan: entered promiscuous mode [ 72.576693][ T5848] veth1_vlan: entered promiscuous mode [ 72.635129][ T5850] veth0_vlan: entered promiscuous mode [ 72.652117][ T5849] veth0_macvtap: entered promiscuous mode [ 72.672454][ T5850] veth1_vlan: entered promiscuous mode [ 72.709200][ T5849] veth1_macvtap: entered promiscuous mode [ 72.717508][ T5848] veth0_macvtap: entered promiscuous mode [ 72.731702][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.742101][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.768934][ T5848] veth1_macvtap: entered promiscuous mode [ 72.795190][ T5850] veth0_macvtap: entered promiscuous mode [ 72.803359][ T5846] veth0_macvtap: entered promiscuous mode [ 72.837701][ T5846] veth1_macvtap: entered promiscuous mode [ 72.845923][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.860932][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.873146][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.883202][ T5850] veth1_macvtap: entered promiscuous mode [ 72.897775][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.898843][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.908272][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.923104][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.935408][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.952797][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.962557][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.973313][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.982682][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.005685][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.017523][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.027935][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.039936][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.052258][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.060949][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.071792][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.082542][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.094134][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.104416][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.115273][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.127146][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.147092][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.164328][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.177653][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.188145][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.199211][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.209451][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.220288][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.230304][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.241131][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.252526][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.265825][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.276434][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.286344][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.297612][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.308906][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.319501][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.330430][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.340559][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.351725][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.362319][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.373218][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.384521][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.403116][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.419338][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.434575][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.446139][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.470871][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.484444][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.502487][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.513350][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.544570][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.590495][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.606446][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.615859][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.624885][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.635852][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.649491][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.664290][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.673404][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.689049][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.697812][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.715935][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.726487][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.814865][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.829909][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.889260][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.907946][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.927652][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.939609][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.012455][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.022931][ T119] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.044014][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.055389][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.084365][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.198749][ T3964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.206621][ T3964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.220680][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.231018][ T119] usb 2-1: Using ep0 maxpacket: 32 [ 74.244136][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.265080][ T119] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 74.298227][ T119] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 74.318414][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.326467][ T119] usb 2-1: Product: syz [ 74.334231][ T3964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.343091][ T119] usb 2-1: Manufacturer: syz [ 74.347922][ T119] usb 2-1: SerialNumber: syz [ 74.352992][ T3964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.383473][ T119] usb 2-1: config 0 descriptor?? [ 74.391759][ T5897] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.435230][ T5902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.435378][ T119] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.532681][ T5833] Bluetooth: hci1: command tx timeout [ 74.540880][ T5833] Bluetooth: hci2: command tx timeout [ 74.546345][ T5833] Bluetooth: hci4: command tx timeout [ 74.548401][ T5842] Bluetooth: hci3: command tx timeout [ 74.619415][ T5840] Bluetooth: hci0: command tx timeout [ 74.702480][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.726581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.736594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 74.745484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.754271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.769666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.773197][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.876936][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.888956][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.918312][ T5912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.968265][ T119] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.976677][ T5888] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.130486][ T119] usb 3-1: Using ep0 maxpacket: 8 [ 75.148568][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 75.159411][ T119] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 75.179983][ T5898] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.191942][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.202635][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.220548][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 75.273455][ T119] usb 3-1: config 0 descriptor?? [ 75.275638][ T25] usb 2-1: USB disconnect, device number 2 [ 75.285011][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.318990][ T5888] usb 4-1: config 0 descriptor?? [ 75.343321][ T5898] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 75.362882][ T5888] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 75.371498][ T5898] usb 5-1: config 4 has no interface number 0 [ 75.414756][ T5898] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c [ 75.460915][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.490280][ T5898] usb 5-1: Product: syz [ 75.494700][ T5898] usb 5-1: Manufacturer: syz [ 75.504046][ T5898] usb 5-1: SerialNumber: syz [ 75.536119][ T5898] gspca_main: spca505-2.14.0 probing 0733:0430 [ 75.658277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 75.808913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 75.956945][ T29] audit: type=1326 audit(1733379129.815:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987b7ff19 code=0x7ffc0000 [ 76.018885][ T29] audit: type=1326 audit(1733379129.825:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987b7ff19 code=0x7ffc0000 [ 76.044720][ T29] audit: type=1326 audit(1733379129.825:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc987b7ff19 code=0x7ffc0000 [ 76.073883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.086502][ T29] audit: type=1326 audit(1733379129.835:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987b7ff19 code=0x7ffc0000 [ 76.090668][ T5898] gspca_spca505: reg write: error -71 [ 76.111612][ T29] audit: type=1326 audit(1733379129.835:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987b7ff19 code=0x7ffc0000 [ 76.144271][ T29] audit: type=1326 audit(1733379129.845:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc987b7ff19 code=0x7ffc0000 [ 76.182616][ T5898] spca505 5-1:4.9: probe with driver spca505 failed with error -5 [ 76.197890][ T29] audit: type=1326 audit(1733379129.885:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987b7ff19 code=0x7ffc0000 [ 76.224135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 76.239562][ T29] audit: type=1326 audit(1733379129.895:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc987b7ff19 code=0x7ffc0000 [ 76.241856][ T5898] usb 5-1: USB disconnect, device number 2 [ 76.271336][ T29] audit: type=1326 audit(1733379129.895:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e597ff19 code=0x7ffc0000 [ 76.302301][ T29] audit: type=1326 audit(1733379129.895:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e597ff19 code=0x7ffc0000 [ 76.359050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.608171][ T5840] Bluetooth: hci3: command tx timeout [ 76.618423][ T5840] Bluetooth: hci4: command tx timeout [ 76.619479][ T5842] Bluetooth: hci2: command tx timeout [ 76.623966][ T5840] Bluetooth: hci1: command tx timeout [ 76.690376][ T5842] Bluetooth: hci0: command tx timeout [ 76.812317][ T5944] Zero length message leads to an empty skb [ 76.814816][ T5947] netlink: 276 bytes leftover after parsing attributes in process `syz.4.18'. [ 76.969955][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 76.981970][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 76.997447][ T5953] syz_tun: entered promiscuous mode [ 77.004850][ T5953] syz_tun: left promiscuous mode [ 77.165560][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.188223][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.198944][ T5888] usb 4-1: USB disconnect, device number 2 [ 77.212325][ T5955] mmap: syz.0.21 (5955) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.328245][ T5883] usb 2-1: device descriptor read/64, error -71 [ 77.338577][ T9] usb 5-1: device descriptor read/64, error -71 [ 77.345085][ T119] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 77.362300][ T119] asix 3-1:0.0: probe with driver asix failed with error -71 [ 77.387368][ T119] usb 3-1: USB disconnect, device number 2 [ 77.571905][ T5883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.608129][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.718187][ T5883] usb 2-1: device descriptor read/64, error -71 [ 77.758243][ T9] usb 5-1: device descriptor read/64, error -71 [ 77.837881][ T5883] usb usb2-port1: attempt power cycle [ 77.854330][ T5981] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure [ 77.869153][ T9] usb usb5-port1: attempt power cycle [ 78.056435][ T5986] netlink: 276 bytes leftover after parsing attributes in process `syz.2.29'. [ 78.098404][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.120539][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31'. [ 78.131148][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31'. [ 78.144495][ T5989] syz_tun: entered promiscuous mode [ 78.156612][ T5989] syz_tun: left promiscuous mode [ 78.198187][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 78.228148][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.248893][ T5883] usb 2-1: device descriptor read/8, error -71 [ 78.269678][ T5888] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 78.278924][ T9] usb 5-1: device descriptor read/8, error -71 [ 78.287131][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.299118][ T5888] usb 4-1: config 0 has no interface number 0 [ 78.305983][ T5888] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 78.326301][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 78.335377][ T5888] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 78.347097][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'. [ 78.356338][ T5888] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 239 [ 78.387098][ T5888] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 78.416889][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.429425][ T5888] usb 4-1: Product: syz [ 78.433746][ T5888] usb 4-1: Manufacturer: syz [ 78.442064][ T5888] usb 4-1: SerialNumber: syz [ 78.452772][ T5888] usb 4-1: config 0 descriptor?? [ 78.464613][ T5888] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 78.498197][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 78.530163][ T5883] usb 2-1: device descriptor read/8, error -71 [ 78.539140][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.569282][ T9] usb 5-1: device descriptor read/8, error -71 [ 78.637462][ T5995] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 78.648182][ T5883] usb usb2-port1: unable to enumerate USB device [ 78.675630][ T5851] usb 4-1: USB disconnect, device number 3 [ 78.698497][ T9] usb usb5-port1: unable to enumerate USB device [ 78.770255][ T5998] tipc: Started in network mode [ 78.781154][ T5998] tipc: Node identity 2d2e14aa, cluster identity 4711 [ 78.797230][ T5998] tipc: Enabling of bearer rejected, failed to enable media [ 79.309300][ T6009] macvlan0: entered allmulticast mode [ 79.314724][ T6009] veth1_vlan: entered allmulticast mode [ 79.324083][ T6009] veth1_vlan: left allmulticast mode [ 79.347076][ T6009] macvlan0 (unregistering): left allmulticast mode [ 79.388164][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.538188][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 79.559362][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.572605][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.588433][ T5887] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 79.597629][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.608282][ T5883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.629412][ T5887] usb 3-1: config 0 descriptor?? [ 79.768207][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 79.780690][ T6021] veth2: entered allmulticast mode [ 79.785491][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 79.798067][ T5883] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 79.833470][ T5883] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 79.854509][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.864928][ T5883] usb 1-1: Product: syz [ 79.869678][ T5883] usb 1-1: Manufacturer: syz [ 79.874610][ T5883] usb 1-1: SerialNumber: syz [ 79.893809][ T5883] usb 1-1: config 0 descriptor?? [ 80.079196][ T5887] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 80.250176][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.280123][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.312032][ T5851] usb 1-1: USB disconnect, device number 2 [ 80.318459][ T5882] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.491146][ T5882] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.509646][ T6028] cgroup: fork rejected by pids controller in /syz4 [ 80.519803][ T5882] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 80.538193][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.550471][ T5882] usb 4-1: config 0 descriptor?? [ 81.574460][ T5887] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.729493][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 81.743441][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.763758][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 81.785656][ T5887] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 81.797877][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.832036][ T5887] usb 1-1: config 0 descriptor?? [ 81.883768][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 81.883787][ T29] audit: type=1326 audit(1733379135.775:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 81.914253][ T29] audit: type=1326 audit(1733379135.775:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 81.936906][ T29] audit: type=1326 audit(1733379135.775:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 81.959282][ T29] audit: type=1326 audit(1733379135.775:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 81.981943][ T29] audit: type=1326 audit(1733379135.775:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 82.004252][ T29] audit: type=1326 audit(1733379135.775:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 82.026668][ T29] audit: type=1326 audit(1733379135.775:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 82.049154][ T29] audit: type=1326 audit(1733379135.775:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 82.071402][ T29] audit: type=1326 audit(1733379135.775:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 82.093613][ T29] audit: type=1326 audit(1733379135.775:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 82.132570][ T974] cfg80211: failed to load regulatory.db [ 82.179347][ T5882] usb 3-1: USB disconnect, device number 3 [ 82.306468][ T6077] __nla_validate_parse: 2 callbacks suppressed [ 82.306487][ T6077] netlink: 892 bytes leftover after parsing attributes in process `syz.0.48'. [ 82.505325][ T5887] usbhid 1-1:0.0: can't add hid device: -71 [ 82.531777][ T5887] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 82.562244][ T5887] usb 1-1: USB disconnect, device number 3 [ 82.646341][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 83.380430][ T6097] netlink: 104 bytes leftover after parsing attributes in process `syz.4.54'. [ 83.419778][ T5851] usb 4-1: USB disconnect, device number 4 [ 83.598255][ T974] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 83.785930][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.820066][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 83.869929][ T974] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 83.898131][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.945606][ T974] usb 1-1: config 0 descriptor?? [ 83.988350][ T5851] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.192507][ T6092] team_slave_0: entered promiscuous mode [ 84.198537][ T6092] team_slave_1: entered promiscuous mode [ 84.236102][ T6092] macsec1: entered promiscuous mode [ 84.270645][ T5851] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.292629][ T6092] team0: entered promiscuous mode [ 84.299010][ T5851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.320476][ T5851] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.349806][ T6092] macsec1: entered allmulticast mode [ 84.376110][ T5851] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.405736][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.454270][ T5851] usb 5-1: Product: syz [ 84.460957][ T6092] team0: entered allmulticast mode [ 84.466134][ T6092] team_slave_0: entered allmulticast mode [ 84.473237][ T5851] usb 5-1: Manufacturer: syz [ 84.502887][ T5851] usb 5-1: SerialNumber: syz [ 84.555486][ T5851] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 84.565944][ T6092] team_slave_1: entered allmulticast mode [ 84.586831][ T5851] cdc_ncm 5-1:1.0: bind() failure [ 84.606384][ T6092] team0: Device macsec1 is already an upper device of the team interface [ 84.772556][ T6092] team0: left allmulticast mode [ 84.805636][ T6092] team_slave_0: left allmulticast mode [ 84.834748][ T6092] team_slave_1: left allmulticast mode [ 84.856815][ T6092] team0: left promiscuous mode [ 84.872715][ T6092] team_slave_0: left promiscuous mode [ 84.878301][ T6092] team_slave_1: left promiscuous mode [ 85.109008][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'. [ 85.152417][ T974] usbhid 1-1:0.0: can't add hid device: -71 [ 85.168477][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'. [ 85.179641][ T974] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 85.219575][ T974] usb 1-1: USB disconnect, device number 4 [ 85.239853][ T6117] team0: entered promiscuous mode [ 85.244948][ T6117] team_slave_0: entered promiscuous mode [ 85.281584][ T5898] usb 5-1: USB disconnect, device number 7 [ 85.298342][ T6117] team_slave_1: entered promiscuous mode [ 85.325223][ T6117] bond0: entered promiscuous mode [ 85.358392][ T6117] bond_slave_0: entered promiscuous mode [ 85.397057][ T6117] bond_slave_1: entered promiscuous mode [ 85.431594][ T6117] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 85.936637][ T6124] netlink: 276 bytes leftover after parsing attributes in process `syz.0.61'. [ 86.015204][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 86.458822][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'. [ 86.498329][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 86.518304][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'. [ 86.581138][ T6140] team0: entered promiscuous mode [ 86.586245][ T6140] team_slave_0: entered promiscuous mode [ 86.648326][ T6140] team_slave_1: entered promiscuous mode [ 86.673340][ T6140] bond0: entered promiscuous mode [ 86.673400][ T6140] bond_slave_0: entered promiscuous mode [ 86.705262][ T6140] bond_slave_1: entered promiscuous mode [ 86.726314][ T6140] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 86.726369][ T6140] Cannot create hsr debugfs directory [ 86.726906][ T6140] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 87.274465][ T5842] Bluetooth: hci3: unknown advertising packet type: 0x69 [ 87.274542][ T5842] Bluetooth: hci3: Malformed LE Event: 0x02 [ 87.319885][ T6163] __nla_validate_parse: 4 callbacks suppressed [ 87.319907][ T6163] netlink: 44 bytes leftover after parsing attributes in process `syz.3.76'. [ 87.358100][ T974] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 87.532930][ T6179] bridge0: entered promiscuous mode [ 87.538741][ T6179] macvlan0: entered promiscuous mode [ 87.543274][ T5884] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.582982][ T6174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.595347][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.606985][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.627206][ T974] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.641930][ T974] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.652071][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.670056][ T974] usb 2-1: config 0 descriptor?? [ 87.699095][ T6174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.740587][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.751178][ T5884] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 87.760353][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.771721][ T6174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.782757][ T5884] usb 3-1: config 0 descriptor?? [ 87.788320][ T5851] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.798651][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 88.000553][ T5882] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.001805][ T5884] pwc: send_video_command error -71 [ 88.014468][ T5884] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 88.026577][ T5884] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 88.039741][ T5884] usb 3-1: USB disconnect, device number 4 [ 88.100143][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.108649][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.116260][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.124326][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.132133][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.140786][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.148464][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.156606][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.164274][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.172033][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.180298][ T974] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.189952][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.201674][ T974] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 88.211301][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.231473][ T5882] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 88.241096][ T974] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 88.254016][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.268999][ T5882] usb 1-1: config 0 descriptor?? [ 88.366685][ T974] usb 2-1: USB disconnect, device number 7 [ 88.398572][ T5883] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.528304][ T5884] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.548393][ T5883] usb 5-1: device descriptor read/64, error -71 [ 88.699216][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.711235][ T5884] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.721294][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.733787][ T5884] usb 3-1: config 0 descriptor?? [ 88.746166][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 88.808256][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 88.948161][ T5883] usb 5-1: device descriptor read/64, error -71 [ 89.058347][ T5883] usb usb5-port1: attempt power cycle [ 89.146588][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 89.163959][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 89.181895][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 89.193737][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 89.203181][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 89.211374][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 89.219587][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 89.228626][ T5884] pwc: recv_control_msg error -32 req 02 val 2100 [ 89.236181][ T5884] pwc: recv_control_msg error -32 req 04 val 1500 [ 89.260401][ T5884] pwc: recv_control_msg error -32 req 02 val 2500 [ 89.285160][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.295868][ T5884] pwc: recv_control_msg error -32 req 02 val 2400 [ 89.312466][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.428383][ T5883] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 89.462445][ T5883] usb 5-1: device descriptor read/8, error -71 [ 89.566456][ T5884] pwc: recv_control_msg error -71 req 02 val 2900 [ 89.622031][ T5884] pwc: recv_control_msg error -71 req 02 val 2800 [ 89.647037][ T5884] pwc: recv_control_msg error -71 req 04 val 1100 [ 89.665074][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 89.687024][ T5884] pwc: Registered as video103. [ 89.702996][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 89.748695][ T5883] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 89.794912][ T5884] usb 3-1: USB disconnect, device number 5 [ 89.848907][ T5883] usb 5-1: device descriptor read/8, error -71 [ 89.998645][ T5883] usb usb5-port1: unable to enumerate USB device [ 90.478331][ T5884] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.565294][ T6217] ======================================================= [ 90.565294][ T6217] WARNING: The mand mount option has been deprecated and [ 90.565294][ T6217] and is ignored by this kernel. Remove the mand [ 90.565294][ T6217] option from the mount to silence this warning. [ 90.565294][ T6217] ======================================================= [ 90.622345][ T6217] tmpfs: Unknown parameter 'fd' [ 90.662317][ T6217] netlink: 276 bytes leftover after parsing attributes in process `syz.3.94'. [ 90.671655][ T5884] usb 2-1: device descriptor read/64, error -71 [ 90.684914][ T6219] tipc: Enabling of bearer rejected, failed to enable media [ 90.928407][ T5884] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.024702][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.112283][ T5884] usb 2-1: device descriptor read/64, error -71 [ 91.202580][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.259394][ T5884] usb usb2-port1: attempt power cycle [ 91.377446][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.438339][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 91.444390][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 91.530079][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.548103][ T5882] usb 1-1: USB disconnect, device number 5 [ 91.548397][ T5888] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.598658][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.609516][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.628863][ T5884] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 91.639738][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.658795][ T5884] usb 2-1: device descriptor read/8, error -71 [ 91.681004][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.682089][ T6229] raw_sendmsg: syz.0.100 forgot to set AF_INET. Fix it! [ 91.700694][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.711282][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.778142][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 91.788737][ T5888] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.811448][ T5888] usb 3-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 91.841163][ T5888] usb 3-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 91.862685][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.918713][ T5884] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 91.932859][ T1144] bridge_slave_1: left allmulticast mode [ 91.941947][ T1144] bridge_slave_1: left promiscuous mode [ 91.949149][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.966110][ T5884] usb 2-1: device descriptor read/8, error -71 [ 91.976234][ T5888] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 92.007643][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.020182][ T5888] usb 3-1: Product: syz [ 92.024460][ T5888] usb 3-1: Manufacturer: syz [ 92.025143][ T1144] bridge_slave_0: left allmulticast mode [ 92.036725][ T1144] bridge_slave_0: left promiscuous mode [ 92.037862][ T5888] usb 3-1: SerialNumber: syz [ 92.043346][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.057907][ T5888] usb 3-1: config 0 descriptor?? [ 92.072738][ T6243] program syz.0.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.118715][ T5884] usb usb2-port1: unable to enumerate USB device [ 92.275606][ T5888] usb 3-1: USB disconnect, device number 6 [ 92.318320][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.490343][ T9] usb 1-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 92.504918][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.519508][ T9] usb 1-1: config 0 descriptor?? [ 92.531372][ T9] usb-storage 1-1:0.0: USB Mass Storage device detected [ 92.634605][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.662064][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.684482][ T1144] bond0 (unregistering): Released all slaves [ 92.731913][ T9] usb 1-1: USB disconnect, device number 6 [ 93.116660][ T6251] input: syz1 as /devices/virtual/input/input6 [ 93.511328][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.107'. [ 93.579588][ T6234] chnl_net:caif_netlink_parms(): no params data found [ 93.601056][ T6265] netlink: 'syz.0.107': attribute type 10 has an invalid length. [ 93.630858][ T6265] syz_tun: entered promiscuous mode [ 93.655854][ T6265] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 93.809480][ T5842] Bluetooth: hci3: command tx timeout [ 93.945475][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'. [ 93.962995][ T6287] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.072429][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.112'. [ 94.090960][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.112'. [ 94.092539][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.138218][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.147822][ T6234] bridge_slave_0: entered allmulticast mode [ 94.157304][ T6234] bridge_slave_0: entered promiscuous mode [ 94.187439][ T6287] vlan2: entered promiscuous mode [ 94.441654][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.449218][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.456581][ T6234] bridge_slave_1: entered allmulticast mode [ 94.463730][ T6234] bridge_slave_1: entered promiscuous mode [ 94.645836][ T1144] hsr_slave_0: left promiscuous mode [ 94.672621][ T1144] hsr_slave_1: left promiscuous mode [ 94.679154][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.696293][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.725114][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.736262][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.773986][ T1144] veth1_macvtap: left promiscuous mode [ 94.786980][ T1144] veth0_macvtap: left promiscuous mode [ 94.797029][ T1144] veth1_vlan: left promiscuous mode [ 94.818826][ T1144] veth0_vlan: left promiscuous mode [ 95.339434][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 95.380487][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 95.725631][ T6305] tipc: Started in network mode [ 95.730913][ T6305] tipc: Node identity 2d2e14aa, cluster identity 4711 [ 95.737698][ T6305] tipc: Enabling of bearer rejected, failed to enable media [ 95.851141][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.879199][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.889050][ T5842] Bluetooth: hci3: command tx timeout [ 96.091240][ T6234] team0: Port device team_slave_0 added [ 96.098185][ T5884] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.130390][ T6234] team0: Port device team_slave_1 added [ 96.173895][ T6342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.125'. [ 96.183457][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.125'. [ 96.248801][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 96.264011][ T5884] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 96.274615][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.289103][ T5884] usb 3-1: Product: syz [ 96.293336][ T5884] usb 3-1: Manufacturer: syz [ 96.295861][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.323706][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.328093][ T5884] usb 3-1: SerialNumber: syz [ 96.408368][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 96.424312][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.428992][ T5884] usb 3-1: config 0 descriptor?? [ 96.470833][ T5884] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 96.488880][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.496049][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.550622][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.644791][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 96.738353][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 96.758923][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.778216][ T9] usb 5-1: config 0 descriptor?? [ 96.799366][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 96.881378][ T6234] hsr_slave_0: entered promiscuous mode [ 96.936070][ T6234] hsr_slave_1: entered promiscuous mode [ 96.992748][ T6234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.038375][ T6234] Cannot create hsr debugfs directory [ 97.396942][ T6373] tipc: Started in network mode [ 97.402559][ T6373] tipc: Node identity 2d2e14aa, cluster identity 4711 [ 97.411253][ T6373] tipc: Enabling of bearer rejected, failed to enable media [ 97.484134][ T5898] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 97.536076][ T6234] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.596342][ T6234] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.596842][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.620250][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.646397][ T6234] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.648513][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 97.662354][ T6234] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.680214][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.702573][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.723038][ T5898] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 97.746092][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.773794][ T6234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.777240][ T5898] usb 2-1: config 0 descriptor?? [ 97.824869][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.828265][ T5851] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 97.855241][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.863461][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.894463][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.901767][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.968757][ T5842] Bluetooth: hci3: command tx timeout [ 98.000913][ T5851] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 98.027747][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.076112][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.084359][ T5851] usb 1-1: config 0 descriptor?? [ 98.105416][ T5851] cp210x 1-1:0.0: cp210x converter detected [ 98.177906][ T6234] veth0_vlan: entered promiscuous mode [ 98.203598][ T6234] veth1_vlan: entered promiscuous mode [ 98.221852][ T5898] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 98.243236][ T5898] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 98.272242][ T5898] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 98.283742][ T6234] veth0_macvtap: entered promiscuous mode [ 98.291238][ T5898] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 98.304446][ T5851] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 98.314188][ T5898] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 98.321761][ T5851] cp210x 1-1:0.0: querying part number failed [ 98.339936][ T5898] appleir 0003:05AC:8241.0003: No inputs registered, leaving [ 98.351276][ T6234] veth1_macvtap: entered promiscuous mode [ 98.362039][ T9] gspca_sunplus: reg_w_riv err -71 [ 98.367307][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 98.369858][ T5851] usb 1-1: cp210x converter now attached to ttyUSB0 [ 98.398518][ T9] usb 5-1: USB disconnect, device number 12 [ 98.403392][ T5898] appleir 0003:05AC:8241.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 98.427450][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.441439][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.459140][ T5851] usb 1-1: USB disconnect, device number 7 [ 98.498782][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.509590][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.519727][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.531651][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.542306][ T5851] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 98.550967][ T5851] cp210x 1-1:0.0: device disconnected [ 98.558408][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.569051][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.580841][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.597044][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.608134][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.618176][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.628956][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.638870][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.649461][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.659409][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.669930][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.681839][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.695052][ T6234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.704011][ T6234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.712847][ T6234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.721716][ T6234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.891548][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.953248][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.987283][ T5851] usb 3-1: USB disconnect, device number 7 [ 99.046510][ T4480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.088825][ T4480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.157172][ T6405] syz.2.135 uses obsolete (PF_INET,SOCK_PACKET) [ 99.172111][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.136'. [ 99.185745][ T6405] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 99.195986][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.136'. [ 99.318772][ T5898] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.478158][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 99.503882][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.508404][ T9] usb 2-1: USB disconnect, device number 13 [ 99.525324][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 99.569302][ T5898] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 99.598127][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.627224][ T5898] usb 1-1: Product: syz [ 99.637443][ T5898] usb 1-1: Manufacturer: syz [ 99.647622][ T5898] usb 1-1: SerialNumber: syz [ 99.659616][ T5884] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 99.673418][ T5898] usb 1-1: config 0 descriptor?? [ 99.833248][ T5884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.850457][ T5884] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.874221][ T5884] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.895148][ T5898] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 99.898041][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.925615][ T5884] usb 6-1: Product: syz [ 99.934402][ T5884] usb 6-1: Manufacturer: syz [ 99.943947][ T5884] usb 6-1: SerialNumber: syz [ 100.049052][ T5842] Bluetooth: hci3: command tx timeout [ 100.129868][ T5851] usb 1-1: USB disconnect, device number 8 [ 100.163112][ T5884] usb 6-1: 0:2 : does not exist [ 100.180002][ T5884] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 100.238689][ T5884] usb 6-1: USB disconnect, device number 2 [ 100.488670][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 100.500476][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.787347][ T6456] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 100.851090][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.5.146'. [ 101.158410][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 101.219068][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 101.219087][ T29] audit: type=1326 audit(1733379155.115:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 101.333085][ T29] audit: type=1326 audit(1733379155.145:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 101.398381][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.445361][ T29] audit: type=1326 audit(1733379155.205:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 101.446128][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.534261][ T29] audit: type=1326 audit(1733379155.215:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 101.580481][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.605334][ T29] audit: type=1326 audit(1733379155.215:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 101.611061][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.658442][ T5898] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 101.687160][ T9] usb 6-1: SerialNumber: syz [ 101.716754][ T29] audit: type=1326 audit(1733379155.215:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 101.798985][ T29] audit: type=1326 audit(1733379155.215:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 101.846786][ T6485] SET target dimension over the limit! [ 101.856287][ T6487] process 'syz.1.154' launched '/dev/fd/5' with NULL argv: empty string added [ 101.869500][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 101.885150][ T5898] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.890706][ T6485] netlink: 'syz.0.153': attribute type 3 has an invalid length. [ 101.909438][ T29] audit: type=1326 audit(1733379155.215:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 101.940676][ T5898] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.962378][ T5898] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.963220][ T9] usb 6-1: 0:2 : does not exist [ 101.975228][ T29] audit: type=1326 audit(1733379155.215:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 102.009576][ T5898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 102.040180][ T9] usb 6-1: unit 5 not found! [ 102.043970][ T5898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 102.093679][ T29] audit: type=1326 audit(1733379155.215:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc19ad7ff19 code=0x7ffc0000 [ 102.106891][ T9] usb 6-1: USB disconnect, device number 3 [ 102.132532][ T5898] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.164747][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.191994][ T5898] usb 5-1: Product: syz [ 102.208943][ T5898] usb 5-1: Manufacturer: syz [ 102.210942][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.235687][ T5898] cdc_wdm 5-1:1.0: skipping garbage [ 102.258190][ T5898] cdc_wdm 5-1:1.0: skipping garbage [ 102.320616][ T5898] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 102.358507][ T5898] cdc_wdm 5-1:1.0: Unknown control protocol [ 102.879647][ T9] usb 5-1: USB disconnect, device number 13 [ 102.931590][ T6522] tipc: Enabling of bearer rejected, failed to enable media [ 102.967819][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.026872][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.190058][ T974] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 103.346355][ T974] usb 6-1: device descriptor read/64, error -71 [ 103.420433][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 103.598316][ T974] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 103.650106][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.678156][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.687972][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 103.742437][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.748942][ T974] usb 6-1: device descriptor read/64, error -71 [ 103.765945][ T9] usb 3-1: config 0 descriptor?? [ 103.868143][ T5898] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 103.888460][ T974] usb usb6-port1: attempt power cycle [ 104.009187][ T5898] usb 1-1: device descriptor read/64, error -71 [ 104.108309][ T5887] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 104.247884][ T974] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 104.265687][ T5898] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.285917][ T9] asus 0003:0B05:1822.0004: item fetching failed at offset 5/7 [ 104.289011][ T974] usb 6-1: device descriptor read/8, error -71 [ 104.312041][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 104.321778][ T9] asus 0003:0B05:1822.0004: Asus hid parse failed: -22 [ 104.334525][ T9] asus 0003:0B05:1822.0004: probe with driver asus failed with error -22 [ 104.344829][ T5887] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.357535][ T5887] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.379198][ T5887] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.398136][ T5898] usb 1-1: device descriptor read/64, error -71 [ 104.403309][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.414317][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.432761][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.453872][ T5887] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.480950][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.488414][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.507224][ T5887] usb 5-1: config 0 descriptor?? [ 104.508448][ T5898] usb usb1-port1: attempt power cycle [ 104.521705][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.538211][ T974] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 104.568842][ T974] usb 6-1: device descriptor read/8, error -71 [ 104.672994][ T5885] usb 3-1: USB disconnect, device number 8 [ 104.689358][ T974] usb usb6-port1: unable to enumerate USB device [ 104.743695][ T5887] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 104.754703][ T6561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.757269][ T6578] tipc: Enabling of bearer rejected, failed to enable media [ 104.788569][ T6561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.868875][ T5898] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 104.909080][ T5898] usb 1-1: device descriptor read/8, error -71 [ 104.933664][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.169'. [ 104.938174][ T5887] usb 5-1: USB disconnect, device number 14 [ 104.950274][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.169'. [ 104.974251][ T5887] usblp0: removed [ 105.158314][ T5898] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 105.208591][ T5898] usb 1-1: device descriptor read/8, error -71 [ 105.326424][ T5898] usb usb1-port1: unable to enumerate USB device [ 105.532521][ T6592] tipc: Enabling of bearer rejected, failed to enable media [ 106.172116][ T6617] tipc: Started in network mode [ 106.177056][ T6617] tipc: Node identity 2d2e14aa, cluster identity 4711 [ 106.204549][ T6617] tipc: Enabling of bearer rejected, failed to enable media [ 106.237906][ T29] kauditd_printk_skb: 2827 callbacks suppressed [ 106.237925][ T29] audit: type=1326 audit(1733379160.125:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 106.318300][ T29] audit: type=1326 audit(1733379160.125:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 106.363359][ T5898] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 106.401892][ T29] audit: type=1326 audit(1733379160.125:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 106.435294][ T29] audit: type=1326 audit(1733379160.125:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 106.465301][ T29] audit: type=1326 audit(1733379160.125:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 106.500266][ T29] audit: type=1326 audit(1733379160.125:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 106.538155][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 106.559378][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.593197][ T5898] usb 3-1: config 9 has an invalid interface number: 119 but max is 1 [ 106.631148][ T5898] usb 3-1: config 9 has an invalid interface number: 200 but max is 1 [ 106.636564][ T29] audit: type=1326 audit(1733379160.125:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 106.687677][ T5898] usb 3-1: config 9 has no interface number 0 [ 106.727598][ T29] audit: type=1326 audit(1733379160.125:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 106.730441][ T5898] usb 3-1: config 9 has no interface number 1 [ 106.775117][ T5898] usb 3-1: config 9 interface 119 has no altsetting 0 [ 106.786572][ T5898] usb 3-1: config 9 interface 200 has no altsetting 0 [ 106.808661][ T5898] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice= e.45 [ 106.835916][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.873486][ T5898] usb 3-1: Product: syz [ 106.882941][ T29] audit: type=1326 audit(1733379160.125:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc987b1c129 code=0x7ffc0000 [ 106.890214][ T5898] usb 3-1: Manufacturer: syz [ 106.947319][ T29] audit: type=1326 audit(1733379160.125:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc987b76ee7 code=0x7ffc0000 [ 106.949377][ T5898] usb 3-1: SerialNumber: syz [ 107.208174][ T974] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 107.220382][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.186'. [ 107.240687][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.186'. [ 107.259553][ T5898] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 107.318829][ T5898] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 107.326915][ T5898] dib0700: firmware download failed at 7 with -22 [ 107.363771][ T5898] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 107.374708][ T974] usb 6-1: device descriptor read/64, error -71 [ 107.395007][ T5898] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 107.405380][ T5898] dib0700: firmware download failed at 7 with -22 [ 107.424468][ T5898] usb 3-1: USB disconnect, device number 9 [ 107.527454][ T6654] netlink: 830 bytes leftover after parsing attributes in process `syz.4.190'. [ 107.558719][ T6655] netlink: 830 bytes leftover after parsing attributes in process `syz.4.190'. [ 107.613797][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.192'. [ 107.627909][ T6658] netlink: 64 bytes leftover after parsing attributes in process `syz.1.192'. [ 107.628381][ T974] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 107.684705][ T6658] bond1: entered allmulticast mode [ 107.690302][ T6658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.798217][ T974] usb 6-1: device descriptor read/64, error -71 [ 107.918083][ T5898] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 107.926124][ T974] usb usb6-port1: attempt power cycle [ 107.948625][ T5882] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 108.088134][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 108.094853][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.107181][ T5882] usb 1-1: device descriptor read/64, error -71 [ 108.113967][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.127449][ T5898] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.136784][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.146105][ T5898] usb 5-1: Product: syz [ 108.155926][ T5898] usb 5-1: Manufacturer: syz [ 108.160912][ T5898] usb 5-1: SerialNumber: syz [ 108.167735][ T5898] usb 5-1: config 0 descriptor?? [ 108.176932][ T5898] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.186374][ T5898] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 108.278185][ T974] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 108.299698][ T974] usb 6-1: device descriptor read/8, error -71 [ 108.358152][ T5882] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 108.388210][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 108.489106][ T5882] usb 1-1: device descriptor read/64, error -71 [ 108.538236][ T974] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 108.553458][ T5884] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.563016][ T974] usb 6-1: device descriptor read/8, error -71 [ 108.563037][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.578190][ T5884] usb 3-1: Product: syz [ 108.585764][ T5884] usb 3-1: Manufacturer: syz [ 108.593489][ T5884] usb 3-1: SerialNumber: syz [ 108.599381][ T5882] usb usb1-port1: attempt power cycle [ 108.603850][ T5884] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 108.643772][ T5887] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.680903][ T974] usb usb6-port1: unable to enumerate USB device [ 108.764735][ T6672] netlink: 276 bytes leftover after parsing attributes in process `syz.1.198'. [ 108.778969][ T5898] em28xx 5-1:0.0: chip ID is em2874 [ 108.864101][ T6670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.958397][ T5882] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 108.990934][ T6655] dlm: no locking on control device [ 108.996277][ T6654] dlm: no locking on control device [ 109.008235][ T5882] usb 1-1: device descriptor read/8, error -71 [ 109.139176][ T5898] usb 5-1: USB disconnect, device number 15 [ 109.161088][ T5898] em28xx 5-1:0.0: Disconnecting em28xx [ 109.259482][ T5882] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 109.285376][ T6680] tipc: Enabling of bearer rejected, failed to enable media [ 109.297750][ T5882] usb 1-1: device descriptor read/8, error -71 [ 109.304811][ T5898] em28xx 5-1:0.0: Freeing device [ 109.436743][ T5882] usb usb1-port1: unable to enumerate USB device [ 109.591498][ T6682] netlink: 'syz.4.201': attribute type 7 has an invalid length. [ 109.784379][ T6688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.203'. [ 109.928218][ T5898] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 110.122967][ T5898] usb 2-1: device descriptor read/64, error -71 [ 110.288878][ T5884] usb 3-1: USB disconnect, device number 10 [ 110.303347][ T5887] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 110.310910][ T5887] ath9k_htc: Failed to initialize the device [ 110.324143][ T5884] usb 3-1: ath9k_htc: USB layer deinitialized [ 110.408270][ T5898] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 110.558293][ T5898] usb 2-1: device descriptor read/64, error -71 [ 110.568163][ T5888] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 110.688593][ T5898] usb usb2-port1: attempt power cycle [ 110.718097][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 110.725800][ T5888] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 110.736340][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 110.746729][ T5888] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 110.758476][ T5888] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 110.768143][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.777637][ T5888] usb 6-1: Product: syz [ 110.782659][ T5888] usb 6-1: Manufacturer: syz [ 110.787288][ T5888] usb 6-1: SerialNumber: syz [ 110.794042][ T5888] usb 6-1: config 0 descriptor?? [ 110.800921][ T6696] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 110.811140][ T5888] mceusb 6-1:0.0: mceusb_dev_probe: device setup failed! [ 110.818389][ T5888] mceusb 6-1:0.0: probe with driver mceusb failed with error -12 [ 110.826758][ T6707] __nla_validate_parse: 2 callbacks suppressed [ 110.826776][ T6707] netlink: 276 bytes leftover after parsing attributes in process `syz.0.209'. [ 110.978922][ T6712] tipc: Enabling of bearer rejected, failed to enable media [ 111.088408][ T5898] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 111.128975][ T5898] usb 2-1: device descriptor read/8, error -71 [ 111.378225][ T5898] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 111.414658][ T5898] usb 2-1: device descriptor read/8, error -71 [ 111.465318][ T6730] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20003 [ 111.528711][ T5898] usb usb2-port1: unable to enumerate USB device [ 111.548532][ T5883] usb 6-1: USB disconnect, device number 12 [ 111.570017][ T5888] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 111.674154][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 111.699808][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 111.713150][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.219'. [ 111.745454][ T6733] team0: entered promiscuous mode [ 111.755828][ T6733] team_slave_0: entered promiscuous mode [ 111.763545][ T6733] team_slave_1: entered promiscuous mode [ 111.782126][ T6733] bond0: entered promiscuous mode [ 111.805315][ T6733] bond_slave_0: entered promiscuous mode [ 111.820844][ T6733] bond_slave_1: entered promiscuous mode [ 111.837065][ T6733] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 111.876607][ T6733] Cannot create hsr debugfs directory [ 111.883288][ T6733] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 111.883611][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 111.901534][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.948141][ T5888] usb 5-1: Product: syz [ 111.977267][ T5888] usb 5-1: Manufacturer: syz [ 112.008103][ T5888] usb 5-1: SerialNumber: syz [ 112.030078][ T5888] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 112.045523][ T5884] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 112.208284][ T5883] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 112.281502][ T6719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.382718][ T5882] usb 5-1: USB disconnect, device number 16 [ 112.452754][ T6749] netlink: 276 bytes leftover after parsing attributes in process `syz.0.221'. [ 112.482368][ T5883] usb 6-1: config 0 has no interfaces? [ 112.496089][ T5883] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 112.508261][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.527712][ T5883] usb 6-1: Product: syz [ 112.561795][ T5883] usb 6-1: Manufacturer: syz [ 112.603739][ T5883] usb 6-1: SerialNumber: syz [ 112.693923][ T5883] usb 6-1: config 0 descriptor?? [ 113.094958][ T5884] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 113.135552][ T5884] ath9k_htc: Failed to initialize the device [ 113.153937][ T6765] tipc: Enabling of bearer rejected, failed to enable media [ 113.168982][ T5882] usb 5-1: ath9k_htc: USB layer deinitialized [ 113.446127][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 113.488329][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'. [ 113.678245][ T5882] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 113.711771][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 113.761448][ T6783] netlink: 48 bytes leftover after parsing attributes in process `syz.4.230'. [ 113.783988][ T6783] vlan2: entered allmulticast mode [ 113.829637][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 1024 [ 113.868223][ T5882] usb 2-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 113.877582][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.900719][ T6788] netlink: 72 bytes leftover after parsing attributes in process `syz.2.232'. [ 113.979135][ T5882] usb 2-1: config 0 descriptor?? [ 113.996028][ T6774] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.261930][ T5884] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 114.447698][ T5882] wacom 0003:056A:010D.0005: hidraw0: USB HID v0.00 Device [HID 056a:010d] on usb-dummy_hcd.1-1/input0 [ 114.615146][ T6774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.633148][ T6774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.644730][ T5888] usb 2-1: USB disconnect, device number 18 [ 114.715783][ T6784] kvm: emulating exchange as write [ 114.814004][ T6815] tipc: Enabling of bearer rejected, failed to enable media [ 114.948264][ T5887] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 115.121278][ T5888] usb 6-1: USB disconnect, device number 13 [ 115.154727][ T5887] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.177314][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.185521][ T5887] usb 5-1: Product: syz [ 115.190413][ T5887] usb 5-1: Manufacturer: syz [ 115.195043][ T5887] usb 5-1: SerialNumber: syz [ 115.223893][ T6821] tipc: Enabling of bearer rejected, failed to enable media [ 115.352433][ T5887] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 115.382733][ T5883] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.511917][ T6834] syz_tun: entered promiscuous mode [ 115.539929][ T6834] syz_tun: left promiscuous mode [ 115.680574][ T6808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.732546][ T5882] usb 5-1: USB disconnect, device number 17 [ 115.842185][ T6847] netlink: 'syz.1.245': attribute type 29 has an invalid length. [ 115.853194][ T6847] netlink: 'syz.1.245': attribute type 29 has an invalid length. [ 115.911432][ T6847] netlink: 'syz.1.245': attribute type 29 has an invalid length. [ 115.996906][ T5884] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 116.041233][ T6854] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.050487][ T6854] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.059389][ T6854] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.068262][ T6854] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.081874][ T6854] vxlan0: entered promiscuous mode [ 116.088609][ T6854] vxlan0: entered allmulticast mode [ 116.158224][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 116.167715][ T5884] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 116.186376][ T6854] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.195509][ T6854] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.205132][ T6854] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.215230][ T6854] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.227364][ T5884] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.269774][ T5884] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.310707][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.325109][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.353557][ T5884] usb 3-1: Product: syz [ 116.370131][ T5884] usb 3-1: Manufacturer: syz [ 116.387177][ T5884] usb 3-1: SerialNumber: syz [ 116.448885][ T5883] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 116.465265][ T5883] ath9k_htc: Failed to initialize the device [ 116.548226][ T5882] usb 5-1: ath9k_htc: USB layer deinitialized [ 116.752151][ T6874] __nla_validate_parse: 2 callbacks suppressed [ 116.752182][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 116.867868][ T5884] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 117.398386][ T5883] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 117.462912][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.250'. [ 117.488465][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.250'. [ 117.542461][ T6892] tipc: Enabling of bearer rejected, failed to enable media [ 117.581414][ T5883] usb 2-1: device descriptor read/64, error -71 [ 117.726033][ T5884] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 117.776422][ T6897] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 117.817040][ T6897] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.253'. [ 117.834571][ T5884] usb 3-1: USB disconnect, device number 11 [ 117.878296][ T5883] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 118.038207][ T5883] usb 2-1: device descriptor read/64, error -71 [ 118.170505][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.188699][ T5883] usb usb2-port1: attempt power cycle [ 118.352066][ T6918] bond0: option ad_select: unable to set because the bond device is up [ 118.548229][ T5883] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 118.599736][ T5883] usb 2-1: device descriptor read/8, error -71 [ 118.689538][ T6938] sg_write: process 147 (syz.2.262) changed security contexts after opening file descriptor, this is not allowed. [ 118.706727][ T6938] netlink: 'syz.2.262': attribute type 33 has an invalid length. [ 118.728948][ T5884] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 118.738185][ T5885] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 118.858172][ T5883] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 118.888264][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 118.898396][ T5885] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 118.899694][ T5883] usb 2-1: device descriptor read/8, error -71 [ 118.907201][ T5885] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.915844][ T5884] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.928278][ T5882] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 118.949451][ T5885] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.949562][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.964544][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.977656][ T5885] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.983302][ T5884] usb 6-1: Product: syz [ 118.998195][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.000057][ T5884] usb 6-1: Manufacturer: syz [ 119.016861][ T5885] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.027608][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.030891][ T5884] usb 6-1: SerialNumber: syz [ 119.041609][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.070725][ T5885] usb 5-1: config 0 descriptor?? [ 119.076323][ T5883] usb usb2-port1: unable to enumerate USB device [ 119.078174][ T5882] usb 1-1: device descriptor read/64, error -71 [ 119.087314][ T5884] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.120373][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.198958][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 119.213963][ T5888] usb 3-1: config 7 has an invalid interface number: 75 but max is 0 [ 119.225849][ T5888] usb 3-1: config 7 has no interface number 0 [ 119.236759][ T5888] usb 3-1: config 7 interface 75 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 119.258864][ T5888] usb 3-1: config 7 interface 75 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 119.269208][ T5888] usb 3-1: config 7 interface 75 has no altsetting 0 [ 119.280844][ T5888] usb 3-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=17.a0 [ 119.290343][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.301902][ T5885] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.307037][ T5888] usb 3-1: Product: syz [ 119.317317][ T5888] usb 3-1: Manufacturer: syz [ 119.323066][ T5888] usb 3-1: SerialNumber: syz [ 119.338762][ T5882] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 119.375091][ T6911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.403988][ T5884] usb 6-1: USB disconnect, device number 14 [ 119.490771][ T5882] usb 1-1: device descriptor read/64, error -71 [ 119.611118][ T5882] usb usb1-port1: attempt power cycle [ 119.646305][ T5888] em28xx 3-1:7.75: New device syz syz @ 480 Mbps (3275:0085, interface 75, class 75) [ 119.684063][ T5888] em28xx 3-1:7.75: Video interface 75 found: isoc [ 119.749873][ T5888] em28xx 3-1:7.75: unknown em28xx chip ID (0) [ 119.827455][ T5888] em28xx 3-1:7.75: reading from i2c device at 0xa0 failed (error=-5) [ 119.844691][ T5888] em28xx 3-1:7.75: board has no eeprom [ 119.908366][ T5888] em28xx 3-1:7.75: Identified as PLEX PX-BCUD (card=98) [ 119.915699][ T5888] em28xx 3-1:7.75: Currently, V4L2 is not supported on this model [ 119.923876][ T5883] em28xx 3-1:7.75: Binding DVB extension [ 119.936764][ T5883] em28xx 3-1:7.75: no endpoint for DVB mode and transfer type 0 [ 119.944993][ T5888] usb 3-1: USB disconnect, device number 12 [ 119.956726][ T5883] em28xx 3-1:7.75: failed to pre-allocate USB transfer buffers for DVB. [ 119.968315][ T5882] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 119.985664][ T5883] em28xx 3-1:7.75: Remote control support is not available for this card. [ 120.006650][ T5888] em28xx 3-1:7.75: Disconnecting em28xx [ 120.019113][ T5888] em28xx 3-1:7.75: Closing input extension [ 120.022338][ T5882] usb 1-1: device descriptor read/8, error -71 [ 120.067141][ T5888] em28xx 3-1:7.75: Freeing device [ 120.176959][ T6983] ucma_write: process 148 (syz.1.264) changed security contexts after opening file descriptor, this is not allowed. [ 120.208410][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 120.215591][ T9] ath9k_htc: Failed to initialize the device [ 120.236441][ T5884] usb 6-1: ath9k_htc: USB layer deinitialized [ 120.298305][ T5882] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 120.337255][ T6989] tipc: Enabling of bearer rejected, failed to enable media [ 120.340181][ T5882] usb 1-1: device descriptor read/8, error -71 [ 120.359473][ T6987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.266'. [ 120.369179][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.266'. [ 120.469265][ T5882] usb usb1-port1: unable to enumerate USB device [ 120.577217][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.269'. [ 120.586610][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.269'. [ 120.628281][ T5884] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 120.805498][ T5884] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 120.819177][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.836483][ T5884] usb 6-1: config 0 descriptor?? [ 121.053963][ T5884] [drm] vendor descriptor length:6 data:06 5f 01 03 00 00 00 00 00 00 00 [ 121.063962][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 121.073648][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 121.076864][ T5884] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 121.095399][ T7007] syz_tun: entered promiscuous mode [ 121.102432][ T7007] syz_tun: left promiscuous mode [ 121.279704][ T5884] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 121.290245][ T5884] [drm] Initialized udl on minor 2 [ 121.408298][ T5885] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 121.468281][ T5882] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 121.561864][ T5885] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.571268][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.583925][ T5885] usb 3-1: Product: syz [ 121.598415][ T5885] usb 3-1: Manufacturer: syz [ 121.603152][ T5885] usb 3-1: SerialNumber: syz [ 121.628312][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 121.642753][ T5882] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 121.651963][ T5885] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 121.661494][ T5882] usb 2-1: config 0 has no interface number 0 [ 121.667642][ T5882] usb 2-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 121.684263][ T5884] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 121.706744][ T5882] usb 2-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 121.710815][ T5898] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 121.715340][ T5884] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 121.765529][ T5884] usb 6-1: USB disconnect, device number 15 [ 121.782325][ T5883] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 121.790388][ T5882] usb 2-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca [ 121.817975][ T5883] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 121.825967][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.875062][ T5882] usb 2-1: Product: syz [ 121.895098][ T5882] usb 2-1: Manufacturer: syz [ 121.905153][ T5882] usb 2-1: SerialNumber: syz [ 121.931649][ T7005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.958653][ T5882] usb 2-1: config 0 descriptor?? [ 121.964653][ T7009] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 121.989301][ T5882] ftdi_sio 2-1:0.39: FTDI USB Serial Device converter detected [ 121.990389][ T5883] usb 3-1: USB disconnect, device number 13 [ 121.997603][ T5882] usb 2-1: Detected SIO [ 122.047631][ T5882] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 122.206680][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.237402][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.256495][ T5882] usb 2-1: USB disconnect, device number 23 [ 122.267536][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 122.267553][ T29] audit: type=1326 audit(1733379176.155:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc4f7ff19 code=0x7fc00000 [ 122.284763][ T5882] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 122.351826][ T5882] ftdi_sio 2-1:0.39: device disconnected [ 122.768980][ T5898] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 122.784081][ T5898] ath9k_htc: Failed to initialize the device [ 122.795766][ T5883] usb 3-1: ath9k_htc: USB layer deinitialized [ 122.809886][ T7042] __nla_validate_parse: 2 callbacks suppressed [ 122.809904][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 122.907236][ T7044] tipc: Started in network mode [ 122.915713][ T7044] tipc: Node identity 402e14aa, cluster identity 4711 [ 122.926194][ T7044] tipc: Enabling of bearer rejected, failed to enable media [ 123.004236][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.042806][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.138188][ T5883] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 123.152662][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.291'. [ 123.299304][ T5883] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 123.311294][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.326471][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.351882][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.357675][ T7056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.363141][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.387791][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.410413][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.426349][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.444727][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.467784][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.485274][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.503251][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.526468][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.535857][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.548860][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.560379][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.588720][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.597899][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.609945][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.618532][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.627557][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.642791][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.662781][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.681959][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.694676][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.738756][ T5883] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.761540][ T5883] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.783152][ T5883] usb 3-1: Product: syz [ 123.793233][ T5883] usb 3-1: Manufacturer: syz [ 123.798407][ T5883] usb 3-1: SerialNumber: syz [ 123.812590][ T5883] usb 3-1: config 0 descriptor?? [ 123.844849][ T5883] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 123.943838][ T7070] tipc: Enabling of bearer rejected, failed to enable media [ 124.184078][ T5883] usb 3-1: USB disconnect, device number 14 [ 124.203489][ T5883] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 124.378273][ T5898] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 124.562026][ T5898] usb 2-1: config 201 has an invalid interface number: 249 but max is 0 [ 124.587626][ T5898] usb 2-1: config 201 has no interface number 0 [ 124.604555][ T5898] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 124.631572][ T5898] usb 2-1: config 201 interface 249 has no altsetting 0 [ 124.652822][ T5898] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 124.668088][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.686626][ T5898] usb 2-1: Product: syz [ 124.691097][ T5898] usb 2-1: Manufacturer: syz [ 124.695778][ T5898] usb 2-1: SerialNumber: syz [ 124.930156][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.963545][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.005271][ T5898] ath6kl: Failed to submit usb control message: -71 [ 125.033572][ T7097] tipc: Enabling of bearer rejected, failed to enable media [ 125.043537][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 125.090751][ T5898] ath6kl: Unable to send get target info: -71 [ 125.126688][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 125.133996][ T5898] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 125.200455][ T5898] usb 2-1: USB disconnect, device number 24 [ 125.356864][ T7107] tipc: Enabling of bearer rejected, failed to enable media [ 125.617797][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 125.666582][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 125.786113][ T7119] syz_tun: entered promiscuous mode [ 125.818268][ T119] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 125.933221][ T5898] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 125.961475][ T7119] syz_tun: left promiscuous mode [ 126.168160][ T119] usb 3-1: Using ep0 maxpacket: 32 [ 126.199355][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.231944][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.259357][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.322070][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.365711][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 126.393725][ T5898] usb 6-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 126.400245][ T119] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 126.408509][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.432763][ T119] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.454330][ T119] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.469826][ T119] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.482325][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.490837][ T5898] usb 6-1: Product: syz [ 126.505969][ T119] usb 3-1: Product: syz [ 126.506542][ T5898] usb 6-1: Manufacturer: syz [ 126.517969][ T119] usb 3-1: Manufacturer: syz [ 126.527923][ T119] usb 3-1: SerialNumber: syz [ 126.550664][ T5898] usb 6-1: SerialNumber: syz [ 126.569289][ T5898] usb 6-1: config 0 descriptor?? [ 126.595269][ T5898] ftdi_sio 6-1:0.0: Ignoring interface reserved for JTAG [ 126.883043][ T7139] netlink: 276 bytes leftover after parsing attributes in process `syz.0.324'. [ 126.938985][ T7140] netlink: 144 bytes leftover after parsing attributes in process `syz.5.316'. [ 127.090498][ T5883] usb 6-1: USB disconnect, device number 16 [ 127.268800][ T7152] tipc: Invalid UDP bearer configuration [ 127.268842][ T7152] tipc: Enabling of bearer rejected, failed to enable media [ 127.323602][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 127.598208][ T5898] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 127.748259][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 127.760358][ T5898] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 127.769454][ T5898] usb 2-1: config 0 has no interface number 1 [ 127.784643][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.798634][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.809074][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.332'. [ 127.819032][ T5898] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.830418][ T7160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.856584][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.332'. [ 127.865740][ T5898] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 127.893216][ T7162] syz_tun: entered promiscuous mode [ 127.902377][ T5898] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 127.935965][ T5898] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 127.953655][ T5898] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.002831][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 128.027252][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.046977][ T7162] syz_tun: left promiscuous mode [ 128.061632][ T5898] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 128.073280][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.096434][ T5898] usb 2-1: Product: syz [ 128.105032][ T5898] usb 2-1: Manufacturer: syz [ 128.163434][ T5898] usb 2-1: SerialNumber: syz [ 128.199532][ T5898] usb 2-1: config 0 descriptor?? [ 128.218507][ T7154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.468572][ T974] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 128.538327][ T5882] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 128.620249][ T119] usb 3-1: 2:1 : sample bitwidth 253 in over sample bytes 2 [ 128.627694][ T119] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 128.644693][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.656867][ T119] usb 3-1: USB disconnect, device number 15 [ 128.683371][ T5882] usb 6-1: device descriptor read/64, error -71 [ 128.744539][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.778491][ T5898] usb 2-1: invalid MIDI in EP 0 [ 128.885030][ T974] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.907283][ T5898] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 128.928264][ T974] usb 1-1: too many configurations: 33, using maximum allowed: 8 [ 128.930571][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.948674][ T974] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 128.986274][ T5898] usb 2-1: USB disconnect, device number 25 [ 128.992421][ T5882] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 129.016007][ T974] usb 1-1: can't read configurations, error -71 [ 129.050210][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 129.138281][ T5882] usb 6-1: device descriptor read/64, error -71 [ 129.268470][ T5882] usb usb6-port1: attempt power cycle [ 129.384393][ T7194] tipc: Enabling of bearer rejected, failed to enable media [ 129.410028][ T7180] udevd[7180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 129.668160][ T5882] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 129.688811][ T7204] netlink: 68 bytes leftover after parsing attributes in process `syz.0.347'. [ 129.708647][ T5882] usb 6-1: device descriptor read/8, error -71 [ 129.959151][ T5882] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 129.990174][ T5882] usb 6-1: device descriptor read/8, error -71 [ 129.999322][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 130.018211][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 130.099352][ T5882] usb usb6-port1: unable to enumerate USB device [ 130.148481][ T25] usb 3-1: device descriptor read/64, error -71 [ 130.248680][ T5851] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 130.263647][ T7229] netlink: 104 bytes leftover after parsing attributes in process `syz.4.358'. [ 130.388224][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 130.408183][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 130.413046][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.423933][ T5851] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.435155][ T5851] usb 2-1: config 179 has no interface number 0 [ 130.440345][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.446652][ T5851] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 130.468876][ T5851] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 130.481028][ T5851] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.493541][ T5851] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.507482][ T5851] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.526975][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.535450][ T25] usb 3-1: device descriptor read/64, error -71 [ 130.552590][ T7219] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 130.651401][ T25] usb usb3-port1: attempt power cycle [ 130.808887][ T7219] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 130.998265][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 131.036582][ T25] usb 3-1: device descriptor read/8, error -71 [ 131.055895][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 131.055901][ T5883] usb 2-1: USB disconnect, device number 26 [ 131.070640][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 131.079679][ C1] ================================================================== [ 131.087772][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x299/0x370 [ 131.095599][ C1] Read of size 4 at addr ffff888028c0d85c by task udevd/5205 [ 131.102971][ C1] [ 131.105317][ C1] CPU: 1 UID: 0 PID: 5205 Comm: udevd Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 131.115573][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.125634][ C1] Call Trace: [ 131.128909][ C1] [ 131.132057][ C1] dump_stack_lvl+0x241/0x360 [ 131.136847][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.142067][ C1] ? __pfx__printk+0x10/0x10 [ 131.146680][ C1] ? _printk+0xd5/0x120 [ 131.150947][ C1] ? __virt_addr_valid+0x183/0x530 [ 131.156088][ C1] ? __virt_addr_valid+0x183/0x530 [ 131.161229][ C1] print_report+0x169/0x550 [ 131.165782][ C1] ? __virt_addr_valid+0x183/0x530 [ 131.170919][ C1] ? __virt_addr_valid+0x183/0x530 [ 131.176051][ C1] ? __virt_addr_valid+0x45f/0x530 [ 131.181251][ C1] ? __phys_addr+0xba/0x170 [ 131.185769][ C1] ? do_raw_spin_lock+0x299/0x370 [ 131.190897][ C1] kasan_report+0x143/0x180 [ 131.195425][ C1] ? do_raw_spin_lock+0x299/0x370 [ 131.200458][ C1] do_raw_spin_lock+0x299/0x370 [ 131.205419][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 131.210826][ C1] ? kcov_remote_stop+0x78/0x6e0 [ 131.215790][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 131.220852][ C1] ? __pfx_lock_release+0x10/0x10 [ 131.226004][ C1] _raw_spin_lock_irqsave+0xe1/0x120 [ 131.231314][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 131.237222][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 131.242428][ C1] __wake_up_common_lock+0x25/0x1e0 [ 131.247630][ C1] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 131.253014][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 131.258939][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 131.264288][ C1] dummy_timer+0x856/0x4620 [ 131.268822][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 131.274519][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 131.279474][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 131.284436][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 131.289656][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 131.295894][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 131.301666][ C1] ? read_tsc+0x9/0x20 [ 131.305756][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 131.311847][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 131.316988][ C1] handle_softirqs+0x2d4/0x9b0 [ 131.321763][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 131.326566][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 131.331871][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 131.337062][ C1] __irq_exit_rcu+0xf7/0x220 [ 131.341922][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 131.347152][ C1] irq_exit_rcu+0x9/0x30 [ 131.351407][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 131.357053][ C1] [ 131.359994][ C1] [ 131.362934][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.368942][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 131.374251][ C1] Code: 2b 00 74 08 4c 89 f7 e8 5a ac 8f 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 131.393882][ C1] RSP: 0018:ffffc9000ff67780 EFLAGS: 00000206 [ 131.400327][ C1] RAX: 0000000000000001 RBX: 1ffff92001fecefc RCX: ffff88807d1ee4d8 [ 131.408306][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aa880 RDI: ffffffff8c5f63e0 [ 131.416294][ C1] RBP: ffffc9000ff678c8 R08: ffffffff942b8897 R09: 1ffffffff2857112 [ 131.424356][ C1] R10: dffffc0000000000 R11: fffffbfff2857113 R12: 1ffff92001fecef8 [ 131.432345][ C1] R13: dffffc0000000000 R14: ffffc9000ff677e0 R15: 0000000000000246 [ 131.440353][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 131.445409][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 131.450448][ C1] ? __pfx___might_resched+0x10/0x10 [ 131.455755][ C1] ? mntput_no_expire+0x246/0x850 [ 131.460814][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 131.466037][ C1] _raw_spin_lock+0x2e/0x40 [ 131.470544][ C1] ? fast_dput+0x208/0x420 [ 131.474982][ C1] fast_dput+0x208/0x420 [ 131.479247][ C1] ? dput+0x7a/0x2b0 [ 131.483171][ C1] ? dput+0x37/0x2b0 [ 131.487080][ C1] dput+0xe8/0x2b0 [ 131.490816][ C1] terminate_walk+0x30d/0x430 [ 131.495529][ C1] ? walk_component+0x18d/0x410 [ 131.500404][ C1] path_lookupat+0x328/0x450 [ 131.505024][ C1] filename_lookup+0x2a3/0x670 [ 131.509812][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 131.515127][ C1] ? __might_fault+0xaa/0x120 [ 131.519902][ C1] ? __pfx_lock_release+0x10/0x10 [ 131.524941][ C1] vfs_statx+0x103/0x490 [ 131.529209][ C1] ? __check_object_size+0x48e/0x900 [ 131.534521][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 131.539388][ C1] ? getname_flags+0x1e3/0x540 [ 131.544170][ C1] vfs_fstatat+0xe5/0x130 [ 131.548525][ C1] __x64_sys_newfstatat+0x11d/0x1a0 [ 131.553745][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 131.559486][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.565842][ C1] ? do_syscall_64+0x100/0x230 [ 131.570743][ C1] ? do_syscall_64+0xb6/0x230 [ 131.576045][ C1] do_syscall_64+0xf3/0x230 [ 131.580686][ C1] ? clear_bhb_loop+0x35/0x90 [ 131.585396][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.591333][ C1] RIP: 0033:0x7f88795165f4 [ 131.595780][ C1] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 [ 131.615434][ C1] RSP: 002b:00007ffc823daff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 131.623879][ C1] RAX: ffffffffffffffda RBX: 0000562312a30930 RCX: 00007f88795165f4 [ 131.631888][ C1] RDX: 00007ffc823db008 RSI: 00007ffc823db498 RDI: 00000000ffffff9c [ 131.639893][ C1] RBP: 00007ffc823db098 R08: 0000000000000000 R09: 0000000000000000 [ 131.647900][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc823db498 [ 131.655882][ C1] R13: 00007ffc823db008 R14: 0000562312a0b910 R15: 0000000000000000 [ 131.663891][ C1] [ 131.666922][ C1] [ 131.669253][ C1] Allocated by task 5851: [ 131.673576][ C1] kasan_save_track+0x3f/0x80 [ 131.678268][ C1] __kasan_kmalloc+0x98/0xb0 [ 131.682848][ C1] __kmalloc_cache_noprof+0x243/0x390 [ 131.688261][ C1] xpad_probe+0x3c8/0x1b90 [ 131.692689][ C1] usb_probe_interface+0x641/0xbb0 [ 131.697823][ C1] really_probe+0x2b8/0xad0 [ 131.702337][ C1] __driver_probe_device+0x1a2/0x390 [ 131.707637][ C1] driver_probe_device+0x50/0x430 [ 131.712665][ C1] __device_attach_driver+0x2d6/0x530 [ 131.718060][ C1] bus_for_each_drv+0x24e/0x2e0 [ 131.722932][ C1] __device_attach+0x333/0x520 [ 131.727696][ C1] bus_probe_device+0x189/0x260 [ 131.732554][ C1] device_add+0x856/0xbf0 [ 131.736903][ C1] usb_set_configuration+0x1976/0x1fb0 [ 131.742381][ C1] usb_generic_driver_probe+0x88/0x140 [ 131.747854][ C1] usb_probe_device+0x1b8/0x380 [ 131.752747][ C1] really_probe+0x2b8/0xad0 [ 131.757381][ C1] __driver_probe_device+0x1a2/0x390 [ 131.762786][ C1] driver_probe_device+0x50/0x430 [ 131.767850][ C1] __device_attach_driver+0x2d6/0x530 [ 131.773302][ C1] bus_for_each_drv+0x24e/0x2e0 [ 131.778194][ C1] __device_attach+0x333/0x520 [ 131.782997][ C1] bus_probe_device+0x189/0x260 [ 131.787882][ C1] device_add+0x856/0xbf0 [ 131.792229][ C1] usb_new_device+0x104a/0x19a0 [ 131.797089][ C1] hub_event+0x2d6d/0x5150 [ 131.801564][ C1] process_scheduled_works+0xa66/0x1840 [ 131.807100][ C1] worker_thread+0x870/0xd30 [ 131.811717][ C1] kthread+0x2f0/0x390 [ 131.815802][ C1] ret_from_fork+0x4b/0x80 [ 131.820225][ C1] ret_from_fork_asm+0x1a/0x30 [ 131.825002][ C1] [ 131.827340][ C1] Freed by task 5883: [ 131.831318][ C1] kasan_save_track+0x3f/0x80 [ 131.836114][ C1] kasan_save_free_info+0x40/0x50 [ 131.841165][ C1] __kasan_slab_free+0x59/0x70 [ 131.845965][ C1] kfree+0x196/0x430 [ 131.849876][ C1] xpad_disconnect+0x359/0x490 [ 131.854646][ C1] usb_unbind_interface+0x25b/0x940 [ 131.859855][ C1] device_release_driver_internal+0x503/0x7c0 [ 131.865949][ C1] bus_remove_device+0x34f/0x420 [ 131.871003][ C1] device_del+0x57a/0x9b0 [ 131.875361][ C1] usb_disable_device+0x3bf/0x850 [ 131.880411][ C1] usb_disconnect+0x340/0x950 [ 131.885099][ C1] hub_event+0x1ebc/0x5150 [ 131.889519][ C1] process_scheduled_works+0xa66/0x1840 [ 131.895086][ C1] worker_thread+0x870/0xd30 [ 131.899741][ C1] kthread+0x2f0/0x390 [ 131.903836][ C1] ret_from_fork+0x4b/0x80 [ 131.908265][ C1] ret_from_fork_asm+0x1a/0x30 [ 131.913051][ C1] [ 131.915383][ C1] The buggy address belongs to the object at ffff888028c0d800 [ 131.915383][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 131.929454][ C1] The buggy address is located 92 bytes inside of [ 131.929454][ C1] freed 1024-byte region [ffff888028c0d800, ffff888028c0dc00) [ 131.943249][ C1] [ 131.945764][ C1] The buggy address belongs to the physical page: [ 131.952224][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c08 [ 131.960999][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.969521][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 131.977795][ C1] page_type: f5(slab) [ 131.981800][ C1] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 131.990412][ C1] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 131.999017][ C1] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 132.007745][ C1] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 132.016524][ C1] head: 00fff00000000003 ffffea0000a30201 ffffffffffffffff 0000000000000000 [ 132.025208][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 132.033891][ C1] page dumped because: kasan: bad access detected [ 132.040317][ C1] page_owner tracks the page as allocated [ 132.046046][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5850, tgid 5850 (syz-executor), ts 74204754174, free_ts 74192130377 [ 132.067402][ C1] post_alloc_hook+0x1f3/0x230 [ 132.072175][ C1] get_page_from_freelist+0x365c/0x37a0 [ 132.077749][ C1] __alloc_pages_noprof+0x292/0x710 [ 132.082943][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 132.088938][ C1] alloc_slab_page+0x6a/0x140 [ 132.093629][ C1] allocate_slab+0x5a/0x2f0 [ 132.098158][ C1] ___slab_alloc+0xcd1/0x14b0 [ 132.102832][ C1] __slab_alloc+0x58/0xa0 [ 132.107173][ C1] __kmalloc_noprof+0x2e6/0x4c0 [ 132.112027][ C1] ip6t_alloc_initial_table+0x71/0x640 [ 132.117500][ C1] ip6table_filter_table_init+0x1c/0xc0 [ 132.123053][ C1] xt_find_table_lock+0x322/0x400 [ 132.128089][ C1] xt_request_find_table_lock+0x26/0x100 [ 132.133727][ C1] do_ip6t_get_ctl+0x89e/0x1820 [ 132.138573][ C1] nf_getsockopt+0x299/0x2c0 [ 132.143170][ C1] ipv6_getsockopt+0x23e/0x360 [ 132.147950][ C1] page last free pid 5846 tgid 5846 stack trace: [ 132.154268][ C1] free_unref_page+0xdef/0x1130 [ 132.159138][ C1] __slab_free+0x31b/0x3d0 [ 132.163574][ C1] qlist_free_all+0x9a/0x140 [ 132.168280][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 132.173760][ C1] __kasan_slab_alloc+0x23/0x80 [ 132.178624][ C1] kmem_cache_alloc_noprof+0x1d9/0x380 [ 132.184096][ C1] security_inode_alloc+0x37/0x310 [ 132.189217][ C1] inode_init_always_gfp+0xa0f/0xd90 [ 132.194503][ C1] alloc_inode+0x9f/0x1a0 [ 132.198852][ C1] new_inode+0x22/0x1d0 [ 132.203038][ C1] __debugfs_create_file+0x142/0x4b0 [ 132.208428][ C1] ieee80211_debugfs_recreate_netdev+0x3a3/0x1400 [ 132.214868][ C1] ieee80211_if_change_type+0x22c/0xad0 [ 132.220418][ C1] ieee80211_change_iface+0xd2/0x4f0 [ 132.225701][ C1] cfg80211_change_iface+0x78a/0xf20 [ 132.231006][ C1] nl80211_set_interface+0x761/0xac0 [ 132.236320][ C1] [ 132.238734][ C1] Memory state around the buggy address: [ 132.244362][ C1] ffff888028c0d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.252431][ C1] ffff888028c0d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.260513][ C1] >ffff888028c0d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.268585][ C1] ^ [ 132.275532][ C1] ffff888028c0d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.283600][ C1] ffff888028c0d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.291674][ C1] ================================================================== [ 132.299795][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 132.307003][ C1] CPU: 1 UID: 0 PID: 5205 Comm: udevd Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 132.317258][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.327332][ C1] Call Trace: [ 132.330615][ C1] [ 132.333494][ C1] dump_stack_lvl+0x241/0x360 [ 132.338199][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.343426][ C1] ? __pfx__printk+0x10/0x10 [ 132.348035][ C1] ? rcu_is_watching+0x15/0xb0 [ 132.352820][ C1] ? lock_release+0xbf/0xa30 [ 132.357417][ C1] ? vscnprintf+0x5d/0x90 [ 132.361758][ C1] panic+0x349/0x880 [ 132.365671][ C1] ? check_panic_on_warn+0x21/0xb0 [ 132.370875][ C1] ? __pfx_panic+0x10/0x10 [ 132.375305][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 132.380517][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 132.386434][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 132.392784][ C1] ? print_report+0x502/0x550 [ 132.397487][ C1] check_panic_on_warn+0x86/0xb0 [ 132.402457][ C1] ? do_raw_spin_lock+0x299/0x370 [ 132.407596][ C1] end_report+0x77/0x160 [ 132.411865][ C1] kasan_report+0x154/0x180 [ 132.416479][ C1] ? do_raw_spin_lock+0x299/0x370 [ 132.421516][ C1] do_raw_spin_lock+0x299/0x370 [ 132.426371][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.431759][ C1] ? kcov_remote_stop+0x78/0x6e0 [ 132.436809][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 132.441862][ C1] ? __pfx_lock_release+0x10/0x10 [ 132.446908][ C1] _raw_spin_lock_irqsave+0xe1/0x120 [ 132.452220][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 132.458218][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 132.463439][ C1] __wake_up_common_lock+0x25/0x1e0 [ 132.468667][ C1] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 132.474075][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 132.480057][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 132.485295][ C1] dummy_timer+0x856/0x4620 [ 132.489924][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 132.495613][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 132.500554][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 132.505495][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 132.510704][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 132.516715][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 132.522432][ C1] ? read_tsc+0x9/0x20 [ 132.526501][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 132.532589][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 132.537727][ C1] handle_softirqs+0x2d4/0x9b0 [ 132.542498][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 132.547271][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 132.552569][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 132.557794][ C1] __irq_exit_rcu+0xf7/0x220 [ 132.562412][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 132.567641][ C1] irq_exit_rcu+0x9/0x30 [ 132.571893][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 132.577570][ C1] [ 132.580712][ C1] [ 132.583655][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.589667][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 132.594963][ C1] Code: 2b 00 74 08 4c 89 f7 e8 5a ac 8f 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 132.614595][ C1] RSP: 0018:ffffc9000ff67780 EFLAGS: 00000206 [ 132.620700][ C1] RAX: 0000000000000001 RBX: 1ffff92001fecefc RCX: ffff88807d1ee4d8 [ 132.628703][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aa880 RDI: ffffffff8c5f63e0 [ 132.636699][ C1] RBP: ffffc9000ff678c8 R08: ffffffff942b8897 R09: 1ffffffff2857112 [ 132.644686][ C1] R10: dffffc0000000000 R11: fffffbfff2857113 R12: 1ffff92001fecef8 [ 132.652656][ C1] R13: dffffc0000000000 R14: ffffc9000ff677e0 R15: 0000000000000246 [ 132.660655][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 132.665715][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 132.670759][ C1] ? __pfx___might_resched+0x10/0x10 [ 132.676050][ C1] ? mntput_no_expire+0x246/0x850 [ 132.681085][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 132.686397][ C1] _raw_spin_lock+0x2e/0x40 [ 132.690918][ C1] ? fast_dput+0x208/0x420 [ 132.695337][ C1] fast_dput+0x208/0x420 [ 132.699578][ C1] ? dput+0x7a/0x2b0 [ 132.703482][ C1] ? dput+0x37/0x2b0 [ 132.707392][ C1] dput+0xe8/0x2b0 [ 132.711138][ C1] terminate_walk+0x30d/0x430 [ 132.715844][ C1] ? walk_component+0x18d/0x410 [ 132.720702][ C1] path_lookupat+0x328/0x450 [ 132.725297][ C1] filename_lookup+0x2a3/0x670 [ 132.730054][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 132.735357][ C1] ? __might_fault+0xaa/0x120 [ 132.740041][ C1] ? __pfx_lock_release+0x10/0x10 [ 132.745078][ C1] vfs_statx+0x103/0x490 [ 132.749328][ C1] ? __check_object_size+0x48e/0x900 [ 132.754617][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 132.759389][ C1] ? getname_flags+0x1e3/0x540 [ 132.764189][ C1] vfs_fstatat+0xe5/0x130 [ 132.768537][ C1] __x64_sys_newfstatat+0x11d/0x1a0 [ 132.773762][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 132.779506][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.785848][ C1] ? do_syscall_64+0x100/0x230 [ 132.790634][ C1] ? do_syscall_64+0xb6/0x230 [ 132.795316][ C1] do_syscall_64+0xf3/0x230 [ 132.799844][ C1] ? clear_bhb_loop+0x35/0x90 [ 132.804534][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.810454][ C1] RIP: 0033:0x7f88795165f4 [ 132.814886][ C1] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 [ 132.834519][ C1] RSP: 002b:00007ffc823daff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 132.842968][ C1] RAX: ffffffffffffffda RBX: 0000562312a30930 RCX: 00007f88795165f4 [ 132.851002][ C1] RDX: 00007ffc823db008 RSI: 00007ffc823db498 RDI: 00000000ffffff9c [ 132.858999][ C1] RBP: 00007ffc823db098 R08: 0000000000000000 R09: 0000000000000000 [ 132.866997][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc823db498 [ 132.875080][ C1] R13: 00007ffc823db008 R14: 0000562312a0b910 R15: 0000000000000000 [ 132.883081][ C1] [ 132.886277][ C1] Kernel Offset: disabled [ 132.890607][ C1] Rebooting in 86400 seconds..