last executing test programs: 15.241771211s ago: executing program 0 (id=5698): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x8002, 0x400000) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='trwsted./dev/dri/card#\x00']) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x0, 0x8}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0xffffffffffffffa4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) read$FUSE(0xffffffffffffffff, &(0x7f0000003ec0)={0x2020}, 0x2020) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000001c0)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', '', [], 0xa, "350d6584edc368104b4ddd7d27c1e46cee809e342ab220a647de0e8372cd79d4cb95298c210dd1025e390b38961ca0565d5ab05789033e8ca5687dcde0c0e50a6d54fad0f31859"}, 0x4b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 14.260826706s ago: executing program 0 (id=5702): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000c80)=[{}, {}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x7c, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0xa, 0xc0, 0xc, [{{0x9, 0x4, 0x0, 0x63, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, 'O'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x3, 0x8}, [@obex={0x5, 0x24, 0x15, 0x810a}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x40, 0xac90}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x7, 0x38, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x10, 0x5}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x251, 0x4, 0xc, 0x1, 0x8, 0xf8}, 0x90, &(0x7f0000000580)=ANY=[@ANYBLOB="050f90000603100b14100400fb8747b7fae94cec9f3700d6309bd3de071002049d020003100b671003d8609a5f00ec6163f070c5b74eedcd96916d191edbe4deccf50d3a6feaf80db123a98b3632eaa9fe0cccaed5b068ca3191798b279c6239e11d4a80f2140274b1082e6163c7f79f606fac25257881693e663ade11b0fce7c79621caedbf2b613646cbf52a03100b3b31871b75"], 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xdfff098eab07928b}}, {0xf2, &(0x7f0000000240)=@string={0xf2, 0x3, "7b95402c88c4769ac50e820e6261c850eb08dcd2d5acbd045c1addfdf6af6cc025d24bb702add7c67dbfb11285b9c397112c65941ea05b74c7cf89d11aaed1295b3531be940060f30d4e16d3ffb82358763547912b44785ef9c89a7bea4c11ba6fb3cd08974a3869aa5bbdb449cf86560133cebd6c9540c031f9db16bb8060da228b5107052007d10fdb6cf8222a73711ecbb1492b90939449f34cda17510106094ec612a5145f094f5178793d9e28b01d2e78a4238d184fb74824666dd8ac56b64b5951fb8011a89ce0b8fa3a13eeb4b194c9dc2d72c593fcec819e8cd286263dc89d68643f0909350718354fa8f774"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "d85114f7fd9c8a8ba7b0ca4f62b9c44e1c2fbfe2079a004c31d6889be1f2e3cdb002ffa7b9944c7fd61630ced436a9b832adbe4f509b8b3ac8fed4280ed5616e2ef83e94dd89dabfc60b79e6ec51243bd1e04bdae5438550231d23e6093bffd243e5d97b73bdd3cfd39515be"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x407}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 13.61195284s ago: executing program 3 (id=5704): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a3bb6b7fbf033", 0x96}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4adc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259f5eaf5f3a71155845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f68bf889f1a6ed430aff1952b2498efc46cbaebc815cb2ea2ff01000067d49fff192dad5fcac955fee31e59228679db51d72e0ba6bd6fa2545df05482e63a", 0x9b}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c3dc885a29d9b5a4c0cdc701c0a29e04f23dac714e90c70202e052be86141ead3c90a0e23650d6a5c10ba19943c89ab235f149ddaa2bf84d5e52bce3fbecc01eb03e0cd322dbc4b9c1bd3263a9d7bbc6de3e50842793e1ee7997649a6ab10775e6e50", 0x65}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2ea5d94f90933978352c42a3dad24b4909f57c7dba2fcb7db2082f8d44aeb2d6f110ed7e3d662c1f933da4fa8a8bb24903c1447e1124f3b25cc920a03ddbe1cc78be62a31a8e767919deae04953f717a6b49186062637fc575d6ac16ced7258a0c23cda4c8f992", 0x67}], 0x1}}], 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[], 0x344}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 13.611610074s ago: executing program 2 (id=5705): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000090003000040"]) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/119, &(0x7f0000000080)=0x77) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_connect(0x5, 0x528, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x5, 0x2a, 0x40, 0x1}, 0x1bb, &(0x7f0000000f00)={0x5, 0xf, 0x1bb, 0x6, [@ptm_cap={0x3}, @generic={0x103, 0x10, 0x2, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x40, 0x80, 0x3c}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x2, 0xfffe}, @generic={0x91, 0x10, 0x4, "0609295d2bf64da29b94faae07b866b3fbd26bd44f32794025799317ddea5264625ea7f8191e17d03d096c590b17651fc08d123bd14a00aa069a3b3d6f0c5435447dbcff82de962a44f95d4176ffaa902a159bd2c9f24e9220887454cef1cb060ad550e951a16d688ca3def8c8ecc6c0cfd532d2efa573d308d558d70b89ba3d118a7f0ead2088d13116ea573069"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x36, 0x0, 0x0, 0x5}]}, 0x7, [{0xdd, &(0x7f00000000c0)=@string={0xdd, 0x3, "19458e5d180f44bc9c09a8944523b795de0d88d0ca62e7b022135021e1ea91dd2d63a1c6d2d6eedfb2cfebc2fea93ba2c0c4ead938364b5ec0089433892f2fee8f9704919a5cbdbe4117909bec25cec59bb65fbd7f9f7c33fcde3f269f97c7342f6b0e7af20619aebf0d985a579e043cec1b0f70138d99b2107c1973dc53ee54ebbbba12e53ce5b4ee4127d0cca46c0387f60d1f805ea07ed203972764c8a38015fbeb6e91e6d900c8c228dfafd121bd9ed03532962e0b5d317b27284ffbbcf25997794034784b43585465e92b5cf4df38da77a395b162cd80318e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42b}}, {0xed, &(0x7f0000000740)=@string={0xed, 0x3, "108a6266635c3de66ea656d465ceb81af76aafeecdfa8f356edd15d8488da4e5039080d3d00b32d818b2b9feb2fc6bcb8cff6ccc679f80ea5b2589232df51c7f5df6ee245da1d15a4d180505acf1eefc72968fbb352ba516d96807f6bcbcd50ad35a00e5983a4ae68968a02bdf01b9d5cb54956c81f48a11521231ee95d682f8fc041d12c8a3245837bfab59173710dd5af9ed8147b2919bcf4182b90045df2f14ed25845c119b31a84cf6cd97a556ddf5cb7093121eb8c23337d88ddc82b238f9b58086c3c508f75e153ddf4c592f2d7e5a8aba3f7fd2af750a4f79e15adbb90254f01180a70d182bca9d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x443}}, {0x97, &(0x7f0000000680)=@string={0x97, 0x3, "8cf2e3085a68a7d8c20e9856a2fe8bd734d8eb80e278bccc9fd7d3c1782a25fa74e1f090958e80125cee18139eed9293bc591a86736315516b42dfff8044404e14a092cce49077e69d1359db6f8ff3ed41445bb77071cafe228194968223814aae9dbf23776df9fb9aa481c56d746e6a90985cdd77c78a032dfad1a7e7f8a8b0abe115a1985a73f96384462726ac76c319898461c5"}}, {0x72, &(0x7f0000000480)=@string={0x72, 0x3, "83bf29973ca2247868ecefca51b0f349d918d386e373f06cfe2e84f244e8ad394edfa88ccc4541ad0b60f28adfa902b2acd0436f86e227530b01f9e4a7e14b293933c1896157c72fe32eb4dd5febe305133c07022f10b118b31247ae8b3864b3d350886b5758a30e4c2ea50c6c04608d"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x415}}]}) setuid(0xee01) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x28, "61752b496c088bfa3ab146172ea135d9eb2804e1c77d9a2afb2ccf56645ad9a4d2d7a884e117b513"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f00000016c0)=""/102386, 0x18ff2}], 0x1, 0x2000003, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRES32=r7], 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xa) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0xfff, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffff79, 0x3}, 0x20) 13.465280081s ago: executing program 3 (id=5706): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000c80)=[{}, {}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="250800000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x7c, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0xa, 0xc0, 0xc, [{{0x9, 0x4, 0x0, 0x63, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, 'O'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x3, 0x8}, [@obex={0x5, 0x24, 0x15, 0x810a}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x40, 0xac90}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x7, 0x38, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x10, 0x5}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x251, 0x4, 0xc, 0x1, 0x8, 0xf8}, 0x90, &(0x7f0000000580)=ANY=[@ANYBLOB="050f90000603100b14100400fb8747b7fae94cec9f3700d6309bd3de071002049d020003100b671003d8609a5f00ec6163f070c5b74eedcd96916d191edbe4deccf50d3a6feaf80db123a98b3632eaa9fe0cccaed5b068ca3191798b279c6239e11d4a80f2140274b1082e6163c7f79f606fac25257881693e663ade11b0fce7c79621caedbf2b613646cbf52a03100b3b31871b75"], 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xdfff098eab07928b}}, {0xf2, &(0x7f0000000240)=@string={0xf2, 0x3, "7b95402c88c4769ac50e820e6261c850eb08dcd2d5acbd045c1addfdf6af6cc025d24bb702add7c67dbfb11285b9c397112c65941ea05b74c7cf89d11aaed1295b3531be940060f30d4e16d3ffb82358763547912b44785ef9c89a7bea4c11ba6fb3cd08974a3869aa5bbdb449cf86560133cebd6c9540c031f9db16bb8060da228b5107052007d10fdb6cf8222a73711ecbb1492b90939449f34cda17510106094ec612a5145f094f5178793d9e28b01d2e78a4238d184fb74824666dd8ac56b64b5951fb8011a89ce0b8fa3a13eeb4b194c9dc2d72c593fcec819e8cd286263dc89d68643f0909350718354fa8f774"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "d85114f7fd9c8a8ba7b0ca4f62b9c44e1c2fbfe2079a004c31d6889be1f2e3cdb002ffa7b9944c7fd61630ced436a9b832adbe4f509b8b3ac8fed4280ed5616e2ef83e94dd89dabfc60b79e6ec51243bd1e04bdae5438550231d23e6093bffd243e5d97b73bdd3cfd39515be"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x407}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 11.822884247s ago: executing program 0 (id=5708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)) 11.559931944s ago: executing program 0 (id=5709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000000000007c00000008000300", @ANYRES32=r3, @ANYBLOB="0a00c34e93f97e6a340f9568a54d8d87b5bcbefe209988a9eafc0957891bfbe6035e5a479679fe57cedda148748ae33c4eb2d7bc336b6c672b0e699e380cbb2ef7aafba877ef39c01a4460e6cd02de07c7bdb7f835f8384bc5c0ed33265078c90e795e7330478a8d27d43ba29928905a1bc43fef9cc09842c9f9d7a809e03b7cc15f35308f4e0d3f302a2fe16a3d1181cfe2789f55ba7bd0ff868ced4c779aba76cc88a41ad648d2f407c136808e8651cb9e0e685b4d9ccfd6b13eecb36a3f3ed8da7302e5abbec9c41e1df8211b07af21c8cc49fbfd17ec4510d5bf1a7e41deac6a5fc07e7f075785439179664f26afcce94b1a45d6d50464"], 0x28}}, 0x0) 11.559549372s ago: executing program 4 (id=5710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x68, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 11.52421504s ago: executing program 0 (id=5711): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\x1b\x00m\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7f) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000300)={r3, 0x0, 0x0, 0x4000}) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x800) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={'veth1_to_batadv\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000002505a8"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) 11.379232551s ago: executing program 3 (id=5712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x8000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x40042, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0xa}]) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000000801dda26a0bebe1fb8e1a115a0a1b44defb3636ebda9c1adbc4c318ae1de72707a3a063d48067465e7f56f99c82edd2878a684ca7964b7cc2407069b7e8e44d9a9a84096af7bf61fe40e4332cc2903b7316d1dfdeb4dcb5a06c6e9add90eddff207e870d304e1"], 0x30}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) 11.340228114s ago: executing program 4 (id=5713): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0xd00, 0x0, @empty}}}, &(0x7f0000000000)=0x90) 11.239630832s ago: executing program 4 (id=5714): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="463e368739ad90dd0acd4086b6e2825016737ea4651e0000", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80050000001800000004000300"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/277, @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff000005002900000000000500c20007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x24004881) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x8d, 0x24000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4}) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ts_info}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000200)={0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000a34c00000002000000400004803c0001800b00010065787468647200002c0002800500020083000000080003400000000008000440000000be080006400000000208000140000000130900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) 11.040724558s ago: executing program 2 (id=5715): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r2 = syz_io_uring_setup(0x652b, &(0x7f00000002c0), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x0}, 0x20) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)=""/114, 0x72}], 0x0, 0x1}, 0x20) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r3 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0xfffe}, 0x90) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) (async, rerun: 32) io_uring_enter(r3, 0x47f6, 0x37, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x30}}, 0x4004045) 10.856368871s ago: executing program 4 (id=5716): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x7, 0x3, 0x5, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000066040000080003", @ANYRES32=r3, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x20}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in=@empty}}, 0xe8) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9) syz_usb_control_io$printer(r8, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x11, 0xea, {0xea, 0x8, "8d4506c5083e0599aa7fecbfbaf8b9c62b62ec7ae68078891f3310459068bd2c382cf245bec107a2497c1fb507ec71ccb4fd524165685e757c0beec69cd5cdf9abe16763b8233ab19fbab15cc1b9b4d16a35824b4426d992426c1060a71b53667155a81c00055331c51e5fb76e3457915e1e4875a89ee2fad1001a3fca038e0b0162cbab190fb20c4ba2a3c03c1d0fb95c6e3b0962704ef84ab3a5a928073a2723a0bf2720b77786496e14507bd915914ebc26890e7884ab4c4489cd59a03174e00a9bb553c3fa4b6bdd2c5c4c53ed18ea301dc8525c7917ae8bd7b5dd856da2ab86dcd9dfe2f571"}}, &(0x7f0000000540)=ANY=[@ANYBLOB]}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x19, 0x81, "47516219317d09147d7b9304abe8a2f73299780c61b11053cccc07e57f1ac33e2f6cf2b7d6c0d0ea9c90068d1c47e35f765b1b4250fd72a25acca3f3393bbc3f7f9f1b5d5ebd1eee75ffc6abd6e8c257b73e8c64335b04a8e2f64e2bafb4231c3c446c926d1957a36cc36f39acf429005f72704665633632de7d651ad53fb77938"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000002c0)={0x20, 0x0, 0xe7, {0xe5, "025f4c0373c614d76b8364805a533f1ccb6d2da2ea67949fed628456089d7f42f456a82b1ae18008d3e88748f34d6ba64f664434741db0d2c229febfe6486f9a110ee7e87d9c895fb92a9a97ffa450ea939ca5a0c40c520b131bbb8725bc2f46acc7b5524eed9982d4a505748191f4f168f404dd316d873b742120ab579e20a2661739a39adcdcd9913abd11923db38f523bf139ccafcc2e3eaf17280525a80908a31db826790fc0a2d38aaeeb91c7b2148768030c72d4f27c650f621f782529bee8afc3b2e56f70cc0befe9d476085e7d46cb6acc058495a2b146e476e08509b62bec0af7"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x8}}) 10.731907109s ago: executing program 2 (id=5717): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="463e368739ad90dd0acd4086b6e2825016737ea4651e0000", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80050000001800000004000300"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/277, @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff000005002900000000000500c20007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x24004881) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x8d, 0x24000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4}) socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000a34c00000002000000400004803c0001800b00010065787468647200002c0002800500020083000000080003400000000008000440000000be080006400000000208000140000000130900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) 10.508975628s ago: executing program 2 (id=5718): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000c80)=[{}, {}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x7c, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0xa, 0xc0, 0xc, [{{0x9, 0x4, 0x0, 0x63, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, 'O'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x3, 0x8}, [@obex={0x5, 0x24, 0x15, 0x810a}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x40, 0xac90}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x7, 0x38, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x10, 0x5}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x251, 0x4, 0xc, 0x1, 0x8, 0xf8}, 0x90, &(0x7f0000000580)=ANY=[@ANYBLOB="050f90000603100b14100400fb8747b7fae94cec9f3700d6309bd3de071002049d020003100b671003d8609a5f00ec6163f070c5b74eedcd96916d191edbe4deccf50d3a6feaf80db123a98b3632eaa9fe0cccaed5b068ca3191798b279c6239e11d4a80f2140274b1082e6163c7f79f606fac25257881693e663ade11b0fce7c79621caedbf2b613646cbf52a03100b3b31871b75"], 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xdfff098eab07928b}}, {0xf2, &(0x7f0000000240)=@string={0xf2, 0x3, "7b95402c88c4769ac50e820e6261c850eb08dcd2d5acbd045c1addfdf6af6cc025d24bb702add7c67dbfb11285b9c397112c65941ea05b74c7cf89d11aaed1295b3531be940060f30d4e16d3ffb82358763547912b44785ef9c89a7bea4c11ba6fb3cd08974a3869aa5bbdb449cf86560133cebd6c9540c031f9db16bb8060da228b5107052007d10fdb6cf8222a73711ecbb1492b90939449f34cda17510106094ec612a5145f094f5178793d9e28b01d2e78a4238d184fb74824666dd8ac56b64b5951fb8011a89ce0b8fa3a13eeb4b194c9dc2d72c593fcec819e8cd286263dc89d68643f0909350718354fa8f774"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "d85114f7fd9c8a8ba7b0ca4f62b9c44e1c2fbfe2079a004c31d6889be1f2e3cdb002ffa7b9944c7fd61630ced436a9b832adbe4f509b8b3ac8fed4280ed5616e2ef83e94dd89dabfc60b79e6ec51243bd1e04bdae5438550231d23e6093bffd243e5d97b73bdd3cfd39515be"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x407}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 9.66544736s ago: executing program 3 (id=5721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a0000003c0003800c00028005000100000000002c00018028000300fe8000000000000000000000000000bb14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010cc627d13350a512d1000000300001"], 0xbc}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r2, &(0x7f00000002c0)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="380700000000000000000000000000001811000030d9778869e6a480080d36ed6dd6fd653b9db9f9f62ebef7c4041eb6e56b0ef80e6fcb1ff131", @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000031000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0x2, 0x0, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0x504, 0x24}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ff"], 0x28}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r11, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010076657468305f746f140000001000010000000000000000400000000a00000000000000000000000000000000d2574a624b8c3483add83f24b607f1c33ffbdb4e184be460c863bff771e27c44ff88bc181ad9a1d44f469a285ba17970effbdd78b211e5fa22820ef85125543e63aa1146ae1f6a03ad0a62aa8121e5f66722004ee9085c50189bed1831426588266d2586e31481ecaec5ea1a5adf53a6dafd869b0e749f9059f3a032eb260b7826fda374c0fe68a9155c5bd924d40849f0a648747fdff76fd2c5da21afc71333d42f89d5ab478f3bf791dfd8a058"], 0xf0}}, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0d000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280), 0x4) socket$nl_route(0x10, 0x3, 0x0) 9.100836749s ago: executing program 3 (id=5722): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000c80)=[{}, {}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="250800000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x7c, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0xa, 0xc0, 0xc, [{{0x9, 0x4, 0x0, 0x63, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, 'O'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x3, 0x8}, [@obex={0x5, 0x24, 0x15, 0x810a}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x40, 0xac90}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x7, 0x38, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x10, 0x5}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x251, 0x4, 0xc, 0x1, 0x8, 0xf8}, 0x90, &(0x7f0000000580)=ANY=[@ANYBLOB="050f90000603100b14100400fb8747b7fae94cec9f3700d6309bd3de071002049d020003100b671003d8609a5f00ec6163f070c5b74eedcd96916d191edbe4deccf50d3a6feaf80db123a98b3632eaa9fe0cccaed5b068ca3191798b279c6239e11d4a80f2140274b1082e6163c7f79f606fac25257881693e663ade11b0fce7c79621caedbf2b613646cbf52a03100b3b31871b75"], 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xdfff098eab07928b}}, {0xf2, &(0x7f0000000240)=@string={0xf2, 0x3, "7b95402c88c4769ac50e820e6261c850eb08dcd2d5acbd045c1addfdf6af6cc025d24bb702add7c67dbfb11285b9c397112c65941ea05b74c7cf89d11aaed1295b3531be940060f30d4e16d3ffb82358763547912b44785ef9c89a7bea4c11ba6fb3cd08974a3869aa5bbdb449cf86560133cebd6c9540c031f9db16bb8060da228b5107052007d10fdb6cf8222a73711ecbb1492b90939449f34cda17510106094ec612a5145f094f5178793d9e28b01d2e78a4238d184fb74824666dd8ac56b64b5951fb8011a89ce0b8fa3a13eeb4b194c9dc2d72c593fcec819e8cd286263dc89d68643f0909350718354fa8f774"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "d85114f7fd9c8a8ba7b0ca4f62b9c44e1c2fbfe2079a004c31d6889be1f2e3cdb002ffa7b9944c7fd61630ced436a9b832adbe4f509b8b3ac8fed4280ed5616e2ef83e94dd89dabfc60b79e6ec51243bd1e04bdae5438550231d23e6093bffd243e5d97b73bdd3cfd39515be"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x407}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 8.771212406s ago: executing program 0 (id=5723): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000400000000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = getpgid(0x0) process_vm_readv(r6, &(0x7f0000003080)=[{&(0x7f0000003180)=""/4081, 0x1000}, {&(0x7f0000004180)=""/188, 0xbc}, {&(0x7f0000004740)=""/147, 0x93}], 0x3, &(0x7f0000000500)=[{&(0x7f0000004240)=""/90, 0xffffff93}], 0x1, 0x0) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000100)=""/31, 0x1f}], 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[]) 8.448341992s ago: executing program 4 (id=5724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x68, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 8.186633955s ago: executing program 4 (id=5725): r0 = userfaultfd(0x80001) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r7, 0x0, 0x2000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x3000}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$netlink(0x10, 0x3, 0x4) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xe, &(0x7f0000000080)=0xf1b, 0x4) write(r13, &(0x7f0000000240)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff00eddc690000008a151f75", 0x27) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000004180)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)="fc6884df439a8ed2fd8c676dfc947f6455358def8c4141de5e11d4719328ec9800764bfb484525f77184cd7f9e5ab27900cbc2e0850573d2d45ef7e2a70d60a45113bc3980ce2ab1a9d3b33a936b1bf92dbc0514c64ce8e41358b6e84027b839c59a83e2b68590980a2275956dab107a9bbf96321734a31b7596ccd508111a282c8ffc9a86971bbacc09c66e1a5a55ea93044ed02575c4c7aa57c8c51c24241b3677691eb4f2be0cf218656b1f5b152e0b0de04eeb5fcf3766399b7806d96e5ab539f72c2e40a649877a582ee3bb15ea05af", 0xd2}], 0x1, &(0x7f0000000400)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, r1, r0, 0xffffffffffffffff, r12, r12, r1, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r2, r3}}}], 0x58, 0x8c1}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000500)="22d5cf4618150988c384cd3cfaedfed0ea76c78ba3ab197917e4c9fbd2e4c13914dfa1846756c803c0621f8f63f40bf8b69534d4cbedb5fa29e41367e2a241afcf5fcd9ebe2321d75bf6170fdf4903bd2d1d086998137a25bf6d90b4030a33cc48814423cd578f46c777d9fc0928036cc113861bd3b6e1d6177fa7b8e5f07b634580cd219c8d97b367780a8b3169812fb9", 0x91}, {&(0x7f00000006c0)="6463a3685c576ae0ac0b9a559ac4322311dc5330423c57ec8e30851170465aa9716606457fef84152f33a76f026af31321feff53ce42337ce7008359ac1d60fb019d72d54fc41a0597a6e916d46ea0eaee202e713116d37cadb1d09429cc787eba15043b7b34346fa6710ac00f4deeeab42390e2ccbc3dffa6b913bef033a940da4101a18839d0c8853f12f6416e434729fe5d937ae2a6aa81d858930e73d7832c75b66c55d31e5910311fbca28a496e673708af28e6e9272d2e8a25c22715b6dee5db5b9df57afac665d99cc7", 0xcd}, {&(0x7f00000005c0)="d64324f4c17e03c2cc37ad4f42df4d1a2bde72b87356737382a043bd38cad9f5352e0ccc6a1ccd78dd5ab5420e9d49933dc1b1b2eadfe1284023278d21d155b1ecc079d1736937b8cc0bdad1bbd45fab2aeb4aade57b34841bcfd7ce98eb9e888d2d7cf14b2e40c038d1f35007f92aab7bbd1d11121b9b53bde1549e493d79662f54083fb36474a93a4e7974a97974bd351b6e640f96612c9ec47a2ac70c", 0x9e}, {&(0x7f00000007c0)="a4c0b0ee08fc0df441877fdfccceb92eb423ca267ec069fd9990ae5e08cd695f6b3ffe10106145a1804900304893981a6aeb6febf102a01099b2983578f6d5d894f3821ce437f5d5fe43df431f42d87ee5ae8f5f380062fa0dc0acfa916d2ecb", 0x60}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000004240)="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", 0x108}], 0x6, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r11, 0xffffffffffffffff, r8, r11]}}], 0x48, 0x1}}, {{&(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000001ac0)="7b0ca2da6e39b5660ba36960d813d14eafbf14dd3636d769cbfd73b4be8506b20a63bde5986711bd42b0a118ee99c6c8924861fe2f496d6cba5bda0959cf5db886e7924a683b7fcaf9c61696b26328662257d9d0067c68d104c971bcb9b9d2e61ee3456e7a657242e80884d3b214c5cc70f3051bc77ae1ecc53dab2331631418339d57e5a5ed3e7b0b538bd7526f95f83f19d1d648c67acc3f43678541fc04616746f9a55d6de4b8bbafe010e2ee28e7eea6c1f5ab99be2548bcc73e98e7214a2bf199fce0821e81", 0xc8}, {&(0x7f0000001bc0)="c23075ec923cc6677ca03903372708c198d66efc06b208401a1dd801d2806ceb83935fad204a984d78f0816fccd68f23bec691b2743fd7e00d75be6337c8b503926c203b1e54e6061f82ecb5dbaacc634d7e91c76b999047718597d9c142bec609e9b18661be2a85a9ba028f41f872a2000bad9434a8ee43dbc9498b986858bfa0b02045b151e54476931bb0648c7637252869f3d17f5505bf9458e14b6f8a2a9aa557153a37474b9ee7", 0xaa}, {&(0x7f0000001c80)="3769748de16cc641b33c5fe848dc5366f28a77bf6bccf8ef8acbf04ec4840873aa2693c88fc5e0", 0x27}, {&(0x7f0000004380)="567e40829392e060e630117bf1e40e5b4903424e64f6011d358b9a1778d855f4d48e5c0a3a683d4d33239f7bf15ecb42191391acc51c06879eaab84a593ede5aa42e3b240b15f06e9fcd32671e9c95e274907ca5a772494c201015265d40428c7e19c5f14935449f70d120c3152a3b06000000000000001e6b5184a613dc6d678e76b40d04331f5fb3b90fc26b66b51ded35a3b7feb291d0134c4cd51199b14803dde314ab9771279743d7ae6bbbf04c43bc8e74bf8cbcbcdeddb52b59e852d007ff56ba58b39ee9c1bef4bfb3af4981bb08f5d71038fab7a3909333", 0xdc}, {&(0x7f0000001dc0)="c2ad48e23fe920ac0a1f9ef42de306f91516d7d9816227a8345989143a8f31b6490ec1cc93d18ec8857fd71c155989444e0139c1bd452bb82c02b377a15cfba853975c521d9fe9e46110c753c9c369b4914cff86f1e7a05fe3e8cb5b109c093ef6ffa5e8706586b39424fc22", 0x6c}, {&(0x7f00000003c0)="cf0b56e5712a18c221a524c8de71e9bd0800", 0x12}, {&(0x7f0000001e80)="925ef01a4e429857b030ecf5b6f14a5957f3e1ca36c885e28e87d2fd615d62212a5c03ff3d0d4ce7038129b2831792f20cde08b8420e401cd58d0d291344f1a7d3e19bc6703850a3d5e32eb0b7452b3ce0f78a28ae97831c8c67f3ea9a83c870c966a80b4591723091509eed2abc23d3", 0x70}, {&(0x7f0000001f00)="513e31fcb6bec2a1174c8998bc02e82778efbd3da7c41441a065252c886b4355a100655133d805b9d3cf2e056c0fec299aa60ec84a239de7e6953a", 0x3b}, {&(0x7f0000001f40)="d98c10bbdcdd47cdf003d8bd4fb166806d43f1d479d7641c93a9743aa8da7870e6e5ae1f89ab58b93636b5dcf3c22287ecc2f6fe1e985713f2b11b3cdcc9b57314d35466a197252b4359785da4e8891ca7db327fa31eefec70ec440943d2f8035aeeb5fbaae069ae2e706e8949d2ab3f87055cbc1ad7e12b92ca", 0x7a}], 0x9, 0x0, 0x0, 0x20000000}}], 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) 7.912062666s ago: executing program 2 (id=5726): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x6, 0xb, @vifc_lcl_ifindex=r0, @empty}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x11a0, r1}, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x40000) sendto$inet(r2, &(0x7f0000000180)="45dad63cf4a0e6ef321ee1d5b4f5520c21a2876903c1f71773a9b4948885485cbd1da477c5f6e5db429963ad5611496b1e085a298153b5b842bc243246", 0x3d, 0xc044, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000200), 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x7, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x4, 0x1, 0x4, 0x3, 0x2, 0x80, 0x1}, @jmp={0x5, 0x0, 0x9, 0xb, 0x0, 0x20, 0xfffffffffffffffc}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x88, &(0x7f0000000300)=""/136, 0x40f00, 0x64, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4fc4, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x3, 0x4, 0x6, 0x1}, {0x5, 0x5, 0x2, 0x3}, {0x5, 0x4, 0xb}], 0x10, 0x6}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@o_path={&(0x7f0000000240)='./file0\x00', r3, 0x4000, r1}, 0x18) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000540)={{0x2, 0x4e20, @local}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x66, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 'vxcan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x51c, '\x00', r0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x3, &(0x7f0000000740)=@raw=[@call={0x85, 0x0, 0x0, 0x99}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000780)='GPL\x00', 0x9, 0x73, &(0x7f00000007c0)=""/115, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x10, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[0x1, r6, r7, r8, r1], &(0x7f0000000a80)=[{0x0, 0x4, 0x3, 0x4}, {0x5, 0x2, 0xf}, {0x2, 0x2, 0xa, 0xb}], 0x10, 0xffffffff}, 0x90) r9 = memfd_secret(0x0) mq_timedsend(r9, &(0x7f0000000b80), 0x0, 0x7f, &(0x7f0000000bc0)={0x77359400}) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000000c00)=""/1, &(0x7f0000000c40)=0x1) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001100)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000d40)={0x348, r10, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3a, 0xf}}}}, [@NL80211_ATTR_TX_RATES={0x3c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8001, 0x677, 0x9, 0x3, 0x7, 0x9, 0x5]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x6]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x24, 0x6, 0x1, 0x5, 0x6c, 0x0, 0x36, 0x2, 0x16, 0x9, 0x66, 0x1, 0x18, 0x3b, 0x0, 0x6, 0x12, 0x0, 0x5]}]}]}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xe}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x63}]}, @NL80211_ATTR_MESH_SETUP={0xc8, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_IE={0x91, 0x3, "c72828e1c8239109d5ab71a64615411135ed7ec89ce6077b402fba41c3bf8a605730b3e332b7841062382873bde20137fbd3ba0426fef697977f6eab3aa648ae8c645bf9ec0fd2e33977c4c36a998b1d5443aab532881056e1bad59f503e77b346b19dd230c02ffcc8cce4b1f37b9831a81b69e88d96c71e79fc92d18c6cf8e4e33e67496c27ccda7ac90f6f79"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}], @NL80211_ATTR_MESH_SETUP={0x1b4, 0x70, [@NL80211_MESH_SETUP_IE={0xca, 0x3, "dc063958b2e997774d2ed391176fb2e8bcb1e0fb4da6340362032d2224fb29ea19ffbdd4800cef2fd2e245a2f7b1fc985007de897c6889e618d159e74603da72ddb6de21f3242cb82d682c020bd112e37345782715173f093433f5aa28d893f55681b1a790dad893e362f2970566dc1b0a8eedb0f0c239f6d25ec4c172c8a97b0ba3db1c183fb0939724265e8c21863cac8ba359996e912ca3882c29ef0a09a5bf6f7eaa4725462e4c118b11b0e13c49d1c565aa4156356638b4fadb69fdb9846f9a0663def3"}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x2f, 0x3, "f35c7d2d548bca788f32e3e2f9a148499bb5362a2c8ad7cbf8c99726ff36db16c1f7d904d05c4d9b567c18"}, @NL80211_MESH_SETUP_IE={0xb0, 0x3, "d6a614916d095a27049790c7f9b5455c794e1393882556356c34a9d4e31898488028501bf6ac92d373d332bcb507bf96b9771556c32502d4b8c4b4719265065036eb8bfe2d951987f20cbe4d179fab0b4326417f200ba1c08af1de2b969c0ef9ca8664b22ce862b90b0b9e53bfa89118eb9cbc26ac702a1abfe72f00ac1363982197094f37e393b1403a64908287e40ad759026f1ef87b56116f543dc0bdeddc810d2b732dda8300e3f33108"}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x20044085}, 0xc4c1) r12 = fcntl$getown(r8, 0x9) fcntl$setownex(r1, 0xf, &(0x7f0000001140)={0x0, r12}) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000001180)={0x2, 0x0, @remote}, &(0x7f00000011c0)=0x10) socketpair(0x2b, 0x6, 0xe000000, &(0x7f0000001200)) ioctl$HIDIOCGVERSION(r9, 0x80044801, &(0x7f0000001240)) sendto$inet6(r9, &(0x7f0000001280)="f75df4da9e8faef49cb8303cd99adc77985ca0ff8ac7b65a0b87b435f6b7537d7d1224dacb8e09f21321ccbc8080088b9ce000ab7d222091cbd9b51aad424761a8d72e031230d84bfa87282453c78239e4", 0x51, 0x80, &(0x7f0000001300)={0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) 7.726225434s ago: executing program 1 (id=5727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x3400, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) 7.725670174s ago: executing program 2 (id=5728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, 0x290, 0x0, 0x0, 0x0, 0x8000}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000280)='erspan0\x00'}) unshare(0x6a040000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, '\x00', 0x100}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000000801dda26a0bebe1fb8e1a115a0a1b44defb3636ebda9c1adbc4c318ae1de72707a3a063d48067465e7f56f99c82edd2878a684ca7964b7cc2407069b7e8e44d9a9a84"], 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.503400296s ago: executing program 1 (id=5729): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="463e368739ad90dd0acd4086b6e2825016737ea4651e0000", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80050000001800000004000300"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf251200000008000300cb3142b4ed9f529da85c7907b4b03b7987903984255f94fcd319d2c69195745781846e5fdb6d660ab05e7828f1e08ac5de7f1539a5a56ef02b7e7f7cabfa6eff1879fe77fae3263cd145dc27b5d27569497a4081add89c8a194f1139b3e5305e82ca2893e45757780a88231570f74a3bfc6a590e5a87b6bddab0ceb1a5dce40cbe7c8a7f190fc967cc685697371ac0367d4e34919bcf26a5384b4ab26dc6e69fb89f90c8c35ff43369c928556947c2ffb478e941e8d949424f33d3d16859948dc94744c91effa89bf561d31ff333cce6aa952c3bca57fc04f822563716f9b05214a0d737a257d419fe1b5ff4b5d44fd543503a614a046900"/277, @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff000005002900000000000500c20007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x24004881) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x8d, 0x24000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000a34c00000002000000400004803c0001800b00010065787468647200002c0002800500020083000000080003400000000008000440000000be080006400000000208000140000000130900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) 7.215609584s ago: executing program 1 (id=5731): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8949, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 7.098411039s ago: executing program 1 (id=5732): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="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"], 0x18}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x83, &(0x7f0000000180)={r8}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0xfffffffffffffebd, &(0x7f0000002500)={&(0x7f0000002580)={0x20, r10, 0xd11, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x7, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r11, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000500)={0x30}) 6.70557595s ago: executing program 1 (id=5733): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001000)={&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x38}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000000)="d6", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1e00010000000020000000000000008400000008000000fc000085ff3445e0d9e3f50ee32fb6"], 0x38, 0x480c4}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x5}, @struct={0x7, 0x1, 0x0, 0x4, 0x1, 0x3, [{0xd, 0x4, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}]}, {0x0, [0x0, 0x61, 0x0, 0x0]}}, &(0x7f00000000c0)=""/4, 0x5a, 0x4, 0x0, 0x6}, 0x20) 6.220912221s ago: executing program 3 (id=5734): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48}, {0x6}]}, 0x10) socket$kcm(0x2, 0x3, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@multicast2}, {@private=0xa010121, 0x1ff}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0xf, 0x0, [@remote, @private=0xa010102, @remote]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06000d08"], 0x9) dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000028c0)=""/219, 0xdb}], 0x2, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) 0s ago: executing program 1 (id=5735): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x10000) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x3, r2}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @remote}, {0x0, 0x0, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.081800][T30663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1662.096346][T25451] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1662.112520][ C0] vkms_vblank_simulate: vblank timer overrun [ 1662.121061][T15441] Bluetooth: hci0: command tx timeout [ 1662.138719][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1662.179539][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1662.194331][T30663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.231981][ T25] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1662.262586][T30663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.286225][T30663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1662.319294][ T25] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.333607][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1662.350269][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1662.361514][T30663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.379434][ T25] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1662.424190][T25451] usb 3-1: Using ep0 maxpacket: 16 [ 1662.433486][T25451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1662.467170][ T25] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.488287][T20054] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1662.503443][T25451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1662.521076][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1662.533341][T20054] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1662.546620][T25451] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1662.559581][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1662.579769][T20054] usb 4-1: USB disconnect, device number 7 [ 1662.586183][T25451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.609931][ T25] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1662.626165][T25451] usb 3-1: config 0 descriptor?? [ 1662.648151][ T25] usb 1-1: string descriptor 0 read error: -22 [ 1662.657586][ T25] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1662.697315][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.748155][ T25] adutux 1-1:168.0: interrupt endpoints not found [ 1662.921481][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.979541][T20054] usb 1-1: USB disconnect, device number 111 [ 1662.985684][T15441] Bluetooth: hci2: command tx timeout [ 1663.014213][T30663] hsr_slave_0: entered promiscuous mode [ 1663.027601][T30663] hsr_slave_1: entered promiscuous mode [ 1663.060931][T30663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1663.072866][T30663] Cannot create hsr debugfs directory [ 1663.131705][T30762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.162769][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.175120][T30762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.229813][T25451] hid (null): bogus close delimiter [ 1663.243040][T25451] hid (null): invalid report_size 29797 [ 1663.264882][T25451] hid (null): invalid report_size 512 [ 1663.281950][T25451] hid (null): report_id 456434233 is invalid [ 1663.307108][T25451] hid (null): unknown global tag 0xa5 [ 1663.324880][T25451] hid (null): unknown global tag 0xd [ 1663.330315][T25451] hid (null): unknown global tag 0xc [ 1663.343519][T25451] hid (null): global environment stack underflow [ 1663.362263][T25451] hid-generic 0003:0158:0100.00EF: unknown main item tag 0x0 [ 1663.398423][T25451] hid-generic 0003:0158:0100.00EF: unknown main item tag 0x0 [ 1663.414517][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.424964][T25451] hid-generic 0003:0158:0100.00EF: bogus close delimiter [ 1663.432698][T25451] hid-generic 0003:0158:0100.00EF: item 0 0 2 10 parsing failed [ 1663.448993][T30766] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [RP.] L3 index 0 [ 1663.450836][T25451] hid-generic 0003:0158:0100.00EF: probe with driver hid-generic failed with error -22 [ 1663.553107][T30728] chnl_net:caif_netlink_parms(): no params data found [ 1663.643640][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.143505][T30728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.178122][T30728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.186106][T15441] Bluetooth: hci0: command tx timeout [ 1664.188941][T20054] usb 3-1: USB disconnect, device number 10 [ 1664.212606][T30728] bridge_slave_0: entered allmulticast mode [ 1664.226779][T30728] bridge_slave_0: entered promiscuous mode [ 1664.241407][T30728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.260558][T30728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.297581][T30728] bridge_slave_1: entered allmulticast mode [ 1664.328155][T30728] bridge_slave_1: entered promiscuous mode [ 1664.805242][T30728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.837628][T30728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.964091][T20054] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1665.081040][T15441] Bluetooth: hci2: command tx timeout [ 1665.086755][ T11] bridge_slave_1: left allmulticast mode [ 1665.086782][ T11] bridge_slave_1: left promiscuous mode [ 1665.114001][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.132663][ T11] bridge_slave_0: left allmulticast mode [ 1665.139690][ T11] bridge_slave_0: left promiscuous mode [ 1665.153929][T20054] usb 1-1: Using ep0 maxpacket: 16 [ 1665.169080][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.177931][T20054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1665.206781][T20054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1665.272803][T20054] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1665.296703][T20054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.329463][T20054] usb 1-1: config 0 descriptor?? [ 1665.581443][T30798] netlink: 'syz.2.5500': attribute type 11 has an invalid length. [ 1665.606644][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5500'. [ 1665.843957][T30799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.853227][T30799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.878918][T20054] hid (null): bogus close delimiter [ 1665.892053][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1665.902161][T20054] hid (null): invalid report_size 29797 [ 1665.908338][T20054] hid (null): invalid report_size 512 [ 1665.921510][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1665.922036][T20054] hid (null): report_id 456434233 is invalid [ 1665.946368][ T11] bond0 (unregistering): Released all slaves [ 1665.947737][T20054] hid (null): unknown global tag 0xa5 [ 1665.961267][T20054] hid (null): unknown global tag 0xd [ 1665.966823][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1665.973616][T30728] team0: Port device team_slave_0 added [ 1665.974598][T20054] hid (null): unknown global tag 0xc [ 1665.974639][T20054] hid (null): global environment stack underflow [ 1665.978294][T20054] hid-generic 0003:0158:0100.00F0: unknown main item tag 0x0 [ 1665.990077][T30728] team0: Port device team_slave_1 added [ 1666.003795][T20054] hid-generic 0003:0158:0100.00F0: unknown main item tag 0x0 [ 1666.013385][T20054] hid-generic 0003:0158:0100.00F0: bogus close delimiter [ 1666.021924][T20054] hid-generic 0003:0158:0100.00F0: item 0 0 2 10 parsing failed [ 1666.046125][T20054] hid-generic 0003:0158:0100.00F0: probe with driver hid-generic failed with error -22 [ 1666.204059][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1666.216368][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.230393][ T25] usb 3-1: config 0 descriptor?? [ 1666.242363][ T25] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1666.263852][T15441] Bluetooth: hci0: command tx timeout [ 1666.273618][T30728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.304566][T30728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.334073][T30728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.377043][T30728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.385432][T30728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.420194][T30728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.601014][T30728] hsr_slave_0: entered promiscuous mode [ 1666.610206][T30728] hsr_slave_1: entered promiscuous mode [ 1666.621637][T30728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1666.630823][T30728] Cannot create hsr debugfs directory [ 1666.643332][T25451] usb 1-1: USB disconnect, device number 112 [ 1666.850123][T30663] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1666.878011][T30663] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1666.899353][T30800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.957362][T30663] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1667.023087][T30800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.094725][ T11] hsr_slave_0: left promiscuous mode [ 1667.138908][ T11] hsr_slave_1: left promiscuous mode [ 1667.167436][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1667.177992][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.200523][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.222306][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1667.371265][ T11] veth1_macvtap: left promiscuous mode [ 1667.396630][ T11] veth0_macvtap: left promiscuous mode [ 1667.414333][ T11] veth1_vlan: left promiscuous mode [ 1667.429886][ T11] veth0_vlan: left promiscuous mode [ 1667.522995][ T25] usb 3-1: USB disconnect, device number 11 [ 1668.348202][T15441] Bluetooth: hci0: command tx timeout [ 1668.474219][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1668.526608][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1668.981895][T30663] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1669.039725][T30814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5504'. [ 1669.066412][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.072729][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.669255][T30845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1669.724221][ T25] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 1669.820975][T30663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.954691][ T25] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.968662][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1670.022708][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1670.101037][ T25] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1670.140352][ T25] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.164203][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1670.193796][T30663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.208284][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1670.252428][T20054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.259577][T20054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.277828][ T25] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1670.303603][T20054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.310842][T20054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.321542][ T25] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.347627][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1670.385209][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1670.414223][ T25] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1670.443005][T30663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1670.472693][ T25] usb 3-1: string descriptor 0 read error: -22 [ 1670.480799][ T25] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1670.508635][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.573149][ T25] adutux 3-1:168.0: interrupt endpoints not found [ 1670.626192][T30663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1670.728169][T30728] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1670.757992][T30728] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1670.790933][T25453] usb 3-1: USB disconnect, device number 12 [ 1670.853424][T30728] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1670.897480][T30728] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1671.009690][T30865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1671.059994][T30663] veth0_vlan: entered promiscuous mode [ 1671.194159][T30663] veth1_vlan: entered promiscuous mode [ 1671.352288][T30663] veth0_macvtap: entered promiscuous mode [ 1671.369668][T30663] veth1_macvtap: entered promiscuous mode [ 1671.390801][T30663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.401985][T30663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.424540][T30663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.454568][T30663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.483438][T30663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.505527][T30663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.517439][T30663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.567260][T30663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.613831][T30663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.666684][T30663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.696434][T30663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.722125][T30663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.758879][T30663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.784307][T30663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.809480][T30663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.828434][T30663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.853822][T30663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.887341][T30663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.967039][T30728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1671.983997][T20054] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1672.147778][T30728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.181361][T20054] usb 1-1: Using ep0 maxpacket: 16 [ 1672.246871][T20054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1672.264580][T20054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1672.275187][T20054] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1672.282031][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.291388][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.312717][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.313963][T20054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.319969][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.336837][T20054] usb 1-1: config 0 descriptor?? [ 1672.641002][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.703950][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.758270][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.835766][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.866187][T30728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.924472][T30899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.993178][T30899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.103373][T30728] veth0_vlan: entered promiscuous mode [ 1673.112868][T20054] hid (null): bogus close delimiter [ 1673.119460][T30728] veth1_vlan: entered promiscuous mode [ 1673.141248][T20054] hid (null): invalid report_size 29797 [ 1673.169515][T20054] hid (null): invalid report_size 512 [ 1673.209083][T20054] hid (null): report_id 456434233 is invalid [ 1673.240285][T20054] hid (null): unknown global tag 0xa5 [ 1673.283807][T20054] hid (null): unknown global tag 0xd [ 1673.301342][T30728] veth0_macvtap: entered promiscuous mode [ 1673.313970][T20054] hid (null): unknown global tag 0xc [ 1673.373284][T20054] hid (null): global environment stack underflow [ 1673.400414][T20054] hid-generic 0003:0158:0100.00F1: unknown main item tag 0x0 [ 1673.400839][T30728] veth1_macvtap: entered promiscuous mode [ 1673.423845][T20054] hid-generic 0003:0158:0100.00F1: unknown main item tag 0x0 [ 1673.445560][T20054] hid-generic 0003:0158:0100.00F1: bogus close delimiter [ 1673.452639][T20054] hid-generic 0003:0158:0100.00F1: item 0 0 2 10 parsing failed [ 1673.481685][T20054] hid-generic 0003:0158:0100.00F1: probe with driver hid-generic failed with error -22 [ 1673.614040][ T8] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1673.655306][T30728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.705140][T30728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.724461][T30728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.754840][T30728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.770526][T30728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.781328][T30728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.800770][T30728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.812065][T30728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.832361][T30728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.860502][ T8] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1673.890877][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.916675][ T8] usb 2-1: config 0 descriptor?? [ 1673.934675][T30728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.953336][T30728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.986121][T30728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.996972][T30728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.007253][T30728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.017962][T30728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.028308][T30728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.039961][T30728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.071290][T30728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1674.104467][T30728] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.126810][T30728] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.155589][T30728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.174113][T30728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.299665][T25453] usb 1-1: USB disconnect, device number 113 [ 1674.473755][T19325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.505521][T19325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.635366][T19325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.643251][T19325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.754634][T20907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1674.768683][T20907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1674.777392][T20907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1674.786618][T20907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1674.794834][T20907] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1674.803193][T20907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1675.250373][ T2429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.432472][T30952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5520'. [ 1675.548357][ T8] pegasus 2-1:0.0: setup Pegasus II specific registers [ 1675.636993][ T2429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.711396][ T8] pegasus 2-1:0.0: can't locate MII phy, using default [ 1675.893845][ T5090] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 1675.936375][ T2429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.981729][ T8] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, fa:18:69:1d:c9:64 [ 1676.010687][ T8] usb 2-1: USB disconnect, device number 30 [ 1676.075658][ T5090] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.075711][ T5090] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1676.075736][ T5090] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1676.075760][ T5090] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1676.076634][ T5090] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.076683][ T5090] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1676.076706][ T5090] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1676.076729][ T5090] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1676.077590][ T5090] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.077643][ T5090] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1676.077667][ T5090] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1676.077690][ T5090] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1676.080611][ T5090] usb 1-1: string descriptor 0 read error: -22 [ 1676.080757][ T5090] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1676.080782][ T5090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.085459][ T5090] adutux 1-1:168.0: interrupt endpoints not found [ 1676.139144][ T5140] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1676.549530][ T5090] usb 1-1: USB disconnect, device number 114 [ 1676.576313][ T2429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.687539][T30974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5523'. [ 1676.896873][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.896907][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.896945][ T5140] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1676.896962][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.898767][ T5140] usb 5-1: config 0 descriptor?? [ 1676.919574][T15441] Bluetooth: hci3: command tx timeout [ 1677.166122][T30961] xt_TCPMSS: Only works on TCP SYN packets [ 1677.189723][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1677.189741][ T29] audit: type=1326 audit(1720241927.326:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8cb75bd9 code=0x7ffc0000 [ 1677.190079][ T29] audit: type=1326 audit(1720241927.336:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8cb75bd9 code=0x7ffc0000 [ 1677.190649][ T29] audit: type=1326 audit(1720241927.336:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f8cb757db code=0x7ffc0000 [ 1677.191058][ T29] audit: type=1326 audit(1720241927.336:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f8cb757db code=0x7ffc0000 [ 1677.220683][ T29] audit: type=1326 audit(1720241927.356:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f8cba7bc5 code=0x7ffc0000 [ 1677.410456][T30932] chnl_net:caif_netlink_parms(): no params data found [ 1677.492233][ T29] audit: type=1326 audit(1720241927.636:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8cb75bd9 code=0x7ffc0000 [ 1677.492286][ T29] audit: type=1326 audit(1720241927.636:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8cb75bd9 code=0x7ffc0000 [ 1677.516347][ T5140] logitech-hidpp-device 0003:046D:C086.00F2: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 1677.517935][ T29] audit: type=1326 audit(1720241927.636:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f8cb757db code=0x7ffc0000 [ 1677.517985][ T29] audit: type=1326 audit(1720241927.636:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f8cb757db code=0x7ffc0000 [ 1677.518025][ T29] audit: type=1326 audit(1720241927.636:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.4.5522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f8cba7bc5 code=0x7ffc0000 [ 1677.556573][ T2429] bridge_slave_1: left allmulticast mode [ 1677.556603][ T2429] bridge_slave_1: left promiscuous mode [ 1677.556791][ T2429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.564151][ T2429] bridge_slave_0: left allmulticast mode [ 1677.564177][ T2429] bridge_slave_0: left promiscuous mode [ 1677.564353][ T2429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.800581][T25451] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1677.984903][T25451] usb 4-1: Using ep0 maxpacket: 16 [ 1677.987904][T25451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1677.987938][T25451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1677.987976][T25451] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1677.988000][T25451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.989794][T25451] usb 4-1: config 0 descriptor?? [ 1678.514707][T30997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1678.514988][T30997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.517135][T25451] hid (null): bogus close delimiter [ 1678.518842][T25451] hid (null): invalid report_size 29797 [ 1678.518888][T25451] hid (null): invalid report_size 512 [ 1678.520322][T25451] hid (null): report_id 456434233 is invalid [ 1678.520403][T25451] hid (null): unknown global tag 0xa5 [ 1678.520433][T25451] hid (null): unknown global tag 0xd [ 1678.520545][T25451] hid (null): unknown global tag 0xc [ 1678.520585][T25451] hid (null): global environment stack underflow [ 1678.538748][T25451] hid-generic 0003:0158:0100.00F3: unknown main item tag 0x0 [ 1678.538785][T25451] hid-generic 0003:0158:0100.00F3: unknown main item tag 0x0 [ 1678.538812][T25451] hid-generic 0003:0158:0100.00F3: bogus close delimiter [ 1678.538827][T25451] hid-generic 0003:0158:0100.00F3: item 0 0 2 10 parsing failed [ 1678.539519][T25451] hid-generic 0003:0158:0100.00F3: probe with driver hid-generic failed with error -22 [ 1678.929929][ T2429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.936454][ T2429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.941984][ T2429] bond0 (unregistering): Released all slaves [ 1678.984206][T15441] Bluetooth: hci3: command tx timeout [ 1679.296713][ T25] usb 5-1: USB disconnect, device number 6 [ 1679.401402][T25451] usb 4-1: USB disconnect, device number 8 [ 1679.746959][T30932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.794972][T30932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.812564][T30932] bridge_slave_0: entered allmulticast mode [ 1679.847374][T30932] bridge_slave_0: entered promiscuous mode [ 1679.869406][T30932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.923896][T30932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.938414][T30932] bridge_slave_1: entered allmulticast mode [ 1679.987864][T30932] bridge_slave_1: entered promiscuous mode [ 1680.154631][ T8] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1680.258337][T20907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1680.299516][T20907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1680.310744][T20907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1680.351328][T20907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1680.359169][T20907] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1680.366595][T20907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1680.423150][ T8] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1680.488177][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.522902][ T8] usb 5-1: config 0 descriptor?? [ 1680.566475][T31021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1680.749858][T30932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.853414][ T2429] hsr_slave_0: left promiscuous mode [ 1680.875566][ T2429] hsr_slave_1: left promiscuous mode [ 1680.889041][ T2429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1680.910886][ T2429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1680.928599][ T2429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1680.943513][ T2429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1681.016373][ T2429] veth1_macvtap: left promiscuous mode [ 1681.032672][ T2429] veth0_macvtap: left promiscuous mode [ 1681.049395][ T2429] veth1_vlan: left promiscuous mode [ 1681.061636][ T2429] veth0_vlan: left promiscuous mode [ 1681.073925][T20907] Bluetooth: hci3: command tx timeout [ 1682.166543][ T8] pegasus 5-1:0.0: setup Pegasus II specific registers [ 1682.276242][ T2429] team0 (unregistering): Port device team_slave_1 removed [ 1682.320330][ T8] pegasus 5-1:0.0: can't locate MII phy, using default [ 1682.338593][ T2429] team0 (unregistering): Port device team_slave_0 removed [ 1682.434152][T20907] Bluetooth: hci2: command tx timeout [ 1682.841829][T30932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.861245][T31061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5536'. [ 1682.928318][ T8] pegasus 5-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 46:36:e1:8e:7a:46 [ 1682.974449][ T8] usb 5-1: USB disconnect, device number 7 [ 1683.146913][T20907] Bluetooth: hci3: command tx timeout [ 1683.206961][T30932] team0: Port device team_slave_0 added [ 1683.298502][T30932] team0: Port device team_slave_1 added [ 1683.448146][T30932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1683.476187][T30932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1683.528581][T30932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.557326][T30932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.571629][T30932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1683.609782][T30932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1683.732368][T30932] hsr_slave_0: entered promiscuous mode [ 1683.755069][T30932] hsr_slave_1: entered promiscuous mode [ 1684.306144][ T2429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.389499][T31039] chnl_net:caif_netlink_parms(): no params data found [ 1684.475046][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1684.506401][T20907] Bluetooth: hci2: command tx timeout [ 1684.573609][ T2429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.724095][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1684.750685][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1684.769557][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1684.774681][ T2429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.808199][T31128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5542'. [ 1684.839113][ T8] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1684.888554][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.921156][ T8] usb 4-1: config 0 descriptor?? [ 1685.028107][ T2429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.114116][T29953] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1685.127640][T31039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.138941][T31039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.184024][T31039] bridge_slave_0: entered allmulticast mode [ 1685.191525][T31039] bridge_slave_0: entered promiscuous mode [ 1685.201723][T31039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.214374][T31039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.221723][T31039] bridge_slave_1: entered allmulticast mode [ 1685.229412][T31039] bridge_slave_1: entered promiscuous mode [ 1685.333247][T31039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.346750][T29953] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1685.372757][T29953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.416016][T29953] usb 1-1: config 0 descriptor?? [ 1685.490145][T31112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.578417][T31112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.606685][T31039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.625703][ T8] hid (null): bogus close delimiter [ 1685.653936][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1685.666157][ T8] hid (null): invalid report_size 29797 [ 1685.671789][ T8] hid (null): invalid report_size 512 [ 1685.700734][ T8] hid (null): report_id 456434233 is invalid [ 1685.729400][ T8] hid (null): unknown global tag 0xa5 [ 1685.744995][ T8] hid (null): unknown global tag 0xd [ 1685.761688][ T8] hid (null): unknown global tag 0xc [ 1685.788177][ T8] hid (null): global environment stack underflow [ 1685.807521][ T8] hid-generic 0003:0158:0100.00F4: unknown main item tag 0x0 [ 1685.819683][ T8] hid-generic 0003:0158:0100.00F4: unknown main item tag 0x0 [ 1685.825540][T31039] team0: Port device team_slave_0 added [ 1685.829098][ T8] hid-generic 0003:0158:0100.00F4: bogus close delimiter [ 1685.843263][ T8] hid-generic 0003:0158:0100.00F4: item 0 0 2 10 parsing failed [ 1685.843808][ T25] usb 5-1: device descriptor read/64, error -71 [ 1685.852733][ T8] hid-generic 0003:0158:0100.00F4: probe with driver hid-generic failed with error -22 [ 1685.920083][T31039] team0: Port device team_slave_1 added [ 1686.193865][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1686.212978][T31039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.220757][T31039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1686.246686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1686.255016][T31039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1686.282854][T31039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1686.295934][T31039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1686.322410][T31039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1686.364229][ T25] usb 5-1: device descriptor read/64, error -71 [ 1686.372711][ T2429] bridge_slave_1: left allmulticast mode [ 1686.386054][ T2429] bridge_slave_1: left promiscuous mode [ 1686.392039][ T2429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.412865][ T2429] bridge_slave_0: left allmulticast mode [ 1686.434722][ T2429] bridge_slave_0: left promiscuous mode [ 1686.453343][ T2429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.504504][ T25] usb usb5-port1: attempt power cycle [ 1686.584459][T20907] Bluetooth: hci2: command tx timeout [ 1686.715519][ T8] usb 4-1: USB disconnect, device number 9 [ 1686.914340][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1686.974401][ T25] usb 5-1: device descriptor read/8, error -71 [ 1687.048096][T29953] pegasus 1-1:0.0: setup Pegasus II specific registers [ 1687.196470][T29953] pegasus 1-1:0.0: can't locate MII phy, using default [ 1687.256905][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1687.298886][ T25] usb 5-1: device descriptor read/8, error -71 [ 1687.447876][ T25] usb usb5-port1: unable to enumerate USB device [ 1687.509378][ T2429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1687.526943][ T2429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1687.540057][ T2429] bond0 (unregistering): Released all slaves [ 1687.600652][T30932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1687.734217][T29953] pegasus 1-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 7a:f9:81:99:06:5f [ 1687.782678][T30932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1687.794182][T19274] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 1687.837695][T29953] usb 1-1: USB disconnect, device number 115 [ 1687.961083][T30932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1688.012417][T31039] hsr_slave_0: entered promiscuous mode [ 1688.043270][T31039] hsr_slave_1: entered promiscuous mode [ 1688.067189][T31039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1688.085812][T31039] Cannot create hsr debugfs directory [ 1688.097968][T19274] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.114683][T30932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1688.130720][T19274] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1688.187701][T19274] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1688.208164][T19274] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1688.260383][T19274] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.296529][T19274] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1688.313415][T19274] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1688.364992][T19274] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1688.403049][T19274] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.417652][T19274] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1688.429034][T19274] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1688.476392][ T2429] hsr_slave_0: left promiscuous mode [ 1688.496637][T19274] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1688.514326][ T2429] hsr_slave_1: left promiscuous mode [ 1688.542290][ T2429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1688.560568][ T2429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.579378][ T2429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1688.587235][T19274] usb 4-1: string descriptor 0 read error: -22 [ 1688.587373][T19274] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1688.587398][T19274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.641113][ T2429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.653205][T19274] adutux 4-1:168.0: interrupt endpoints not found [ 1688.664184][T20907] Bluetooth: hci2: command tx timeout [ 1688.696106][ T2429] veth1_macvtap: left promiscuous mode [ 1688.701921][ T2429] veth0_macvtap: left promiscuous mode [ 1688.707857][ T2429] veth1_vlan: left promiscuous mode [ 1688.715616][ T2429] veth0_vlan: left promiscuous mode [ 1688.881287][T25451] usb 4-1: USB disconnect, device number 10 [ 1689.988460][ T2429] team0 (unregistering): Port device team_slave_1 removed [ 1690.050999][ T2429] team0 (unregistering): Port device team_slave_0 removed [ 1691.538997][T31208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1691.574436][T25451] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1691.809831][T30932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1691.816620][T25451] usb 1-1: Using ep0 maxpacket: 16 [ 1691.838931][T25451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1691.895034][T25451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1691.926467][T25451] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1691.952837][T25451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.988127][T25451] usb 1-1: config 0 descriptor?? [ 1692.146672][T30932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.183171][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.190356][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.230522][T25453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.237680][T25453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1692.353866][T20054] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1692.514456][T31039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1692.522408][T31220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.558232][T31039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1692.567672][T20054] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1692.578818][T20054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.580832][T31220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.602969][T20054] usb 4-1: config 0 descriptor?? [ 1692.665925][T31039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1692.692479][T25451] hid (null): bogus close delimiter [ 1692.713174][T25451] hid (null): invalid report_size 29797 [ 1692.734594][T25451] hid (null): invalid report_size 512 [ 1692.741818][T25451] hid (null): report_id 456434233 is invalid [ 1692.753956][T25451] hid (null): unknown global tag 0xa5 [ 1692.759415][T25451] hid (null): unknown global tag 0xd [ 1692.778316][T25451] hid (null): unknown global tag 0xc [ 1692.800474][T25451] hid (null): global environment stack underflow [ 1692.822400][T25451] hid-generic 0003:0158:0100.00F5: unknown main item tag 0x0 [ 1692.833560][T30932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.847602][T25451] hid-generic 0003:0158:0100.00F5: unknown main item tag 0x0 [ 1692.862311][T25451] hid-generic 0003:0158:0100.00F5: bogus close delimiter [ 1692.876572][T31039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1692.914403][T25451] hid-generic 0003:0158:0100.00F5: item 0 0 2 10 parsing failed [ 1692.936356][T25451] hid-generic 0003:0158:0100.00F5: probe with driver hid-generic failed with error -22 [ 1693.173620][T30932] veth0_vlan: entered promiscuous mode [ 1693.232646][T30932] veth1_vlan: entered promiscuous mode [ 1693.277210][T31245] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5557'. [ 1693.381759][T31039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.395742][T30932] veth0_macvtap: entered promiscuous mode [ 1693.417714][T30932] veth1_macvtap: entered promiscuous mode [ 1693.466067][T31039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1693.502536][T30932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1693.515682][T30932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1693.527343][T30932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1693.538193][T30932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1693.558028][T30932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1693.569129][T30932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1693.582508][T30932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1693.595033][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.602256][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1693.617045][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.624317][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1693.634454][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1693.661371][T30932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1693.675115][ T5140] usb 1-1: USB disconnect, device number 116 [ 1693.700511][T30932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1693.735428][T30932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1693.763992][T30932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1693.783882][T30932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1693.804728][T30932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1693.827342][T30932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1693.837199][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1693.854127][ T8] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1693.864816][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.892167][T30932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.902497][ T8] usb 5-1: config 0 descriptor?? [ 1693.915969][ T8] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1693.923368][T30932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.932851][T30932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.944681][T30932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.238259][T20054] pegasus 4-1:0.0: setup Pegasus II specific registers [ 1694.258923][T31039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1694.326718][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.350891][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.386920][T20054] pegasus 4-1:0.0: can't locate MII phy, using default [ 1694.453876][T20054] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 86:87:8a:cb:f9:89 [ 1694.476996][T20054] usb 4-1: USB disconnect, device number 11 [ 1694.492208][T31039] veth0_vlan: entered promiscuous mode [ 1694.525982][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.533556][T31039] veth1_vlan: entered promiscuous mode [ 1694.556446][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.719212][T31039] veth0_macvtap: entered promiscuous mode [ 1694.759206][T31039] veth1_macvtap: entered promiscuous mode [ 1694.803556][T31039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.824988][T31039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.857724][T31039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.883812][T31039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.900664][T31039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.921260][ T8] gspca_sq930x: ucbus_write failed -71 [ 1694.928125][T31039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.939549][ T8] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1694.953835][T31039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.971147][ T8] usb 5-1: USB disconnect, device number 12 [ 1694.995090][T31039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.022724][T31039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1695.073323][T31039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.094113][T31039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.094113][ T5140] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1695.113878][T31039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.136043][T31039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.154287][T31039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.180907][T31039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.199677][T31039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.210336][T31039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.231820][T31039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1695.262077][T31039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.298094][T31039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.312840][T31039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.317494][ T5140] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1695.337799][T31039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.338164][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.373499][ T5140] usb 1-1: config 0 descriptor?? [ 1695.597615][T31281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.665328][T31281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.773002][T31309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5564'. [ 1695.796012][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.820719][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.883641][ T5140] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1695.944582][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.995987][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.084771][T31319] netlink: 'syz.4.5568': attribute type 11 has an invalid length. [ 1696.118883][T31319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5568'. [ 1696.242306][T31327] netlink: 'syz.1.5531': attribute type 21 has an invalid length. [ 1696.260066][T31327] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5531'. [ 1696.434087][T29953] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1696.474079][ T5142] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 1696.580531][ T5140] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1696.603876][ T5140] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 1696.649203][ T5140] usb 1-1: USB disconnect, device number 117 [ 1696.661643][T29953] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1696.678971][ T5142] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.703549][T29953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.707049][ T5142] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1696.724557][T25451] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1696.733398][ T5142] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1696.746202][ T5142] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1696.747096][T29953] usb 5-1: config 0 descriptor?? [ 1696.765151][ T5142] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.794387][T20054] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1696.799018][T29953] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1696.825482][ T5142] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1696.838829][ T5142] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1696.849877][ T5142] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1696.866705][ T5142] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.887379][ T5142] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1696.898082][ T5142] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1696.912282][T25451] usb 4-1: Using ep0 maxpacket: 16 [ 1696.920681][T25451] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 1696.934352][T25451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.942404][ T5142] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1696.977461][T25451] usb 4-1: config 0 descriptor?? [ 1697.007475][T25451] usb 4-1: interface 1 not found [ 1697.017176][T20054] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1697.031506][ T5142] usb 3-1: string descriptor 0 read error: -22 [ 1697.040400][T20054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.056974][ T5142] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1697.071342][T20054] usb 2-1: config 0 descriptor?? [ 1697.082015][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.105866][T20054] pwc: Samsung MPC-C10 USB webcam detected. [ 1697.137573][ T5142] adutux 3-1:168.0: interrupt endpoints not found [ 1697.223235][ T5142] usb 4-1: USB disconnect, device number 12 [ 1697.442683][T25453] usb 3-1: USB disconnect, device number 13 [ 1697.472263][T31338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5571'. [ 1697.566555][T31334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.617225][T31334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.213355][T31319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.234144][T31319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.484314][T29953] usb 5-1: USB disconnect, device number 13 [ 1698.536028][T19274] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1698.723787][T19274] usb 1-1: Using ep0 maxpacket: 32 [ 1698.737569][T19274] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1698.745951][T19274] usb 1-1: can't read configurations, error -61 [ 1698.923862][T19274] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1699.123951][T19274] usb 1-1: Using ep0 maxpacket: 32 [ 1699.152963][T19274] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1699.169319][T19274] usb 1-1: can't read configurations, error -61 [ 1699.193361][T19274] usb usb1-port1: attempt power cycle [ 1699.511505][T20054] pwc: send_video_command error -71 [ 1699.525565][T20054] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1699.541521][T20054] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1699.579470][T20054] usb 2-1: USB disconnect, device number 31 [ 1699.634805][T19274] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1699.683287][T31371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5579'. [ 1699.737523][T19274] usb 1-1: Using ep0 maxpacket: 32 [ 1699.780301][T19274] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1699.805088][T19274] usb 1-1: can't read configurations, error -61 [ 1699.909170][T31367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5580'. [ 1699.993821][T19274] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1700.038343][T19274] usb 1-1: Using ep0 maxpacket: 32 [ 1700.057180][T19274] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1700.070499][T19274] usb 1-1: can't read configurations, error -61 [ 1700.089236][T19274] usb usb1-port1: unable to enumerate USB device [ 1700.113952][T25453] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1700.358331][T25453] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1700.358366][T25453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.362856][T25453] usb 2-1: config 0 descriptor?? [ 1700.569626][T31381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.569981][T31381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.643883][T20054] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1700.788838][T25453] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1700.828586][T20054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.828649][T20054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.828690][T20054] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1700.828715][T20054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.837992][T20054] usb 4-1: config 0 descriptor?? [ 1701.116626][T31394] xt_TCPMSS: Only works on TCP SYN packets [ 1701.305283][T31411] FAULT_INJECTION: forcing a failure. [ 1701.305283][T31411] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.305483][T31411] CPU: 0 PID: 31411 Comm: syz.0.5591 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1701.305507][T31411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1701.305520][T31411] Call Trace: [ 1701.305530][T31411] [ 1701.305541][T31411] dump_stack_lvl+0x241/0x360 [ 1701.305576][T31411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1701.305602][T31411] ? __pfx__printk+0x10/0x10 [ 1701.305644][T31411] should_fail_ex+0x3b0/0x4e0 [ 1701.305674][T31411] ? dst_alloc+0x12b/0x190 [ 1701.305695][T31411] should_failslab+0x9/0x20 [ 1701.305720][T31411] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1701.305751][T31411] dst_alloc+0x12b/0x190 [ 1701.305778][T31411] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1701.305817][T31411] ip_route_output_key_hash+0x193/0x2b0 [ 1701.305840][T31411] ? ip_route_output_key_hash+0xdf/0x2b0 [ 1701.305860][T31411] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1701.305880][T31411] ? make_kuid+0x204/0x710 [ 1701.305904][T31411] ? __pfx_make_kuid+0x10/0x10 [ 1701.305932][T31411] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 1701.305959][T31411] icmp_route_lookup+0x3fd/0x9d0 [ 1701.305991][T31411] ? __pfx_lock_acquire+0x10/0x10 [ 1701.306013][T31411] ? __pfx_icmp_route_lookup+0x10/0x10 [ 1701.306048][T31411] ? __asan_memset+0x23/0x50 [ 1701.306070][T31411] ? __ip_options_echo+0x242/0x1590 [ 1701.306109][T31411] __icmp_send+0xcd0/0x14e0 [ 1701.306149][T31411] ? __icmp_send+0x59c/0x14e0 [ 1701.306173][T31411] ? __pfx___icmp_send+0x10/0x10 [ 1701.306239][T31411] ? __udp4_lib_lookup_skb+0x296/0x390 [ 1701.306266][T31411] ? udp_lib_checksum_complete+0x157/0x2a0 [ 1701.306295][T31411] __udp4_lib_rcv+0x1777/0x2730 [ 1701.306341][T31411] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 1701.306370][T31411] ? __pfx_udp_rcv+0x10/0x10 [ 1701.306395][T31411] ip_protocol_deliver_rcu+0x287/0x430 [ 1701.306422][T31411] ? ip_local_deliver_finish+0x22e/0x5f0 [ 1701.306448][T31411] ip_local_deliver_finish+0x33f/0x5f0 [ 1701.306480][T31411] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1701.306504][T31411] NF_HOOK+0x3a4/0x450 [ 1701.306532][T31411] ? NF_HOOK+0x9a/0x450 [ 1701.306555][T31411] ? __pfx_NF_HOOK+0x10/0x10 [ 1701.306583][T31411] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1701.306614][T31411] ? ip_rcv_finish+0x406/0x560 [ 1701.306642][T31411] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1701.306665][T31411] NF_HOOK+0x3a4/0x450 [ 1701.306693][T31411] ? NF_HOOK+0x9a/0x450 [ 1701.306716][T31411] ? __pfx_NF_HOOK+0x10/0x10 [ 1701.306738][T31411] ? ip_rcv_core+0x7ff/0xd10 [ 1701.306765][T31411] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1701.306798][T31411] ? __pfx_ip_rcv+0x10/0x10 [ 1701.306823][T31411] __netif_receive_skb+0x2bf/0x650 [ 1701.306853][T31411] ? __pfx_lock_acquire+0x10/0x10 [ 1701.306872][T31411] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 1701.306901][T31411] ? __pfx___netif_receive_skb+0x10/0x10 [ 1701.306924][T31411] ? __kasan_slab_alloc+0x66/0x80 [ 1701.306949][T31411] ? read_tsc+0x9/0x20 [ 1701.306970][T31411] ? timekeeping_get_ns+0x2c0/0x420 [ 1701.307007][T31411] ? netif_receive_skb+0x131/0x890 [ 1701.307031][T31411] ? netif_receive_skb+0x131/0x890 [ 1701.307057][T31411] netif_receive_skb+0x1e8/0x890 [ 1701.307082][T31411] ? tun_rx_batched+0x160/0x8f0 [ 1701.307106][T31411] ? __pfx_netif_receive_skb+0x10/0x10 [ 1701.307145][T31411] ? tun_rx_batched+0x160/0x8f0 [ 1701.307169][T31411] tun_rx_batched+0x1b7/0x8f0 [ 1701.307193][T31411] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1701.307224][T31411] ? __pfx_lock_acquire+0x10/0x10 [ 1701.307245][T31411] ? __pfx_tun_rx_batched+0x10/0x10 [ 1701.307293][T31411] tun_get_user+0x2f35/0x4560 [ 1701.307322][T31411] ? tun_get_user+0x2a2f/0x4560 [ 1701.307362][T31411] ? __pfx_tun_get_user+0x10/0x10 [ 1701.307394][T31411] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1701.307422][T31411] ? tun_get+0x1e/0x2f0 [ 1701.307466][T31411] ? tun_get+0x1e/0x2f0 [ 1701.307487][T31411] ? tun_get+0x27d/0x2f0 [ 1701.307513][T31411] tun_chr_write_iter+0x113/0x1f0 [ 1701.307542][T31411] vfs_write+0xa72/0xc90 [ 1701.307570][T31411] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1701.307597][T31411] ? __pfx_vfs_write+0x10/0x10 [ 1701.307643][T31411] ksys_write+0x1a0/0x2c0 [ 1701.307673][T31411] ? __pfx_ksys_write+0x10/0x10 [ 1701.307696][T31411] ? do_syscall_64+0x100/0x230 [ 1701.307726][T31411] ? do_syscall_64+0xb6/0x230 [ 1701.307753][T31411] do_syscall_64+0xf3/0x230 [ 1701.307778][T31411] ? clear_bhb_loop+0x35/0x90 [ 1701.307801][T31411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.307827][T31411] RIP: 0033:0x7f0ab357475f [ 1701.307848][T31411] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1701.307865][T31411] RSP: 002b:00007f0ab43f4010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1701.307888][T31411] RAX: ffffffffffffffda RBX: 00007f0ab3703f60 RCX: 00007f0ab357475f [ 1701.307904][T31411] RDX: 000000000000002a RSI: 0000000020000000 RDI: 00000000000000c8 [ 1701.307918][T31411] RBP: 00007f0ab43f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.307932][T31411] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 1701.307946][T31411] R13: 000000000000000b R14: 00007f0ab3703f60 R15: 00007f0ab382fa68 [ 1701.307980][T31411] [ 1701.395943][T20054] logitech-hidpp-device 0003:046D:C086.00F6: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 1701.411731][ T5142] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 1701.549657][T20907] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1701.549723][T20907] Bluetooth: hci4: Injecting HCI hardware error event [ 1701.552519][T15441] Bluetooth: hci4: hardware error 0x00 [ 1701.606134][ T5142] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.606171][ T5142] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1701.606185][ T5142] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1701.606213][ T5142] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1701.607298][ T5142] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.607341][ T5142] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1701.607372][ T5142] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1701.607385][ T5142] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1701.608566][ T5142] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.608611][ T5142] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1701.608624][ T5142] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1701.608637][ T5142] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1701.617161][ T5142] usb 5-1: string descriptor 0 read error: -22 [ 1701.617284][ T5142] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1701.617301][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.623552][ T5142] adutux 5-1:168.0: interrupt endpoints not found [ 1701.696003][T20054] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1701.881207][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 1701.888356][T20054] usb 3-1: config 0 has no interfaces? [ 1701.888386][T20054] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1701.888400][T20054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.890418][T20054] usb 3-1: config 0 descriptor?? [ 1701.994868][T20054] usb 5-1: USB disconnect, device number 14 [ 1702.000414][T25453] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1702.000525][T25453] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1702.021275][T25453] usb 2-1: USB disconnect, device number 32 [ 1702.094763][T31413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.094923][T31413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.244395][T29953] usb 3-1: USB disconnect, device number 14 [ 1703.199647][T31427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1703.634832][T15441] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1704.184740][T15441] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1704.193767][T15441] Bluetooth: hci0: Injecting HCI hardware error event [ 1704.203344][T20907] Bluetooth: hci0: hardware error 0x00 [ 1704.224856][T29953] usb 4-1: USB disconnect, device number 13 [ 1704.236402][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1704.236419][ T29] audit: type=1326 audit(1720241954.386:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31451 comm="syz.1.5601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa763d75bd9 code=0x0 [ 1704.264172][ C1] vkms_vblank_simulate: vblank timer overrun [ 1704.307575][T31456] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1704.337400][T31457] FAULT_INJECTION: forcing a failure. [ 1704.337400][T31457] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.351223][T31457] CPU: 1 PID: 31457 Comm: syz.1.5601 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1704.361404][T31457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1704.371478][T31457] Call Trace: [ 1704.374776][T31457] [ 1704.377724][T31457] dump_stack_lvl+0x241/0x360 [ 1704.382432][T31457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1704.387651][T31457] ? __pfx__printk+0x10/0x10 [ 1704.392269][T31457] ? __pfx___might_resched+0x10/0x10 [ 1704.397581][T31457] ? __asan_memset+0x23/0x50 [ 1704.402200][T31457] should_fail_ex+0x3b0/0x4e0 [ 1704.406903][T31457] ? nfc_allocate_device+0x12f/0x520 [ 1704.412215][T31457] should_failslab+0x9/0x20 [ 1704.416741][T31457] kmalloc_trace_noprof+0x6c/0x2c0 [ 1704.421879][T31457] ? __pfx_nci_transceive+0x10/0x10 [ 1704.427080][T31457] nfc_allocate_device+0x12f/0x520 [ 1704.432200][T31457] nci_allocate_device+0x1e2/0x360 [ 1704.437318][T31457] virtual_ncidev_open+0x75/0x1b0 [ 1704.442343][T31457] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1704.447973][T31457] misc_open+0x313/0x390 [ 1704.452221][T31457] chrdev_open+0x5b0/0x630 [ 1704.456641][T31457] ? __pfx_chrdev_open+0x10/0x10 [ 1704.461588][T31457] ? security_file_open+0x51a/0x750 [ 1704.466785][T31457] ? __pfx_chrdev_open+0x10/0x10 [ 1704.471718][T31457] do_dentry_open+0x970/0x1450 [ 1704.476487][T31457] vfs_open+0x3e/0x330 [ 1704.480553][T31457] path_openat+0x2c01/0x35f0 [ 1704.485147][T31457] ? mark_lock+0x9a/0x350 [ 1704.489477][T31457] ? __lock_acquire+0x1346/0x1fd0 [ 1704.494497][T31457] ? __lock_acquire+0x1346/0x1fd0 [ 1704.499509][T31457] ? __pfx_path_openat+0x10/0x10 [ 1704.504455][T31457] do_filp_open+0x235/0x490 [ 1704.508967][T31457] ? __pfx_do_filp_open+0x10/0x10 [ 1704.513999][T31457] ? _raw_spin_unlock+0x28/0x50 [ 1704.518842][T31457] ? alloc_fd+0x5a1/0x640 [ 1704.523171][T31457] do_sys_openat2+0x13e/0x1d0 [ 1704.527852][T31457] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1704.533828][T31457] ? __pfx_do_sys_openat2+0x10/0x10 [ 1704.539021][T31457] ? __fget_files+0x3f6/0x470 [ 1704.543705][T31457] __x64_sys_openat+0x247/0x2a0 [ 1704.548554][T31457] ? __pfx___x64_sys_openat+0x10/0x10 [ 1704.553930][T31457] ? do_syscall_64+0x100/0x230 [ 1704.558698][T31457] ? do_syscall_64+0xb6/0x230 [ 1704.563372][T31457] do_syscall_64+0xf3/0x230 [ 1704.567873][T31457] ? clear_bhb_loop+0x35/0x90 [ 1704.572542][T31457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.578431][T31457] RIP: 0033:0x7fa763d75bd9 [ 1704.582857][T31457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1704.602482][T31457] RSP: 002b:00007fa764b39048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1704.610899][T31457] RAX: ffffffffffffffda RBX: 00007fa763f04038 RCX: 00007fa763d75bd9 [ 1704.618865][T31457] RDX: 0000000000005400 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 1704.626826][T31457] RBP: 00007fa764b390a0 R08: 0000000000000000 R09: 0000000000000000 [ 1704.634795][T31457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.642753][T31457] R13: 000000000000006e R14: 00007fa763f04038 R15: 00007fa76402fa68 [ 1704.650730][T31457] [ 1704.653852][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.848547][T31478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5609'. [ 1705.941251][T29953] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1706.133926][T29953] usb 1-1: Using ep0 maxpacket: 16 [ 1706.137619][T29953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1706.137641][T29953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1706.137663][T29953] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1706.137678][T29953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.139248][T29953] usb 1-1: config 0 descriptor?? [ 1706.484160][ T5140] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1706.675135][T31506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.675362][T31506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.688692][T29953] hid (null): bogus close delimiter [ 1706.692921][T29953] hid (null): invalid report_size 29797 [ 1706.692974][T29953] hid (null): invalid report_size 512 [ 1706.696452][T29953] hid (null): report_id 456434233 is invalid [ 1706.696511][T29953] hid (null): unknown global tag 0xa5 [ 1706.696528][T29953] hid (null): unknown global tag 0xd [ 1706.696611][T29953] hid (null): unknown global tag 0xc [ 1706.696634][T29953] hid (null): global environment stack underflow [ 1706.701251][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.701284][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.701323][ T5140] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1706.701347][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.703585][ T5140] usb 4-1: config 0 descriptor?? [ 1706.712611][T29953] hid-generic 0003:0158:0100.00F7: unknown main item tag 0x0 [ 1706.712652][T29953] hid-generic 0003:0158:0100.00F7: unknown main item tag 0x0 [ 1706.712710][T29953] hid-generic 0003:0158:0100.00F7: bogus close delimiter [ 1706.712725][T29953] hid-generic 0003:0158:0100.00F7: item 0 0 2 10 parsing failed [ 1706.713575][T29953] hid-generic 0003:0158:0100.00F7: probe with driver hid-generic failed with error -22 [ 1706.754237][T20907] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1706.827889][T25453] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1706.861246][T31511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5615'. [ 1706.927804][T31505] xt_TCPMSS: Only works on TCP SYN packets [ 1707.013809][T25453] usb 2-1: Using ep0 maxpacket: 8 [ 1707.027736][T25453] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.027786][T25453] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1707.027830][T25453] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1707.027880][T25453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.039982][T25453] usbtmc 2-1:16.0: bulk endpoints not found [ 1707.187798][ T5140] logitech-hidpp-device 0003:046D:C086.00F8: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 1708.049488][T29953] usb 1-1: USB disconnect, device number 122 [ 1708.430840][T29953] usb 4-1: USB disconnect, device number 14 [ 1708.718240][T31558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5626'. [ 1709.396854][T25453] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1709.562754][ T25] usb 2-1: USB disconnect, device number 33 [ 1709.593780][T25453] usb 3-1: Using ep0 maxpacket: 16 [ 1709.598090][T29953] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1709.614691][T25453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1709.652713][T25453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1709.667145][T25453] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1709.681719][T25453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.685354][T31596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1709.705921][T25453] usb 3-1: config 0 descriptor?? [ 1709.807704][T29953] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1709.821872][T29953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.849822][T29953] usb 4-1: config 0 descriptor?? [ 1709.863956][T20907] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1709.872971][T20907] Bluetooth: hci1: Injecting HCI hardware error event [ 1709.884319][T15441] Bluetooth: hci1: hardware error 0x00 [ 1710.240033][T31606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.254318][T31606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.314930][T25453] hid (null): bogus close delimiter [ 1710.331889][T25453] hid (null): invalid report_size 29797 [ 1710.350357][T25453] hid (null): invalid report_size 512 [ 1710.365480][T25453] hid (null): report_id 456434233 is invalid [ 1710.387493][T25453] hid (null): unknown global tag 0xa5 [ 1710.416482][T25453] hid (null): unknown global tag 0xd [ 1710.421915][T25453] hid (null): unknown global tag 0xc [ 1710.440192][T25453] hid (null): global environment stack underflow [ 1710.456622][T25453] hid-generic 0003:0158:0100.00F9: unknown main item tag 0x0 [ 1710.473195][T25453] hid-generic 0003:0158:0100.00F9: unknown main item tag 0x0 [ 1710.483826][T20054] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1710.493872][T25453] hid-generic 0003:0158:0100.00F9: bogus close delimiter [ 1710.530897][T25453] hid-generic 0003:0158:0100.00F9: item 0 0 2 10 parsing failed [ 1710.559821][T25453] hid-generic 0003:0158:0100.00F9: probe with driver hid-generic failed with error -22 [ 1710.693817][T20054] usb 5-1: Using ep0 maxpacket: 16 [ 1710.738402][T20054] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1710.768796][T20054] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1710.838166][T20054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xDF has an invalid bInterval 0, changing to 7 [ 1710.885793][T20054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xDF has invalid wMaxPacketSize 0 [ 1710.906095][T20054] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1710.950074][T20054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.010791][ T5093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1711.022652][ T5093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1711.031161][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1711.040300][T20054] usb 5-1: Product: syz [ 1711.046100][T20054] usb 5-1: Manufacturer: syz [ 1711.051002][T20054] usb 5-1: SerialNumber: syz [ 1711.065992][ T5093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1711.076012][ T5093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1711.083446][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1711.113982][T20054] usb 5-1: config 0 descriptor?? [ 1711.348554][T25454] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.362332][T31612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1711.454097][T20054] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1711.497914][ T5090] usb 3-1: USB disconnect, device number 15 [ 1711.503114][T20054] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 1711.522552][T20054] usb 5-1: USB disconnect, device number 15 [ 1711.575972][T25454] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.595545][T29953] pegasus 4-1:0.0: setup Pegasus II specific registers [ 1711.743254][T29953] pegasus 4-1:0.0: can't locate MII phy, using default [ 1711.793267][T25454] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.824654][T29953] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, f6:82:4e:8d:a6:3f [ 1711.872325][T29953] usb 4-1: USB disconnect, device number 15 [ 1711.951221][T15441] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1712.046773][T25454] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.096517][T31638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5649'. [ 1712.308233][T31626] chnl_net:caif_netlink_parms(): no params data found [ 1712.502483][T25454] bridge_slave_1: left allmulticast mode [ 1712.517973][T25454] bridge_slave_1: left promiscuous mode [ 1712.524415][T25454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.541844][T25454] bridge_slave_0: left allmulticast mode [ 1712.549134][T25454] bridge_slave_0: left promiscuous mode [ 1712.559899][T25454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.903942][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1713.100084][ T25] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1713.122967][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.154602][ T25] usb 4-1: config 0 descriptor?? [ 1713.230521][T15441] Bluetooth: hci2: command tx timeout [ 1713.380752][T31656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.410817][T31656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.556105][T25454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1713.584239][T25454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.614727][T25454] bond0 (unregistering): Released all slaves [ 1713.658620][ T25] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1713.905533][T31676] netlink: 'syz.2.5657': attribute type 11 has an invalid length. [ 1713.944037][T31676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1714.333836][T29953] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1714.370012][T31626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.410936][T31626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.432235][T31626] bridge_slave_0: entered allmulticast mode [ 1714.458448][T31626] bridge_slave_0: entered promiscuous mode [ 1714.500132][T31626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.541827][T31626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.553986][T29953] usb 1-1: Using ep0 maxpacket: 16 [ 1714.577912][T29953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1714.589224][T31626] bridge_slave_1: entered allmulticast mode [ 1714.617031][T31626] bridge_slave_1: entered promiscuous mode [ 1714.636352][T29953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1714.658316][ T25] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1714.696707][T29953] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1714.700048][ T25] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1714.718590][T25454] hsr_slave_0: left promiscuous mode [ 1714.719958][ T25] usb 4-1: USB disconnect, device number 16 [ 1714.772017][T25454] hsr_slave_1: left promiscuous mode [ 1714.782023][T29953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.802496][T25454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.811899][T25454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.842988][T25454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.866624][T25454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.867745][T29953] usb 1-1: config 0 descriptor?? [ 1714.988115][T25454] veth1_macvtap: left promiscuous mode [ 1715.010982][T25454] veth0_macvtap: left promiscuous mode [ 1715.027520][T25454] veth1_vlan: left promiscuous mode [ 1715.037038][T25454] veth0_vlan: left promiscuous mode [ 1715.303897][T15441] Bluetooth: hci2: command tx timeout [ 1715.368183][T31698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.378977][T31698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.401251][T29953] hid (null): bogus close delimiter [ 1715.426418][T29953] hid (null): invalid report_size 29797 [ 1715.442242][T29953] hid (null): invalid report_size 512 [ 1715.456090][T29953] hid (null): report_id 456434233 is invalid [ 1715.472369][T29953] hid (null): unknown global tag 0xa5 [ 1715.483776][T29953] hid (null): unknown global tag 0xd [ 1715.494017][T29953] hid (null): unknown global tag 0xc [ 1715.504002][T29953] hid (null): global environment stack underflow [ 1715.526614][ T5142] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1715.527208][T29953] hid-generic 0003:0158:0100.00FA: unknown main item tag 0x0 [ 1715.573569][T29953] hid-generic 0003:0158:0100.00FA: unknown main item tag 0x0 [ 1715.584060][T29953] hid-generic 0003:0158:0100.00FA: bogus close delimiter [ 1715.591122][T29953] hid-generic 0003:0158:0100.00FA: item 0 0 2 10 parsing failed [ 1715.620040][T29953] hid-generic 0003:0158:0100.00FA: probe with driver hid-generic failed with error -22 [ 1715.725539][ T5142] usb 3-1: Using ep0 maxpacket: 8 [ 1715.734631][ T5142] usb 3-1: config 1 interface 0 altsetting 99 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1715.744961][ T5142] usb 3-1: config 1 interface 0 altsetting 99 bulk endpoint 0x3 has invalid maxpacket 16 [ 1715.769501][ T5142] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1715.802920][ T5142] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1715.819732][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.843458][ T5142] usb 3-1: Product: 凘鳽變낧俊륢仄⼜騇䰀혱鮈췣ʰꟿ钹罌ᛖ츰㛔뢩괲侾魐㪋ﻈ⣔픎湡鐾觝뿚ெ凬㬤䏥傅ᴣ㬉틿篙뵳쿓闓븕 [ 1715.861462][ T5142] usb 3-1: Manufacturer: 镻ⱀ쒈驶໅ຂ慢僈࣫틜곕ҽᩜ﷝꿶쁬툥띋괂웗뽽኱릅韃Ⱁ鑥ꀞ瑛쿇톉긚⧑㕛븱”不팖룿堣㕶酇䐫幸죹箚䳪먑덯࣍䪗椸宪뒽콉嚆㌁뷎镬쁀櫓ᛛ肻謢ݑ 턇⨢煳쬞䦱逫钓儗؁三዆ᒥय़兏祸鸽뀨⸝ꑸ责优䢷昤嚬䮶兙胻ꠑ視ጺ듮钱爭鏅麁튌⚆젽條㽤उܵ㔘ꡏ瓷 [ 1715.905097][ T5142] usb 3-1: SerialNumber: ည [ 1715.918496][T31679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1715.952212][T31679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1716.194835][T25454] team0 (unregistering): Port device team_slave_1 removed [ 1716.224823][T29953] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1716.252367][ T5142] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1716.279768][ T5142] usb 3-1: USB disconnect, device number 16 [ 1716.290091][T25454] team0 (unregistering): Port device team_slave_0 removed [ 1716.370258][ T5090] usb 1-1: USB disconnect, device number 123 [ 1716.456010][T29953] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1716.479562][T29953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.492728][T29953] usb 4-1: config 0 descriptor?? [ 1717.383932][T15441] Bluetooth: hci2: command tx timeout [ 1717.465148][T31626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1717.501709][T31626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1717.518954][T31719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5664'. [ 1717.687939][T31626] team0: Port device team_slave_0 added [ 1717.713620][T31626] team0: Port device team_slave_1 added [ 1717.864374][ T5142] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1717.922834][T31626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.951185][T31626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.041879][T31626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.078329][T31626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1718.094652][ T5142] usb 3-1: Using ep0 maxpacket: 32 [ 1718.100075][T31626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.140309][T29953] pegasus 4-1:0.0: setup Pegasus II specific registers [ 1718.163087][ T5142] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1718.188081][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.212899][T31626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1718.229797][ T5142] usb 3-1: config 0 descriptor?? [ 1718.242229][ T5142] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1718.292419][T29953] pegasus 4-1:0.0: can't locate MII phy, using default [ 1718.359096][T29953] pegasus 4-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 2a:d7:1c:cd:5f:af [ 1718.409402][T29953] usb 4-1: USB disconnect, device number 17 [ 1718.472319][T31626] hsr_slave_0: entered promiscuous mode [ 1718.483260][T31626] hsr_slave_1: entered promiscuous mode [ 1718.494095][T31626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1718.506908][T31626] Cannot create hsr debugfs directory [ 1719.250436][ T5142] gspca_sq930x: ucbus_write failed -71 [ 1719.256305][ T5142] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1719.296883][ T5142] usb 3-1: USB disconnect, device number 17 [ 1719.454333][T29953] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 1719.463905][T15441] Bluetooth: hci2: command tx timeout [ 1719.716537][T29953] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.737493][T29953] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1719.763867][T20054] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1719.771691][T29953] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1719.783580][T29953] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1719.823913][T31626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1719.843254][T31626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1719.843813][T29953] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.895708][T31626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1719.898568][T29953] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1719.917096][T29953] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1719.932402][T29953] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1719.987488][T29953] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.993838][T20054] usb 4-1: Using ep0 maxpacket: 16 [ 1720.005891][T29953] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1720.007032][T31626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1720.036270][T29953] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1720.046647][T20054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1720.068020][T20054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1720.075152][T29953] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1720.082539][T20054] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1720.143331][T20054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.169228][T29953] usb 5-1: string descriptor 0 read error: -22 [ 1720.199468][T29953] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1720.217057][T20054] usb 4-1: config 0 descriptor?? [ 1720.238786][T29953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.278179][T29953] adutux 5-1:168.0: interrupt endpoints not found [ 1720.335970][T31772] random: crng reseeded on system resumption [ 1720.529830][T29953] usb 5-1: USB disconnect, device number 16 [ 1720.722090][T31626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1720.834445][T31776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.864255][T31776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.879112][T31626] 8021q: adding VLAN 0 to HW filter on device team0 [ 1720.886417][T20054] hid (null): bogus close delimiter [ 1720.907034][T25453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.914214][T25453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1720.925708][T20054] hid (null): invalid report_size 29797 [ 1720.942761][T20054] hid (null): invalid report_size 512 [ 1720.966786][T20054] hid-generic 0003:0158:0100.00FB: unknown main item tag 0x0 [ 1720.985935][T20054] hid-generic 0003:0158:0100.00FB: unknown main item tag 0x0 [ 1720.997939][T25453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.998064][T25453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.012799][T20054] hid-generic 0003:0158:0100.00FB: bogus close delimiter [ 1721.036177][T20054] hid-generic 0003:0158:0100.00FB: item 0 0 2 10 parsing failed [ 1721.036919][T20054] hid-generic 0003:0158:0100.00FB: probe with driver hid-generic failed with error -22 [ 1721.197229][T31626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.273558][T31626] veth0_vlan: entered promiscuous mode [ 1721.286266][T31626] veth1_vlan: entered promiscuous mode [ 1721.333241][T31626] veth0_macvtap: entered promiscuous mode [ 1721.354999][T31626] veth1_macvtap: entered promiscuous mode [ 1721.360547][T29953] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1721.379136][T31626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1721.379163][T31626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.379177][T31626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1721.379193][T31626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.379206][T31626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1721.379221][T31626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.379234][T31626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1721.379249][T31626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.385881][T31626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1721.510432][T31626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1721.510457][T31626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.510470][T31626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1721.510485][T31626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.510497][T31626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1721.510511][T31626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.510524][T31626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1721.510538][T31626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.512185][T31626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.521732][T31626] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.521771][T31626] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.521799][T31626] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.521826][T31626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.550575][T29953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.550611][T29953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.550648][T29953] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1721.550670][T29953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.568145][T29953] usb 1-1: config 0 descriptor?? [ 1721.764947][ T5090] usb 4-1: USB disconnect, device number 18 [ 1721.768845][T25454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.768868][T25454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.800898][T31786] xt_TCPMSS: Only works on TCP SYN packets [ 1721.893643][ T2429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.893771][ T2429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.067420][T29953] logitech-hidpp-device 0003:046D:C086.00FC: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 1722.467694][T31819] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5682'. [ 1722.799921][T25451] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1722.827258][T25453] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1722.944635][T20054] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1722.973839][T25451] usb 2-1: Using ep0 maxpacket: 32 [ 1722.977919][T25451] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1722.977950][T25451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.977971][T25451] usb 2-1: Product: syz [ 1722.977985][T25451] usb 2-1: Manufacturer: syz [ 1722.978001][T25451] usb 2-1: SerialNumber: syz [ 1722.980473][T25451] usb 2-1: config 0 descriptor?? [ 1723.016390][T25453] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1723.016449][T25453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.019111][T25453] usb 3-1: config 0 descriptor?? [ 1723.127170][T20054] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1723.127246][T20054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.130919][T20054] usb 4-1: config 0 descriptor?? [ 1723.240270][T31824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.240516][T31824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.267028][T25453] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1723.340886][T31830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.341447][T31830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.453488][T25453] usb 3-1: USB disconnect, device number 18 [ 1723.501303][T25451] f81534a_ctrl 2-1:0.0: failed to set register 0x116: -5 [ 1723.501340][T25451] f81534a_ctrl 2-1:0.0: failed to enable ports: -5 [ 1723.506061][T25451] f81534a_ctrl 2-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1723.535503][T25451] usb 2-1: USB disconnect, device number 34 [ 1723.543460][T20054] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1723.731962][ T5090] usb 1-1: USB disconnect, device number 124 [ 1724.165277][ T5090] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1724.241041][T20054] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1724.267174][T20054] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1724.282549][T20054] usb 4-1: USB disconnect, device number 19 [ 1724.395640][ T5090] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.433390][ T5090] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1724.456068][ T5090] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1724.469090][ T5090] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1724.486440][ T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1724.496921][ T5090] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.528363][ T5090] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1724.553049][ T5090] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1724.572105][ T5090] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1724.594292][ T5090] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.618367][ T5090] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1724.639237][ T5090] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1724.659365][ T5090] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1724.674174][ T5140] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1724.696398][ T5090] usb 5-1: string descriptor 0 read error: -22 [ 1724.703814][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1724.713429][ T5090] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1724.716819][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1724.736407][ T5090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.743354][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1724.766364][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1724.770245][ T5090] adutux 5-1:168.0: interrupt endpoints not found [ 1724.778833][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.798186][ T25] usb 3-1: config 0 descriptor?? [ 1724.863860][ T5140] usb 2-1: Using ep0 maxpacket: 16 [ 1724.880146][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1724.893789][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1724.939880][ T5140] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1724.957383][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.989897][T19274] usb 5-1: USB disconnect, device number 17 [ 1725.024665][ T5140] usb 2-1: config 0 descriptor?? [ 1725.302737][T31896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.344063][T31896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.397570][ T25] hid (null): bogus close delimiter [ 1725.415391][ T25] hid (null): invalid report_size 29797 [ 1725.434675][ T25] hid (null): invalid report_size 512 [ 1725.454416][ T25] hid (null): report_id 456434233 is invalid [ 1725.454503][ T25] hid (null): unknown global tag 0xa5 [ 1725.454532][ T25] hid (null): unknown global tag 0xd [ 1725.454638][ T25] hid (null): unknown global tag 0xc [ 1725.454677][ T25] hid (null): global environment stack underflow [ 1725.460418][ T25] hid-generic 0003:0158:0100.00FD: unknown main item tag 0x0 [ 1725.461120][ T25] hid-generic 0003:0158:0100.00FD: unknown main item tag 0x0 [ 1725.461154][ T25] hid-generic 0003:0158:0100.00FD: bogus close delimiter [ 1725.461171][ T25] hid-generic 0003:0158:0100.00FD: item 0 0 2 10 parsing failed [ 1725.463078][ T25] hid-generic 0003:0158:0100.00FD: probe with driver hid-generic failed with error -22 [ 1725.599209][T31904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.599523][T31904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.614783][ T5140] hid (null): bogus close delimiter [ 1725.630795][ T5140] hid (null): invalid report_size 29797 [ 1725.689139][ T5140] hid (null): invalid report_size 512 [ 1725.701951][ T5140] hid (null): report_id 456434233 is invalid [ 1725.712061][ T5140] hid (null): unknown global tag 0xa5 [ 1725.721831][ T5140] hid (null): unknown global tag 0xd [ 1725.729152][ T5140] hid (null): unknown global tag 0xc [ 1725.738986][ T5140] hid (null): global environment stack underflow [ 1725.749327][ T5140] hid-generic 0003:0158:0100.00FE: unknown main item tag 0x0 [ 1725.762224][ T5140] hid-generic 0003:0158:0100.00FE: unknown main item tag 0x0 [ 1725.772464][ T5140] hid-generic 0003:0158:0100.00FE: bogus close delimiter [ 1725.783179][ T5140] hid-generic 0003:0158:0100.00FE: item 0 0 2 10 parsing failed [ 1725.807935][ T5140] hid-generic 0003:0158:0100.00FE: probe with driver hid-generic failed with error -22 [ 1726.203884][ T5140] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1726.239335][ T5090] usb 3-1: USB disconnect, device number 19 [ 1726.443779][ T5140] usb 5-1: Using ep0 maxpacket: 32 [ 1726.452528][ T5140] usb 5-1: New USB device found, idVendor=08c8, idProduct=0321, bcdDevice=6f.be [ 1726.493286][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.533117][ T5140] usb 5-1: config 0 descriptor?? [ 1726.690511][ T5142] usb 2-1: USB disconnect, device number 35 [ 1726.696661][T31919] FAULT_INJECTION: forcing a failure. [ 1726.696661][T31919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.723997][T31919] CPU: 1 PID: 31919 Comm: syz.2.5701 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1726.734201][T31919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1726.744274][T31919] Call Trace: [ 1726.747568][T31919] [ 1726.750513][T31919] dump_stack_lvl+0x241/0x360 [ 1726.755216][T31919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1726.760433][T31919] ? __pfx__printk+0x10/0x10 [ 1726.765046][T31919] ? __pfx_lock_release+0x10/0x10 [ 1726.770092][T31919] ? __fget_files+0x3f6/0x470 [ 1726.774796][T31919] should_fail_ex+0x3b0/0x4e0 [ 1726.779502][T31919] _copy_from_user+0x2f/0xe0 [ 1726.784113][T31919] __x64_sys_signalfd+0x10d/0x190 [ 1726.789148][T31919] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 1726.794696][T31919] ? do_syscall_64+0x100/0x230 [ 1726.799457][T31919] ? do_syscall_64+0xb6/0x230 [ 1726.804128][T31919] do_syscall_64+0xf3/0x230 [ 1726.808626][T31919] ? clear_bhb_loop+0x35/0x90 [ 1726.813292][T31919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.819179][T31919] RIP: 0033:0x7f03a1d75bd9 [ 1726.823585][T31919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1726.843184][T31919] RSP: 002b:00007f03a2af0048 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 1726.851595][T31919] RAX: ffffffffffffffda RBX: 00007f03a1f03f60 RCX: 00007f03a1d75bd9 [ 1726.859566][T31919] RDX: 0000000000000008 RSI: 0000000020002340 RDI: 0000000000000003 [ 1726.867550][T31919] RBP: 00007f03a2af00a0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.875513][T31919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.883477][T31919] R13: 000000000000000b R14: 00007f03a1f03f60 R15: 00007f03a202fa68 [ 1726.891458][T31919] [ 1726.894611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1727.240109][T31930] netlink: 'syz.3.5706': attribute type 11 has an invalid length. [ 1727.252493][T31930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5706'. [ 1727.363840][ T5140] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1727.374063][ T5142] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1727.546387][ T5140] usb 1-1: Using ep0 maxpacket: 8 [ 1727.560507][ T5140] usb 1-1: config 1 interface 0 altsetting 99 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1727.575551][ T5142] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1727.585204][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.593469][ T5140] usb 1-1: config 1 interface 0 altsetting 99 bulk endpoint 0x3 has invalid maxpacket 16 [ 1727.594531][T20054] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1727.608413][ T5142] usb 3-1: config 0 descriptor?? [ 1727.627171][ T5140] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1727.640427][T31936] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5699'. [ 1727.642498][ T5140] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1727.664033][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.672561][ T5140] usb 1-1: Product: 凘鳽變낧俊륢仄⼜騇䰀혱鮈췣ʰꟿ钹罌ᛖ츰㛔뢩괲侾魐㪋ﻈ⣔픎湡鐾觝뿚ெ凬㬤䏥傅ᴣ㬉틿篙뵳쿓闓븕 [ 1727.693947][ T5140] usb 1-1: Manufacturer: 镻ⱀ쒈驶໅ຂ慢僈࣫틜곕ҽᩜ﷝꿶쁬툥띋괂웗뽽኱릅韃Ⱁ鑥ꀞ瑛쿇톉긚⧑㕛븱”不팖룿堣㕶酇䐫幸죹箚䳪먑덯࣍䪗椸宪뒽콉嚆㌁뷎镬쁀櫓ᛛ肻謢ݑ 턇⨢煳쬞䦱逫钓儗؁三዆ᒥय़兏祸鸽뀨⸝ꑸ责优䢷昤嚬䮶兙胻ꠑ視ጺ듮钱爭鏅麁튌⚆젽條㽤उܵ㔘ꡏ瓷 [ 1727.729945][ T5140] usb 1-1: SerialNumber: ည [ 1727.769983][T31920] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1727.777497][T31920] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1727.793842][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1727.812496][T20054] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1727.827373][T20054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.844784][T31924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.861469][T31924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.866134][T20054] usb 2-1: config 0 descriptor?? [ 1728.005173][ T5140] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1728.015066][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1728.036938][ T5140] usb 1-1: USB disconnect, device number 125 [ 1728.064145][ T25] usb 4-1: config 1 interface 0 altsetting 99 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1728.080311][ T25] usb 4-1: config 1 interface 0 altsetting 99 bulk endpoint 0x3 has invalid maxpacket 16 [ 1728.091293][ T5142] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1728.099139][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1728.122531][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1728.137984][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.148121][ T25] usb 4-1: Product: 凘鳽變낧俊륢仄⼜騇䰀혱鮈췣ʰꟿ钹罌ᛖ츰㛔뢩괲侾魐㪋ﻈ⣔픎湡鐾觝뿚ெ凬㬤䏥傅ᴣ㬉틿篙뵳쿓闓븕 [ 1728.169875][ T25] usb 4-1: Manufacturer: 镻ⱀ쒈驶໅ຂ慢僈࣫틜곕ҽᩜ﷝꿶쁬툥띋괂웗뽽኱릅韃Ⱁ鑥ꀞ瑛쿇톉긚⧑㕛븱”不팖룿堣㕶酇䐫幸죹箚䳪먑덯࣍䪗椸宪뒽콉嚆㌁뷎镬쁀櫓ᛛ肻謢ݑ 턇⨢煳쬞䦱逫钓儗؁三዆ᒥय़兏祸鸽뀨⸝ꑸ责优䢷昤嚬䮶兙胻ꠑ視ጺ듮钱爭鏅麁튌⚆젽條㽤उܵ㔘ꡏ瓷 [ 1728.203773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.218487][ T25] usb 4-1: SerialNumber: ည [ 1728.230249][T31930] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1728.241904][T31930] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1728.472499][ T25] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1728.506736][ T25] usb 4-1: USB disconnect, device number 20 [ 1728.919302][ T5142] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1728.955206][ T5142] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1728.970175][ T5142] usb 3-1: USB disconnect, device number 20 [ 1729.042021][T19274] usb 5-1: USB disconnect, device number 18 [ 1729.474333][ T5090] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1729.525685][T20054] pegasus 2-1:0.0: setup Pegasus II specific registers [ 1729.668268][T20054] pegasus 2-1:0.0: can't locate MII phy, using default [ 1729.691896][T20054] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, fa:03:aa:d6:4a:d9 [ 1729.703410][T20054] usb 2-1: USB disconnect, device number 36 [ 1729.703812][ T5090] usb 1-1: Using ep0 maxpacket: 16 [ 1729.735889][ T5090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1729.769311][ T5090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1729.814006][ T5090] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1729.853204][ T5090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.866719][T31967] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5716'. [ 1729.890165][ T5090] usb 1-1: config 0 descriptor?? [ 1730.212581][ T5142] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1730.423999][ T5142] usb 5-1: Using ep0 maxpacket: 32 [ 1730.436439][ T5142] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1730.466819][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.511971][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.512801][T31972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.518520][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.527714][ T5142] usb 5-1: config 0 descriptor?? [ 1730.580692][ T5142] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1730.637785][T31972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.717132][ T5090] hid (null): bogus close delimiter [ 1730.745119][ T5090] hid (null): invalid report_size 29797 [ 1730.784500][ T5090] hid (null): invalid report_size 512 [ 1730.835374][ T5090] hid (null): report_id 456434233 is invalid [ 1730.870529][ T5090] hid (null): unknown global tag 0xa5 [ 1730.900538][ T5090] hid (null): unknown global tag 0xd [ 1730.918703][ T5090] hid (null): unknown global tag 0xc [ 1730.956356][ T5090] hid (null): global environment stack underflow [ 1731.022234][ T5090] hid-generic 0003:0158:0100.00FF: unknown main item tag 0x0 [ 1731.049937][ T5090] hid-generic 0003:0158:0100.00FF: unknown main item tag 0x0 [ 1731.082215][ T5090] hid-generic 0003:0158:0100.00FF: bogus close delimiter [ 1731.098026][T31986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5721'. [ 1731.113784][ T5090] hid-generic 0003:0158:0100.00FF: item 0 0 2 10 parsing failed [ 1731.142567][ T5090] hid-generic 0003:0158:0100.00FF: probe with driver hid-generic failed with error -22 [ 1731.290853][T31987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5721'. [ 1731.304301][T20054] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1731.387113][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5721'. [ 1731.427122][T31986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5721'. [ 1731.504100][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 1731.520505][T20054] usb 3-1: config 1 interface 0 altsetting 99 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1731.550338][T20054] usb 3-1: config 1 interface 0 altsetting 99 bulk endpoint 0x3 has invalid maxpacket 16 [ 1731.587604][T20054] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1731.604930][ T5142] gspca_sq930x: ucbus_write failed -71 [ 1731.613024][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1731.622331][ T5142] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1731.630255][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.643988][ T5142] usb 5-1: USB disconnect, device number 19 [ 1731.650085][T20054] usb 3-1: Product: 凘鳽變낧俊륢仄⼜騇䰀혱鮈췣ʰꟿ钹罌ᛖ츰㛔뢩괲侾魐㪋ﻈ⣔픎湡鐾觝뿚ெ凬㬤䏥傅ᴣ㬉틿篙뵳쿓闓븕 [ 1731.668835][T31995] netlink: 'syz.3.5722': attribute type 11 has an invalid length. [ 1731.671344][T20054] usb 3-1: Manufacturer: 镻ⱀ쒈驶໅ຂ慢僈࣫틜곕ҽᩜ﷝꿶쁬툥띋괂웗뽽኱릅韃Ⱁ鑥ꀞ瑛쿇톉긚⧑㕛븱”不팖룿堣㕶酇䐫幸죹箚䳪먑덯࣍䪗椸宪뒽콉嚆㌁뷎镬쁀櫓ᛛ肻謢ݑ 턇⨢煳쬞䦱逫钓儗؁三዆ᒥय़兏祸鸽뀨⸝ꑸ责优䢷昤嚬䮶兙胻ꠑ視ጺ듮钱爭鏅麁튌⚆젽條㽤उܵ㔘ꡏ瓷 [ 1731.703365][T31995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5722'. [ 1731.710774][ C1] vkms_vblank_simulate: vblank timer overrun [ 1731.714870][T20054] usb 3-1: SerialNumber: ည [ 1731.740346][T31974] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1731.782707][T31974] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1731.812318][ T5090] usb 1-1: USB disconnect, device number 126 [ 1732.024957][T20054] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1732.074624][T20054] usb 3-1: USB disconnect, device number 21 [ 1732.509429][ T5090] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1732.646551][ T5140] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1732.714321][ T5090] usb 1-1: Using ep0 maxpacket: 32 [ 1732.732508][ T5090] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1732.751360][ T5090] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1732.778022][ T5090] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1732.798670][ T5090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1732.818062][ T5090] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1732.859909][ T5090] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1732.876681][ T5140] usb 4-1: Using ep0 maxpacket: 8 [ 1732.924768][ T5090] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1732.935774][ T5090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.944811][ T5140] usb 4-1: config 1 interface 0 altsetting 99 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1732.955184][ T5140] usb 4-1: config 1 interface 0 altsetting 99 bulk endpoint 0x3 has invalid maxpacket 16 [ 1732.965338][ T5140] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1732.981758][ T5090] usb 1-1: config 0 descriptor?? [ 1732.991644][ T5140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1733.004321][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.012538][ T5140] usb 4-1: Product: 凘鳽變낧俊륢仄⼜騇䰀혱鮈췣ʰꟿ钹罌ᛖ츰㛔뢩괲侾魐㪋ﻈ⣔픎湡鐾觝뿚ெ凬㬤䏥傅ᴣ㬉틿篙뵳쿓闓븕 [ 1733.053859][ T5140] usb 4-1: Manufacturer: 镻ⱀ쒈驶໅ຂ慢僈࣫틜곕ҽᩜ﷝꿶쁬툥띋괂웗뽽኱릅韃Ⱁ鑥ꀞ瑛쿇톉긚⧑㕛븱”不팖룿堣㕶酇䐫幸죹箚䳪먑덯࣍䪗椸宪뒽콉嚆㌁뷎镬쁀櫓ᛛ肻謢ݑ 턇⨢煳쬞䦱逫钓儗؁三዆ᒥय़兏祸鸽뀨⸝ꑸ责优䢷昤嚬䮶兙胻ꠑ視ጺ듮钱爭鏅麁튌⚆젽條㽤उܵ㔘ꡏ瓷 [ 1733.100198][ T5140] usb 4-1: SerialNumber: ည [ 1733.151312][T31998] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1733.167640][T31998] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1733.203090][ T5090] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 127 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1733.252691][ T5090] usb 1-1: USB disconnect, device number 127 [ 1733.284640][ T5090] usblp0: removed [ 1733.461324][ T5140] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1733.517549][ T5140] usb 4-1: USB disconnect, device number 21 [ 1733.642482][T32021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5732'. [ 1733.780271][ T5090] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1733.836754][T20907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1733.853978][T20907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1733.863274][T20907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1733.871307][T20907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1733.879232][T20907] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1733.886610][T20907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1734.023838][ T5090] usb 1-1: Using ep0 maxpacket: 32 [ 1734.031011][ T5090] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1734.040120][ T5090] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1734.062796][ T5090] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1734.097232][ T5090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1734.143727][ T5090] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1734.180003][T25454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.197985][ T5090] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1734.247216][ T5090] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1734.268746][ T5090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.291662][ T5090] usb 1-1: config 0 descriptor?? [ 1734.400743][T25454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.514528][ T5090] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1734.547763][T25454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.677292][T25454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.803659][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1839.810652][ C1] rcu: 0-...!: (29 ticks this GP) idle=0afc/1/0x4000000000000000 softirq=231428/231428 fqs=0 [ 1839.822454][ C1] rcu: (detected by 1, t=10502 jiffies, g=326345, q=541 ncpus=2) [ 1839.830280][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1839.835498][ C0] NMI backtrace for cpu 0 [ 1839.835513][ C0] CPU: 0 PID: 31997 Comm: syz.0.5723 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1839.835535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1839.835547][ C0] RIP: 0010:__lock_acquire+0x425/0x1fd0 [ 1839.835576][ C0] Code: bc 24 e8 00 00 00 00 0f 95 c0 31 c9 83 3f 00 0f 95 c1 09 cb c1 e3 0d 44 09 eb 8b 4c 24 48 c1 e1 0f 0f b7 c9 09 d9 8b 7c 24 68 <83> e7 03 c1 e7 10 09 cf 44 89 74 24 38 44 89 f1 83 e1 01 c1 e1 12 [ 1839.835593][ C0] RSP: 0018:ffffc900000077b0 EFLAGS: 00000006 [ 1839.835611][ C0] RAX: 0000000000000000 RBX: 0000000000006021 RCX: 0000000000006021 [ 1839.835624][ C0] RDX: 0000000000000001 RSI: dffffc0000000000 RDI: 0000000000000002 [ 1839.835637][ C0] RBP: 0000000000000005 R08: ffff8880233ba8e0 R09: 0000000000000001 [ 1839.835651][ C0] R10: dffffc0000000000 R11: fffffbfff1f5a92e R12: ffffffff8e333f20 [ 1839.835666][ C0] R13: 0000000000000021 R14: 0000000000000000 R15: 0000000000000000 [ 1839.835679][ C0] FS: 00007f0ab43f46c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1839.835697][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1839.835711][ C0] CR2: 000000002019d240 CR3: 000000004e844000 CR4: 00000000003526f0 [ 1839.835728][ C0] Call Trace: [ 1839.835737][ C0] [ 1839.835746][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1839.835768][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1839.835789][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1839.835817][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1839.835839][ C0] ? nmi_handle+0x14f/0x5a0 [ 1839.835864][ C0] ? nmi_handle+0x2a/0x5a0 [ 1839.835891][ C0] ? __lock_acquire+0x425/0x1fd0 [ 1839.835909][ C0] ? default_do_nmi+0x63/0x160 [ 1839.835930][ C0] ? exc_nmi+0x123/0x1f0 [ 1839.835949][ C0] ? end_repeat_nmi+0xf/0x53 [ 1839.835984][ C0] ? __lock_acquire+0x425/0x1fd0 [ 1839.836004][ C0] ? __lock_acquire+0x425/0x1fd0 [ 1839.836025][ C0] ? __lock_acquire+0x425/0x1fd0 [ 1839.836045][ C0] [ 1839.836051][ C0] [ 1839.836065][ C0] lock_acquire+0x1ed/0x550 [ 1839.836084][ C0] ? advance_sched+0xa02/0xca0 [ 1839.836113][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1839.836132][ C0] ? advance_sched+0x9b4/0xca0 [ 1839.836156][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1839.836180][ C0] ? __pfx_lock_release+0x10/0x10 [ 1839.836202][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1839.836227][ C0] ? taprio_set_budgets+0x32c/0x370 [ 1839.836253][ C0] ? advance_sched+0xa02/0xca0 [ 1839.836278][ C0] advance_sched+0xa1e/0xca0 [ 1839.836302][ C0] ? advance_sched+0xa02/0xca0 [ 1839.836333][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1839.836358][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 1839.836383][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1839.836412][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1839.836441][ C0] hrtimer_interrupt+0x396/0x990 [ 1839.836476][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1839.836504][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1839.836527][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1839.836554][ C0] RIP: 0010:handle_softirqs+0x1df/0x970 [ 1839.836574][ C0] Code: 89 7c 24 70 0f b7 db 48 c7 c7 40 b0 c9 8b e8 a8 02 2c 0a 65 66 c7 05 56 d2 a9 7e 00 00 e8 f9 88 43 00 fb 49 c7 c4 c0 a0 00 8e ff ff ff ff 0f bc c3 41 89 c7 41 ff c7 0f 84 e6 03 00 00 89 5c [ 1839.836590][ C0] RSP: 0018:ffffc90000007e40 EFLAGS: 00000286 [ 1839.836606][ C0] RAX: 24abb8f7b1d31800 RBX: 0000000000000386 RCX: ffffffff8172da6a [ 1839.836621][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1fe9c0 [ 1839.836636][ C0] RBP: ffffc90000007f50 R08: ffffffff92fa758f R09: 1ffffffff25f4eb1 [ 1839.836651][ C0] R10: dffffc0000000000 R11: fffffbfff25f4eb2 R12: ffffffff8e00a0c0 [ 1839.836666][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000000fdc [ 1839.836684][ C0] ? mark_lock+0x9a/0x350 [ 1839.836708][ C0] ? ktime_get+0x9b/0xb0 [ 1839.836733][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1839.836753][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1839.836774][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1839.836800][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1839.836819][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1839.836841][ C0] irq_exit_rcu+0x9/0x30 [ 1839.836859][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1839.836882][ C0] [ 1839.836889][ C0] [ 1839.836896][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1839.836922][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 1839.836944][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 45 58 7f 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 1839.836963][ C0] RSP: 0018:ffffc9000d53edf8 EFLAGS: 00000206 [ 1839.836979][ C0] RAX: dffffc0000000000 RBX: 1ffff92001aa7dc8 RCX: ffffffff9479f603 [ 1839.836994][ C0] RDX: 0000000000000001 RSI: ffffffff8bcac820 RDI: ffffffff8c1fe9c0 [ 1839.837008][ C0] RBP: ffffc9000d53eec8 R08: ffffffff9478d08f R09: 1ffffffff28f1a11 [ 1839.837023][ C0] R10: dffffc0000000000 R11: fffffbfff28f1a12 R12: ffffffff9478ac38 [ 1839.837038][ C0] R13: 1ffff92001aa7dc4 R14: 0000000000000207 R15: ffffc9000d53ee40 [ 1839.837061][ C0] lockdep_unregister_key+0x4b7/0x540 [ 1839.837084][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1839.837106][ C0] ? rcu_is_watching+0x15/0xb0 [ 1839.837126][ C0] ? qdisc_reset+0x3bb/0x5a0 [ 1839.837154][ C0] __qdisc_destroy+0x165/0x410 [ 1839.837179][ C0] taprio_attach+0x24e/0x390 [ 1839.837206][ C0] ? __pfx_taprio_attach+0x10/0x10 [ 1839.837230][ C0] qdisc_graft+0x128a/0x1580 [ 1839.837253][ C0] ? qdisc_graft+0x2a1/0x1580 [ 1839.837278][ C0] ? __pfx_qdisc_graft+0x10/0x10 [ 1839.837300][ C0] ? __pfx_qdisc_create+0x10/0x10 [ 1839.837325][ C0] tc_modify_qdisc+0xf47/0x1e40 [ 1839.837354][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1839.837387][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1839.837407][ C0] rtnetlink_rcv_msg+0x89b/0x1180 [ 1839.837435][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1839.837461][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1839.837489][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1839.837510][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1839.837532][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1839.837550][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1839.837573][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1839.837591][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1839.837612][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1839.837634][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1839.837656][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1839.837678][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 1839.837706][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1839.837733][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1839.837762][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1839.837786][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1839.837812][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1839.837846][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1839.837871][ C0] netlink_unicast+0x7ea/0x980 [ 1839.837896][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1839.837916][ C0] ? __virt_addr_valid+0x183/0x520 [ 1839.837941][ C0] ? __check_object_size+0x49c/0x900 [ 1839.837988][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1839.838014][ C0] netlink_sendmsg+0x8db/0xcb0 [ 1839.838044][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1839.838069][ C0] ? __import_iovec+0x536/0x820 [ 1839.838088][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1839.838114][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1839.838131][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1839.838154][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1839.838177][ C0] __sock_sendmsg+0x221/0x270 [ 1839.838205][ C0] ____sys_sendmsg+0x525/0x7d0 [ 1839.838232][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1839.838261][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 1839.838284][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 1839.838325][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1839.838346][ C0] ? do_syscall_64+0x100/0x230 [ 1839.838372][ C0] ? do_syscall_64+0xb6/0x230 [ 1839.838397][ C0] do_syscall_64+0xf3/0x230 [ 1839.838421][ C0] ? clear_bhb_loop+0x35/0x90 [ 1839.838440][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.838465][ C0] RIP: 0033:0x7f0ab3575bd9 [ 1839.838483][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1839.838499][ C0] RSP: 002b:00007f0ab43f4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1839.838518][ C0] RAX: ffffffffffffffda RBX: 00007f0ab3703f60 RCX: 00007f0ab3575bd9 [ 1839.838532][ C0] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000005 [ 1839.838544][ C0] RBP: 00007f0ab35e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1839.838558][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1839.838570][ C0] R13: 000000000000000b R14: 00007f0ab3703f60 R15: 00007f0ab382fa68 [ 1839.838591][ C0] [ 1839.839492][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g326345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1840.702984][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=128335 [ 1840.710962][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g326345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1840.722418][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1840.732385][ C1] rcu: RCU grace-period kthread stack dump: [ 1840.738268][ C1] task:rcu_preempt state:I stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1840.748439][ C1] Call Trace: [ 1840.751719][ C1] [ 1840.754655][ C1] __schedule+0x17e8/0x4a20 [ 1840.759189][ C1] ? __pfx___schedule+0x10/0x10 [ 1840.764047][ C1] ? __pfx_lock_release+0x10/0x10 [ 1840.769075][ C1] ? __asan_memset+0x23/0x50 [ 1840.773672][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1840.779480][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1840.785811][ C1] ? schedule+0x90/0x320 [ 1840.790058][ C1] schedule+0x14b/0x320 [ 1840.794219][ C1] schedule_timeout+0x1be/0x310 [ 1840.799082][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1840.804460][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1840.809756][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 1840.815310][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1840.820171][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1840.825119][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 1840.831628][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1840.836917][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1840.842819][ C1] ? finish_swait+0xd4/0x1e0 [ 1840.847417][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1840.852014][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1840.857221][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1840.863121][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1840.868149][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1840.873356][ C1] kthread+0x2f0/0x390 [ 1840.877432][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1840.882643][ C1] ? __pfx_kthread+0x10/0x10 [ 1840.887238][ C1] ret_from_fork+0x4b/0x80 [ 1840.891658][ C1] ? __pfx_kthread+0x10/0x10 [ 1840.896253][ C1] ret_from_fork_asm+0x1a/0x30 [ 1840.901041][ C1]