last executing test programs: 22.752723612s ago: executing program 3 (id=6263): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = eventfd(0x80000000) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x8000000, 0x0, r6}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0xf6, &(0x7f0000000580)={@local, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "91749c", 0xb8, 0x21, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x33, 0x9, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x18, {0x2, 0x4, 0x90, 0x4, [0x88a5, 0x4]}}, @jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xff, 0x0, '\x00', [@enc_lim, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x9e4a03b7e8d9e707, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, @hopopts={0x2b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x37}, @enc_lim={0x4, 0x1, 0x80}]}, @hopopts={0x2}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x4, 0x0, "148a96", 0x9, "1f8e33"}}}}}}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000340)={0x166422a6, 0x1, 0x5ad82d5a}) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "28d7b07d54892381fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0", 0x36}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000240)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 20.119592425s ago: executing program 3 (id=6271): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038f0ff08000100ac1414bb3112b3868642"], 0x24}}, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf253a00000006006500020000008583e17d9ef7bd02f1d96fbc174019701ce22a1f41b2c04c3fed33d6221f4661db29ef47b3c00c180d9a025325eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9) sendmsg$NL80211_CMD_SET_INTERFACE(r9, 0x0, 0x4) 17.37637879s ago: executing program 2 (id=6277): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038f0ff08000100ac1414bb3112b3868642"], 0x24}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf253a00000006006500020000008583e17d9ef7bd02f1d96fbc174019701ce22a1f41b2c04c3fed33d6221f4661db29ef47b3c00c180d9a025325eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x4) 16.148225872s ago: executing program 0 (id=6279): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="8f73", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000140)="2aeaffffffff000000005c202b17", 0xe, 0x20003380, 0x0, 0x0) 16.109733906s ago: executing program 3 (id=6280): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001bc0)=""/43, 0x2b}, {&(0x7f0000001c00)=""/24, 0x18}], 0x3}, 0x4}], 0x1, 0x10143, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r5, 0x40087446, &(0x7f00000007c0)={0x1fffffffffffff72, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x8b32]}, &(0x7f0000000200)=0x54) 15.944081621s ago: executing program 4 (id=6281): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000200)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e26, @private=0xa010102}, 0x10, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20) r6 = syz_io_uring_setup(0xf74, &(0x7f0000000380)={0x0, 0x5aab, 0x8000, 0x2, 0x66, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000280)={0xc}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000440)={0x38, 0x0, 0x10000069, 0x6, 0x6, 0x3, 0x0, 0x81, 0x3, 0x1}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r9 = syz_io_uring_setup(0x1fbf, &(0x7f0000000940)={0x0, 0x4c77, 0x40, 0x0, 0x16, 0x0, r6}, 0x0, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, &(0x7f0000000340)=r8, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x274, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1ac, 0xffffffff, 0xffffffff, 0x1ac, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2d0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x7, 0x10, 0x6, 0xa0, 0x1}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000101000", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.854160605s ago: executing program 0 (id=6282): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038f0ff08000100ac1414bb3112b3868642"], 0x24}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf253a00000006006500020000008583e17d9ef7bd02f1d96fbc174019701ce22a1f41b2c04c3fed33d6221f4661db29ef47b3c00c180d9a025325eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x4) 14.089645748s ago: executing program 1 (id=6283): syz_open_dev$ndb(0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) gettid() openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0x4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000008000000040000000600000015010000", @ANYRES32=r5], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r6}, 0x38) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) 13.81902336s ago: executing program 2 (id=6284): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001bc0)=""/43, 0x2b}, {&(0x7f0000001c00)=""/24, 0x18}], 0x3}, 0x4}], 0x1, 0x10143, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r5, 0x40087446, &(0x7f00000007c0)={0x1fffffffffffff72, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x8b32]}, &(0x7f0000000200)=0x54) 12.894522251s ago: executing program 4 (id=6285): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x1, 0x1ff, 0x7f, 0x0, 0x11}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) io_uring_setup(0x3c91, &(0x7f0000000900)={0x0, 0x1246, 0x0, 0x1, 0x60}) nanosleep(&(0x7f0000000640), &(0x7f0000000680)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) syz_usb_connect$cdc_ecm(0x1, 0x10a, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x1, 0x1, 0x7f, 0x0, 0xb4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x14, {{0xb, 0x24, 0x6, 0x0, 0x0, "a7119aae363e"}, {0x5, 0x24, 0x0, 0xd590}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x75, 0x7}, @mdlm_detail={0x75, 0x24, 0x13, 0x5, "f8b4e5090e7788e4f61c5782fd00ce6770800c2ae90cfee8ae93b57d125bccf7e2cfd745ba599d17ac7de9f40bd05ae0c063d2eb0edb4f5dd9d07dea87b9ae627ef2096b08e4bf8adb0d2b64f69d4d57623a29ae5e51cb6048a9705c45996621eada732d788261dcab88d644b18d2728b1"}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xf2}, @dmm={0x7, 0x24, 0x14, 0x25, 0xf9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x80, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0xfa, 0x5}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xfd, 0x2, 0xc6, 0xa9e2346bfd43d583, 0x8}, 0xb8, &(0x7f0000000480)={0x5, 0xf, 0xb8, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x81, 0x5, 0x4}, @generic={0x79, 0x10, 0x4, "dd4eaa85cca9f44519b4fbe4e8681b6eb19f2ba450c1834e20a6685d74a388ac86c5c9dc61136c2490e504d5b5b5d2f5b640c7861ca9969489c05b2598c1d68d6ba24d1491541f458767e76589a7e466f571fab3129cc8d569ab278e129a976bafcf3d54d9ac4fb35d5ce3870a8f74b71af24454c968"}, @generic={0x30, 0x10, 0x1, "f80b792668a7a626b66659cecabf7ac82e5f9e794f11de8044798b66f8dbcc46a40d8e28633460f49fb398aa1e"}]}, 0x2, [{0x66, &(0x7f0000000140)=@string={0x66, 0x3, "1c22fe5b8ca634d82041d6f65b071341c18f3369487429d0f66d24a48f8d6a1649847b96e5fe38111c95289b773382ccca442f0d83bbcca02a70b282c4738facad41b577cdf5e64e0e05c7b11bb872f13df0148ccdabbb1364f6fccb009edd5a1518b78d"}}, {0x53, &(0x7f0000000580)=@string={0x53, 0x3, "836f0d554454eb4abfa41f37f322427e0a910a21e664f8fb46f7e52b739fa24a7a93ced3ad7cb8f2e5eea04ee3f9c59f52b251f3647256771b728356800a7f97acaf65812b29471455a4db0daeba6db285"}}]}) writev(0xffffffffffffffff, &(0x7f0000000300), 0x2000000000000280) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0xbcab6cea43ea3f8b, 0x0, {r4, r5/1000+10000}, {0x0, 0x8}, 0xffffffed, 0x1, {}, 0x6f0}) 11.514183806s ago: executing program 1 (id=6286): syz_open_dev$ndb(0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) gettid() openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0x4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000008000000040000000600000015010000", @ANYRES32=r5], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r6}, 0x38) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) 10.342427198s ago: executing program 3 (id=6287): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038f0ff08000100ac1414bb3112b3868642"], 0x24}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf253a00000006006500020000008583e17d9ef7bd02f1d96fbc174019701ce22a1f41b2c04c3fed33d6221f4661db29ef47b3c00c180d9a025325eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x4) 9.563298401s ago: executing program 0 (id=6288): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r2}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038f0ff08000100ac1414bb3112b3868642"], 0x24}}, 0x0) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf253a00000006006500020000008583e17d9ef7bd02f1d96fbc174019701ce22a1f41b2c04c3fed33d6221f4661db29ef47b3c00c180d9a025325eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x4) 9.482485781s ago: executing program 2 (id=6289): syz_open_dev$ndb(0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) gettid() openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000008000000040000000600000015010000", @ANYRES32=r4], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r5}, 0x38) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) 8.926406892s ago: executing program 4 (id=6290): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038f0ff08000100ac1414bb3112b3868642"], 0x24}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf253a00000006006500020000008583e17d9ef7bd02f1d96fbc174019701ce22a1f41b2c04c3fed33d6221f4661db29ef47b3c00c180d9a025325eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x4) 8.824643273s ago: executing program 1 (id=6291): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf253a00000006006500020000008583e17d9ef7bd02f1d96fbc174019701ce22a1f41b2c04c3fed33d6221f4661db29ef47b3c00c180d9a025325eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x4) 6.960382414s ago: executing program 0 (id=6292): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x10000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000111"], 0xfdef) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 6.39186791s ago: executing program 0 (id=6293): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038f0ff08000100ac1414bb3112b3868642"], 0x24}}, 0x0) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf253a00000006006500020000008583e17d9ef7bd02f1d96fbc174019701ce22a1f41b2c04c3fed33d6221f4661db29ef47b3c00c180d9a025325eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9) sendmsg$NL80211_CMD_SET_INTERFACE(r9, 0x0, 0x4) 6.391476039s ago: executing program 2 (id=6294): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038f0ff08000100ac1414bb3112b3868642"], 0x24}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf253a00000006006500020000008583e17d9ef7bd02f1d96fbc174019701ce22a1f41b2c04c3fed33d6221f4661db29ef47b3c00c180d9a025325eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x4) 6.390929244s ago: executing program 3 (id=6295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001bc0)=""/43, 0x2b}, {&(0x7f0000001c00)=""/24, 0x18}], 0x3}, 0x4}], 0x1, 0x10143, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r7, 0x40087446, &(0x7f00000007c0)={0x1fffffffffffff72, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRESDEC=r9, @ANYBLOB="2f3dda96", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r11 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r11, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x8b32]}, &(0x7f0000000200)=0x54) 5.144984681s ago: executing program 4 (id=6296): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = eventfd(0x80000000) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x8000000, 0x0, r6}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0xf6, &(0x7f0000000580)={@local, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "91749c", 0xb8, 0x21, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x33, 0x9, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x18, {0x2, 0x4, 0x90, 0x4, [0x88a5, 0x4]}}, @jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xff, 0x0, '\x00', [@enc_lim, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x9e4a03b7e8d9e707, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, @hopopts={0x2b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x37}, @enc_lim={0x4, 0x1, 0x80}]}, @hopopts={0x2}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x4, 0x0, "148a96", 0x9, "1f8e33"}}}}}}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000340)={0x166422a6, 0x1, 0x5ad82d5a}) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "28d7b07d54892381fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0", 0x36}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000240)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 3.236213666s ago: executing program 1 (id=6297): r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x6, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0xee1, 0xe, 0x8, 0x20000}}]}) eventfd(0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005000000bd"], 0x24}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) r7 = syz_open_dev$loop(&(0x7f00000018c0), 0x6, 0x4000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETA(r8, 0x5405, &(0x7f0000000080)) ioctl$TCSBRKP(r8, 0x5425, 0x0) r9 = io_uring_setup(0x355b, &(0x7f0000000140)={0x0, 0x48cd, 0x10, 0x5, 0xfd5d}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x8) 3.168101745s ago: executing program 2 (id=6298): syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x6, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0xee1, 0xe, 0x8, 0x20000}}]}) eventfd(0x200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005000000bd"], 0x24}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, 0x0, 0x8482) r4 = syz_open_dev$loop(&(0x7f00000018c0), 0x6, 0x4000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000080)) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = io_uring_setup(0x355b, &(0x7f0000000140)={0x0, 0x48cd, 0x10, 0x5, 0xfd5d}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x8) 2.716937968s ago: executing program 4 (id=6299): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ftruncate(r0, 0xfff) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0x29, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x9}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1e, 0x5, 0x7, 0x8a2, 0x400, 0xb07, 0x8, 0xfffffff8, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7f, 0x7ff, 0x1a8}}}}]}, 0x48}}, 0x44000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 2.254232257s ago: executing program 3 (id=6300): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x1, 0x1ff, 0x7f, 0x0, 0x11}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) io_uring_setup(0x3c91, &(0x7f0000000900)={0x0, 0x1246, 0x0, 0x1, 0x60}) nanosleep(&(0x7f0000000640), &(0x7f0000000680)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) syz_usb_connect$cdc_ecm(0x1, 0x10a, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x1, 0x1, 0x7f, 0x0, 0xb4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x14, {{0xb, 0x24, 0x6, 0x0, 0x0, "a7119aae363e"}, {0x5, 0x24, 0x0, 0xd590}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x75, 0x7}, @mdlm_detail={0x75, 0x24, 0x13, 0x5, "f8b4e5090e7788e4f61c5782fd00ce6770800c2ae90cfee8ae93b57d125bccf7e2cfd745ba599d17ac7de9f40bd05ae0c063d2eb0edb4f5dd9d07dea87b9ae627ef2096b08e4bf8adb0d2b64f69d4d57623a29ae5e51cb6048a9705c45996621eada732d788261dcab88d644b18d2728b1"}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xf2}, @dmm={0x7, 0x24, 0x14, 0x25, 0xf9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x80, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0xfa, 0x5}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xfd, 0x2, 0xc6, 0xa9e2346bfd43d583, 0x8}, 0xb8, &(0x7f0000000480)={0x5, 0xf, 0xb8, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x81, 0x5, 0x4}, @generic={0x79, 0x10, 0x4, "dd4eaa85cca9f44519b4fbe4e8681b6eb19f2ba450c1834e20a6685d74a388ac86c5c9dc61136c2490e504d5b5b5d2f5b640c7861ca9969489c05b2598c1d68d6ba24d1491541f458767e76589a7e466f571fab3129cc8d569ab278e129a976bafcf3d54d9ac4fb35d5ce3870a8f74b71af24454c968"}, @generic={0x30, 0x10, 0x1, "f80b792668a7a626b66659cecabf7ac82e5f9e794f11de8044798b66f8dbcc46a40d8e28633460f49fb398aa1e"}]}, 0x2, [{0x66, &(0x7f0000000140)=@string={0x66, 0x3, "1c22fe5b8ca634d82041d6f65b071341c18f3369487429d0f66d24a48f8d6a1649847b96e5fe38111c95289b773382ccca442f0d83bbcca02a70b282c4738facad41b577cdf5e64e0e05c7b11bb872f13df0148ccdabbb1364f6fccb009edd5a1518b78d"}}, {0x53, &(0x7f0000000580)=@string={0x53, 0x3, "836f0d554454eb4abfa41f37f322427e0a910a21e664f8fb46f7e52b739fa24a7a93ced3ad7cb8f2e5eea04ee3f9c59f52b251f3647256771b728356800a7f97acaf65812b29471455a4db0daeba6db285"}}]}) writev(0xffffffffffffffff, &(0x7f0000000300), 0x2000000000000280) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0xbcab6cea43ea3f8b, 0x0, {r4, r5/1000+10000}, {0x0, 0x8}, 0xffffffed, 0x1, {}, 0x6f0}) 2.165748613s ago: executing program 0 (id=6301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001bc0)=""/43, 0x2b}, {&(0x7f0000001c00)=""/24, 0x18}], 0x3}, 0x4}], 0x1, 0x10143, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r5, 0x40087446, &(0x7f00000007c0)={0x1fffffffffffff72, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x8b32]}, &(0x7f0000000200)=0x54) 1.208521867s ago: executing program 2 (id=6302): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ftruncate(r0, 0xfff) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0x29, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x9}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1e, 0x5, 0x7, 0x8a2, 0x400, 0xb07, 0x8, 0xfffffff8, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7f, 0x7ff, 0x1a8}}}}]}, 0x48}}, 0x44000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 1.204808327s ago: executing program 1 (id=6303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x10000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000111"], 0xfdef) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 538.303ms ago: executing program 1 (id=6304): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x10000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00"], 0xfdef) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 0s ago: executing program 4 (id=6305): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ftruncate(r0, 0xfff) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0x29, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x9}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1e, 0x5, 0x7, 0x8a2, 0x400, 0xb07, 0x8, 0xfffffff8, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7f, 0x7ff, 0x1a8}}}}]}, 0x48}}, 0x44000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) kernel console output (not intermixed with test programs): B device strings: Mfr=41, Product=64, SerialNumber=168 [ 1775.176409][T19863] usb 1-1: Product: syz [ 1775.180597][T19863] usb 1-1: Manufacturer: syz [ 1775.185187][T19863] usb 1-1: SerialNumber: syz [ 1775.205860][T19863] usb 1-1: config 0 descriptor?? [ 1775.229925][T19863] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1775.545547][T25921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.564442][T25921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.616574][T19863] usb 1-1: USB disconnect, device number 41 [ 1775.625816][T19863] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1777.063816][T25959] openvswitch: netlink: Key type 31 is not supported [ 1777.395405][T16563] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1777.558208][T16563] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1777.578572][T16563] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1777.589332][T16563] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1777.611400][T16563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1777.644003][T16563] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.142484][T16563] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.153794][T16563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1778.162925][T16563] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.174030][T16563] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.245396][T16563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1778.286879][T16563] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.316882][T16563] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.399622][T16563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1778.448271][T16563] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.469726][T16563] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.513151][T16563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1778.542816][T16563] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.564485][T16563] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.608325][T16563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1778.638073][T16563] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.650593][T16563] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.691630][T16563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1778.736229][T19860] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1778.790359][T16563] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.808509][T16563] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.831539][T16563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1778.850131][T16563] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1778.859678][T16563] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1778.873630][T16563] usb 1-1: Product: syz [ 1778.885720][T16563] usb 1-1: Manufacturer: syz [ 1778.922587][T16563] usb 1-1: SerialNumber: syz [ 1778.937409][T16563] usb 1-1: config 0 descriptor?? [ 1779.049862][T16563] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1779.058674][T19860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.069734][T19860] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1779.079171][T19860] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1779.090482][T19860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.129049][T19860] usb 2-1: config 0 descriptor?? [ 1779.254651][T25953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.283831][T25953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.310106][T19863] usb 1-1: USB disconnect, device number 42 [ 1779.319450][T19863] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1779.535736][T16563] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1779.716681][T16563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1779.747638][T16563] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1779.767339][T16563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.817541][T16563] usb 3-1: config 0 descriptor?? [ 1780.270164][T16563] usbhid 3-1:0.0: can't add hid device: -71 [ 1780.281376][T16563] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1780.313875][T16563] usb 3-1: USB disconnect, device number 31 [ 1780.358608][ T39] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1780.525818][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 1780.533574][ T39] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.547032][ T39] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.557383][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1780.564427][ T39] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1780.674081][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.689197][T25986] openvswitch: netlink: Key type 31 is not supported [ 1780.725942][ T39] usb 5-1: config 0 descriptor?? [ 1781.132489][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 1781.139246][ T39] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1781.159181][ T39] usb 5-1: USB disconnect, device number 58 [ 1782.017512][T26001] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5854'. [ 1782.037189][T19860] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1782.226398][T19860] usb 3-1: Using ep0 maxpacket: 8 [ 1782.235588][T19860] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.270495][T19860] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.283504][T19863] usb 2-1: USB disconnect, device number 51 [ 1782.306915][T19860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1782.324242][T19860] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1782.349902][T19860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.374237][T19860] usb 3-1: config 0 descriptor?? [ 1782.793255][T26016] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5860'. [ 1782.909718][T19860] usbhid 3-1:0.0: can't add hid device: -71 [ 1782.943986][T19860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1783.011356][T19860] usb 3-1: USB disconnect, device number 32 [ 1783.967145][T26027] openvswitch: netlink: Key type 31 is not supported [ 1784.655848][T26037] openvswitch: netlink: Key type 31 is not supported [ 1786.692563][T26058] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5866'. [ 1787.449591][T26065] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5867'. [ 1790.878487][T26090] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5874'. [ 1792.085797][T19861] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1792.247285][T19861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.269803][T19861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1792.288907][T19861] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1792.305663][T19861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.334683][T19861] usb 5-1: config 0 descriptor?? [ 1792.770576][T19861] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 1792.839118][T26114] openvswitch: netlink: Key type 31 is not supported [ 1792.883663][T19861] cp2112 0003:10C4:EA90.0036: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1792.990930][T19861] cp2112 0003:10C4:EA90.0036: error requesting version [ 1793.057113][T19861] cp2112 0003:10C4:EA90.0036: probe with driver cp2112 failed with error -5 [ 1795.021999][T19863] usb 5-1: USB disconnect, device number 59 [ 1795.209634][T26131] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5883'. [ 1795.415754][T16563] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1795.736072][T16563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1795.766228][T16563] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1795.809175][T16563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.883073][T16563] usb 1-1: config 0 descriptor?? [ 1796.057762][T26142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1796.804551][T16563] elan 0003:04F3:0755.0037: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1796.870166][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.876754][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.941701][T19863] usb 1-1: USB disconnect, device number 43 [ 1797.250790][T26157] fido_id[26157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1798.199626][T26166] binder: transaction release 83 bad handle 1, ret = -22 [ 1798.901634][T26179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1799.356053][T19861] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1799.528051][T19861] usb 4-1: config 0 has no interfaces? [ 1799.545371][T19861] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1799.581525][T19861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.701973][T19861] usb 4-1: config 0 descriptor?? [ 1799.938300][T26190] loop5: detected capacity change from 0 to 1871 [ 1800.359844][T26195] openvswitch: netlink: Key type 31 is not supported [ 1801.729157][T16563] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1801.897958][T16563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1801.909602][T16563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1801.920275][T16563] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1801.930145][T16563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.945211][T16563] usb 2-1: config 0 descriptor?? [ 1802.434546][T16563] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 1802.508220][T16563] cp2112 0003:10C4:EA90.0038: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1802.634174][T16563] cp2112 0003:10C4:EA90.0038: error requesting version [ 1802.732784][T16563] cp2112 0003:10C4:EA90.0038: probe with driver cp2112 failed with error -5 [ 1804.561304][ T39] usb 4-1: USB disconnect, device number 50 [ 1804.740744][T19861] usb 2-1: USB disconnect, device number 52 [ 1810.036362][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5917'. [ 1810.116551][T16563] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1810.309402][T16563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.320448][T16563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.330477][T16563] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1810.348650][T16563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.376920][T16563] usb 2-1: config 0 descriptor?? [ 1810.397217][ T39] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1810.500708][T26286] loop5: detected capacity change from 0 to 6615 [ 1810.548751][T26103] Buffer I/O error on dev loop5, logical block 826, async page read [ 1810.566448][ T39] usb 3-1: config 0 has no interfaces? [ 1810.574396][ T39] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1810.591173][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.619661][ T39] usb 3-1: config 0 descriptor?? [ 1810.816589][T16563] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 1810.844178][T16563] cp2112 0003:10C4:EA90.0039: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1811.030485][T16563] cp2112 0003:10C4:EA90.0039: error requesting version [ 1811.050157][T16563] cp2112 0003:10C4:EA90.0039: probe with driver cp2112 failed with error -5 [ 1813.023839][T16563] usb 2-1: USB disconnect, device number 53 [ 1813.919347][T19863] usb 3-1: USB disconnect, device number 33 [ 1814.191064][T26322] binder: transaction release 89 bad handle 1, ret = -22 [ 1814.405382][T16563] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1814.676883][ T39] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1814.695725][T16563] usb 1-1: Using ep0 maxpacket: 8 [ 1814.707497][T16563] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.725711][T16563] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.744661][T16563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1814.764799][T16563] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1814.788401][T16563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.818172][T16563] usb 1-1: config 0 descriptor?? [ 1814.835573][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 1814.847800][ T39] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.871350][ T39] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.896528][ T39] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1814.912481][ T39] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1814.933258][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.955755][T19863] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1815.136858][ T39] usb 3-1: config 0 descriptor?? [ 1815.284744][T16563] usbhid 1-1:0.0: can't add hid device: -71 [ 1815.291054][T16563] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1815.312612][T16563] usb 1-1: USB disconnect, device number 44 [ 1815.345716][T19863] usb 4-1: config 0 has no interfaces? [ 1815.351256][T19863] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1815.382093][T19863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.434827][T19863] usb 4-1: config 0 descriptor?? [ 1815.594607][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 1815.601281][ T39] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1815.653788][ T39] usb 3-1: USB disconnect, device number 34 [ 1816.773847][ T39] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1817.207898][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.230534][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.272637][ T39] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1817.304752][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.331237][ T39] usb 1-1: config 0 descriptor?? [ 1817.482514][T19863] usb 4-1: USB disconnect, device number 51 [ 1817.845770][ T39] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 1817.866842][ T39] cp2112 0003:10C4:EA90.003A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1818.227523][T26362] openvswitch: netlink: Key type 31 is not supported [ 1818.263005][ T39] cp2112 0003:10C4:EA90.003A: error requesting version [ 1818.359192][ T39] cp2112 0003:10C4:EA90.003A: probe with driver cp2112 failed with error -5 [ 1819.771268][T26377] binder: transaction release 95 bad handle 1, ret = -22 [ 1820.240315][ T39] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1820.423008][T21035] usb 1-1: USB disconnect, device number 45 [ 1820.486262][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 1820.494553][ T39] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.506557][ T39] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.551207][ T39] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1820.583734][ T39] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1820.603552][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.622759][ T39] usb 3-1: config 0 descriptor?? [ 1823.027088][T26388] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5943'. [ 1823.139656][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 1823.186047][ T39] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1823.205785][ T39] usb 3-1: USB disconnect, device number 35 [ 1823.975694][T19861] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1824.295379][T19861] usb 5-1: Using ep0 maxpacket: 16 [ 1824.304832][T19861] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1824.314559][T19861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.391343][T19861] usb 5-1: Product: syz [ 1824.395902][T19863] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1824.412909][T19861] usb 5-1: Manufacturer: syz [ 1824.423237][T19861] usb 5-1: SerialNumber: syz [ 1824.442148][T19861] usb 5-1: config 0 descriptor?? [ 1824.460557][T19861] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1824.577618][T19863] usb 3-1: config 0 has no interfaces? [ 1824.611937][T19863] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1824.633417][T19863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.667826][T26411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.694425][T26411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.716888][T19863] usb 3-1: config 0 descriptor?? [ 1824.789668][T26411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.824122][T26411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.877779][T26411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.895145][T26411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.515491][T19861] usb 5-1: clie_3_5_startup: get config number failed: -110 [ 1827.523149][T19861] visor 5-1:0.0: probe with driver visor failed with error -110 [ 1828.567738][T26430] tipc: Enabling of bearer rejected, failed to enable media [ 1828.591598][T26427] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5950'. [ 1828.750313][T26437] syzkaller0: entered promiscuous mode [ 1828.759646][T26437] syzkaller0: entered allmulticast mode [ 1828.935961][T19861] usb 3-1: USB disconnect, device number 36 [ 1829.374060][T19861] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1829.497287][T19860] usb 5-1: USB disconnect, device number 60 [ 1829.722440][T19861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.733901][T19861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1829.756737][T19861] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1829.771261][T19861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.804442][T19861] usb 2-1: config 0 descriptor?? [ 1830.408455][T19861] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 1830.487859][T19861] cp2112 0003:10C4:EA90.003B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1830.714719][T19861] cp2112 0003:10C4:EA90.003B: error requesting version [ 1830.744802][T19861] cp2112 0003:10C4:EA90.003B: probe with driver cp2112 failed with error -5 [ 1832.240546][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5961'. [ 1832.761415][ T39] usb 2-1: USB disconnect, device number 54 [ 1832.885728][T21035] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1833.088000][T21035] usb 3-1: config 0 has no interfaces? [ 1833.105438][T21035] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1833.114525][T21035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.176924][T21035] usb 3-1: config 0 descriptor?? [ 1834.476231][T21035] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1834.768082][T21035] usb 1-1: config 0 has no interfaces? [ 1834.774194][T21035] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1834.783405][T21035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.873880][T21035] usb 1-1: config 0 descriptor?? [ 1835.693764][T21035] usb 3-1: USB disconnect, device number 37 [ 1837.355075][T26492] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5966'. [ 1841.469804][T26546] binder: transaction release 101 bad handle 1, ret = -22 [ 1841.846458][T26552] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1842.810318][T26516] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5969'. [ 1842.910311][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5981'. [ 1843.336977][T19861] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1843.598222][ T5904] usb 1-1: USB disconnect, device number 46 [ 1843.690363][T19861] usb 3-1: config 0 has no interfaces? [ 1843.696470][T19861] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1843.756855][T19861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.768308][T19861] usb 3-1: config 0 descriptor?? [ 1844.395615][ T5904] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1844.590684][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 1844.605882][ T5904] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1844.620536][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.645394][ T5904] usb 1-1: Product: syz [ 1844.652270][ T5904] usb 1-1: Manufacturer: syz [ 1844.675703][ T5904] usb 1-1: SerialNumber: syz [ 1844.689048][ T5904] usb 1-1: config 0 descriptor?? [ 1844.702760][ T5904] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1844.916421][T26573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.928957][T26573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.949767][T26573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.968266][T26573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.006874][T26573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.035101][T26573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.956805][T19860] usb 3-1: USB disconnect, device number 38 [ 1845.984019][ T5904] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 1845.993828][ T5904] visor 1-1:0.0: probe with driver visor failed with error -71 [ 1846.073613][ T5904] usb 1-1: USB disconnect, device number 47 [ 1846.100762][T26595] netlink: 'syz.1.5989': attribute type 5 has an invalid length. [ 1846.419215][T26598] binder: transaction release 107 bad handle 1, ret = -22 [ 1847.229366][T26607] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1847.347682][T26611] openvswitch: netlink: Key type 31 is not supported [ 1848.791438][ T5904] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1848.959057][ T5904] usb 4-1: config 0 has no interfaces? [ 1848.964626][ T5904] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1848.998394][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.048693][ T5904] usb 4-1: config 0 descriptor?? [ 1849.156546][T26624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1849.167280][T26624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1849.175540][T26624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1849.183692][T26624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1849.191558][T26624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1851.277039][T26624] Bluetooth: hci4: command tx timeout [ 1851.456308][T26647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6000'. [ 1851.825627][ T5904] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1851.987848][ T5904] usb 5-1: config 0 has no interfaces? [ 1851.993450][ T5904] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1852.013789][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.029459][ T5904] usb 5-1: config 0 descriptor?? [ 1853.347091][T26624] Bluetooth: hci4: command tx timeout [ 1853.780124][ T5904] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1853.964664][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 1854.002319][ T5904] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1854.014046][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1854.026036][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1854.036268][ T5904] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1854.053033][ T5904] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1854.064385][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.297469][ T5904] usb 2-1: GET_CAPABILITIES returned 0 [ 1854.314576][ T5904] usbtmc 2-1:16.0: can't read capabilities [ 1854.330948][T21035] usb 4-1: USB disconnect, device number 52 [ 1854.431936][T26625] chnl_net:caif_netlink_parms(): no params data found [ 1854.516962][ T5904] usb 2-1: USB disconnect, device number 55 [ 1854.674478][T26625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.682311][T26625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.691412][T26625] bridge_slave_0: entered allmulticast mode [ 1854.702486][T26625] bridge_slave_0: entered promiscuous mode [ 1854.720744][T26625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.729434][T26625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.769392][T26625] bridge_slave_1: entered allmulticast mode [ 1854.777979][T26625] bridge_slave_1: entered promiscuous mode [ 1854.843878][T26671] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 1854.954416][T26625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1854.979811][T26625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1855.107410][T26625] team0: Port device team_slave_0 added [ 1855.131637][T26625] team0: Port device team_slave_1 added [ 1855.205598][ T5904] usb 5-1: USB disconnect, device number 61 [ 1855.451137][T26625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.458412][T26624] Bluetooth: hci4: command tx timeout [ 1855.503195][T26625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1855.623861][T26625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.815082][T26681] openvswitch: netlink: Key type 31 is not supported [ 1855.988650][T26625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.999650][T26625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1856.215818][T26625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1856.465565][T26625] hsr_slave_0: entered promiscuous mode [ 1856.484592][T26625] hsr_slave_1: entered promiscuous mode [ 1856.507663][T26625] debugfs: 'hsr0' already exists in 'hsr' [ 1856.513778][T26625] Cannot create hsr debugfs directory [ 1856.965750][T21035] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1857.029536][T26625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1857.115124][T26625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.158598][T21035] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1857.171291][T21035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.201129][T21035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.221280][T21035] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1857.265497][T21035] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1857.298053][T21035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.314973][T26625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1857.376382][T26625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.422899][T21035] usb 4-1: config 0 descriptor?? [ 1857.500612][T26696] openvswitch: netlink: Key type 31 is not supported [ 1857.527703][T26624] Bluetooth: hci4: command tx timeout [ 1857.585835][T26625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1857.605458][T26625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.753889][T26625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1857.766979][T26625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.030437][T26686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1858.044702][T21035] hid-picolcd 0003:04D8:C002.003C: unknown main item tag 0x7 [ 1858.049829][T26686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1858.079006][T26686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1858.110489][T21035] hid-picolcd 0003:04D8:C002.003C: unknown main item tag 0x0 [ 1858.159283][T21035] hid-picolcd 0003:04D8:C002.003C: unknown main item tag 0x0 [ 1858.187651][T21035] hid-picolcd 0003:04D8:C002.003C: item fetching failed at offset 5/7 [ 1858.233950][T21035] hid-picolcd 0003:04D8:C002.003C: device report parse failed [ 1858.259323][T21035] hid-picolcd 0003:04D8:C002.003C: probe with driver hid-picolcd failed with error -22 [ 1858.309982][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.375580][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.447492][T26689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1858.582037][T26625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1858.636810][T26625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1858.740023][T26625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1858.768701][T26625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1859.170549][T19860] usb 4-1: USB disconnect, device number 53 [ 1859.694309][T19860] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1859.820948][T26729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6015'. [ 1859.906021][T19860] usb 5-1: config 0 has no interfaces? [ 1859.911609][T19860] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1859.952343][T19860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.045699][T19860] usb 5-1: config 0 descriptor?? [ 1860.128056][T26624] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1860.355951][ T39] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1860.562574][ T39] usb 3-1: config 0 has no interfaces? [ 1860.569406][ T39] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1860.602052][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.807117][ T39] usb 3-1: config 0 descriptor?? [ 1863.472335][T26625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.657218][ T5904] usb 5-1: USB disconnect, device number 62 [ 1863.672261][T26625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1863.803435][T16771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.810603][T16771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.818338][ T39] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1863.856758][T16771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.863920][T16771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.976142][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 1864.001043][ T39] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1864.015477][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.034650][ T39] usb 4-1: Product: syz [ 1864.063774][T16563] usb 3-1: USB disconnect, device number 39 [ 1864.080513][T26625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1864.126575][ T39] usb 4-1: Manufacturer: syz [ 1864.131211][ T39] usb 4-1: SerialNumber: syz [ 1864.177470][ T39] usb 4-1: config 0 descriptor?? [ 1864.222711][T26625] veth0_vlan: entered promiscuous mode [ 1864.239014][T26625] veth1_vlan: entered promiscuous mode [ 1864.294404][T26625] veth0_macvtap: entered promiscuous mode [ 1864.349196][T26625] veth1_macvtap: entered promiscuous mode [ 1864.692469][ T39] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1864.970479][T26745] dtv5100: wlen = 4, aborting. [ 1864.996458][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1865.057910][T26625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1865.164956][ T39] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1865.195831][ T39] usb 4-1: media controller created [ 1865.202412][T26625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1865.317360][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1865.344034][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.389189][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.497702][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.518237][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.776778][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.785306][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.972905][T16771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.996612][T16771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1866.005847][ T39] zl10353_read_register: readreg error (reg=127, ret==0) [ 1866.032627][ T39] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1866.063961][ T39] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1866.947068][T24470] usb 4-1: USB disconnect, device number 54 [ 1867.076284][T24470] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1867.389839][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1867.411806][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1867.421830][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1867.434530][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1867.452587][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1868.178103][T20056] syz_tun (unregistering): left promiscuous mode [ 1868.957437][T26792] netlink: 'syz.0.6028': attribute type 5 has an invalid length. [ 1869.305912][ T5904] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1869.477633][ T5904] usb 2-1: config 0 has no interfaces? [ 1869.505209][ T5904] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1869.507490][T26624] Bluetooth: hci1: command tx timeout [ 1869.528108][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.541843][ T5904] usb 2-1: config 0 descriptor?? [ 1871.586589][T26624] Bluetooth: hci1: command tx timeout [ 1872.006309][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1872.262556][T26778] chnl_net:caif_netlink_parms(): no params data found [ 1872.497946][T21035] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1872.521352][T26811] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6032'. [ 1872.677581][T21035] usb 5-1: config 0 has no interfaces? [ 1872.684191][T21035] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1872.727232][T21035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.769291][T21035] usb 5-1: config 0 descriptor?? [ 1872.833269][T21968] ip6gretap0 (unregistering): left promiscuous mode [ 1872.862775][ T5904] usb 2-1: USB disconnect, device number 56 [ 1873.082389][T21968] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1873.684108][T26624] Bluetooth: hci1: command tx timeout [ 1874.028088][T21968] dvmrp8 (unregistering): left allmulticast mode [ 1874.301063][T21968] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1874.641242][ T5904] usb 5-1: USB disconnect, device number 63 [ 1875.173826][T21968] bond0 (unregistering): Released all slaves [ 1875.324613][T21968] bond1 (unregistering): Released all slaves [ 1875.537679][T21968] tipc: Left network mode [ 1875.543190][T26778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1875.568794][T26778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.585836][T26836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6038'. [ 1875.598406][T26778] bridge_slave_0: entered allmulticast mode [ 1875.609952][T26778] bridge_slave_0: entered promiscuous mode [ 1875.704002][T26778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.732620][T26778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.742340][T26778] bridge_slave_1: entered allmulticast mode [ 1875.748694][T26624] Bluetooth: hci1: command tx timeout [ 1875.757196][T26778] bridge_slave_1: entered promiscuous mode [ 1875.770738][T26837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6045'. [ 1875.931048][ T5904] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1876.095355][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 1876.113354][ T5904] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1876.122906][T24470] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1876.139942][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.150219][ T5904] usb 5-1: Product: syz [ 1876.154430][ T5904] usb 5-1: Manufacturer: syz [ 1876.159251][ T5904] usb 5-1: SerialNumber: syz [ 1876.220034][ T5904] usb 5-1: config 0 descriptor?? [ 1876.252561][T26778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.308345][T24470] usb 2-1: config 0 has no interfaces? [ 1876.314240][T24470] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1876.325459][T24470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.343560][T24470] usb 2-1: config 0 descriptor?? [ 1876.680568][ T5904] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1876.740037][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1876.754427][ T5904] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1876.762562][ T5904] usb 5-1: media controller created [ 1876.881540][T26839] dtv5100: wlen = 4, aborting. [ 1876.923275][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1877.516144][ T5904] zl10353_read_register: readreg error (reg=127, ret==0) [ 1877.523336][ T5904] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1877.532480][ T5904] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1879.032512][T26778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1879.085844][T21968] hsr_slave_0: left promiscuous mode [ 1879.109818][T21968] hsr_slave_1: left promiscuous mode [ 1879.120196][ T5904] usb 5-1: USB disconnect, device number 64 [ 1879.244989][ T5904] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1879.338961][T26870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6041'. [ 1879.349234][T26870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6041'. [ 1879.591403][T26879] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1880.085435][ T5904] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1880.318380][ T5904] usb 5-1: config 0 has no interfaces? [ 1880.323940][ T5904] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1880.333458][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.365043][ T5904] usb 5-1: config 0 descriptor?? [ 1882.133363][T26778] team0: Port device team_slave_0 added [ 1882.213748][T26778] team0: Port device team_slave_1 added [ 1882.460625][T26778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1882.489126][T26778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1882.550909][T26778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1882.614922][T21968] IPVS: stop unused estimator thread 0... [ 1882.622285][T26778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1882.653744][T26778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1882.743203][T19861] usb 2-1: USB disconnect, device number 57 [ 1882.763683][T26778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1883.156898][T26778] hsr_slave_0: entered promiscuous mode [ 1883.179864][T26778] hsr_slave_1: entered promiscuous mode [ 1883.197757][T26778] debugfs: 'hsr0' already exists in 'hsr' [ 1883.205714][T26778] Cannot create hsr debugfs directory [ 1883.660985][T19861] usb 5-1: USB disconnect, device number 65 [ 1883.836652][T26918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1887.211703][T26948] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1888.180840][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6057'. [ 1888.193135][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6057'. [ 1888.931049][T26927] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6052'. [ 1889.561275][T26974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6059'. [ 1889.814460][T26982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6062'. [ 1889.957954][T19861] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1890.325378][T19861] usb 2-1: config 0 has no interfaces? [ 1890.344326][T19861] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1890.355092][T19861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.379154][ T39] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1890.388665][T19861] usb 2-1: config 0 descriptor?? [ 1890.692791][ T39] usb 1-1: config 0 has no interfaces? [ 1890.698415][ T39] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1890.712669][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.787479][ T39] usb 1-1: config 0 descriptor?? [ 1891.739718][T26778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1891.769254][T26778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1891.790108][T26778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1891.820608][T26778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1892.208613][T24470] usb 2-1: USB disconnect, device number 58 [ 1892.381799][T27015] binder: BINDER_SET_CONTEXT_MGR already set [ 1892.390086][T27015] binder: 27013:27015 ioctl 4018620d 800002c0 returned -16 [ 1892.443671][T26778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1892.508198][T26778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1892.698438][ T39] usb 1-1: USB disconnect, device number 48 [ 1892.753171][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.760365][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1892.822331][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.829513][T11669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1893.064645][T27020] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1894.616365][T26778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1894.696072][T27044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1894.757327][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1895.077994][T26778] veth0_vlan: entered promiscuous mode [ 1895.100649][T26778] veth1_vlan: entered promiscuous mode [ 1895.254605][T27055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6072'. [ 1895.388301][T26778] veth0_macvtap: entered promiscuous mode [ 1895.431130][T26778] veth1_macvtap: entered promiscuous mode [ 1895.507474][T26778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1895.515509][T19861] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1895.544574][T26778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1895.713528][ T6427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.752798][ T6427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.791415][ T6427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.825148][T19861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.836553][T24470] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1895.854496][ T6427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.866006][T19861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.877127][T19861] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1895.895829][T19861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.929134][T19861] usb 5-1: config 0 descriptor?? [ 1895.995301][T24470] usb 2-1: Using ep0 maxpacket: 32 [ 1896.015089][T24470] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1896.026805][T24470] usb 2-1: config 0 has no interface number 0 [ 1896.033560][T24470] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.074224][T24470] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.127001][T15267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1896.212170][T24470] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1896.226615][T15267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1896.268087][T24470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.329147][T24470] usb 2-1: config 0 descriptor?? [ 1896.363721][T19861] cp2112 0003:10C4:EA90.003D: unknown main item tag 0x0 [ 1896.415842][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1896.444170][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1896.643904][T19861] cp2112 0003:10C4:EA90.003D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1896.726300][T19861] cp2112 0003:10C4:EA90.003D: Part Number: 0x82 Device Version: 0xFE [ 1896.763910][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6075'. [ 1896.927192][T19861] cp2112 0003:10C4:EA90.003D: error requesting SMBus config [ 1896.986913][T19861] cp2112 0003:10C4:EA90.003D: probe with driver cp2112 failed with error -32 [ 1897.033468][T24470] uclogic 0003:28BD:0094.003E: pen parameters not found [ 1897.050358][T24470] uclogic 0003:28BD:0094.003E: interface is invalid, ignoring [ 1897.187131][T21035] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1897.244833][T27064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.276109][T27064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.298970][ T39] usb 2-1: USB disconnect, device number 59 [ 1897.463102][T21035] usb 1-1: config 0 has no interfaces? [ 1897.468907][T21035] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1897.482716][T21035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.506966][T21035] usb 1-1: config 0 descriptor?? [ 1897.634304][T27094] binder: BINDER_SET_CONTEXT_MGR already set [ 1897.643365][T27094] binder: 27093:27094 ioctl 4018620d 800002c0 returned -16 [ 1898.461838][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1898.473189][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1898.485562][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1898.493518][T19861] usb 5-1: USB disconnect, device number 66 [ 1898.517385][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1898.549546][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1898.951132][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6080'. [ 1899.001598][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6080'. [ 1899.098776][T27120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1899.455803][T24470] usb 1-1: USB disconnect, device number 49 [ 1899.489836][ T6427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1899.507916][ T6427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.144575][ T6427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1900.296677][ T6427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.685491][T26624] Bluetooth: hci3: command tx timeout [ 1900.869448][ T6427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1901.029475][ T6427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.114010][T27106] chnl_net:caif_netlink_parms(): no params data found [ 1902.043265][ T6427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1902.061280][ T6427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.254818][T27163] binder: BINDER_SET_CONTEXT_MGR already set [ 1902.262179][T27163] binder: 27162:27163 ioctl 4018620d 800002c0 returned -16 [ 1902.715556][T26624] Bluetooth: hci3: command tx timeout [ 1903.126018][T27106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.135613][T27106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.142932][T27106] bridge_slave_0: entered allmulticast mode [ 1903.167572][T27106] bridge_slave_0: entered promiscuous mode [ 1903.246930][T27106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.247876][T27068] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1903.254473][T27106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.300102][T27106] bridge_slave_1: entered allmulticast mode [ 1903.340453][T27106] bridge_slave_1: entered promiscuous mode [ 1903.478308][T27068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.501106][T27068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1903.542865][T27068] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1903.575733][T27068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.616074][T27068] usb 4-1: config 0 descriptor?? [ 1903.851836][T27184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6093'. [ 1904.086170][T27068] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 1904.174612][T27068] cp2112 0003:10C4:EA90.003F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1904.304732][T27068] cp2112 0003:10C4:EA90.003F: Part Number: 0x82 Device Version: 0xFE [ 1904.331674][ T6427] team0: Port device vxlan0 removed [ 1904.519771][T27068] cp2112 0003:10C4:EA90.003F: error requesting SMBus config [ 1904.548742][T27068] cp2112 0003:10C4:EA90.003F: probe with driver cp2112 failed with error -32 [ 1904.785912][T26624] Bluetooth: hci3: command tx timeout [ 1905.169579][ T6427]  (unregistering): Released all slaves [ 1905.214775][T27106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1905.296781][T27106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1905.317090][ T6427] tipc: Left network mode [ 1905.512108][T27106] team0: Port device team_slave_0 added [ 1906.062278][ T39] usb 4-1: USB disconnect, device number 55 [ 1906.119288][T27106] team0: Port device team_slave_1 added [ 1906.218484][T27206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6094'. [ 1906.268242][T27205] openvswitch: netlink: Key type 31 is not supported [ 1906.378036][T27106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1906.385002][T27106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.416213][T27106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1906.483362][T27106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1906.491607][T27106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.530802][T27106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.605368][T16563] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1906.675309][T21035] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1906.769409][ T6427] hsr_slave_0: left promiscuous mode [ 1906.787400][ T6427] hsr_slave_1: left promiscuous mode [ 1906.795312][T16563] usb 5-1: Using ep0 maxpacket: 8 [ 1906.828290][T16563] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1906.848300][T21035] usb 3-1: config 0 has no interfaces? [ 1906.866126][T26624] Bluetooth: hci3: command tx timeout [ 1906.884974][T16563] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1906.895121][T21035] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1906.905333][T16563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1906.912026][T16563] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1906.921757][T21035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.925005][ T6427] veth1_macvtap: left promiscuous mode [ 1906.938085][T16563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.948573][T21035] usb 3-1: config 0 descriptor?? [ 1906.974744][T16563] usb 5-1: config 0 descriptor?? [ 1907.032070][ T6427] veth0_macvtap: left promiscuous mode [ 1907.061121][ T6427] veth1_vlan: left promiscuous mode [ 1907.082571][ T6427] veth0_vlan: left promiscuous mode [ 1907.365476][T27228] binder: 27227:27228 ioctl c0306201 0 returned -14 [ 1910.328124][T27246] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6101'. [ 1910.360617][T16563] usbhid 5-1:0.0: can't add hid device: -71 [ 1910.405443][T16563] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1910.427641][T16563] usb 5-1: USB disconnect, device number 67 [ 1910.557955][T27106] hsr_slave_0: entered promiscuous mode [ 1910.596966][T27106] hsr_slave_1: entered promiscuous mode [ 1910.617857][T27255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6103'. [ 1910.627164][T27255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6103'. [ 1911.206700][T27267] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1911.309122][T27068] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1911.628075][T27068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.647083][T27068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1911.732757][T27068] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1911.750403][T16563] usb 3-1: USB disconnect, device number 40 [ 1911.762112][T27068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.867373][T27068] usb 5-1: config 0 descriptor?? [ 1912.340819][T27068] cp2112 0003:10C4:EA90.0040: unknown main item tag 0x0 [ 1912.536276][T27068] cp2112 0003:10C4:EA90.0040: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1912.617920][T27068] cp2112 0003:10C4:EA90.0040: Part Number: 0x82 Device Version: 0xFE [ 1912.820921][T27068] cp2112 0003:10C4:EA90.0040: error requesting SMBus config [ 1912.917445][T27068] cp2112 0003:10C4:EA90.0040: probe with driver cp2112 failed with error -32 [ 1913.070262][T27283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6108'. [ 1913.167997][T27283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6108'. [ 1913.252461][T27290] binder: 27289:27290 ioctl c0306201 0 returned -14 [ 1913.545652][T27106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1913.580834][T27106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1913.652108][T27106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1913.684309][T27106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1913.952329][T27106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1913.990458][T27106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1914.005053][T22003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.012333][T22003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1914.073723][T22003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.081060][T22003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1914.155785][T19859] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1914.435642][T19859] usb 3-1: Using ep0 maxpacket: 8 [ 1914.520627][T27106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1914.567691][T19859] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1914.572215][T27106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1914.590978][T19859] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1914.610127][T19859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1914.616930][T19859] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1914.653077][T27068] usb 5-1: USB disconnect, device number 68 [ 1914.812477][T19859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.867062][T19859] usb 3-1: config 0 descriptor?? [ 1915.515900][T27106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1915.572451][T27327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6114'. [ 1915.604936][T27106] veth0_vlan: entered promiscuous mode [ 1915.736117][T19859] usbhid 3-1:0.0: can't add hid device: -71 [ 1915.761192][T19859] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1915.783874][T27106] veth1_vlan: entered promiscuous mode [ 1915.831981][T27106] veth0_macvtap: entered promiscuous mode [ 1915.872881][T19859] usb 3-1: USB disconnect, device number 41 [ 1915.920056][T27106] veth1_macvtap: entered promiscuous mode [ 1916.047068][T16563] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1916.334526][T16563] usb 5-1: config 0 has no interfaces? [ 1916.340574][T16563] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1916.350269][T16563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.361087][T27106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1916.389822][T16563] usb 5-1: config 0 descriptor?? [ 1916.407502][T27106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1916.626250][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.654568][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.685540][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.171767][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.893113][T11497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.932058][T11497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1918.338853][T16771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1918.376201][T16771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1918.559738][T19859] usb 5-1: USB disconnect, device number 69 [ 1918.755101][T27370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6119'. [ 1918.812347][T27367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6119'. [ 1919.499804][T27382] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1919.758616][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.764933][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.881699][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1919.891864][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1919.905519][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1919.916340][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1919.927660][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1920.236469][T27388] binder: 27387:27388 ioctl c0306201 0 returned -14 [ 1920.597265][T24470] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1920.757946][T24470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1920.769414][T24470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1920.781205][T24470] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1920.790600][T24470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.807800][T24470] usb 3-1: config 0 descriptor?? [ 1921.233286][T24470] cp2112 0003:10C4:EA90.0041: unknown main item tag 0x0 [ 1921.243525][T24470] cp2112 0003:10C4:EA90.0041: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1921.438839][T24470] cp2112 0003:10C4:EA90.0041: Part Number: 0x82 Device Version: 0xFE [ 1921.644352][T24470] cp2112 0003:10C4:EA90.0041: error requesting SMBus config [ 1921.660574][T24470] cp2112 0003:10C4:EA90.0041: probe with driver cp2112 failed with error -32 [ 1921.988385][ T5148] Bluetooth: hci5: command tx timeout [ 1922.450301][T11497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1922.463711][T11497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.474757][T11497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1923.069902][T11497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1923.081362][T11497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.139673][T11497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1923.413742][T19859] usb 3-1: USB disconnect, device number 42 [ 1923.426188][T27067] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1923.471454][T11497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1923.496161][T11497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.518470][T11497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1923.593787][T27067] usb 1-1: config 0 has no interfaces? [ 1923.599514][T27067] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1923.823903][T27067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.868068][T27067] usb 1-1: config 0 descriptor?? [ 1924.109185][ T5148] Bluetooth: hci5: command tx timeout [ 1924.607681][T11497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1924.624997][T11497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.655389][T11497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1925.965792][T19861] usb 1-1: USB disconnect, device number 50 [ 1926.147797][ T5148] Bluetooth: hci5: command tx timeout [ 1927.095743][T27443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6131'. [ 1927.646415][T27379] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1927.897781][T27379] usb 1-1: config 0 has no interfaces? [ 1927.903352][T27379] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1927.923223][T27379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.985390][T27379] usb 1-1: config 0 descriptor?? [ 1928.017795][T11497] dvmrp8 (unregistering): left allmulticast mode [ 1928.313224][ T5148] Bluetooth: hci5: command tx timeout [ 1928.856142][T11497] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1929.807474][T11497] bond0 (unregistering): Released all slaves [ 1929.966582][T11497] bond1 (unregistering): Released all slaves [ 1929.995147][T27386] chnl_net:caif_netlink_parms(): no params data found [ 1930.125379][ T39] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1930.275302][T11497] : left promiscuous mode [ 1930.282335][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 1930.302877][ T39] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.330072][ T39] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.341419][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1930.348422][ T39] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1930.366394][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.394955][ T39] usb 2-1: config 0 descriptor?? [ 1930.600996][T27379] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1930.788328][T27379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.810215][T27379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.821975][T27379] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1930.831130][T27379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.851193][T27379] usb 4-1: config 0 descriptor?? [ 1931.286917][T27379] cp2112 0003:10C4:EA90.0042: unknown main item tag 0x0 [ 1931.307837][T27379] cp2112 0003:10C4:EA90.0042: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1931.475482][T27379] cp2112 0003:10C4:EA90.0042: Part Number: 0x82 Device Version: 0xFE [ 1931.676540][T27379] cp2112 0003:10C4:EA90.0042: error requesting SMBus config [ 1931.692449][T27379] cp2112 0003:10C4:EA90.0042: probe with driver cp2112 failed with error -5 [ 1932.856157][T11497] tipc: Left network mode [ 1932.973609][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 1932.989425][ T39] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1933.012448][ T39] usb 2-1: USB disconnect, device number 60 [ 1933.062135][T27386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.086488][T27386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.093799][T27386] bridge_slave_0: entered allmulticast mode [ 1933.145525][T27386] bridge_slave_0: entered promiscuous mode [ 1933.219775][T27386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.239016][T27386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.256837][T27386] bridge_slave_1: entered allmulticast mode [ 1933.264962][T27386] bridge_slave_1: entered promiscuous mode [ 1933.372538][T19861] usb 4-1: USB disconnect, device number 56 [ 1933.435989][T11497] hsr_slave_0: left promiscuous mode [ 1933.468001][T24470] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1933.488821][T11497] hsr_slave_1: left promiscuous mode [ 1933.584907][T11497] veth1_macvtap: left promiscuous mode [ 1933.651598][ T39] usb 1-1: USB disconnect, device number 51 [ 1933.692271][T11497] veth0_macvtap: left promiscuous mode [ 1933.706110][T11497] veth1_vlan: left promiscuous mode [ 1933.711783][T11497] veth0_vlan: left promiscuous mode [ 1933.716791][T24470] usb 3-1: Using ep0 maxpacket: 8 [ 1933.747906][T24470] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.765402][T24470] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.826851][T24470] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1933.864053][T24470] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1933.899459][T24470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.932399][T24470] usb 3-1: config 0 descriptor?? [ 1936.616242][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6143'. [ 1936.985319][ T39] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1937.158948][ T39] usb 4-1: config 0 has no interfaces? [ 1937.165723][ T39] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1937.191848][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.204174][ T39] usb 4-1: config 0 descriptor?? [ 1937.547875][T24470] usbhid 3-1:0.0: can't add hid device: -71 [ 1937.572930][T24470] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1937.615322][T24470] usb 3-1: USB disconnect, device number 43 [ 1937.674662][T27386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1937.701770][T27386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1938.760183][T27386] team0: Port device team_slave_0 added [ 1938.802298][T27386] team0: Port device team_slave_1 added [ 1939.250572][T27386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1939.260805][T27386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1939.290936][T27386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1939.771601][T27386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1939.779082][T27386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1939.962942][T24470] usb 4-1: USB disconnect, device number 57 [ 1939.963435][T27386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1941.125899][T17225] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1941.305433][T17225] usb 3-1: Using ep0 maxpacket: 8 [ 1941.321079][T17225] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1941.335012][T17225] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1941.345362][T17225] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1941.352108][T17225] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1941.363389][T17225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.414641][T17225] usb 3-1: config 0 descriptor?? [ 1942.581597][T19861] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1942.766665][T19861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.778923][T19861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1942.800300][T19861] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1942.809880][T19861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.838025][T19861] usb 1-1: config 0 descriptor?? [ 1943.191046][T17225] usbhid 3-1:0.0: can't add hid device: -71 [ 1943.222007][T17225] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1943.270358][T27386] hsr_slave_0: entered promiscuous mode [ 1943.277498][T17225] usb 3-1: USB disconnect, device number 44 [ 1943.280108][T19861] cp2112 0003:10C4:EA90.0043: unknown main item tag 0x0 [ 1943.293696][T27386] hsr_slave_1: entered promiscuous mode [ 1943.314704][T27386] debugfs: 'hsr0' already exists in 'hsr' [ 1943.323027][T27386] Cannot create hsr debugfs directory [ 1943.329388][T19861] cp2112 0003:10C4:EA90.0043: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1943.394309][T11497] IPVS: stop unused estimator thread 0... [ 1943.463950][T19861] cp2112 0003:10C4:EA90.0043: Part Number: 0x82 Device Version: 0xFE [ 1943.700612][T19861] cp2112 0003:10C4:EA90.0043: error requesting SMBus config [ 1943.751332][T27574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6152'. [ 1943.762194][T19861] cp2112 0003:10C4:EA90.0043: probe with driver cp2112 failed with error -5 [ 1944.115350][T27379] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1944.323766][T27379] usb 3-1: config 0 has no interfaces? [ 1944.361722][T27379] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1944.392217][T27379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.455813][T27379] usb 3-1: config 0 descriptor?? [ 1945.360427][T19861] usb 1-1: USB disconnect, device number 52 [ 1946.793857][ T39] usb 3-1: USB disconnect, device number 45 [ 1948.620415][T27624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6160'. [ 1948.642112][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6160'. [ 1950.454134][T27631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1951.249296][T27386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1951.302695][T27386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1951.334876][T27386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1951.521144][T27386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1951.635373][ T39] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1951.793016][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.829601][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1951.880203][ T39] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1951.903723][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.962968][T27386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1951.979533][ T39] usb 4-1: config 0 descriptor?? [ 1952.068227][T27386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1952.103178][T27461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.110399][T27461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1952.258875][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.266111][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1952.448545][ T39] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 1952.517564][ T39] cp2112 0003:10C4:EA90.0044: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1952.668141][T27386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1952.749970][ T39] cp2112 0003:10C4:EA90.0044: Part Number: 0x82 Device Version: 0xFE [ 1952.810961][T19861] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1952.951723][ T39] cp2112 0003:10C4:EA90.0044: error requesting SMBus config [ 1953.107803][ T39] cp2112 0003:10C4:EA90.0044: probe with driver cp2112 failed with error -5 [ 1953.171457][T19861] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1953.182979][T19861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1953.192458][T19861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1953.212480][T19861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1953.222446][T19861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1953.233597][T19861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1953.255603][T19861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1953.268409][T19861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1953.278045][T19861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1953.324902][T27386] veth0_vlan: entered promiscuous mode [ 1953.349224][T27386] veth1_vlan: entered promiscuous mode [ 1953.403300][T27386] veth0_macvtap: entered promiscuous mode [ 1953.423023][T27386] veth1_macvtap: entered promiscuous mode [ 1953.492859][T27386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1953.520449][T19861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1953.528944][T19861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1953.538324][T19861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1953.550296][T19861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1953.558310][T19861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1953.568201][T19861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1953.581388][T19861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1953.589750][T19861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1953.599027][T19861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1953.615393][T19861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1953.623285][T19861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1953.632943][T19861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1953.648698][T19861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1953.657119][T19861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1953.677401][T19861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1953.779651][T19861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1953.791071][T27386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1953.839062][T19861] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1953.850044][T19861] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1953.957137][T27248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.971830][T19861] usb 1-1: Product: syz [ 1953.987885][T19861] usb 1-1: Manufacturer: syz [ 1953.992620][T19861] usb 1-1: SerialNumber: syz [ 1954.007251][T27248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.037330][T19861] usb 1-1: config 0 descriptor?? [ 1954.043715][T27248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.067770][T19861] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1954.080082][T27248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.232605][T16851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.248993][T16851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.282759][T27670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.314415][T27670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.367532][T19863] usb 1-1: USB disconnect, device number 53 [ 1954.409092][T19863] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1954.497707][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.563517][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.745735][ T39] usb 4-1: USB disconnect, device number 58 [ 1957.670223][T27717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6175'. [ 1959.597913][T26624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1959.608811][T26624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1959.621532][T26624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1959.640854][T26624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1959.648792][T26624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1961.490259][T27740] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6181'. [ 1961.746487][T26624] Bluetooth: hci0: command tx timeout [ 1962.262227][T27762] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6183'. [ 1962.611494][T27737] chnl_net:caif_netlink_parms(): no params data found [ 1962.645492][ T39] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1962.896432][ T39] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1962.909702][ T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1962.918732][ T39] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1962.940050][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1963.187015][ T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1963.207649][ T39] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1963.226078][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1963.356428][T27737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.472992][T27737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.482829][ T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1963.492041][T27737] bridge_slave_0: entered allmulticast mode [ 1963.498593][ T39] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1963.659708][T27737] bridge_slave_0: entered promiscuous mode [ 1963.679782][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1963.782625][T27737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.827134][T26624] Bluetooth: hci0: command tx timeout [ 1963.836151][ T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1963.846304][ T39] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1963.858470][T27737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.866090][T27737] bridge_slave_1: entered allmulticast mode [ 1963.872128][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1963.883642][T27737] bridge_slave_1: entered promiscuous mode [ 1963.893484][ T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1963.910556][ T39] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1963.937154][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1963.953719][ T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1963.967581][ T39] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1963.983847][T27737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1963.997316][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1964.010524][T27737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1964.028021][ T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1964.055583][ T39] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1964.080254][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1964.131351][T27737] team0: Port device team_slave_0 added [ 1964.149851][ T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1964.174357][T27737] team0: Port device team_slave_1 added [ 1964.190359][ T39] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1964.327385][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1964.396766][ T39] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1964.433195][ T39] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1964.444410][T27737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1964.462589][T27737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1964.493342][ T39] usb 2-1: Product: syz [ 1964.499455][ T39] usb 2-1: Manufacturer: syz [ 1964.514105][ T39] usb 2-1: SerialNumber: syz [ 1964.522736][ T39] usb 2-1: config 0 descriptor?? [ 1964.529816][T27737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1964.573070][ T39] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1964.663360][T27737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1964.691438][T27737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1964.790120][T27737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1964.826704][T27757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.849555][T27757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.882065][T24470] usb 2-1: USB disconnect, device number 61 [ 1964.890763][T24470] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1965.112864][T27737] hsr_slave_0: entered promiscuous mode [ 1965.147470][T27737] hsr_slave_1: entered promiscuous mode [ 1965.166938][T27737] debugfs: 'hsr0' already exists in 'hsr' [ 1965.172730][T27737] Cannot create hsr debugfs directory [ 1965.919851][T26624] Bluetooth: hci0: command tx timeout [ 1967.996565][T26624] Bluetooth: hci0: command tx timeout [ 1968.162553][T27737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1968.213356][T27737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1968.285620][T27737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1968.331227][T27737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1969.080417][T27737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1969.194723][T27737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1969.271181][T27248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.278521][T27248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1969.521706][T21968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.528958][T21968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1970.079183][T27737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1970.180021][T27859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6194'. [ 1970.484793][T27737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1970.518285][T27867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6195'. [ 1970.775284][ T39] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1970.981601][ T39] usb 5-1: config 0 has no interfaces? [ 1970.987385][ T39] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1970.998124][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.019599][ T39] usb 5-1: config 0 descriptor?? [ 1971.075333][T24470] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1971.396618][T24470] usb 2-1: config 0 has no interfaces? [ 1971.402138][T24470] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1971.411791][T24470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.462040][T24470] usb 2-1: config 0 descriptor?? [ 1971.652837][T27737] veth0_vlan: entered promiscuous mode [ 1971.746859][T27737] veth1_vlan: entered promiscuous mode [ 1971.927462][T27737] veth0_macvtap: entered promiscuous mode [ 1971.980883][T27737] veth1_macvtap: entered promiscuous mode [ 1972.093108][T27737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1972.169556][T27737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1972.253298][T22003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.264026][T22003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.279935][T22003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.313544][T22003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.930419][T27379] usb 5-1: USB disconnect, device number 70 [ 1972.941300][T11669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1972.989236][T11669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1973.054966][T26624] Bluetooth: hci4: command 0x0406 tx timeout [ 1973.214750][T11669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.248217][T11669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1973.306173][T27874] netlink: 'syz.2.6206': attribute type 16 has an invalid length. [ 1973.543900][T27878] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6197'. [ 1974.155164][T19863] usb 2-1: USB disconnect, device number 62 [ 1974.785620][T19861] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1974.986389][T19861] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1975.310728][T19861] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1975.352071][T19861] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1975.379161][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1975.401564][T19861] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1975.438562][T19861] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1975.494986][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1975.544215][T19861] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1975.581253][T19861] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1975.645771][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1975.665682][T19861] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1975.697038][T19861] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1975.728854][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1975.767136][T19861] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1975.801968][T19861] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1975.879667][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1975.911199][T19861] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1975.921436][T19861] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1975.943937][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1976.001563][T19861] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1976.095775][T19861] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1976.107247][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1976.117235][T19861] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1976.144619][T19861] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1976.157153][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1976.182199][T19861] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1976.192124][T19861] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1976.207832][T19861] usb 3-1: Product: syz [ 1976.266013][T19861] usb 3-1: Manufacturer: syz [ 1976.270695][T19861] usb 3-1: SerialNumber: syz [ 1976.289906][T19861] usb 3-1: config 0 descriptor?? [ 1976.303692][T19861] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1976.526605][T27890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1976.586139][T27890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1976.633966][T19861] usb 3-1: USB disconnect, device number 46 [ 1976.642872][T19861] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1977.875431][T27067] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1978.077662][T27067] usb 1-1: config 0 has no interfaces? [ 1978.083523][T27067] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1978.241406][T27067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.355607][T27067] usb 1-1: config 0 descriptor?? [ 1979.253941][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6208'. [ 1979.374917][T27939] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1979.966273][T27067] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1980.179576][T27067] usb 2-1: config 0 has no interfaces? [ 1980.191773][T27067] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1980.364337][T27067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.428091][T27067] usb 2-1: config 0 descriptor?? [ 1980.955612][T27943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6210'. [ 1980.981475][T27943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6210'. [ 1981.155871][T27067] usb 1-1: USB disconnect, device number 54 [ 1981.202899][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.232947][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.512818][T27067] usb 2-1: USB disconnect, device number 63 [ 1983.603074][T27969] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6216'. [ 1983.673742][T19861] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1983.873446][T19861] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1983.889090][T19861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1983.898333][T19861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1983.917180][T19861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1983.935824][T19861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1983.945053][T19861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1984.286449][T19861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1984.295296][T19861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1984.305941][T19861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1984.319685][T19861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1984.416714][T19861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1984.459686][T19861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1984.491463][T19861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1984.512702][T19861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1984.523429][T19861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1984.805577][T19861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1984.834216][T19861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1984.844068][T19861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1984.874299][T19861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1984.891619][T19861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1984.901310][T19861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1984.912620][T19861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1984.923334][T19861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1984.939546][T19861] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1985.065473][T19861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1985.207578][T19861] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1985.247349][T19861] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1985.365508][T19861] usb 2-1: Product: syz [ 1985.369739][T19861] usb 2-1: Manufacturer: syz [ 1985.385622][T19861] usb 2-1: SerialNumber: syz [ 1985.448084][T19861] usb 2-1: config 0 descriptor?? [ 1985.518563][T19861] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1985.676951][T27966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.686027][T27966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.715921][T19861] usb 2-1: USB disconnect, device number 64 [ 1985.776594][T19861] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1988.495367][T17225] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1988.699917][T17225] usb 2-1: Using ep0 maxpacket: 8 [ 1988.725780][T17225] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1988.772362][T17225] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.782670][T17225] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1988.789661][T17225] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1988.801978][T17225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.863087][T17225] usb 2-1: config 0 descriptor?? [ 1989.225341][T27379] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1989.407032][T27379] usb 5-1: config 0 has no interfaces? [ 1989.412824][T27379] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1989.476679][T27379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.538293][T27379] usb 5-1: config 0 descriptor?? [ 1989.624438][T17225] usbhid 2-1:0.0: can't add hid device: -71 [ 1989.634153][T17225] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1989.677527][T17225] usb 2-1: USB disconnect, device number 65 [ 1991.894934][ T5904] usb 5-1: USB disconnect, device number 71 [ 1992.926115][T19859] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1993.362072][T19859] usb 5-1: config 0 has no interfaces? [ 1993.430533][T19859] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1993.470586][T19859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.514047][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 1993.713353][T19859] usb 5-1: config 0 descriptor?? [ 1994.905390][T27379] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1995.262493][T28067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1995.337305][T27379] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1995.357706][T27379] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.366926][T27379] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.378030][T27379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1995.395497][T27379] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.410189][T27379] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.427070][T27379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1995.434857][T27379] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.444029][T27379] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.455455][T27379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1995.469227][T27379] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.481316][T27379] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.492459][T27379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1995.500699][T27379] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.510678][T27379] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.523994][T27379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1995.719590][T27379] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.731099][T27379] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.801987][T27379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1995.813214][T27379] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.822484][T27379] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.917104][T19861] usb 5-1: USB disconnect, device number 72 [ 1995.990771][T27379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1996.016888][T27379] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1996.050155][T27379] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1996.113277][T27379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1996.144080][T27379] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1996.153885][T27379] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1996.162402][T27379] usb 4-1: Product: syz [ 1996.170161][T27379] usb 4-1: Manufacturer: syz [ 1996.174812][T27379] usb 4-1: SerialNumber: syz [ 1996.225066][T27379] usb 4-1: config 0 descriptor?? [ 1996.304159][T27379] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1996.586576][T28059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1996.655081][T28059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1996.738538][T19861] usb 4-1: USB disconnect, device number 59 [ 1996.790206][T19861] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1997.335298][ T5904] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1997.343107][T19861] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1997.561414][T19861] usb 5-1: config 0 has no interfaces? [ 1997.573100][T19861] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1997.643886][T19861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.860196][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 1997.900072][ T5904] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1997.913191][T19861] usb 5-1: config 0 descriptor?? [ 1997.925679][ T5904] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1997.935700][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1997.953539][ T5904] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1998.009232][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.062387][ T5904] usb 1-1: config 0 descriptor?? [ 1998.920931][ T5904] usbhid 1-1:0.0: can't add hid device: -71 [ 1998.933973][ T5904] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1998.949035][ T5904] usb 1-1: USB disconnect, device number 55 [ 1999.791023][ T5904] usb 5-1: USB disconnect, device number 73 [ 1999.965443][T28105] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2001.363576][T28113] openvswitch: netlink: Key type 31 is not supported [ 2002.535359][T16563] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2002.735760][T16563] usb 3-1: config 0 has no interfaces? [ 2002.770158][T16563] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2002.796977][T16563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.236698][T16563] usb 3-1: config 0 descriptor?? [ 2003.534631][T28129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6249'. [ 2004.246631][T19861] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 2004.505390][T17225] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2004.529060][T19861] usb 5-1: config 0 has no interfaces? [ 2004.535755][T19861] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2004.555995][T19861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.585827][T19861] usb 5-1: config 0 descriptor?? [ 2004.666385][T17225] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2004.698994][T17225] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2004.733550][T17225] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2004.759286][T27379] usb 3-1: USB disconnect, device number 47 [ 2004.793068][T17225] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2004.929125][T17225] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2004.938845][T17225] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2004.997338][T17225] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2005.023790][T17225] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2005.033074][T17225] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2005.044069][T17225] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2005.054532][T17225] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2005.310405][T17225] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2005.478442][T17225] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2005.571674][T17225] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2005.580790][T17225] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2005.740542][T17225] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2005.937440][T17225] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2006.009735][T17225] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2006.121427][T17225] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2006.210457][T17225] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2006.255330][T17225] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2006.284774][T17225] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2006.470068][T17225] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2006.487899][T17225] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2006.519397][T19861] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2006.584478][T17225] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2006.608655][T17225] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2006.627942][T17225] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2006.645721][T17225] usb 4-1: Product: syz [ 2006.650146][T17225] usb 4-1: Manufacturer: syz [ 2006.655840][T17225] usb 4-1: SerialNumber: syz [ 2006.703731][T17225] usb 4-1: config 0 descriptor?? [ 2006.715576][T19861] usb 3-1: Using ep0 maxpacket: 8 [ 2006.726918][T17225] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 2006.733228][T19861] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2006.745679][T19861] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2006.757625][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2006.783641][T19861] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 2006.837246][T19861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.858897][T19861] usb 3-1: config 0 descriptor?? [ 2006.998162][ T5904] usb 4-1: USB disconnect, device number 60 [ 2007.012475][ T5904] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 2007.244269][T19861] usbhid 3-1:0.0: can't add hid device: -71 [ 2007.260201][T19861] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2007.274639][T19861] usb 3-1: USB disconnect, device number 48 [ 2007.495104][T19863] usb 5-1: USB disconnect, device number 74 [ 2008.035655][T19863] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2008.375569][T19863] usb 2-1: Using ep0 maxpacket: 8 [ 2008.382863][T19863] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2008.394502][T19863] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2008.404753][T19863] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2008.411747][T19863] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 2008.421313][T19863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.544279][T19863] usb 2-1: config 0 descriptor?? [ 2009.682153][T19863] usbhid 2-1:0.0: can't add hid device: -71 [ 2009.701223][T19863] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2009.729341][T19863] usb 2-1: USB disconnect, device number 66 [ 2010.114216][T28187] openvswitch: netlink: Key type 31 is not supported [ 2012.250786][T27379] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2012.466973][T28206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6268'. [ 2012.481263][T28206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6268'. [ 2012.735633][T27379] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2012.752227][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2012.764678][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2012.885417][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2012.897647][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2012.906943][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2012.918148][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2013.210548][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2013.303415][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2013.335260][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2013.359304][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2013.787307][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2013.939693][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2013.950537][T28216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6270'. [ 2014.006861][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6270'. [ 2014.016243][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2014.029657][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2014.047608][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2014.110948][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2014.123541][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2014.186294][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2014.217530][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2014.247280][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2014.378952][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2014.387734][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2014.398863][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2014.411677][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2014.429318][T27379] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2014.439990][T27379] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2014.449390][T27379] usb 2-1: Product: syz [ 2014.459055][T27379] usb 2-1: Manufacturer: syz [ 2014.487480][T27379] usb 2-1: SerialNumber: syz [ 2014.578179][T27379] usb 2-1: config 0 descriptor?? [ 2014.593888][T27379] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2014.801669][T28200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2014.876103][T28200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2014.917334][ T5904] usb 2-1: USB disconnect, device number 67 [ 2014.981725][ T5904] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2016.505389][T27379] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2016.679277][T27379] usb 2-1: config 0 has no interfaces? [ 2016.684947][T27379] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2016.743699][T27379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.816154][T27379] usb 2-1: config 0 descriptor?? [ 2017.291068][T28248] openvswitch: netlink: Key type 31 is not supported [ 2017.408944][T28250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6278'. [ 2017.422788][T28250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6278'. [ 2019.233585][T19863] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 2019.744079][T24470] usb 2-1: USB disconnect, device number 68 [ 2019.897332][T19863] usb 4-1: config 0 has no interfaces? [ 2019.905427][T19863] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2020.054111][T19863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.121171][T19863] usb 4-1: config 0 descriptor?? [ 2020.475960][T28277] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2021.495276][T27379] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 2021.720568][T16563] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2021.741243][T27379] usb 3-1: config 0 has no interfaces? [ 2021.763899][T27379] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2021.775813][T27379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.804774][T27379] usb 3-1: config 0 descriptor?? [ 2021.968601][T16563] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2022.028126][T16563] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2022.037446][T16563] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2022.068340][T16563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2022.160698][T16563] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2022.199489][T16563] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2022.237827][T16563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2022.266468][T16563] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2022.299658][T16563] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2022.345227][T16563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2022.367411][T16563] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2022.425450][T16563] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2022.465096][T16563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2022.498035][T16563] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2022.521243][T16563] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2022.548885][T16563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2022.560734][T16563] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2022.630606][T16563] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2022.695045][T16563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2022.730071][T16563] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2022.845268][T16563] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2022.857710][T16563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2022.867544][T16563] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2022.887418][T16563] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2022.898958][T16563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2023.212039][T28292] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2023.437938][T16563] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2023.549141][T16563] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2023.561863][T16563] usb 5-1: Product: syz [ 2023.566193][T16563] usb 5-1: Manufacturer: syz [ 2023.571990][T16563] usb 5-1: SerialNumber: syz [ 2023.583798][T16563] usb 5-1: config 0 descriptor?? [ 2023.614544][T24470] usb 4-1: USB disconnect, device number 61 [ 2023.643002][T16563] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 2023.843530][T28287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2023.866129][T28287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.008505][T24470] usb 5-1: USB disconnect, device number 75 [ 2024.228431][T26624] Bluetooth: hci3: command 0x0406 tx timeout [ 2024.239925][T24470] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 2024.249513][T19861] usb 3-1: USB disconnect, device number 49 [ 2025.222506][T28308] openvswitch: netlink: Key type 31 is not supported [ 2027.523990][T28326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6292'. [ 2028.141849][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6295'. [ 2028.796867][T19861] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 2029.010432][T19861] usb 4-1: config 0 has no interfaces? [ 2029.161661][T19861] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2029.171352][T19861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.193622][T19861] usb 4-1: config 0 descriptor?? [ 2031.385302][T19861] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2031.425740][T19863] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2031.545447][T19861] usb 3-1: Using ep0 maxpacket: 8 [ 2031.552369][T19861] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.566604][T19861] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.590593][T19861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2031.597582][T19863] usb 2-1: Using ep0 maxpacket: 8 [ 2031.604174][T19861] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 2031.614200][T19861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.622832][T19863] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.636520][T19863] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.647884][T19861] usb 3-1: config 0 descriptor?? [ 2031.653505][T19863] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2031.661065][T19863] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 2031.681975][T19863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.701068][T19863] usb 2-1: config 0 descriptor?? [ 2031.808021][ T5904] usb 4-1: USB disconnect, device number 62 [ 2032.231210][T19863] usbhid 2-1:0.0: can't add hid device: -71 [ 2032.250724][T19863] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2032.274596][T19863] usb 2-1: USB disconnect, device number 69 [ 2032.355728][ T5904] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2032.520862][T19861] usbhid 3-1:0.0: can't add hid device: -71 [ 2032.546043][T19861] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2032.554170][ T5904] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2032.616270][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2032.644742][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2032.746974][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2032.886000][T19861] usb 3-1: USB disconnect, device number 50 [ 2032.942631][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2032.977854][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2033.045295][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2033.063201][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2033.079205][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2033.113008][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6303'. [ 2033.125599][T19863] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 2033.283755][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2033.295832][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2033.308674][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2033.422919][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2033.435888][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2033.468928][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2033.481782][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2033.489941][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2033.499431][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2033.522719][T19863] usb 1-1: config 0 has no interfaces? [ 2033.529889][T19863] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2033.539211][T19863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.565278][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2033.581224][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2033.634506][T19863] usb 1-1: config 0 descriptor?? [ 2033.659262][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2033.724309][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2033.783105][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2033.858546][T28385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6304'. [ 2033.872413][T28385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6304'. [ 2033.896384][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2033.911752][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2034.157585][ T5904] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2034.167200][ T5904] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2034.185291][ T5904] usb 4-1: Product: syz [ 2034.196322][ T5904] usb 4-1: Manufacturer: syz [ 2034.201058][ T5904] usb 4-1: SerialNumber: syz [ 2034.208633][ T5904] usb 4-1: config 0 descriptor?? [ 2034.253792][T28385] ================================================================== [ 2034.261937][T28385] BUG: KASAN: use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 2034.269510][T28385] Read of size 8 at addr ffff888092600108 by task syz.1.6304/28385 [ 2034.277517][T28385] [ 2034.279856][T28385] CPU: 1 UID: 0 PID: 28385 Comm: syz.1.6304 Tainted: G L syzkaller #0 PREEMPT(full) [ 2034.279887][T28385] Tainted: [L]=SOFTLOCKUP [ 2034.279894][T28385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2034.279905][T28385] Call Trace: [ 2034.279914][T28385] [ 2034.279923][T28385] dump_stack_lvl+0xe8/0x150 [ 2034.279947][T28385] print_report+0xca/0x240 [ 2034.279964][T28385] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2034.279995][T28385] kasan_report+0x118/0x150 [ 2034.280015][T28385] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2034.280043][T28385] nf_hook_entry_head+0x1f1/0x2c0 [ 2034.280068][T28385] __nf_unregister_net_hook+0x74/0x6f0 [ 2034.280094][T28385] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 2034.280120][T28385] nf_tables_commit+0x415e/0xa350 [ 2034.280143][T28385] ? nft_pernet+0x23/0x240 [ 2034.280164][T28385] ? __pfx_nf_tables_commit+0x10/0x10 [ 2034.280178][T28385] ? nft_pernet+0x23/0x240 [ 2034.280194][T28385] ? nft_pernet+0x23/0x240 [ 2034.280209][T28385] ? nft_pernet+0x23/0x240 [ 2034.280227][T28385] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 2034.280247][T28385] ? nft_flush_table+0xd06/0xea0 [ 2034.280267][T28385] ? nf_tables_deltable+0x674/0xe10 [ 2034.280284][T28385] ? __pfx_nf_tables_deltable+0x10/0x10 [ 2034.280307][T28385] nfnetlink_rcv+0x1ac9/0x2590 [ 2034.280339][T28385] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2034.280364][T28385] ? ref_tracker_free+0x63a/0x7d0 [ 2034.280391][T28385] ? __netlink_deliver_tap+0x807/0x850 [ 2034.280413][T28385] ? netlink_deliver_tap+0x2e/0x1b0 [ 2034.280441][T28385] netlink_unicast+0x82f/0x9e0 [ 2034.280463][T28385] ? __pfx_netlink_unicast+0x10/0x10 [ 2034.280481][T28385] ? __alloc_skb+0x198/0x3a0 [ 2034.280499][T28385] ? netlink_sendmsg+0x642/0xb30 [ 2034.280520][T28385] ? skb_put+0x11b/0x210 [ 2034.280539][T28385] netlink_sendmsg+0x805/0xb30 [ 2034.280564][T28385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2034.280587][T28385] ? __import_iovec+0x5d4/0x7f0 [ 2034.280606][T28385] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2034.280628][T28385] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2034.280642][T28385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2034.280669][T28385] __sock_sendmsg+0x21c/0x270 [ 2034.280695][T28385] ____sys_sendmsg+0x505/0x820 [ 2034.280717][T28385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2034.280739][T28385] ? preempt_schedule_thunk+0x16/0x30 [ 2034.280756][T28385] ___sys_sendmsg+0x21f/0x2a0 [ 2034.280777][T28385] ? __pfx____sys_sendmsg+0x10/0x10 [ 2034.280798][T28385] ? futex_private_hash_put+0x13b/0x170 [ 2034.280823][T28385] ? futex_wake+0x4b2/0x560 [ 2034.280852][T28385] ? __fget_files+0x2a/0x420 [ 2034.280876][T28385] ? __fget_files+0x3a0/0x420 [ 2034.280900][T28385] __sys_sendmsg+0x164/0x220 [ 2034.280920][T28385] ? __pfx___sys_sendmsg+0x10/0x10 [ 2034.280943][T28385] ? rcu_is_watching+0x15/0xb0 [ 2034.280967][T28385] __do_fast_syscall_32+0x1dc/0x570 [ 2034.280988][T28385] ? lockdep_hardirqs_on+0x7b/0x110 [ 2034.281004][T28385] ? do_fast_syscall_32+0x34/0x80 [ 2034.281023][T28385] ? irqentry_exit+0x10f/0x670 [ 2034.281041][T28385] do_fast_syscall_32+0x34/0x80 [ 2034.281060][T28385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2034.281080][T28385] RIP: 0023:0xf704d539 [ 2034.281096][T28385] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2034.281111][T28385] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2034.281128][T28385] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 2034.281139][T28385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2034.281149][T28385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2034.281158][T28385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2034.281167][T28385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2034.281183][T28385] [ 2034.281189][T28385] [ 2034.656522][T28385] The buggy address belongs to the physical page: [ 2034.662970][T28385] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888092600000 pfn:0x92600 [ 2034.673078][T28385] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2034.680243][T28385] raw: 00fff00000000000 ffffea0001140408 ffff8880b8740c00 0000000000000000 [ 2034.688887][T28385] raw: ffff888092600000 0000000000000000 00000000ffffffff 0000000000000000 [ 2034.697487][T28385] page dumped because: kasan: bad access detected [ 2034.704002][T28385] page_owner tracks the page as freed [ 2034.709393][T28385] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 28378, tgid 28375 (syz.1.6303), ts 2033101119427, free_ts 2033481384791 [ 2034.731742][T28385] post_alloc_hook+0x234/0x290 [ 2034.736541][T28385] get_page_from_freelist+0x24e0/0x2580 [ 2034.742112][T28385] __alloc_frozen_pages_noprof+0x181/0x370 [ 2034.747942][T28385] alloc_pages_mpol+0x232/0x4a0 [ 2034.752827][T28385] ___kmalloc_large_node+0x4e/0x150 [ 2034.758051][T28385] __kmalloc_large_node_noprof+0x18/0x90 [ 2034.763727][T28385] __kvmalloc_node_noprof+0x6e/0x920 [ 2034.769117][T28385] alloc_netdev_mqs+0xa6/0x11b0 [ 2034.773995][T28385] tun_set_iff+0x532/0xf00 [ 2034.778468][T28385] __tun_chr_ioctl+0x788/0x1df0 [ 2034.783432][T28385] __ia32_compat_sys_ioctl+0x543/0x840 [ 2034.788907][T28385] __do_fast_syscall_32+0x1dc/0x570 [ 2034.794228][T28385] do_fast_syscall_32+0x34/0x80 [ 2034.799098][T28385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2034.805452][T28385] page last free pid 28375 tgid 28375 stack trace: [ 2034.811971][T28385] __free_frozen_pages+0xbc8/0xd30 [ 2034.817106][T28385] device_release+0x9e/0x1d0 [ 2034.821720][T28385] kobject_put+0x228/0x570 [ 2034.826157][T28385] netdev_run_todo+0xd2c/0xea0 [ 2034.830947][T28385] tun_chr_close+0x13c/0x1c0 [ 2034.835650][T28385] __fput+0x44c/0xa70 [ 2034.839657][T28385] task_work_run+0x1d4/0x260 [ 2034.844466][T28385] exit_to_user_mode_loop+0xef/0x4e0 [ 2034.849769][T28385] __do_fast_syscall_32+0x398/0x570 [ 2034.855013][T28385] do_fast_syscall_32+0x34/0x80 [ 2034.859892][T28385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2034.866246][T28385] [ 2034.868586][T28385] Memory state around the buggy address: [ 2034.874234][T28385] ffff888092600000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2034.882321][T28385] ffff888092600080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2034.890401][T28385] >ffff888092600100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2034.898471][T28385] ^ [ 2034.902813][T28385] ffff888092600180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2034.910892][T28385] ffff888092600200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2034.918964][T28385] ================================================================== [ 2034.978670][T28385] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2034.985901][T28385] CPU: 0 UID: 0 PID: 28385 Comm: syz.1.6304 Tainted: G L syzkaller #0 PREEMPT(full) [ 2034.996841][T28385] Tainted: [L]=SOFTLOCKUP [ 2035.001161][T28385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2035.011212][T28385] Call Trace: [ 2035.014495][T28385] [ 2035.017428][T28385] vpanic+0x1e0/0x670 [ 2035.021595][T28385] panic+0xb9/0xc0 [ 2035.025330][T28385] ? __pfx_panic+0x10/0x10 [ 2035.029779][T28385] ? preempt_schedule_thunk+0x16/0x30 [ 2035.035182][T28385] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2035.040424][T28385] check_panic_on_warn+0x89/0xb0 [ 2035.045374][T28385] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2035.050577][T28385] end_report+0x6f/0x140 [ 2035.054834][T28385] kasan_report+0x129/0x150 [ 2035.059459][T28385] ? nf_hook_entry_head+0x1f1/0x2c0 [ 2035.064761][T28385] nf_hook_entry_head+0x1f1/0x2c0 [ 2035.069842][T28385] __nf_unregister_net_hook+0x74/0x6f0 [ 2035.075340][T28385] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 2035.081714][T28385] nf_tables_commit+0x415e/0xa350 [ 2035.086771][T28385] ? nft_pernet+0x23/0x240 [ 2035.091291][T28385] ? __pfx_nf_tables_commit+0x10/0x10 [ 2035.096716][T28385] ? nft_pernet+0x23/0x240 [ 2035.101210][T28385] ? nft_pernet+0x23/0x240 [ 2035.105643][T28385] ? nft_pernet+0x23/0x240 [ 2035.110097][T28385] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 2035.116462][T28385] ? nft_flush_table+0xd06/0xea0 [ 2035.121438][T28385] ? nf_tables_deltable+0x674/0xe10 [ 2035.126651][T28385] ? __pfx_nf_tables_deltable+0x10/0x10 [ 2035.132214][T28385] nfnetlink_rcv+0x1ac9/0x2590 [ 2035.137001][T28385] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2035.142127][T28385] ? ref_tracker_free+0x63a/0x7d0 [ 2035.147169][T28385] ? __netlink_deliver_tap+0x807/0x850 [ 2035.152643][T28385] ? netlink_deliver_tap+0x2e/0x1b0 [ 2035.157873][T28385] netlink_unicast+0x82f/0x9e0 [ 2035.162674][T28385] ? __pfx_netlink_unicast+0x10/0x10 [ 2035.167964][T28385] ? __alloc_skb+0x198/0x3a0 [ 2035.172642][T28385] ? netlink_sendmsg+0x642/0xb30 [ 2035.177593][T28385] ? skb_put+0x11b/0x210 [ 2035.181848][T28385] netlink_sendmsg+0x805/0xb30 [ 2035.186627][T28385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2035.191952][T28385] ? __import_iovec+0x5d4/0x7f0 [ 2035.196808][T28385] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2035.201765][T28385] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2035.207186][T28385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2035.212491][T28385] __sock_sendmsg+0x21c/0x270 [ 2035.217190][T28385] ____sys_sendmsg+0x505/0x820 [ 2035.221968][T28385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2035.227271][T28385] ? preempt_schedule_thunk+0x16/0x30 [ 2035.232675][T28385] ___sys_sendmsg+0x21f/0x2a0 [ 2035.237365][T28385] ? __pfx____sys_sendmsg+0x10/0x10 [ 2035.242603][T28385] ? futex_private_hash_put+0x13b/0x170 [ 2035.248158][T28385] ? futex_wake+0x4b2/0x560 [ 2035.252680][T28385] ? __fget_files+0x2a/0x420 [ 2035.257278][T28385] ? __fget_files+0x3a0/0x420 [ 2035.261968][T28385] __sys_sendmsg+0x164/0x220 [ 2035.266567][T28385] ? __pfx___sys_sendmsg+0x10/0x10 [ 2035.271710][T28385] ? rcu_is_watching+0x15/0xb0 [ 2035.276524][T28385] __do_fast_syscall_32+0x1dc/0x570 [ 2035.281743][T28385] ? lockdep_hardirqs_on+0x7b/0x110 [ 2035.286968][T28385] ? do_fast_syscall_32+0x34/0x80 [ 2035.291999][T28385] ? irqentry_exit+0x10f/0x670 [ 2035.296818][T28385] do_fast_syscall_32+0x34/0x80 [ 2035.301676][T28385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2035.308013][T28385] RIP: 0023:0xf704d539 [ 2035.312085][T28385] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2035.331782][T28385] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2035.340204][T28385] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 2035.348183][T28385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2035.356164][T28385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2035.364161][T28385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2035.372136][T28385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2035.380129][T28385] [ 2035.383794][T28385] Kernel Offset: disabled [ 2035.388125][T28385] Rebooting in 86400 seconds..