last executing test programs: 8.314980384s ago: executing program 2 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000980), 0x56) sendmsg$kcm(r4, &(0x7f00000009c0)={&(0x7f0000000a00)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000a80)=[{0x0}], 0x1}, 0x80) 8.046402365s ago: executing program 2 (id=83): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_connect(0x5, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 6.699001104s ago: executing program 3 (id=91): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xcc, @empty, 0x5}, {0xa, 0x4e23, 0xffffff03, @loopback={0x9d}, 0x1}, 0xffffffffffffffff, 0x4}}, 0x48) 6.563612298s ago: executing program 3 (id=92): r0 = syz_usb_connect$uac3(0x4, 0x97, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0xa0, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x20, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7ffffffa, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x421}}, {0x2, &(0x7f0000000380)=@string={0x2}}, {0x0, 0x0}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0xe7, 0xd6, 0x85, 0x20, 0x2058, 0x1005, 0x3fba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x50, 0x7f, 0x20, 0x2, "", [{{0x9, 0x4, 0x16, 0x80, 0x1, 0x28, 0x0, 0xbe, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0xd, 0x80, 0x80}}]}}]}}]}}, &(0x7f0000000540)={0xfffffe96, 0x0, 0x0, 0x0}) 6.476285323s ago: executing program 2 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000980), 0x56) sendmsg$kcm(r4, &(0x7f00000009c0)={&(0x7f0000000a00)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000a80)=[{0x0}], 0x1}, 0x80) 5.887898222s ago: executing program 2 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0xf, &(0x7f0000000c40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000cc0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0288ef4ecf000000080000000100000080000008", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000af0800000000000000000d00"/28], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) socket(0x10, 0x3, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200103"], 0x0}) socket$kcm(0x21, 0x2, 0x2) r6 = syz_io_uring_setup(0xf08, &(0x7f0000000200)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xf}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x1}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) 5.713873953s ago: executing program 0 (id=95): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000100)=0x7, 0x4) mmap(&(0x7f0000fba000/0x2000)=nil, 0x2000, 0x4000000, 0x11, r0, 0x100000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000390423bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f35ef78a487346260000000000bf10eb31ff823c0f6b3727337cca75e1d8b53d5fe209429017", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa002, 0x0, 0x80000000, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "4d8067db19aa646e32658521757a3d7b5ac4b723b9205427f026575de1b4f21e32658952e567c2cd0bd5fc86922812585f7caa9191aa33d4546caf1ae7c4127e", 0x40}, 0x48, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="16"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_vhci(&(0x7f0000000840)=ANY=[], 0x16) 5.307375965s ago: executing program 1 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000002cc0), 0x56) sendmsg$kcm(r6, &(0x7f0000002d00)={&(0x7f0000002d40)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002e00)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 5.082698304s ago: executing program 3 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010425bd7000fddbdf250000", @ANYRES32=0x0, @ANYBLOB="031700001b080100140012800b0001006970766c616e00001400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.975459698s ago: executing program 3 (id=100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x7}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00221f00000005010904a101050109300931150025ff7508950281021901290795079102c0"], 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) r2 = signalfd(r0, &(0x7f0000000000)={[0x5]}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x12}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) 4.898435948s ago: executing program 1 (id=101): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000200)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r3, 0x2, 0x82c8, 0x9d, 0x1ff, 0x401}, &(0x7f0000000380)=0x14) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000400)=@overlay={0x0, 0x8, 0x4, 0xe000, 0x0, {0x0, 0x2710}, {0x2, 0x2, 0x3, 0x2, 0x7, 0x1, '@\ro^'}, 0x9, 0x3, {}, 0x125}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0xa0000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) getsockname$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000a00)={0x2020}, 0x2020) lseek(r6, 0xfffffffffffffff5, 0x1) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3000001, 0x13, r8, 0xe64a2000) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000009c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) 4.775297358s ago: executing program 1 (id=102): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ec000000090601020000000000000000010000072200010007000000240007800c00018008000140ffffffff0c001b400000000000000008620004404e230000500007800c00018008000140ac1414420c00194000000000000000840c00028088ff0140ac1414bb080009400000949a050007006c000000050003000900000006001d401750000008000b40000000065c00078008000640000004000900130073797a310000000008001c4000000006060005404e21000000000b40000080010900120073797a32000000000900120073797a31000000000500150009000000000001800000014000000000"], 0xec}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x6641, &(0x7f00000008c0)={0x0, 0x12b0, 0x20, 0x3, 0x3db}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f0000000a00)={0xfff}, 0x0) ioctl$sock_ifreq(r2, 0x8935, &(0x7f0000000a80)={'pimreg\x00', @ifru_map={0x9, 0xfffffefa, 0x2e27, 0x4, 0xd, 0x5}}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000ac0)={'bridge0\x00', @ifru_ivalue=0xa}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000b00)={'bridge0\x00', @ifru_ivalue=0xb}) ioctl$sock_ifreq(r2, 0x89a3, &(0x7f0000000b40)={'bridge0\x00', @ifru_ivalue=0xc}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000b80)={'bridge0\x00', @ifru_ivalue=0xd}) ioctl$sock_ifreq(r2, 0x891c, &(0x7f0000000600)={'veth1_virt_wifi\x00', @ifru_mtu}) syz_usb_connect(0x0, 0x24, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000c166a0108304341276ff010203010902120001000000000904"], 0x0) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000c40)={'bridge0\x00', @ifru_ivalue=0xf}) syz_usb_connect$uac3(0x6, 0xe8, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d6000301030008080b0200010130400904000000010130000a24010e3100ff0f00000a2410060600fee8079907240c090289d01124070602070000000d0000000d00000005240c0f000904010000010230000904010101010230000e24020100040505d8c1b3a0ac69082402010403c204092402010402077f0809050109400081090b0a252501000080020c000904020400010230000904020101010230001724013200040000ff7f01000000000000002f010900080b240201370106080f54ec09058209ff0341d6040a252505000000e74000"], &(0x7f0000001480)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0xf8, 0x2, 0x1, 0x20, 0x11}, 0x39, &(0x7f00000006c0)={0x5, 0xf, 0x39, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x527f, 0xf, 0x2, [0x3f00, 0xffc0f0, 0xc000, 0x7e00, 0xffff1e, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1d, 0x40, 0x13, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x96, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "65da9d1c0f75cf36ca8f06ae49461c6c"}]}, 0xa, [{0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="300326f008430b429756b3390076cf98a5b83bed26ccc83996f21fdca7363a199876c6b72e143c01ced913c64d8d6b3fa9fdfe6a"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x814}}, {0x94, &(0x7f0000001100)=@string={0x94, 0x3, "645aaa5b5851ee59fb069fd855ea3b22a72eb442794e137277cc924080adfb5c963c8afac01b9d8059f365a08e430b3ecc5777b64b5c60a06405942ad4c1bac69b1cf2550d934d11920d87ce4febceee494ec43aaa6b913a1fbbba51102d2006742abafded4eafca622d568f94a994bafaad067351edaf63c689f0fdbfb8de33fc69b41b5de53a53d4a53fb12b8b69f57a0b"}}, {0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="1c03257fbc6417a5f37dd8565aa350ba4f00000000000000000000002d9320b6fea6d17f0b1ac434208d8c54f78fa9699ddbccd8870ad27fafaabac454d608dc922e4795459daf595f7042222d0954d128e9228a745f2a45fc0a905296db107b2f3cd6a1f31f09cce027bf46c40a06cae72e1446241f156145ba75"]}, {0x41, &(0x7f0000001540)=ANY=[@ANYBLOB="4103dc6ea66f58ff820f3fbc9f56afc79ed1cc4482a149b3d42973a57a671c0034f1223793a8162139faffb34f1598c55500e0acfa791036d849c88638f24fe3c36fb3e0acf36532dcafb29af75971580f3be43552020d887392594b70d1311849fcb4dfdba09de5a6f0fb54123ea08aa43ee0f5e67223ec9fa70a377f51311d3ac0ef8f1c16cfaf7489385db435a61a4193b2dd9191e9109ce98e7060fd5bf2c94c39fe3fffab05c9c02ad2ff507ed3e7f8d0cd9196c64613ae0520949e1f0c8e25cbd87b46f3"]}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x41a}}, {0xa7, &(0x7f00000012c0)=@string={0xa7, 0x3, "4381146c057fafb3e6b8edd6b79e2eaa190755d8ddb14f83d2d8b47864da91148b2c6ed74d12fd0265fc5587116e2414a0ed36579998e712a888140d092816a666c9d6493b2968a2e0f9ce3ed9d65d598d43c8a1a0c9c12e6fc67598ec53fb22dac86cb5066b296093685ca04bb1be44f665d491708d1c9f5ed554c012908a5fcb6282caa6e83f07fad3ddeabe2cd0c527cd7d818c5c39ab26daa2b6bd914db6c8e0177462"}}, {0xfb, &(0x7f0000001380)=@string={0x109, 0x3, "b273c548230a44e41b6fc152f7babfffceea154684f7ee2c8add4f6d4dc7398b389670067bd33fabd77d96b72ef1710a482a1f6b340cc64c7c50fe6663ffcddc3adfd5523a7e848494fda0f31cf021cab0dac5dff711cc555ef28d711855c56f521589e95bc2cef6bb3ee2d417546b22a613a37fd7c49d39e4fc0f17cbddfa988fe25177a0dfa2f76b18d54c7c69c6e1da4f0fbd0e974cff2c0a60951198172d788bbcbd8f84d78425b97ab4de99ce535920d3fdc0c1b4379e21f28f23bd340e9fcb832775a2518e0ae6031adda12d25a8dc4e460e5480805f95ac0e0e7692c375e3041dce56b64319ce260689a30d8efeb1ac78f26be21923"}}]}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000c80)={'bridge0\x00', @ifru_ivalue=0x10}) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1005}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40c}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004050}, 0x44010) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002200)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x1, 0x10001, 0x0, 0x4, 0x6, 0x0, [{0x1, 0x0, 0xff, '\x00', 0x81}, {0x7, 0x9, 0xfffffffffffffff5, '\x00', 0x101}, {0x10000, 0xda5, 0xb6d, '\x00', 0x2}, {0x0, 0x8000, 0x1, '\x00', 0x2200}, {0x8, 0x0, 0x7, '\x00', 0x809}, {0x26, 0xb, 0x1, '\x00', 0x400}]}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000480), 0x109842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303040303034303030302c75f365725f01003d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.571223853s ago: executing program 4 (id=103): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() syz_usb_connect(0x2, 0xc7, &(0x7f0000000040)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224170101020000000000000000030000000924030201010003000c24050300ee0002", @ANYBLOB="64be45a443"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x20, 0x22, 0xc6, {0xc6, 0xb, "46a00a9e29ec1ea4559e8444f695f15643c60fcd5063d610de9ac61a0d758e89e50d77995e425492fa85358181ad6842a0faacd4eeb752267113bb9e93d6d4a0766dfcd3ca909013d24a09a1d4b379ca99bc14857b786eba07612987580812d52c4970074da6173b7367638ee11cabc568758354e7dab6860302fa0c7d1bd834eafd300c6000b399ee7434f8481fd2c6828edb6707d6ed8a62b579aa01c6d84fdac2834fd6e522f7723403e0d8efb6a06854caa2d12efc0525af4bc104cafa8efcbb0ce0"}}, &(0x7f0000000500)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "060e94a212a68f8c2b33c6811e1528abf5505799a8759c1dd589a3a03903957eae7dc6684cb8b9500ea443c28c9ca3b81c268806aa4c16c9cad4a04c511a69acf6ab084cc1eabec08931f79a"}}}, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x20, 0x1, 0xb, "11b6f15ccb89e1e644ceed"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000680)={0xc0, 0x5, 0x6, "012770792e65"}, &(0x7f00000006c0)}) r0 = socket$kcm(0x2, 0xa, 0x2) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r1 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r2, 0x891e, &(0x7f0000001940)={'vxcan1\x00', @ifru_mtu}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) wait4(r1, &(0x7f0000000740), 0x80000000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.527463127s ago: executing program 0 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000980), 0x56) sendmsg$kcm(r4, &(0x7f00000009c0)={&(0x7f0000000a00)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)}], 0x1}, 0x80) 4.347763407s ago: executing program 0 (id=105): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000740)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) epoll_wait(r0, &(0x7f0000000800)=[{}], 0x1, 0x400) shutdown(r1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) 4.347010896s ago: executing program 3 (id=106): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000500)=[{r0, 0x18}], 0x1, 0xfff80000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x304000000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') r2 = openat(r1, &(0x7f0000000080)='volumes\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/183, 0xb7}], 0x1, 0x400000e, 0x18000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000240)={@broadcast, @multicast2}, &(0x7f0000000280)=0xc) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) syz_usb_connect$midi(0x0, 0x59, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100300000040351201824000010203010902470001011898040904000002010300060908050b20000fd3020f25010b3d1813da062a56c3efd1de09058c0220006df78014250110"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) ioctl(r4, 0x8913, &(0x7f00000003c0)='veth0:') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000800)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c) listen(r7, 0x0) listen(r8, 0x2) syz_open_procfs(0x0, &(0x7f0000000cc0)='net/tcp6\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020020bd7000dbdf257600000008000300", @ANYRES32=r9, @ANYBLOB="0c009900020000000e0000000c00580025000000000000000c00580057000000000000000c00580046000000000000000c0058002d000000000000000c0058005300000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0xc0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000006c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x1, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000740)='ip6tnl0\x00', 0x3, 0x7, 0x93}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 3.337586878s ago: executing program 2 (id=107): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) 3.260272447s ago: executing program 0 (id=108): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x800, 0x400) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) syz_usb_connect(0x0, 0x472, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xe, 0x49, 0x10, 0x8, 0x4e8, 0x689a, 0xd713, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x460, 0x4, 0x3, 0xd, 0x20, 0x2, "", [{{0x9, 0x4, 0xf6, 0xf, 0xc, 0x60, 0x33, 0x72, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x3c}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x1, 0x5, 0x2, 0x6, 0x10}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x2, 0x5, "b0a47d9a"}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x6, 0x55, "df41ca1dda"}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x6, 0x4, [0x0, 0x7, 0x2, 0x7]}]}, @hid_hid={0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x8ff}}], [{{0x9, 0x5, 0xa, 0x4, 0x10, 0xe, 0xa, 0x3}}, {{0x9, 0x5, 0xe, 0x1a, 0x20, 0x1, 0x0, 0x2}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0xa, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xbd, 0x1}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x7, 0x8, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x416}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x6, 0x5, 0x7}}, {{0x9, 0x5, 0x6, 0x6, 0x400, 0x7d, 0x6, 0xf7, [@generic={0x7d, 0x23, "493cb9b7579030bdf7fd32dc89aad021f19d7f11e02a9036f577ab670aaa4de11d192f93db16eb8944aa9a40ca7e760e7bd423737cfd471e55b2478fe9f9e474cabc619843f9e314d18926775286232b360d93ac3301bc5d4f62225fa83dcb2cf3e6c516ea26f625cfb25c335e6e7b9e28dfa1975b9dbf003b7456"}, @generic={0x5c, 0x22, "bf4df9642aa8794327ca2cd398edff2cac5b9bae6c95ce36a5003326897bef793181bac8f255fb6c0186897e211ac56ee11a573fdbc99ea02df82180a7323e564cda3c2e09fdece0321693e3012bdf179f2943c64535ce9cff09"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xfd, 0xc, 0xfd, [@generic={0x84, 0x5, "7395158b36c23ab93a30d8c8279eaac581b796985a4d97a1b41a499709a551ba25bb3409d2655d673ae829d246092bd6d36441ca998710afe59d46a7d8c5c5a2651fe2d06a55f70004a883ba3633dbd9becd552e3e1df499cf2918fe173a72ffd607975c9f22aa2dd61c1a9a5fbce4c8d0307331fd2aee7e98093f745a5fe6376c93"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x4a, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x1, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x4}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0x7, 0x4, [@generic={0xa1, 0xb, "cddc7f5d0800df7acfa3c54515bf3e658d1a207266f0e358c873c4094d710f229855c46d146a890525a46d85ded0e9dd278aebc680c973697f9571c6e10aad62e645372ee81ec272c21d3a73cfdad6b6bcda736fe6f6790a248ee71e0a7f6f9590155e85eb351a267558d3e92009d8f210b7312793949a5695e0c6687c7cd5145cac475eba41d589be6288b683d6340aaae991d0bb6bd02bab2d889541cc85"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x4}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x40, 0xfa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6c, 0x3}, @generic={0xac, 0x8, "bf12488fbcaf94cff8c6562edf29e46bf83d772d6e33306b1b98914b5c5aa8e8d67dd3db2596ab71e833bf39d29e80a8c7c445ec48fd95b167574e7c64dcc38bde06a80b795027c1c1998bb24a3825052e4427a2ca54725c0fd8e3cfbfc4f44b7006ee22bb31f1a9cf7e534a2d91890d84f9553a71354a4bd165aa3221b0b43bfc560ebcb544f14d27aeb8d383d7cf41bff0dd8e71c4fdad44c0048cf0fbd43fbeb30d72a752a9799d76"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x1, 0xfb, 0xff, [@generic={0x81, 0xf, "e5c292a0c2d7dc2e9eec88150a38e9620ce31d14ea8e5d4ce275689d7b76f01fa245c964a4231adf65cf4773408edba39e81e9cfb8168890bcf78909d6ba263b5be4b44022160c7b05fa81065271c864f7d10f1d83c78c75e883c035058bcca872f641a2866a6e3f05446ae2f63c2d1c14e5a903f26518c21a6d118a7f55d1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7ee}]}}]}}, {{0x9, 0x4, 0x4a, 0x0, 0x1, 0x4a, 0xcf, 0xc3, 0x9, [@uac_as], [{{0x9, 0x5, 0x1, 0x4, 0x20, 0xfe, 0x8, 0x9}}]}}, {{0x9, 0x4, 0xfe, 0x6, 0x0, 0xb1, 0xbf, 0x4, 0x92}}, {{0x9, 0x4, 0xb3, 0x99, 0x2, 0x2, 0x2, 0xff, 0x3, [], [{{0x9, 0x5, 0xf, 0x8, 0x10, 0x3, 0xcd, 0x9, [@generic={0x2, 0x11}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x80, 0x81, 0x1, [@generic={0x2, 0x24}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x250, 0x0, 0x8, 0xa, 0x10, 0xdc}, 0x5, &(0x7f0000000a40)={0x5, 0xf, 0x5}, 0x3, [{0x39, &(0x7f0000000a80)=@string={0x39, 0x3, "4ce56d887eb6fe57c3ef18956a598aaa70543b5af37b2f6e6a22fb0314394c0f399d2aa5e4f3e2a03d0f38fd5a9c8fe62a1c399f46fb74"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_connect$cdc_ecm(0x4, 0xca, &(0x7f0000000b80)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x1, 0x1, 0x5, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xfa, {{0x7, 0x24, 0x6, 0x0, 0x0, "7585"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x40, 0x7}, [@acm={0x4, 0x24, 0x2, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x4, 0x5, 0x6, 0x5, 0xe}, @country_functional={0xa, 0x24, 0x7, 0x6, 0x3, [0xf, 0x4]}, @country_functional={0xc, 0x24, 0x7, 0x8, 0x8, [0x2, 0x3, 0x6]}, @mdlm_detail={0x4c, 0x24, 0x13, 0x16, "eeac6a0c55949d69651e5bc7391d387d9ac7f3b890ce48b787ce6fced49d2d23bea56fe523033e6923f55b7d156f61375848a393b5d16ab8a5ca777694dd9cd8a4ae7a6adc7553ac"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x3, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x8, 0x6a}}}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x310, 0x80, 0x2, 0x1, 0xff, 0x5}, 0xbe, &(0x7f0000000cc0)={0x5, 0xf, 0xbe, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "24b91b057e2bb80c789c974f3705e8cb"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0xf9}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "80a0b037d11245eceeb75efab11e892c"}, @generic={0x79, 0x10, 0x1, "c2be0a2c958f7f50998d638e0739d7f6b60a0e94d73b5b05b32d2aede7f97f7da4e8c48c6df612b9a0df906348b76f029f986b159f175817bb4066e1786be0840875332feae3f6afd5b4607cfe7678120cd6c06afb42e9e37600488920be9fc879a7d1431b9db0bee7fbf4a7d6b224936e5489f93d7b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x9, 0xd, 0xb, 0xfa}, @ptm_cap={0x3}]}, 0x4, [{0x51, &(0x7f0000000d80)=@string={0x51, 0x3, "d5d2048103835a07ed914751ac89bfe1f255c97df538ebbd9c7dbfece421b962f773b427c1ca126dab64ec94fd13af981964dc2763003e4589e018b0ecd8d2fafaebd1d1f6697f730a2ca9a3d19e58"}}, {0x75, &(0x7f0000000e00)=@string={0x75, 0x3, "9019ca9dfea86a67b8c27205181c318c79aecb3a835bf265bf08fb4cab9ced9f77db8579a3ef021be34634f2a139a262f20f93b0b803dd7a066d3232d9d315cf45250f70b657480ecf986c66868c4c09f8c98ae34916d62d1027672298cf461eea1ffa0a600f35a68aa224184a2d762fbdc166"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x44f}}]}) socket$kcm(0x29, 0x7, 0x0) r2 = fanotify_init(0x4, 0x40000) fanotify_mark(r2, 0x80, 0x48001008, r1, &(0x7f0000000f80)='./file0\x00') ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000fc0)) unshare(0x50c80) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000001000)=0xf) syz_usb_connect$uac3(0x6, 0xe4, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x8, 0xf0, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x21, 0x3}, [@feature_unit={0xd, 0x24, 0x7, 0x4, 0x6, [0xf, 0x0]}, @selector_unit={0x5, 0x24, 0xc, 0x1}, @mixer_unit={0x5, 0x24, 0x5, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4b, 0x3, 0x2, 0x6, '}', "ec84"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfe, 0x4, 0xc6, 0x22, "ad43", "9a"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xd}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x2, 0x1, 0x2, "ace19c89e45dea"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x8, 0x8c, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x2, 0x9, {0xa, 0x25, 0x25, 0x5, 0x5, 0x17}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x0, 0x8, "96c9de022aa4"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x5, 0xf8, 0xf8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x2a, 0x5, {0xa, 0x25, 0x25, 0x800, 0x3, 0x2b}}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x300, 0x7, 0x2, 0x5, 0x8, 0x9}, 0xfb, &(0x7f0000001180)={0x5, 0xf, 0xfb, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x3, 0x8, 0x2, 0x1e}, @generic={0xcd, 0x10, 0x3, "6b12c0d828fb3fac0685378c7e1e5ad7235534e8830364cb004a11a267d8bd8687163d4fce658ae250c0116bbdfedfca4298dc4811766741afb17a32c85388a4239287546440daa5edf20c3ffa2ec1340cd96d889c7b10e113b52211d3a92696b16ab6136b629ea3985b510314cd803588e3448c723bbd99272259fd38309f5a607847bfeac66863d5c220caba5e9f5f904a2a064a2fea4cf76ac00b81cea8b34abaf0ff35b0dbbdad0397efd203aadc32d9830a6eaee0940ab86b2b1d948a674737751b40163099fe4b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x7f, 0x9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "84d1e6f77dfbce598b64e45d5da7fbe1"}]}, 0x2, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_connect$midi(0x2, 0x90, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x1, 0x40, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x30, 0x7, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1, 0x87}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0xac, 0x1, [{0x3, 0x6}], 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x6, 0x3, 0xab}], [{{0x9, 0x5, 0xb, 0x0, 0x408, 0x7, 0x8, 0x4, {0x7, 0x25, 0x1, 0x3, "9e34a9"}}}, {{0x9, 0x5, 0x80, 0x10, 0x410, 0x2, 0x3, 0x7, {0x11, 0x25, 0x1, 0xd, "0576cf4e511093577183a22fbb"}}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xc, 0x7, 0x5, {0xf, 0x25, 0x1, 0xb, "00e17fb2e5d8976f29f60c"}}}, {{0x9, 0x5, 0x0, 0x2, 0x68, 0x8, 0x3, 0x1, {0xc, 0x25, 0x1, 0x8, "3716e45a83404dc9"}}}]}}}}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x250, 0xff, 0x16, 0x1, 0xff, 0x5}, 0x44, &(0x7f0000001440)={0x5, 0xf, 0x44, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x3, 0xf, 0x1ff, [0x3f, 0xf, 0x1f80]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xf, 0xb}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x40, 0x9, 0xa1, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x0, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x3, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x9, 0x9}]}, 0x2, [{0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x42f}}]}) write$binfmt_script(r1, &(0x7f0000001580)={'#! ', './file0', [{0x20, '/dev/rtc#\x00'}], 0xa, "2d409542524512eb0b38432730c9d71c1896"}, 0x28) bind$inet(r1, &(0x7f00000015c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) ioctl$DM_MPATH_PROBE_PATHS(r1, 0xfd12, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000001640)="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") ioctl$RTC_UIE_OFF(r1, 0x7004) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r1, 0xc0107521, &(0x7f0000002740)={0x1, 0x360, 0xb9da, &(0x7f0000001740)=@buf_512="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"}) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000027c0)='#! ', &(0x7f0000002800)='./file0\x00', r3) r4 = syz_open_dev$audion(&(0x7f0000002840), 0x94, 0x2) write$binfmt_aout(r1, &(0x7f0000002880)={{0x107, 0xfa, 0xfd, 0xf0, 0x1f0, 0xdc1e, 0x227, 0x9}, "ebc5eb6f06368d035f53a01d1ee7d01b17bd225e3ecfc924b3c9cb0e6affe9abe589ad80625d5eec3347b0fad8e3f1c7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x950) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000003300)={r5, 0x0, 0x1, 0x7, &(0x7f00000032c0)=[{0x4, 0x401, 0xc083, 0x7f}, {0xfffd, 0xf2b7, 0x7f, 0x7ff}, {0x6, 0x7f, 0x75}, {0x1, 0x7, 0x5, 0xfff}, {0x1000, 0x2, 0x5, 0x7}, {0x79d3, 0x3, 0x30ea, 0x40}, {0x5, 0x52, 0x1, 0x8}]}) 3.215922902s ago: executing program 1 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x56) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r1, 0x3e}, 0x80, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000600)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000700)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f0000000740)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000840)="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", 0xf9a}], 0x5}, 0x0) 3.084100853s ago: executing program 1 (id=110): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107d1ece3100000000000109028e72e23d64655c9be6ba46062400010000a002090400050103000200092100004001"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x0, 0x30, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000200), 0xa, 0x62080) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x800) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 2.362187276s ago: executing program 4 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000002cc0), 0x56) sendmsg$kcm(r6, &(0x7f0000002d00)={&(0x7f0000002d40)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002e00)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.165872714s ago: executing program 4 (id=112): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000200)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r3, 0x2, 0x82c8, 0x9d, 0x1ff, 0x401}, &(0x7f0000000380)=0x14) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000400)=@overlay={0x0, 0x8, 0x4, 0xe000, 0x0, {0x0, 0x2710}, {0x2, 0x2, 0x3, 0x2, 0x7, 0x1, '@\ro^'}, 0x9, 0x3, {}, 0x125}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0xa0000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) getsockname$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000a00)={0x2020}, 0x2020) lseek(r6, 0xfffffffffffffff5, 0x1) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3000001, 0x13, r8, 0xe64a2000) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000009c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) 1.95116778s ago: executing program 4 (id=113): r0 = socket(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x14000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.769319255s ago: executing program 4 (id=114): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000100)=0x7, 0x4) mmap(&(0x7f0000fba000/0x2000)=nil, 0x2000, 0x4000000, 0x11, r0, 0x100000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000390423bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f35ef78a487346260000000000bf10eb31ff823c0f6b3727337cca75e1d8b53d5fe209429017", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa002, 0x0, 0x80000000, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "4d8067db19aa646e32658521757a3d7b5ac4b723b9205427f026575de1b4f21e32658952e567c2cd0bd5fc86922812585f7caa9191aa33d4546caf1ae7c4127e", 0x40}, 0x48, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="16"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_vhci(&(0x7f0000000840)=ANY=[], 0x16) 1.537188451s ago: executing program 0 (id=115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000980), 0x56) sendmsg$kcm(r4, &(0x7f00000009c0)={&(0x7f0000000a00)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)}], 0x1}, 0x80) 1.298849774s ago: executing program 0 (id=116): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107d1ece3100000000000109028e72e23d64655c9be6ba46062400010000a002090400050103000200092100004001"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x0, 0x30, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000200), 0xa, 0x62080) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x800) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac2(0x3, 0xa8, 0x0, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 1.293153581s ago: executing program 3 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0xf, &(0x7f0000000c40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000cc0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0288ef4ecf000000080000000100000080000008", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000af0800000000000000000d00"/28], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x400000000000235, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200103"], 0x0}) socket$kcm(0x21, 0x2, 0x2) r6 = syz_io_uring_setup(0xf08, &(0x7f0000000200)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xf}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x1}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) 727.425555ms ago: executing program 4 (id=118): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000740)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000007c0)={0x20000014}) epoll_wait(r0, 0x0, 0x0, 0x400) shutdown(r1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) 201.272699ms ago: executing program 2 (id=119): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='auxv\x00') lseek(r0, 0x3, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0xff00, &(0x7f0000000480)=[{&(0x7f00000004c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x2, 0x7, 0xe1, 0x40000006, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x0, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0x80f1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x8, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x8, 0x8, 0x5, 0xd3, 0x3, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0xb, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x1, 0xfffffffe], [0xc, 0x6, 0x5, 0x8, 0xbfc, 0x6, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x5, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0x10dab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4042894) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x28001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000c80)=@x86={0x7, 0x1, 0x3, 0x0, 0x7, 0x2, 0x4, 0xef, 0x3, 0x9, 0x40, 0xff, 0x0, 0x5, 0x4, 0xc8, 0xa4, 0x1, 0xd, '\x00', 0x62, 0x8001}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) sendto$inet6(r7, &(0x7f0000000640)='X', 0x34000, 0x0, &(0x7f0000000680)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000006c0)=0x2e, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x240400c0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@getlink={0x4c, 0x12, 0x1, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0x45000, 0x8}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x44000) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 0s ago: executing program 1 (id=120): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)='t~', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdff", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)="77a47ab22899566ca67fb9d1f81c0b25994cd4b0d7dac876f176ff6fb1472dc59b97e3c149ad99095f707ca3609152345db33ee23d2fd6f1e3339595341e8be2128b48fe40b23d7560c27681ef97418965f868f17058b5d3a034decff66f3658fdd93f3fbe38bfe22c21a6e1ceb9b7676ab0fc3b865cfaad428816467b918a5363c59bdec1f6b9289c20983a50fcffe8", 0x90}, {&(0x7f0000000780)="7460629f0a7b9dbaab3552107e043287fabf1d4dc41dcfb0d43cb7d61d1e26f0f7a77fbc850de54ed7f1c3ca323e0a0f1f002003f4971d9532e8085a81389b4ccb9e38f9bb73e0df0f7ccd", 0x4b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="707951f902b9b75992a223694f8f696e0e226227dd7e6144cbaa29adc89e40244c5fac831954461fa40e17ba7aed291ae95be7d5de418df274be408d1c545a27c885036f71d620248640a6835d7dbd81b3863b25bd0c3c9266b1d298aa8ab5f62cb2ddf46527af2a22c167a2811c60e1054a0f129d16d9669507df592342023d847f12ca487c3f08e1d13cf35c275224afa5499c75666436de55ee7205df7196295fe2", 0xa3}, {&(0x7f0000000c40)="1c7a34f0ffb7d96ee0386dc77757a4b76c67fcc2fde9481e0faaac324da5fbc44a0c1249201f0ff9c80d4e74526d09fc08952953ee2103af9acfa2f52447c167", 0x40}, {&(0x7f0000000c80)="1a71b445af10c15ccf203f6f9a315f50e8463c710dc579c9215abc23ce33b0a4769e7226d2bfd2091b53b2c086607efa6fd790fd5b9b282c0005bac90d972380103b91b9e14e7e844ee9a9ec85406a1acb6baf7ee3f4bd9f9f9fec7f3fd4d34b0085ee1fb44936be165369164c648fc0f5d0189f066e0f33052602b0e4b9bfcc1cd2f01c49c83054d8", 0x89}, {&(0x7f0000000d40)="528eb332bd3b33c7a76f9e34a94048450d52fc", 0x13}], 0x4, &(0x7f0000000ec0)}}, {{0x0, 0x0, &(0x7f0000003840)=[{0x0}, {&(0x7f0000000fc0)="90d3b7cb22a31b96", 0x8}, {&(0x7f00000010c0)="54beb0d18a3efc749772bc9033ed2889795f1600acfe5158baaf10105622cda5f732e35f20a708757d32952d04801229846af6ca9b8f5d6e158f005cf4c3b67133c24978b520f0c2df504cd44a90f833a20d4f840221b16673ffd3c02e311ff606bf93e8a61bf3bd0d112a1412c0184c8b826f0e3e85b8bae908e659c355ae40117cf2b23f9ffa5563acb6b39b72d5119f0a8fda6ced51b7f9cc36399567c9ec250534ea2cb8631d90f6b54309064d450546207d5d4a44f81c11e3ac39819b5b780a6570927f55c8d96730d92a9293cb8965b16196943a1f80c44a8de83f8d729377451449b3a6b12f8504fd41df84d26d761ec49037e22ff2112613706738edfb26cf501b960144ef6ae11998", 0x10d}, {&(0x7f0000001080)="7e1e89d3ffc6ba9ae5a34f16b65e2d6555e5f2549e15a0a2e5", 0x19}, {&(0x7f0000001700)="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", 0x282}], 0x5}}], 0x5, 0x40028d0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 82.873276][ T5604] cgroup: Unknown subsys name 'net' [ 82.943561][ T5604] cgroup: Unknown subsys name 'cpuset' [ 82.947190][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.616693][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.430798][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.438428][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.440083][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.448494][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.465704][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.469759][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.474737][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.475549][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.476853][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.477422][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.482426][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.484199][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.484412][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.485075][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.487733][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.488276][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.489748][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.495941][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.498443][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.502428][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.511158][ T4934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.521350][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.521935][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.539546][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.540973][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.754684][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.754859][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.754996][ T5631] bridge_slave_0: entered allmulticast mode [ 89.757176][ T5631] bridge_slave_0: entered promiscuous mode [ 89.787849][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.787949][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.788294][ T5631] bridge_slave_1: entered allmulticast mode [ 89.803642][ T5631] bridge_slave_1: entered promiscuous mode [ 89.855573][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.855683][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.855805][ T5632] bridge_slave_0: entered allmulticast mode [ 89.857234][ T5632] bridge_slave_0: entered promiscuous mode [ 89.902955][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.903051][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.903165][ T5636] bridge_slave_0: entered allmulticast mode [ 89.904653][ T5636] bridge_slave_0: entered promiscuous mode [ 89.939101][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.939257][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.939530][ T5632] bridge_slave_1: entered allmulticast mode [ 89.956286][ T5632] bridge_slave_1: entered promiscuous mode [ 89.982527][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.982629][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.982979][ T5636] bridge_slave_1: entered allmulticast mode [ 89.984487][ T5636] bridge_slave_1: entered promiscuous mode [ 90.048002][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.087003][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.089356][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.125409][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.125590][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.125729][ T5635] bridge_slave_0: entered allmulticast mode [ 90.127404][ T5635] bridge_slave_0: entered promiscuous mode [ 90.135152][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.135419][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.135740][ T5635] bridge_slave_1: entered allmulticast mode [ 90.137419][ T5635] bridge_slave_1: entered promiscuous mode [ 90.157153][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.218872][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.277334][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.297730][ T5632] team0: Port device team_slave_0 added [ 90.300142][ T5631] team0: Port device team_slave_0 added [ 90.301435][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.301726][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.302071][ T5637] bridge_slave_0: entered allmulticast mode [ 90.313959][ T5637] bridge_slave_0: entered promiscuous mode [ 90.346848][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.349015][ T5632] team0: Port device team_slave_1 added [ 90.376101][ T5631] team0: Port device team_slave_1 added [ 90.376339][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.376513][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.376620][ T5637] bridge_slave_1: entered allmulticast mode [ 90.377835][ T5637] bridge_slave_1: entered promiscuous mode [ 90.417132][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.470496][ T5636] team0: Port device team_slave_0 added [ 90.486753][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.486767][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.486791][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.488645][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.488666][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.488698][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.496100][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.496141][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.496217][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.573123][ T5618] Bluetooth: hci1: command tx timeout [ 90.573701][ T5616] Bluetooth: hci3: command tx timeout [ 90.576462][ T5636] team0: Port device team_slave_1 added [ 90.577517][ T5616] Bluetooth: hci4: command tx timeout [ 90.650051][ T5618] Bluetooth: hci0: command tx timeout [ 90.650227][ T5616] Bluetooth: hci2: command tx timeout [ 90.672289][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.672316][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.672344][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.675274][ T5635] team0: Port device team_slave_0 added [ 90.729295][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.757006][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.757025][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.757049][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.763848][ T5635] team0: Port device team_slave_1 added [ 90.783242][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.822938][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.822954][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.822978][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.895124][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.895142][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.895165][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.954077][ T5631] hsr_slave_0: entered promiscuous mode [ 90.955205][ T5631] hsr_slave_1: entered promiscuous mode [ 90.956872][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.956886][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.956909][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.026088][ T5637] team0: Port device team_slave_0 added [ 91.056920][ T5632] hsr_slave_0: entered promiscuous mode [ 91.057929][ T5632] hsr_slave_1: entered promiscuous mode [ 91.058537][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 91.058610][ T5632] Cannot create hsr debugfs directory [ 91.066248][ T5637] team0: Port device team_slave_1 added [ 91.146379][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.146398][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.146421][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.225937][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.225957][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.225984][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.239344][ T5635] hsr_slave_0: entered promiscuous mode [ 91.245021][ T5635] hsr_slave_1: entered promiscuous mode [ 91.246974][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 91.247028][ T5635] Cannot create hsr debugfs directory [ 91.301308][ T5636] hsr_slave_0: entered promiscuous mode [ 91.302095][ T5636] hsr_slave_1: entered promiscuous mode [ 91.302630][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 91.302652][ T5636] Cannot create hsr debugfs directory [ 91.511293][ T5637] hsr_slave_0: entered promiscuous mode [ 91.512070][ T5637] hsr_slave_1: entered promiscuous mode [ 91.512612][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 91.512634][ T5637] Cannot create hsr debugfs directory [ 91.877481][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.892169][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.915997][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.926546][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.928936][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.947535][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.960347][ T9] cfg80211: failed to load regulatory.db [ 91.977405][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.987336][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.052292][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.067422][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.068264][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.088828][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.097343][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.108846][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.119177][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.131919][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.222904][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.238249][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.254537][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.258986][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.276146][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.287995][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.289001][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.307100][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.418768][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.430345][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.431543][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.434246][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.435022][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.438404][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.475777][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.487867][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.565785][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.625805][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.631871][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.635888][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.647798][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.653263][ T5618] Bluetooth: hci3: command tx timeout [ 92.653348][ T5618] Bluetooth: hci1: command tx timeout [ 92.653847][ T5616] Bluetooth: hci4: command tx timeout [ 92.681433][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.684543][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.688193][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.689087][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.721304][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.729755][ T52] Bluetooth: hci0: command tx timeout [ 92.729947][ T5616] Bluetooth: hci2: command tx timeout [ 92.778644][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.790578][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.829191][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.829339][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.865554][ T390] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.865688][ T390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.901641][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.901733][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.905039][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.905141][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.960460][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.064524][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.098274][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.104889][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.105165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.154994][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.155093][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.195527][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.226847][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.256346][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.256422][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.285344][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.285457][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.288213][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.345125][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.361362][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.380714][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.380789][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.429221][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.429296][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.501546][ T5631] veth0_vlan: entered promiscuous mode [ 93.558894][ T5631] veth1_vlan: entered promiscuous mode [ 93.591042][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.598411][ T5632] veth0_vlan: entered promiscuous mode [ 93.623047][ T5637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.663524][ T5632] veth1_vlan: entered promiscuous mode [ 93.683741][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.725715][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.756434][ T5631] veth0_macvtap: entered promiscuous mode [ 93.790957][ T5631] veth1_macvtap: entered promiscuous mode [ 93.796918][ T5636] veth0_vlan: entered promiscuous mode [ 93.855066][ T5636] veth1_vlan: entered promiscuous mode [ 93.869028][ T5632] veth0_macvtap: entered promiscuous mode [ 93.886546][ T5635] veth0_vlan: entered promiscuous mode [ 93.890914][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.904504][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.916831][ T5632] veth1_macvtap: entered promiscuous mode [ 93.953267][ T5635] veth1_vlan: entered promiscuous mode [ 93.972007][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.993961][ T5637] veth0_vlan: entered promiscuous mode [ 94.035499][ T5636] veth0_macvtap: entered promiscuous mode [ 94.082095][ T5637] veth1_vlan: entered promiscuous mode [ 94.085968][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.086521][ T5636] veth1_macvtap: entered promiscuous mode [ 94.111725][ T390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.111777][ T390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.111834][ T390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.156071][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.198843][ T5635] veth0_macvtap: entered promiscuous mode [ 94.213602][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.213627][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.241385][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.260437][ T5635] veth1_macvtap: entered promiscuous mode [ 94.273513][ T390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.273660][ T390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.273767][ T390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.273881][ T390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.325999][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.357948][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.357972][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.400774][ T1035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.428712][ T5637] veth0_macvtap: entered promiscuous mode [ 94.449824][ T5637] veth1_macvtap: entered promiscuous mode [ 94.476873][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.523442][ T5631] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.551414][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.619696][ T390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.619975][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.620018][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.623063][ T390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.623085][ T390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.638268][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.660155][ T1035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.660715][ T1035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.661210][ T1035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.729925][ T52] Bluetooth: hci1: command tx timeout [ 94.729978][ T52] Bluetooth: hci3: command tx timeout [ 94.730107][ T5616] Bluetooth: hci4: command tx timeout [ 94.777503][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.791665][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.791686][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.812167][ T5618] Bluetooth: hci0: command tx timeout [ 94.812407][ T5616] Bluetooth: hci2: command tx timeout [ 94.860116][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.917475][ T1035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.917531][ T1035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.917572][ T1035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.011370][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.011394][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.011665][ T1035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.013979][ T390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.013999][ T390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.235870][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.235908][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.315593][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.315616][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.416852][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.416876][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.500018][ T5725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.500056][ T5725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.564284][ T5726] Zero length message leads to an empty skb [ 95.622618][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.622644][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.814534][ T5732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.822368][ T5685] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.981704][ T5685] usb 3-1: Using ep0 maxpacket: 8 [ 95.984629][ T5685] usb 3-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=d7.13 [ 95.988581][ T5685] usb 3-1: config 3 has an invalid interface number: 246 but max is 3 [ 95.988610][ T5685] usb 3-1: config 3 has an invalid interface number: 74 but max is 3 [ 95.988631][ T5685] usb 3-1: config 3 has an invalid interface number: 254 but max is 3 [ 95.988653][ T5685] usb 3-1: config 3 has an invalid interface number: 179 but max is 3 [ 95.988674][ T5685] usb 3-1: config 3 has no interface number 0 [ 95.988692][ T5685] usb 3-1: config 3 has no interface number 1 [ 95.988709][ T5685] usb 3-1: config 3 has no interface number 2 [ 95.988727][ T5685] usb 3-1: config 3 has no interface number 3 [ 95.988802][ T5685] usb 3-1: config 3 interface 246 altsetting 15 bulk endpoint 0xE has invalid maxpacket 32 [ 95.988832][ T5685] usb 3-1: config 3 interface 246 altsetting 15 bulk endpoint 0xF has invalid maxpacket 32 [ 95.988859][ T5685] usb 3-1: config 3 interface 246 altsetting 15 bulk endpoint 0x6 has invalid maxpacket 1024 [ 95.988886][ T5685] usb 3-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 95.988909][ T5685] usb 3-1: config 3 interface 246 altsetting 15 has an endpoint descriptor with address 0x73, changing to 0x3 [ 95.988936][ T5685] usb 3-1: config 3 interface 246 altsetting 15 endpoint 0x3 has an invalid bInterval 54, changing to 7 [ 95.988964][ T5685] usb 3-1: config 3 interface 246 altsetting 15 endpoint 0x3 has invalid maxpacket 33557, setting to 1024 [ 95.988993][ T5685] usb 3-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 95.989015][ T5685] usb 3-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 95.989038][ T5685] usb 3-1: config 3 interface 246 altsetting 15 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 95.989066][ T5685] usb 3-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 95.989091][ T5685] usb 3-1: config 3 interface 246 altsetting 15 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 95.989119][ T5685] usb 3-1: config 3 interface 246 altsetting 15 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 95.989197][ T5685] usb 3-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0xF, skipping [ 95.989223][ T5685] usb 3-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0x5, skipping [ 95.989245][ T5685] usb 3-1: config 3 interface 246 has no altsetting 0 [ 95.989274][ T5685] usb 3-1: config 3 interface 254 has no altsetting 0 [ 95.989294][ T5685] usb 3-1: config 3 interface 179 has no altsetting 0 [ 96.086525][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.086610][ T5685] usb 3-1: Product:   [ 96.086652][ T5685] usb 3-1: Manufacturer: ␊ [ 96.086697][ T5685] usb 3-1: SerialNumber: syz [ 96.112741][ T5713] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.315520][ T5713] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 96.335768][ T5713] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 96.335808][ T5713] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.335840][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.387720][ T5713] usb 1-1: config 0 descriptor?? [ 96.390860][ T5733] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.406917][ T5723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.431998][ T5723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.432166][ T5723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.455440][ T5723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.682549][ T5723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.685158][ T5723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.813059][ T5618] Bluetooth: hci3: command tx timeout [ 96.813127][ T5618] Bluetooth: hci1: command tx timeout [ 96.813187][ T5616] Bluetooth: hci4: command tx timeout [ 96.854644][ T5747] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 96.869846][ T5713] hid (null): unknown global tag 0xc [ 96.869872][ T5713] hid (null): global environment stack underflow [ 96.869921][ T5713] hid (null): unknown global tag 0xc [ 96.898040][ T52] Bluetooth: hci0: command tx timeout [ 96.898228][ T5616] Bluetooth: hci2: command tx timeout [ 96.960400][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.960444][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.960471][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.960497][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.960524][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.960550][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.960575][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.960601][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.960626][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.960654][ T5713] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 96.984624][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.984970][ T5713] razer 0003:1532:010D.0001: unexpected long global item [ 96.985840][ T5713] razer 0003:1532:010D.0001: probe with driver razer failed with error -22 [ 97.075614][ T5685] rndis_host 3-1:3.179: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 97.137219][ T5685] usb 3-1: USB disconnect, device number 2 [ 97.138579][ T5713] usb 1-1: USB disconnect, device number 2 [ 97.153477][ T10] usb 5-1: device descriptor read/64, error -71 [ 97.234748][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 97.399908][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.529871][ T10] usb 5-1: device descriptor read/64, error -71 [ 97.640457][ T10] usb usb5-port1: attempt power cycle [ 97.704296][ T5756] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.943583][ T5753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.989735][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.011672][ T10] usb 5-1: device descriptor read/8, error -71 [ 98.140637][ T5767] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 98.261676][ T5770] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 98.269709][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.290369][ T10] usb 5-1: device descriptor read/8, error -71 [ 98.400137][ T10] usb usb5-port1: unable to enumerate USB device [ 98.403510][ T5775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 98.403548][ T5775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 98.529805][ T5685] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.679775][ T5735] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.680779][ T5685] usb 4-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice=12.00 [ 98.682960][ T5685] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.682992][ T5685] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.684637][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.684655][ T5685] usb 4-1: Product: syz [ 98.684666][ T5685] usb 4-1: Manufacturer: syz [ 98.830424][ T5735] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 98.831542][ T5735] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 98.831573][ T5735] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 98.831627][ T5735] usb 3-1: config 1 interface 0 has no altsetting 0 [ 98.833994][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.834018][ T5735] usb 3-1: Product: syz [ 98.834033][ T5735] usb 3-1: Manufacturer: syz [ 98.834055][ T5735] usb 3-1: SerialNumber: syz [ 98.838002][ T5777] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.838120][ T5777] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.914913][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.059563][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 99.061757][ T10] usb 2-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=d7.13 [ 99.066662][ T10] usb 2-1: config 3 has an invalid interface number: 246 but max is 3 [ 99.066695][ T10] usb 2-1: config 3 has an invalid interface number: 74 but max is 3 [ 99.066716][ T10] usb 2-1: config 3 has an invalid interface number: 254 but max is 3 [ 99.066735][ T10] usb 2-1: config 3 has an invalid interface number: 179 but max is 3 [ 99.066760][ T10] usb 2-1: config 3 has no interface number 0 [ 99.066771][ T10] usb 2-1: config 3 has no interface number 1 [ 99.066783][ T10] usb 2-1: config 3 has no interface number 2 [ 99.066794][ T10] usb 2-1: config 3 has no interface number 3 [ 99.066880][ T10] usb 2-1: config 3 interface 246 altsetting 15 bulk endpoint 0xE has invalid maxpacket 32 [ 99.066914][ T10] usb 2-1: config 3 interface 246 altsetting 15 bulk endpoint 0xF has invalid maxpacket 32 [ 99.066933][ T10] usb 2-1: config 3 interface 246 altsetting 15 bulk endpoint 0x6 has invalid maxpacket 1024 [ 99.066950][ T10] usb 2-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 99.066991][ T10] usb 2-1: config 3 interface 246 altsetting 15 has an endpoint descriptor with address 0x73, changing to 0x3 [ 99.067019][ T10] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x3 has an invalid bInterval 54, changing to 7 [ 99.067045][ T10] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x3 has invalid maxpacket 33557, setting to 1024 [ 99.067076][ T10] usb 2-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 99.067091][ T10] usb 2-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 99.067107][ T10] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 99.067143][ T10] usb 2-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 99.067169][ T10] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 99.067196][ T10] usb 2-1: config 3 interface 246 altsetting 15 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.067243][ T10] usb 2-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0xF, skipping [ 99.067259][ T10] usb 2-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0x5, skipping [ 99.067275][ T10] usb 2-1: config 3 interface 246 has no altsetting 0 [ 99.067308][ T10] usb 2-1: config 3 interface 254 has no altsetting 0 [ 99.067327][ T10] usb 2-1: config 3 interface 179 has no altsetting 0 [ 99.080938][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.081015][ T10] usb 2-1: Product:   [ 99.081057][ T10] usb 2-1: Manufacturer: ␊ [ 99.081099][ T10] usb 2-1: SerialNumber: syz [ 99.111997][ T5783] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.113237][ T5783] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.113643][ T5783] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.115571][ T5783] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.422157][ T5783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.422728][ T5783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.428240][ T5685] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:046D:C299.0002/input/input5 [ 99.541360][ T10] rndis_host 2-1:3.179: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 99.565039][ T10] usb 2-1: USB disconnect, device number 2 [ 99.569210][ T5685] logitech 0003:046D:C299.0002: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.3-1/input0 [ 99.616996][ T5685] logitech 0003:046D:C299.0002: Force feedback support for Logitech Gaming Wheels [ 99.646956][ T5685] usb 4-1: USB disconnect, device number 2 [ 100.005838][ T5790] fido_id[5790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 100.198533][ T5735] rtl8150 3-1:1.0: couldn't reset the device [ 100.198853][ T5735] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 100.229054][ T5735] usb 3-1: USB disconnect, device number 3 [ 100.463094][ T5793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.484426][ T5801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.29'. [ 100.565880][ T5803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.31'. [ 100.721602][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 100.758614][ T5807] syzkaller0: entered promiscuous mode [ 100.758641][ T5807] syzkaller0: entered allmulticast mode [ 100.802242][ T5810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.34'. [ 100.802281][ T5810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.34'. [ 100.848743][ T5807] tipc: Started in network mode [ 100.848779][ T5807] tipc: Node identity c63f8f84a131, cluster identity 4711 [ 100.849119][ T5807] tipc: Enabled bearer , priority 0 [ 100.873819][ T5806] tipc: Resetting bearer [ 100.946634][ T5806] tipc: Disabling bearer [ 101.181958][ T5735] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 101.239520][ T5713] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.330175][ T5735] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.331272][ T5735] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 101.331305][ T5735] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.331326][ T5735] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 101.332361][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.332387][ T5735] usb 4-1: SerialNumber: syz [ 101.373114][ T5699] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.415053][ T5713] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 101.416037][ T5713] usb 3-1: config 0 has no interfaces? [ 101.416074][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.424922][ T5713] usb 3-1: config 0 descriptor?? [ 101.545928][ T5735] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 101.546195][ T5735] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 101.565345][ T5735] usb 4-1: USB disconnect, device number 3 [ 101.573998][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 101.577403][ T5699] usb 2-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=d7.13 [ 101.595809][ T5699] usb 2-1: config 3 has an invalid interface number: 246 but max is 3 [ 101.595841][ T5699] usb 2-1: config 3 has an invalid interface number: 74 but max is 3 [ 101.595863][ T5699] usb 2-1: config 3 has an invalid interface number: 254 but max is 3 [ 101.595883][ T5699] usb 2-1: config 3 has an invalid interface number: 179 but max is 3 [ 101.595903][ T5699] usb 2-1: config 3 has no interface number 0 [ 101.595921][ T5699] usb 2-1: config 3 has no interface number 1 [ 101.595938][ T5699] usb 2-1: config 3 has no interface number 2 [ 101.595953][ T5699] usb 2-1: config 3 has no interface number 3 [ 101.596035][ T5699] usb 2-1: config 3 interface 246 altsetting 15 bulk endpoint 0xE has invalid maxpacket 32 [ 101.596064][ T5699] usb 2-1: config 3 interface 246 altsetting 15 bulk endpoint 0xF has invalid maxpacket 32 [ 101.596090][ T5699] usb 2-1: config 3 interface 246 altsetting 15 bulk endpoint 0x6 has invalid maxpacket 1024 [ 101.596116][ T5699] usb 2-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 101.596140][ T5699] usb 2-1: config 3 interface 246 altsetting 15 has an endpoint descriptor with address 0x73, changing to 0x3 [ 101.596166][ T5699] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x3 has an invalid bInterval 54, changing to 7 [ 101.596194][ T5699] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x3 has invalid maxpacket 33557, setting to 1024 [ 101.596221][ T5699] usb 2-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 101.596243][ T5699] usb 2-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 101.596266][ T5699] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 101.596293][ T5699] usb 2-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 101.596318][ T5699] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 101.596345][ T5699] usb 2-1: config 3 interface 246 altsetting 15 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 101.596386][ T5699] usb 2-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0xF, skipping [ 101.596410][ T5699] usb 2-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0x5, skipping [ 101.596434][ T5699] usb 2-1: config 3 interface 246 has no altsetting 0 [ 101.596454][ T5699] usb 2-1: config 3 interface 254 has no altsetting 0 [ 101.596473][ T5699] usb 2-1: config 3 interface 179 has no altsetting 0 [ 101.661672][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.661703][ T5699] usb 2-1: Product:   [ 101.661719][ T5699] usb 2-1: Manufacturer: ␊ [ 101.661735][ T5699] usb 2-1: SerialNumber: syz [ 101.886667][ T5821] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 101.887064][ T5821] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 101.887185][ T5821] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 101.897937][ T5821] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 101.925381][ T5817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.925850][ T5817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.957867][ T5685] usb 3-1: USB disconnect, device number 4 [ 102.109682][ T5735] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 102.112249][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.112999][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.162829][ T5699] rndis_host 2-1:3.179: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 102.168685][ T5699] usb 2-1: USB disconnect, device number 3 [ 102.260686][ T5735] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.261731][ T5735] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 102.261762][ T5735] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.261783][ T5735] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 102.262802][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.262819][ T5735] usb 4-1: SerialNumber: syz [ 102.279828][ T5713] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.323976][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.430621][ T5713] usb 5-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice=12.00 [ 102.431730][ T5713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.431762][ T5713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.433376][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 102.433400][ T5713] usb 5-1: Product: syz [ 102.433411][ T5713] usb 5-1: Manufacturer: syz [ 102.486600][ T921] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.510403][ T10] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 102.510448][ T10] usb 1-1: no configurations [ 102.510462][ T10] usb 1-1: can't read configurations, error -22 [ 102.639490][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.649589][ T921] usb 3-1: Using ep0 maxpacket: 8 [ 102.653502][ T921] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 102.678206][ T921] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 102.678236][ T921] usb 3-1: Product: syz [ 102.678284][ T921] usb 3-1: Manufacturer: syz [ 102.678301][ T921] usb 3-1: SerialNumber: syz [ 102.724401][ T921] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 102.790752][ T10] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 102.790802][ T10] usb 1-1: no configurations [ 102.790819][ T10] usb 1-1: can't read configurations, error -22 [ 102.791193][ T10] usb usb1-port1: attempt power cycle [ 102.855483][ T5713] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:046D:C299.0003/input/input6 [ 102.872737][ T5829] netlink: 48 bytes leftover after parsing attributes in process `syz.1.41'. [ 102.924231][ T5713] logitech 0003:046D:C299.0003: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.4-1/input0 [ 102.925094][ T5713] logitech 0003:046D:C299.0003: Force feedback support for Logitech Gaming Wheels [ 102.962517][ T5831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.42'. [ 103.071177][ T5835] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 103.107554][ T5713] usb 5-1: USB disconnect, device number 6 [ 103.134959][ T921] vp7045: USB control message 'in' went wrong. [ 103.135021][ T921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.136240][ T921] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 103.136328][ T921] usb 3-1: media controller created [ 103.147606][ T5834] fido_id[5834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:046D:C299.0003/report_descriptor': No such file or directory [ 103.186903][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.214724][ T10] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 103.214768][ T10] usb 1-1: no configurations [ 103.214782][ T10] usb 1-1: can't read configurations, error -22 [ 103.339525][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.344187][ T921] vp7045: USB control message 'in' went wrong. [ 103.344204][ T921] dvb-usb: MAC address reading failed. [ 103.377823][ T10] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 103.377870][ T10] usb 1-1: no configurations [ 103.377884][ T10] usb 1-1: can't read configurations, error -22 [ 103.378216][ T10] usb usb1-port1: unable to enumerate USB device [ 103.407808][ T921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.646280][ T921] vp7045: USB control message 'in' went wrong. [ 103.655447][ T5735] rndis_host 4-1:253.0: RNDIS init failed, -110 [ 103.656591][ T5735] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -110 [ 103.690654][ T5735] usb 4-1: USB disconnect, device number 4 [ 103.853496][ T921] vp7045: USB control message 'in' went wrong. [ 104.061563][ T921] vp7045: USB control message 'in' went wrong. [ 104.062355][ T921] usb 3-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 104.062777][ T921] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 104.137870][ T5845] syzkaller0: entered promiscuous mode [ 104.137894][ T5845] syzkaller0: entered allmulticast mode [ 104.199564][ T5735] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.250610][ T5848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 104.250648][ T5848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 104.309719][ T921] rc_core: IR keymap rc-twinhan1027 not found [ 104.309741][ T921] Registered IR keymap rc-empty [ 104.323949][ T921] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 104.340239][ T921] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 104.351702][ T5735] usb 4-1: Using ep0 maxpacket: 8 [ 104.354502][ T5735] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 104.363893][ T5735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.364051][ T5735] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.364156][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.402663][ T921] dvb-usb: schedule remote query interval to 400 msecs. [ 104.404547][ T5735] usb 4-1: config 0 descriptor?? [ 104.404748][ T921] vp7045: USB control message 'out' went wrong. [ 104.404760][ T921] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 104.449481][ T921] usb 3-1: USB disconnect, device number 5 [ 104.459120][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 104.569655][ T5734] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.612509][ T921] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully deinitialized and disconnected. [ 104.725792][ T5734] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 104.728420][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.728454][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.728496][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.819622][ T5734] usb 2-1: config 0 descriptor?? [ 105.079640][ T5699] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.185750][ T5859] netlink: 48 bytes leftover after parsing attributes in process `syz.0.52'. [ 105.230078][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 105.234296][ T5699] usb 3-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=d7.13 [ 105.236971][ T5734] hid_parser_main: 66 callbacks suppressed [ 105.236996][ T5734] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.237028][ T5734] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.237055][ T5734] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.237084][ T5734] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.237112][ T5734] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.237139][ T5734] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.237512][ T5699] usb 3-1: config 3 has an invalid interface number: 246 but max is 3 [ 105.237541][ T5699] usb 3-1: config 3 has an invalid interface number: 74 but max is 3 [ 105.237563][ T5699] usb 3-1: config 3 has an invalid interface number: 254 but max is 3 [ 105.237584][ T5699] usb 3-1: config 3 has an invalid interface number: 179 but max is 3 [ 105.237605][ T5699] usb 3-1: config 3 has no interface number 0 [ 105.237623][ T5699] usb 3-1: config 3 has no interface number 1 [ 105.237640][ T5699] usb 3-1: config 3 has no interface number 2 [ 105.237657][ T5699] usb 3-1: config 3 has no interface number 3 [ 105.237731][ T5699] usb 3-1: config 3 interface 246 altsetting 15 bulk endpoint 0xE has invalid maxpacket 32 [ 105.237761][ T5699] usb 3-1: config 3 interface 246 altsetting 15 bulk endpoint 0xF has invalid maxpacket 32 [ 105.237788][ T5699] usb 3-1: config 3 interface 246 altsetting 15 bulk endpoint 0x6 has invalid maxpacket 1024 [ 105.237814][ T5699] usb 3-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 105.237838][ T5699] usb 3-1: config 3 interface 246 altsetting 15 has an endpoint descriptor with address 0x73, changing to 0x3 [ 105.237867][ T5699] usb 3-1: config 3 interface 246 altsetting 15 endpoint 0x3 has an invalid bInterval 54, changing to 7 [ 105.237895][ T5699] usb 3-1: config 3 interface 246 altsetting 15 endpoint 0x3 has invalid maxpacket 33557, setting to 1024 [ 105.237923][ T5699] usb 3-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 105.237946][ T5699] usb 3-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 105.237969][ T5699] usb 3-1: config 3 interface 246 altsetting 15 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 105.237997][ T5699] usb 3-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 105.238022][ T5699] usb 3-1: config 3 interface 246 altsetting 15 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 105.238050][ T5699] usb 3-1: config 3 interface 246 altsetting 15 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.238092][ T5699] usb 3-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0xF, skipping [ 105.238116][ T5699] usb 3-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0x5, skipping [ 105.238140][ T5699] usb 3-1: config 3 interface 246 has no altsetting 0 [ 105.238159][ T5699] usb 3-1: config 3 interface 254 has no altsetting 0 [ 105.238179][ T5699] usb 3-1: config 3 interface 179 has no altsetting 0 [ 105.240453][ T5734] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.275120][ T5734] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 105.441911][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.441943][ T5699] usb 3-1: Product:   [ 105.441959][ T5699] usb 3-1: Manufacturer: ␊ [ 105.441975][ T5699] usb 3-1: SerialNumber: syz [ 105.477871][ T5734] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 105.621638][ T5854] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.622046][ T5854] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.622191][ T5854] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.622729][ T5854] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.660889][ T5863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.53'. [ 105.865814][ T5854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.866612][ T5854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.925080][ T5699] rndis_host 3-1:3.179: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 105.948460][ T5699] usb 3-1: USB disconnect, device number 6 [ 106.089537][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.145887][ T5734] cp2112 0003:10C4:EA90.0004: error setting SMBus config [ 106.156505][ T5734] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -71 [ 106.168150][ T5734] usb 2-1: USB disconnect, device number 4 [ 106.240369][ T988] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.244434][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.244472][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 106.245340][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 106.245360][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.247759][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.247779][ T10] usb 1-1: Product: syz [ 106.247790][ T10] usb 1-1: Manufacturer: syz [ 106.247800][ T10] usb 1-1: SerialNumber: syz [ 106.322824][ T5868] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 106.390253][ T988] usb 5-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice=12.00 [ 106.391429][ T988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.391451][ T988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.393035][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 106.393107][ T988] usb 5-1: Product: syz [ 106.393124][ T988] usb 5-1: Manufacturer: syz [ 106.541588][ T5868] Cannot find set identified by id 0 to match [ 106.821751][ T5881] syzkaller0: entered promiscuous mode [ 106.821777][ T5881] syzkaller0: entered allmulticast mode [ 106.828225][ T988] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:046D:C299.0005/input/input8 [ 106.870949][ T5883] netlink: 'syz.2.60': attribute type 10 has an invalid length. [ 106.870972][ T5883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.60'. [ 106.877038][ T5883] batadv0: entered promiscuous mode [ 106.877057][ T5883] batadv0: entered allmulticast mode [ 106.877872][ T5883] bridge0: port 3(batadv0) entered blocking state [ 106.878051][ T5883] bridge0: port 3(batadv0) entered disabled state [ 106.922441][ T5883] bridge0: port 3(batadv0) entered blocking state [ 106.922614][ T5883] bridge0: port 3(batadv0) entered forwarding state [ 106.943687][ T988] logitech 0003:046D:C299.0005: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.4-1/input0 [ 106.944478][ T988] logitech 0003:046D:C299.0005: Force feedback support for Logitech Gaming Wheels [ 106.953777][ T1035] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 106.953821][ T1035] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 107.022914][ T5699] usb 5-1: USB disconnect, device number 7 [ 107.130136][ T5734] usb 4-1: USB disconnect, device number 5 [ 107.288162][ T5889] bridge0: port 3(syz_tun) entered blocking state [ 107.289144][ T5889] bridge0: port 3(syz_tun) entered disabled state [ 107.290014][ T5889] syz_tun: entered allmulticast mode [ 107.298789][ T5885] fido_id[5885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 107.315344][ T5889] syz_tun: entered promiscuous mode [ 107.317348][ T5889] bridge0: port 3(syz_tun) entered blocking state [ 107.317647][ T5889] bridge0: port 3(syz_tun) entered forwarding state [ 107.497039][ T5893] netlink: 48 bytes leftover after parsing attributes in process `syz.3.63'. [ 107.517462][ T5895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.64'. [ 107.610954][ T921] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.666664][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 107.772490][ T921] usb 2-1: Using ep0 maxpacket: 16 [ 107.773986][ T921] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 107.784886][ T921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.784913][ T921] usb 2-1: Product: syz [ 107.784930][ T921] usb 2-1: Manufacturer: syz [ 107.784945][ T921] usb 2-1: SerialNumber: syz [ 107.795861][ T921] usb 2-1: config 0 descriptor?? [ 107.869510][ T5699] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 107.899587][ T5734] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.003710][ T5889] bridge0: port 4(bond0) entered blocking state [ 108.003999][ T5889] bridge0: port 4(bond0) entered disabled state [ 108.004253][ T5889] bond0: entered allmulticast mode [ 108.004266][ T5889] bond_slave_0: entered allmulticast mode [ 108.004320][ T5889] bond_slave_1: entered allmulticast mode [ 108.008726][ T5889] bond0: entered promiscuous mode [ 108.008750][ T5889] bond_slave_0: entered promiscuous mode [ 108.008986][ T5889] bond_slave_1: entered promiscuous mode [ 108.012703][ T5889] bridge0: port 4(bond0) entered blocking state [ 108.012947][ T5889] bridge0: port 4(bond0) entered forwarding state [ 108.031412][ T5889] bridge0: port 5(team0) entered blocking state [ 108.031970][ T5889] bridge0: port 5(team0) entered disabled state [ 108.032685][ T5889] team0: entered allmulticast mode [ 108.032790][ T5889] team_slave_0: entered allmulticast mode [ 108.032834][ T5889] team_slave_1: entered allmulticast mode [ 108.045350][ T5889] team0: entered promiscuous mode [ 108.045405][ T5889] team_slave_0: entered promiscuous mode [ 108.046065][ T5889] team_slave_1: entered promiscuous mode [ 108.052298][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 108.074333][ T5889] bridge0: port 5(team0) entered blocking state [ 108.074599][ T5889] bridge0: port 5(team0) entered forwarding state [ 108.076421][ T5734] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.076577][ T5734] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=3f.ba [ 108.092914][ T5734] usb 5-1: config 80 has an invalid interface number: 22 but max is 0 [ 108.093052][ T5734] usb 5-1: config 80 has no interface number 0 [ 108.093245][ T5734] usb 5-1: config 80 interface 22 altsetting 128 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 108.093372][ T5734] usb 5-1: config 80 interface 22 has no altsetting 0 [ 108.097463][ T5699] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 108.107622][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.107696][ T5734] usb 5-1: Product: syz [ 108.107739][ T5734] usb 5-1: Manufacturer: syz [ 108.107780][ T5734] usb 5-1: SerialNumber: syz [ 108.172816][ T5699] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.172881][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.172910][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 108.258456][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.258486][ T5699] usb 3-1: Product: syz [ 108.258503][ T5699] usb 3-1: Manufacturer: syz [ 108.258519][ T5699] usb 3-1: SerialNumber: syz [ 108.290923][ T5699] usb 3-1: config 0 descriptor?? [ 108.295434][ T5899] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.344255][ T921] usb_8dev 2-1:0.0 can0: sending command message failed [ 108.344283][ T921] usb_8dev 2-1:0.0 can0: can't get firmware version [ 108.420841][ T5699] rc_core: IR keymap rc-streamzap not found [ 108.420879][ T5699] Registered IR keymap rc-empty [ 108.421393][ T5734] viperboard 5-1:80.22: version 0.00 found at bus 005 address 008 [ 108.428552][ T5699] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 108.435631][ T921] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 108.479134][ T5699] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 108.499697][ T921] usb 2-1: USB disconnect, device number 5 [ 108.539131][ T5734] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 108.539167][ T5734] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 108.640760][ T5734] usb 5-1: USB disconnect, device number 8 [ 108.909965][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.910035][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 109.091553][ T10] usb 1-1: USB disconnect, device number 7 [ 109.176766][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.195513][ T29] usb 3-1: USB disconnect, device number 7 [ 109.223768][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 109.223809][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 109.371841][ T5734] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.523097][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 109.524454][ T5734] usb 2-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=d7.13 [ 109.528870][ T5734] usb 2-1: config 3 has an invalid interface number: 246 but max is 3 [ 109.528901][ T5734] usb 2-1: config 3 has an invalid interface number: 74 but max is 3 [ 109.528923][ T5734] usb 2-1: config 3 has an invalid interface number: 254 but max is 3 [ 109.529073][ T5734] usb 2-1: config 3 has an invalid interface number: 179 but max is 3 [ 109.529098][ T5734] usb 2-1: config 3 has no interface number 0 [ 109.529116][ T5734] usb 2-1: config 3 has no interface number 1 [ 109.529133][ T5734] usb 2-1: config 3 has no interface number 2 [ 109.529151][ T5734] usb 2-1: config 3 has no interface number 3 [ 109.529321][ T5734] usb 2-1: config 3 interface 246 altsetting 15 bulk endpoint 0xE has invalid maxpacket 32 [ 109.529354][ T5734] usb 2-1: config 3 interface 246 altsetting 15 bulk endpoint 0xF has invalid maxpacket 32 [ 109.533420][ T5734] usb 2-1: config 3 interface 246 altsetting 15 bulk endpoint 0x6 has invalid maxpacket 1024 [ 109.533503][ T5734] usb 2-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 109.533565][ T5734] usb 2-1: config 3 interface 246 altsetting 15 has an endpoint descriptor with address 0x73, changing to 0x3 [ 109.533637][ T5734] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x3 has an invalid bInterval 54, changing to 7 [ 109.533702][ T5734] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x3 has invalid maxpacket 33557, setting to 1024 [ 109.533783][ T5734] usb 2-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 109.533850][ T5734] usb 2-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 109.533975][ T5734] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 109.534049][ T5734] usb 2-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 109.534109][ T5734] usb 2-1: config 3 interface 246 altsetting 15 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 109.534173][ T5734] usb 2-1: config 3 interface 246 altsetting 15 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 109.534304][ T5734] usb 2-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0xF, skipping [ 109.534374][ T5734] usb 2-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0x5, skipping [ 109.543031][ T5734] usb 2-1: config 3 interface 246 has no altsetting 0 [ 109.543101][ T5734] usb 2-1: config 3 interface 254 has no altsetting 0 [ 109.543153][ T5734] usb 2-1: config 3 interface 179 has no altsetting 0 [ 109.567922][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.567997][ T5734] usb 2-1: Product:   [ 109.568039][ T5734] usb 2-1: Manufacturer: ␊ [ 109.568080][ T5734] usb 2-1: SerialNumber: syz [ 109.690623][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 109.734734][ T5909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.760018][ T5909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.760452][ T5909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.778511][ T5909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.872909][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 109.876691][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.876725][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.876767][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.910378][ T10] usb 1-1: config 0 descriptor?? [ 110.044334][ T5924] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 110.044369][ T5924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.74'. [ 110.078544][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.079097][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.177781][ T5926] netlink: 48 bytes leftover after parsing attributes in process `syz.3.75'. [ 110.197991][ T5924] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 110.212306][ T5924] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4294967293 (68719476688 ns) > initial count (1904 ns). Using initial count to start timer. [ 110.254964][ T5734] rndis_host 2-1:3.179: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 110.285547][ T5734] usb 2-1: USB disconnect, device number 6 [ 110.373152][ T10] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 110.373191][ T10] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 110.373220][ T10] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 110.373247][ T10] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 110.373274][ T10] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 110.373301][ T10] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 110.373355][ T10] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 110.432179][ T10] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 110.466541][ T5929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.76'. [ 110.590004][ T10] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 110.822827][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 110.956055][ T5943] bridge0: port 3(syz_tun) entered blocking state [ 110.956289][ T5943] bridge0: port 3(syz_tun) entered disabled state [ 110.956459][ T5943] syz_tun: entered allmulticast mode [ 110.958633][ T5943] syz_tun: entered promiscuous mode [ 110.959290][ T5943] bridge0: port 3(syz_tun) entered blocking state [ 110.959452][ T5943] bridge0: port 3(syz_tun) entered forwarding state [ 111.159526][ T5713] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 111.210227][ T10] cp2112 0003:10C4:EA90.0006: error setting SMBus config [ 111.215094][ T10] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 111.219289][ T10] usb 1-1: USB disconnect, device number 8 [ 111.259532][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.311558][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.311597][ T5713] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 111.312665][ T5713] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 111.312686][ T5713] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.314677][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.314694][ T5713] usb 2-1: Product: syz [ 111.314705][ T5713] usb 2-1: Manufacturer: syz [ 111.314715][ T5713] usb 2-1: SerialNumber: syz [ 111.317472][ T5941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.409532][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 111.410392][ T29] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 111.413648][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.413673][ T29] usb 4-1: Product: syz [ 111.413720][ T29] usb 4-1: Manufacturer: syz [ 111.413738][ T29] usb 4-1: SerialNumber: syz [ 111.416955][ T29] usb 4-1: config 0 descriptor?? [ 111.432065][ T921] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 111.526660][ T5941] Cannot find set identified by id 0 to match [ 111.580420][ T921] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 111.585477][ T921] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 111.596997][ T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.597177][ T921] usb 3-1: Product: syz [ 111.597351][ T921] usb 3-1: Manufacturer: syz [ 111.597393][ T921] usb 3-1: SerialNumber: syz [ 111.633313][ T5943] bridge0: port 4(bond0) entered blocking state [ 111.633555][ T5943] bridge0: port 4(bond0) entered disabled state [ 111.633755][ T5943] bond0: entered allmulticast mode [ 111.633773][ T5943] bond_slave_0: entered allmulticast mode [ 111.633825][ T5943] bond_slave_1: entered allmulticast mode [ 111.678020][ T5943] bond0: entered promiscuous mode [ 111.678044][ T5943] bond_slave_0: entered promiscuous mode [ 111.678214][ T5943] bond_slave_1: entered promiscuous mode [ 111.679321][ T5943] bridge0: port 4(bond0) entered blocking state [ 111.679480][ T5943] bridge0: port 4(bond0) entered forwarding state [ 111.716874][ T921] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 111.745709][ T5943] bridge0: port 5(team0) entered blocking state [ 111.745861][ T5943] bridge0: port 5(team0) entered disabled state [ 111.746143][ T5943] team0: entered allmulticast mode [ 111.746193][ T5943] team_slave_0: entered allmulticast mode [ 111.746237][ T5943] team_slave_1: entered allmulticast mode [ 111.801147][ T5943] team0: entered promiscuous mode [ 111.801174][ T5943] team_slave_0: entered promiscuous mode [ 111.801372][ T5943] team_slave_1: entered promiscuous mode [ 111.819882][ T5943] bridge0: port 5(team0) entered blocking state [ 111.819990][ T5943] bridge0: port 5(team0) entered forwarding state [ 111.901201][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.915146][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.986525][ T29] usb_8dev 4-1:0.0 can0: sending command message failed [ 111.986575][ T29] usb_8dev 4-1:0.0 can0: can't get firmware version [ 112.024212][ T921] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 112.066754][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 112.066782][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 112.102493][ T29] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 112.108953][ T921] usb 3-1: USB disconnect, device number 8 [ 112.134292][ T29] usb 4-1: USB disconnect, device number 6 [ 112.204609][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.87'. [ 112.650678][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.800193][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 112.801121][ T29] usb 5-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=d7.13 [ 112.803115][ T29] usb 5-1: config 3 has an invalid interface number: 246 but max is 3 [ 112.803146][ T29] usb 5-1: config 3 has an invalid interface number: 74 but max is 3 [ 112.803168][ T29] usb 5-1: config 3 has an invalid interface number: 254 but max is 3 [ 112.803189][ T29] usb 5-1: config 3 has an invalid interface number: 179 but max is 3 [ 112.803239][ T29] usb 5-1: config 3 has no interface number 0 [ 112.803257][ T29] usb 5-1: config 3 has no interface number 1 [ 112.803274][ T29] usb 5-1: config 3 has no interface number 2 [ 112.803291][ T29] usb 5-1: config 3 has no interface number 3 [ 112.803396][ T29] usb 5-1: config 3 interface 246 altsetting 15 bulk endpoint 0xE has invalid maxpacket 32 [ 112.803426][ T29] usb 5-1: config 3 interface 246 altsetting 15 bulk endpoint 0xF has invalid maxpacket 32 [ 112.803453][ T29] usb 5-1: config 3 interface 246 altsetting 15 bulk endpoint 0x6 has invalid maxpacket 1024 [ 112.803480][ T29] usb 5-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 112.803643][ T29] usb 5-1: config 3 interface 246 altsetting 15 has an endpoint descriptor with address 0x73, changing to 0x3 [ 112.803701][ T29] usb 5-1: config 3 interface 246 altsetting 15 endpoint 0x3 has an invalid bInterval 54, changing to 7 [ 112.803731][ T29] usb 5-1: config 3 interface 246 altsetting 15 endpoint 0x3 has invalid maxpacket 33557, setting to 1024 [ 112.803760][ T29] usb 5-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 112.803783][ T29] usb 5-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 112.803806][ T29] usb 5-1: config 3 interface 246 altsetting 15 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 112.803862][ T29] usb 5-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 112.803889][ T29] usb 5-1: config 3 interface 246 altsetting 15 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 112.803917][ T29] usb 5-1: config 3 interface 246 altsetting 15 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 112.803973][ T29] usb 5-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0xF, skipping [ 112.804025][ T29] usb 5-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0x5, skipping [ 112.804050][ T29] usb 5-1: config 3 interface 246 has no altsetting 0 [ 112.804070][ T29] usb 5-1: config 3 interface 254 has no altsetting 0 [ 112.804089][ T29] usb 5-1: config 3 interface 179 has no altsetting 0 [ 112.822955][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.823083][ T29] usb 5-1: Product:   [ 112.823124][ T29] usb 5-1: Manufacturer: ␊ [ 112.823166][ T29] usb 5-1: SerialNumber: syz [ 112.928917][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.013993][ T5966] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.035435][ T5966] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.036013][ T5966] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.051386][ T5966] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.169477][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 113.173273][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.173324][ T10] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=3f.ba [ 113.174885][ T10] usb 4-1: config 80 has an invalid interface number: 22 but max is 0 [ 113.174919][ T10] usb 4-1: config 80 has no interface number 0 [ 113.174963][ T10] usb 4-1: config 80 interface 22 altsetting 128 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 113.174994][ T10] usb 4-1: config 80 interface 22 has no altsetting 0 [ 113.177655][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.177680][ T10] usb 4-1: Product: syz [ 113.177697][ T10] usb 4-1: Manufacturer: syz [ 113.177712][ T10] usb 4-1: SerialNumber: syz [ 113.353578][ T5966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.355683][ T5966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.394797][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 113.394861][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 113.506680][ T10] viperboard 4-1:80.22: version 0.00 found at bus 004 address 007 [ 113.527533][ T29] rndis_host 5-1:3.179: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 113.548822][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 113.548857][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 113.557470][ T29] usb 5-1: USB disconnect, device number 9 [ 113.599225][ T10] usb 4-1: USB disconnect, device number 7 [ 113.657212][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 113.717589][ T5734] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.886271][ T5734] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 113.887507][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.887539][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.887580][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.913755][ T5734] usb 3-1: config 0 descriptor?? [ 113.953126][ T5713] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.953189][ T5713] usb 2-1: MIDIStreaming interface descriptor not found [ 114.051628][ T5983] syzkaller0: entered promiscuous mode [ 114.051653][ T5983] syzkaller0: entered allmulticast mode [ 114.165149][ T5987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.98'. [ 114.231655][ T5713] usb 2-1: USB disconnect, device number 7 [ 114.247568][ T5989] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 114.248646][ T5989] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 114.303459][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 114.303486][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 114.370996][ T5734] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 114.371037][ T5734] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 114.371065][ T5734] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 114.411533][ T5734] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 114.515238][ T5750] udevd[5750]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.579087][ T5734] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 114.869520][ T5713] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.939537][ T5685] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 115.020150][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 115.021799][ T5713] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 115.026706][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.026734][ T5713] usb 2-1: Product: syz [ 115.026751][ T5713] usb 2-1: Manufacturer: syz [ 115.026796][ T5713] usb 2-1: SerialNumber: syz [ 115.037306][ T5713] usb 2-1: config 0 descriptor?? [ 115.093855][ T5685] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.096020][ T5685] usb 5-1: not running at top speed; connect to a high speed hub [ 115.096056][ T5685] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 115.097571][ T5685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.097596][ T5685] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.097676][ T5685] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.125993][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 115.126127][ T5685] usb 5-1: Product: syz [ 115.126297][ T5685] usb 5-1: Manufacturer: syz [ 115.153668][ T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 115.201349][ T5734] cp2112 0003:10C4:EA90.0007: error setting SMBus config [ 115.232523][ T5734] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 115.240392][ T5734] usb 3-1: USB disconnect, device number 9 [ 115.336150][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.336204][ T29] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 115.338970][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 115.339003][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.384740][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.384799][ T29] usb 4-1: Product: syz [ 115.384817][ T29] usb 4-1: Manufacturer: syz [ 115.384842][ T29] usb 4-1: SerialNumber: syz [ 115.415141][ T6001] syz.4.103 uses obsolete (PF_INET,SOCK_PACKET) [ 115.434686][ T6007] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 115.449172][ T5713] usb_8dev 2-1:0.0 can0: sending command message failed [ 115.449197][ T5713] usb_8dev 2-1:0.0 can0: can't get firmware version [ 115.551384][ T5713] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 115.574211][ T5713] usb 2-1: USB disconnect, device number 8 [ 115.702144][ T5685] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 115.707899][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 3: -71 (exp. 1). [ 115.709331][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 3: -71 (exp. 1). [ 115.714485][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 10 on unit 3: -71 (exp. 1). [ 115.718875][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 3: -71 (exp. 1). [ 115.734785][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 3: -71 (exp. 1). [ 115.747773][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 3: -71 (exp. 1). [ 115.754530][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 16 on unit 3: -71 (exp. 1). [ 115.780761][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 3: -71 (exp. 1). [ 115.798637][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 3: -71 (exp. 1). [ 115.805725][ T5685] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 3: -71 (exp. 1). [ 115.805971][ T5685] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 115.806981][ T5685] uvcvideo 5-1:1.0: Failed to create links for entity 3 [ 115.807041][ T5685] uvcvideo 5-1:1.0: Failed to register entities (-22). [ 115.876046][ T5685] usb 5-1: USB disconnect, device number 10 [ 115.893735][ T6007] Cannot find set identified by id 0 to match [ 116.179543][ T5713] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 116.229581][ T5699] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.319486][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.338138][ T5713] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 116.340032][ T5713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 116.340114][ T5713] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 116.340229][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.389501][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 116.392376][ T5699] usb 1-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=d7.13 [ 116.393879][ T5699] usb 1-1: config 3 has an invalid interface number: 246 but max is 3 [ 116.393912][ T5699] usb 1-1: config 3 has an invalid interface number: 74 but max is 3 [ 116.393937][ T5699] usb 1-1: config 3 has an invalid interface number: 254 but max is 3 [ 116.393961][ T5699] usb 1-1: config 3 has an invalid interface number: 179 but max is 3 [ 116.393985][ T5699] usb 1-1: config 3 has no interface number 0 [ 116.394005][ T5699] usb 1-1: config 3 has no interface number 1 [ 116.394025][ T5699] usb 1-1: config 3 has no interface number 2 [ 116.394045][ T5699] usb 1-1: config 3 has no interface number 3 [ 116.394128][ T5699] usb 1-1: config 3 interface 246 altsetting 15 bulk endpoint 0xE has invalid maxpacket 32 [ 116.394163][ T5699] usb 1-1: config 3 interface 246 altsetting 15 bulk endpoint 0xF has invalid maxpacket 32 [ 116.394192][ T5699] usb 1-1: config 3 interface 246 altsetting 15 bulk endpoint 0x6 has invalid maxpacket 1024 [ 116.394220][ T5699] usb 1-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 116.394248][ T5699] usb 1-1: config 3 interface 246 altsetting 15 has an endpoint descriptor with address 0x73, changing to 0x3 [ 116.394279][ T5699] usb 1-1: config 3 interface 246 altsetting 15 endpoint 0x3 has an invalid bInterval 54, changing to 7 [ 116.394309][ T5699] usb 1-1: config 3 interface 246 altsetting 15 endpoint 0x3 has invalid maxpacket 33557, setting to 1024 [ 116.394339][ T5699] usb 1-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 116.394363][ T5699] usb 1-1: config 3 interface 246 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 116.394389][ T5699] usb 1-1: config 3 interface 246 altsetting 15 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 116.394421][ T5699] usb 1-1: config 3 interface 246 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 116.394448][ T5699] usb 1-1: config 3 interface 246 altsetting 15 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 116.394478][ T5699] usb 1-1: config 3 interface 246 altsetting 15 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 116.394536][ T5699] usb 1-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0xF, skipping [ 116.394575][ T5699] usb 1-1: config 3 interface 179 altsetting 153 has a duplicate endpoint with address 0x5, skipping [ 116.394601][ T5699] usb 1-1: config 3 interface 246 has no altsetting 0 [ 116.394623][ T5699] usb 1-1: config 3 interface 254 has no altsetting 0 [ 116.394644][ T5699] usb 1-1: config 3 interface 179 has no altsetting 0 [ 116.394954][ T5713] usb 3-1: probing VID:PID(0424:012C) [ 116.398689][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.398717][ T5699] usb 1-1: Product:   [ 116.398735][ T5699] usb 1-1: Manufacturer: ␊ [ 116.398753][ T5699] usb 1-1: SerialNumber: syz [ 116.414909][ T5713] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 116.414974][ T5713] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 116.414997][ T5713] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 116.415018][ T5713] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 116.415040][ T5713] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 116.573359][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 116.706681][ T10] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 116.706711][ T10] usb 2-1: config 0 has no interface number 0 [ 116.706756][ T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.763805][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.763834][ T10] usb 2-1: Product: syz [ 116.763850][ T10] usb 2-1: Manufacturer: syz [ 116.763866][ T10] usb 2-1: SerialNumber: syz [ 116.766763][ T6017] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.767170][ T6017] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.767312][ T6017] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.793228][ T10] usb 2-1: config 0 descriptor?? [ 116.800462][ T6017] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.850570][ T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 116.909086][ T6023] syzkaller0: entered promiscuous mode [ 116.909112][ T6023] syzkaller0: entered allmulticast mode [ 117.056408][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.057031][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.057203][ T5713] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 117.131249][ T5699] rndis_host 1-1:3.179: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 117.136468][ T5699] usb 1-1: USB disconnect, device number 9 [ 117.257237][ T5713] usb 3-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 117.291604][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 117.291633][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 117.363031][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.363666][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.481731][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 117.571120][ T5685] usb 2-1: USB disconnect, device number 9 [ 117.667130][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.668849][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.904863][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.904994][ T29] usb 4-1: MIDIStreaming interface descriptor not found [ 117.971907][ T6038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 117.971934][ T6038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 118.010726][ T29] usb 4-1: USB disconnect, device number 8 [ 118.119728][ T5734] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 118.270682][ T5734] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 118.272482][ T5734] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 118.272541][ T5734] usb 1-1: config 0 has no interface number 0 [ 118.272586][ T5734] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.274793][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.274818][ T5734] usb 1-1: Product: syz [ 118.274836][ T5734] usb 1-1: Manufacturer: syz [ 118.274868][ T5734] usb 1-1: SerialNumber: syz [ 118.277696][ T5734] usb 1-1: config 0 descriptor?? [ 118.306574][ T5734] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 118.356145][ T5713] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 118.358534][ T5734] usb 3-1: USB disconnect, device number 10 [ 118.367878][ T5713] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 118.371444][ T5713] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 118.402346][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.550191][ T29] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 118.551963][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.552047][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.552094][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.554749][ T29] usb 4-1: config 0 descriptor?? [ 118.793422][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.797857][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.992462][ T29] hid_parser_main: 4 callbacks suppressed [ 118.992518][ T29] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 118.992552][ T29] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 118.992581][ T29] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 118.992609][ T29] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 118.992664][ T29] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 118.992693][ T29] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 118.992721][ T29] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 119.066367][ T5734] USB vub300 remote SDIO host controller[0] now disconnected [ 119.067275][ T5713] usb 1-1: USB disconnect, device number 10 [ 119.085671][ T5685] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 119.088566][ T29] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 119.182273][ T29] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 119.192141][ T6048] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 119.192164][ T6048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'. [ 119.340140][ T6048] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4294967293 (68719476688 ns) > initial count (1904 ns). Using initial count to start timer. [ 119.369653][ ** replaying previous printk message ** [ 119.369653][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 119.369679][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6041, name: syz.4.118 [ 119.369701][ C1] preempt_count: 100, expected: 0 [ 119.369714][ C1] RCU nest depth: 0, expected: 0 [ 119.369739][ C1] locks held by syz.4.118/6041: 1, last CPU#1: [ 119.369764][ C1] #0: ffffc90002cd7c00 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 119.369860][ C1] Preemption disabled at: [ 119.369867][ C1] [] handle_softirqs+0xab/0x860 [ 119.369925][ C1] CPU: 1 UID: 0 PID: 6041 Comm: syz.4.118 Not tainted syzkaller #0 PREEMPT(full) [ 119.369952][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.369976][ C1] Call Trace: [ 119.369989][ C1] [ 119.370003][ C1] dump_stack_lvl+0xe8/0x150 [ 119.370042][ C1] __might_resched+0x36a/0x4c0 [ 119.370082][ C1] ? handle_softirqs+0xab/0x860 [ 119.370118][ C1] __cancel_work_sync+0x6d/0x110 [ 119.370152][ C1] mmc_free_host+0x19/0x40 [ 119.370182][ C1] call_timer_fn+0x18d/0x5f0 [ 119.370207][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.370231][ C1] ? call_timer_fn+0xd5/0x5f0 [ 119.370255][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 119.370288][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.370308][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.370335][ C1] __run_timer_base+0x652/0x8b0 [ 119.370370][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 119.370406][ C1] run_timer_softirq+0xb7/0x170 [ 119.370429][ C1] handle_softirqs+0x226/0x860 [ 119.370463][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 119.370494][ C1] __irq_exit_rcu+0xcb/0x220 [ 119.370519][ C1] irq_exit_rcu+0x9/0x30 [ 119.370541][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 119.370564][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.370585][ C1] RIP: 0033:0x7f8f4fe73ae7 [ 119.370610][ C1] Code: 03 14 ef 80 3d e1 42 3b 00 00 49 89 d6 48 89 d3 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c3 c1 eb 04 31 c3 69 db 2d eb d4 27 <89> d8 c1 e8 0f 31 c3 81 e3 ff 0f 00 00 48 31 d3 80 3d 4a e5 3a 00 [ 119.370625][ C1] RSP: 002b:00007f8f5034fae0 EFLAGS: 00000a03 [ 119.370641][ C1] RAX: 0000000000000dbf RBX: 000000005f1d2694 RCX: ffffffff81b4dd6d [ 119.370654][ C1] RDX: ffffffff81b4d1c4 RSI: ffffffff81b4dd6d RDI: 00007f8f4f5fd008 [ 119.370668][ C1] RBP: 0000000000000000 R08: 00007f8f50210000 R09: 00007f8f50212000 [ 119.370680][ C1] R10: 0000000081b4dd71 R11: 0000000000000004 R12: 00007f8f50226128 [ 119.370692][ C1] R13: 0000000000054076 R14: ffffffff81b4d1c4 R15: 00007f8f50d55720 [ 119.370706][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 119.370732][ C1] ? ktime_mono_to_any+0x2d/0xa0 [ 119.370751][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 119.370770][ C1] ? ktime_mono_to_any+0x2d/0xa0 [ 119.370794][ C1] [ 119.371475][ C1] BUG: scheduling while atomic: syz.4.118/6041/0x00000101 [ 119.371530][ C1] locks held by syz.4.118/6041: 1, on CPU#1: [ 119.371592][ C1] #0: ffffc90002cd7c00 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 119.371788][ C1] Modules linked in: [ 119.371820][ C1] Preemption disabled at: [ 119.371832][ C1] [] handle_softirqs+0xab/0x860 [ 119.371957][ C1] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 119.704148][ C1] CPU: 1 UID: 0 PID: 6041 Comm: syz.4.118 Tainted: G W syzkaller #0 PREEMPT(full) [ 119.714950][ C1] Tainted: [W]=WARN [ 119.718774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.728853][ C1] Call Trace: [ 119.732157][ C1] [ 119.735164][ C1] vpanic+0x56d/0xa60 [ 119.739212][ C1] ? __pfx_vpanic+0x10/0x10 [ 119.743755][ C1] panic+0xc5/0xd0 [ 119.747512][ C1] ? __pfx_panic+0x10/0x10 [ 119.751962][ C1] ? __pfx__printk+0x10/0x10 [ 119.756589][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 119.761848][ C1] ? print_lock_name+0x68/0x90 [ 119.766655][ C1] ? handle_softirqs+0xab/0x860 [ 119.771544][ C1] check_panic_on_warn+0x89/0xb0 [ 119.776700][ C1] ? handle_softirqs+0xab/0x860 [ 119.781631][ C1] __schedule_bug+0xf1/0x150 [ 119.786267][ C1] __schedule+0x18b7/0x5940 [ 119.790809][ C1] ? __lock_acquire+0x747/0x2de0 [ 119.795793][ C1] ? check_path+0x21/0x40 [ 119.800193][ C1] ? check_noncircular+0xdb/0x150 [ 119.805262][ C1] ? __pfx___schedule+0x10/0x10 [ 119.810145][ C1] ? lock_acquire+0x115/0x350 [ 119.814865][ C1] ? schedule+0x90/0x2b0 [ 119.819140][ C1] schedule+0x164/0x2b0 [ 119.823368][ C1] schedule_timeout+0xc0/0x2c0 [ 119.828164][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 119.833562][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.838635][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.843870][ C1] ? wait_for_completion+0x272/0x5e0 [ 119.849211][ C1] wait_for_completion+0x2ca/0x5e0 [ 119.854368][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 119.860048][ C1] __synchronize_srcu+0x23b/0x2f0 [ 119.865104][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 119.870716][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.875780][ C1] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 119.881209][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 119.887044][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 119.892628][ C1] ? synchronize_srcu+0x20a/0x260 [ 119.897711][ C1] wakeup_source_unregister+0x129/0x3f0 [ 119.903307][ C1] mmc_host_classdev_release+0x47/0x100 [ 119.908910][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 119.915107][ C1] device_release+0xc4/0x1f0 [ 119.919729][ C1] kobject_put+0x222/0x550 [ 119.924178][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 119.928971][ C1] call_timer_fn+0x18d/0x5f0 [ 119.933629][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.940336][ C1] ? call_timer_fn+0xd5/0x5f0 [ 119.945046][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 119.950193][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.955415][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 119.962124][ C1] __run_timer_base+0x652/0x8b0 [ 119.967017][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 119.972433][ C1] run_timer_softirq+0xb7/0x170 [ 119.977317][ C1] handle_softirqs+0x226/0x860 [ 119.982115][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 119.986916][ C1] __irq_exit_rcu+0xcb/0x220 [ 119.991538][ C1] irq_exit_rcu+0x9/0x30 [ 119.995805][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 120.001465][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.007471][ C1] RIP: 0033:0x7f8f4fe73ae7 [ 120.011913][ C1] Code: 03 14 ef 80 3d e1 42 3b 00 00 49 89 d6 48 89 d3 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c3 c1 eb 04 31 c3 69 db 2d eb d4 27 <89> d8 c1 e8 0f 31 c3 81 e3 ff 0f 00 00 48 31 d3 80 3d 4a e5 3a 00 [ 120.031634][ C1] RSP: 002b:00007f8f5034fae0 EFLAGS: 00000a03 [ 120.037732][ C1] RAX: 0000000000000dbf RBX: 000000005f1d2694 RCX: ffffffff81b4dd6d [ 120.045730][ C1] RDX: ffffffff81b4d1c4 RSI: ffffffff81b4dd6d RDI: 00007f8f4f5fd008 [ 120.053725][ C1] RBP: 0000000000000000 R08: 00007f8f50210000 R09: 00007f8f50212000 [ 120.061740][ C1] R10: 0000000081b4dd71 R11: 0000000000000004 R12: 00007f8f50226128 [ 120.069753][ C1] R13: 0000000000054076 R14: ffffffff81b4d1c4 R15: 00007f8f50d55720 [ 120.077763][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 120.083969][ C1] ? ktime_mono_to_any+0x2d/0xa0 [ 120.088932][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 120.095115][ C1] ? ktime_mono_to_any+0x2d/0xa0 [ 120.100090][ C1] [ 120.103287][ C1] Kernel Offset: disabled [ 120.107628][ C1] Rebooting in 86400 seconds..