last executing test programs: 14.130337409s ago: executing program 3 (id=287): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c8013001a800ca3488008000000000000000800038064001d"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r5 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x37) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x1, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x2}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 12.449393657s ago: executing program 4 (id=292): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000028500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e000000200000080ffffff00000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c01000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000200feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a010102000000000000000000000000000000003200000002000000ac1414000000b35c04c14b9d431d0000ffffffff0002000000000000000000000300000020010000000000000000000000000001000000003c00000002"], 0x23c}}, 0x0) 12.109018244s ago: executing program 4 (id=293): openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = open(0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8935, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004000625eca60a2f7240b5b73827a942e2801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x300, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x80}}, 0x0) 10.695335129s ago: executing program 0 (id=296): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000740)="4f0461e980a3df614c952ba937542c3956c268ef9da7fc364c6d5c543c3bd84159a349884fb4df8936363169ce8541c090bb5871df329e56747592fa4d29a09dcb4c416503ec1113680af76cba6417576ac2c0d3570f91a9c661f10e9bdab3c038f68844db4a19a8a613d78adb0405e27a1dea217288306169ac437c2401514510725ff144e75b83b8c67735520151c1018c3542bdfa2cae78aeb5d328f7d134706eb4d03bf4018be0f581f55e82cc1e851b8585d48a881144bfd5e96b52b62e62abe7ace71093fe8779d41feea0eb401dc005f2e3fe47320e7f945fb04e06c713f062ca47794f9c0b7fa88ccfacc4a51a4e816e0cb832c42d9f60561d5086ff512190d1129892fd541a0fbc9a41d70cd0d4501fed5545cd04b7800814bcbf492339bbfe784baba895beda447447a447e088a8d7cb795b3543a8cd8d8efb830dabc88b5b6466cd1d903833fca0e1049480810da129e746e2c9726a846ce85003a6bb9949e5dd140ab97a001c91323d5cb6648d4f61d40d4951ae36a1a404ba3452ae9a969c16a0918b4afe0b7b6afe4d59d8abfed8e7b38ce7c6c4daf306d0136c353c109f0a63c26df5f8866e763dc2fcd93b7c9b7143823cd8272533aa2eb47f873da2e1aeba66332990f5033c712108f71bc055f29317d8dd9b227b524d61381ed55fdb83ee0849", 0x1e9}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2e2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/207, 0xcf}, {&(0x7f0000000f00)="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", 0x16b}, {&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f00000004c0)="6f5a805865eeef6df56a4a066060a57f040815401a8ba9f3022a97141eaafc45fcdccd0978326dd08efa751bba43d86d0f0dc7d9233096dfedc763587a0910455725b18469a62cb29e2476a098", 0x4d}, {&(0x7f00000005c0)="eaa496f21cfe2c370920a46df4841a22c0b729953454967ccef4aaaa4f3dd95ec6892c6ec59d0ad89dbdc90ecd3fd366efa6d9ec0f2bb2d5f25fc025bba196657382f98920cc3e28f83a9589d7cb9e13bf66f519910125c69089863262281b3a726e", 0x62}], 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x4f04000000000000) 10.497156368s ago: executing program 0 (id=297): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x40000100000000) syz_usb_disconnect(r0) 10.405845181s ago: executing program 3 (id=298): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41004) syz_usb_connect(0x0, 0xfffffffffffffe8a, 0x0, 0x0) syz_emit_ethernet(0x102, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@getchain={0xffffffffffffff17, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x10}, {0x6, 0xfff3}, {0x0, 0x1}}}, 0x2c}}, 0x800) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000000)={0xc}) 9.235292058s ago: executing program 4 (id=302): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080000000000000004"], 0x2c}}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f00000002c0)=0xc) tgkill(r4, 0x0, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000240)={0x18}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) 8.207300178s ago: executing program 0 (id=306): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9, 0x100) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r10, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r11, 0x0, &(0x7f00000a0000)='LLL', 0x3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f0000000c00)={0x18, r11, 0x0, 0x200000000000000}) socket$inet6_tcp(0xa, 0x1, 0x0) 6.778461713s ago: executing program 3 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f000000c300080022"], 0x54}}, 0x0) 5.840975926s ago: executing program 3 (id=309): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xffffffffffffffff, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000540)="be0600000000", 0x0, 0x3, 0x11, 0x801, 0x0}) 5.80151849s ago: executing program 0 (id=310): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x2}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000002cc0)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000000380)="d0da4cb79ca1616107792e7e35cf4115a9b2008d60ea9f18df880b1100108dab7bc5a7c0fd267f91f70963a66fb5baaab1a789bfebaf0a903ddacd8d42373a9a34b0b53f9910f8c504519fe1fcb15fc07e48d5e5bc634a4e8619bcf60042617ab6f8263c7d102c6d475c69ea76776bd642ac7ffc13fef3fdb0e3421d19a8a099da07b27f5ce527166e53747ccfa5dacfedee04e081e83ab3cd1772f744af6628e759e3951e", 0xa5}, {&(0x7f0000000440)="36dc0cefa302be26a9ba5213ed9a8adc8d9a917406dc3b935307093ba34a0310f74f9576b23273c1db148138d528aa9a2c1e4666722f75d8bffced8d8cfdf0d103065aa751f86b6c0b8e74ed4d8a17d36e620a477be6477c85d91dfcf67db02272da912e8c0e18a5487507432d60b03909e17e4ec56221ff4606258086f19ce8bdcfe7781d3028862a28499e5860f813038ca25a0152cc", 0x97}, {&(0x7f0000000500)="aa735da330eccc2513614b29a17bcf40cb8947805976f498174c0adf6c07bee527cc8d", 0x23}, {&(0x7f0000000600)="d851630b1c710beddd25579ac6854f6211e9965f493d4a360eff2c1247d84eeaa5182103de638261d50acd26627f0a0c4b61b744de1e057bee82069a6285b135f280ef4d98639900a9abae0eb2fc0ba142ac17b3ffdb80fb8d1faceff7ec37d8878bff2616cf848c1367e7eecb05b4ca91f0182263deddbcbd009ac829cb400bf038f784d2244a4248d0441f7e6ecc2a3d214587b6b6abfe32223b875867b8c83666a597375dfff8330b6b02adf2bd120dacfcc7b15b772fc86e2f593981de897db29c95a4826311f4eac23c7e699ef27b335fc06c186ffab24c05b3292c106508b597aac8005dcbbe393e87cae5389b71e98f6919aacf72", 0xf8}, {&(0x7f00000007c0)="672ba9e260ef22164d1c4bf416babe7288b72d127280e362641baa1d87b385e654c14516466b758f061504e8fbde97be17c252698bc472a5633b18feb6118b4967365b450f5eeb43b4f63dde83c3c468c3feacd3384eaf77ef90fadd4ff9d0e72b1fdf6953feab978d2a6bb2c2a70d1cbfeeeae9e7bbc9a918ceb6695e94c6e644d3f21c231d056de7c83eadcaabc2e01cb1637e0e23622f3b33394c319c2c6562fbc40502064a11e98974dc55b985352921e2444662c8daab7473f152003d470e4cb103b561a323affa241c534449a70582e31b0ba8c3190ec5195a220de2784e396e3aa2f9d6dab1b8d8847b89273a533d40ff7fc8", 0xf6}, {&(0x7f0000001300)="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", 0x7f0}, {&(0x7f0000002300)="44ba4821477df4a2ee4cf264c14cd3b3f77d6b609b7899c027df5f129eb42c12b52c977d121be83ea694d6d5eae11b6f2ee9d1d41d21afc7e23eb5decfbae19c64cc8099e69f0eaa5f7b7d404b0fbc52250880a71ddbbd0e6cfaef1474b31649f11975914e6a", 0x66}, {&(0x7f0000002380)="6fcd79397c0039b261bc51fcd9d59f6aec7c6cf59224f56f70a17c8c980cdf31fb0a847be0aa5de086b1004a3469318b06f5f9ffb4069a0618d9bd349d026c30bbb892ae3188cafd8b6b9ed05b45001f102bb4d17559daf3e406b35a17785801f3c4ec526bf58695c9", 0x69}], 0x8, &(0x7f0000002b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="00140aea1e000000000000000140000000000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32], 0x168, 0x4008891}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="010000000000000000", @ANYBLOB="000000000400000000000000000000000000090000000d0000000000"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, 0x0, 0x80) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, 0x0, 0x0) 5.561565386s ago: executing program 3 (id=311): syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d000009058202"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000480011012abd7000fedbdf250a000000", @ANYRES32=0x0, @ANYBLOB="02000000082002000700000014000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c814) 4.688994061s ago: executing program 4 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000a1008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 4.148548821s ago: executing program 4 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd27, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x4000800) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) lstat(&(0x7f0000000740)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 4.148228438s ago: executing program 2 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000305000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 3.935877938s ago: executing program 2 (id=316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x2, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x2b}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0xf0fa, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x19000000}, 0x24000058) 3.698977159s ago: executing program 2 (id=317): socket$alg(0x26, 0x5, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmsg$sock(r1, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x4c000) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x300000000000000}, 0x0, 0x0) 3.427155046s ago: executing program 0 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0xd, 0x50, {0x50, 0x1, "2f79c7367ba4fa6463c609c014cea59700d0628b1653937f7b916728acc4ca4a346bf5cc5dbb65722c2a8f6d718912b73cce77abde2bb905f1b14d9f695050ed8248b299eb0a32a7652434ad618f"}}, &(0x7f0000000100)={0x0, 0x3, 0x90, @string={0x90, 0x3, "6169256f16889bfcd90871818a106e752c40cc9e9ebfc302b6ab3dd7df3b7df2895c6a0d2648db9bf2de89c8055d670378c2ce0b2f748ac8362f2af1d75452cec0d8828d4b4feaafdfc131ac0d3cfe6723cb6cc53f84ecc4d4eb6f0d6515da88dbe68a06321bb6abac567ab0fcdc58140525dcdba79886eb71e053335a7ce237fbbc2c27c195d16b425f865683de"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220a0000008354521d87042a1e1100"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x73b}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0xe, 0x97, "55377e7ebd72240df5f2f4bfc6110eac08c1a1a2bfe613356746020c57396b184e5bf33b6130e491608675f6d583554558af8d8bf605e104588a654b6284022ebaac2a40766b3c06594a746131297be9508ee2b698ade2bf46132d01517c3b1a907fc0f4ff4f4b7799ffad2f6b9eaf9406d7f7b21b696925666a742a1be057fe4692ad290a5dd882213c5827dcd68a387491f51e9e2206"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xf5}, &(0x7f0000000440)={0x20, 0x1, 0x14, "1253b8ee1a6ae7f0a7b696907cf33173e9070488"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xd4, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5e09662e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5807c83}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x43607381}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1986c65e}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5584424}]}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10}}, 0x158}}, 0x0) 3.314646425s ago: executing program 3 (id=322): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080000000000000004"], 0x2c}}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f00000002c0)=0xc) tgkill(r4, 0x0, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000240)={0x18}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) 3.314377918s ago: executing program 1 (id=323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200440c9, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) shutdown(r1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200480c1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="780000001600010027bd7000ffdbdf250a3888ff", @ANYRES32, @ANYBLOB="08000900060000001400010000000000000000000000000000000001"], 0x78}, 0x1, 0xba01, 0x0, 0x44045}, 0x4048) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x138, 0xc8, 0x8, 0x0, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'erspan0\x00', 'ip6gretap0\x00'}, 0x0, 0x108, 0x138, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}, {0x9, 0x7, 0x5498, 0xf3e2, 0x3ff, 0x9, 0x2}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5c}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {0xff}, {}, 0xc, 0xb, 0x1, 0x8f6e9a95108b651d}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x292000, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x8, r1, 0x23, {0x6, 0x4}, 0x45}, 0x1) signalfd4(r0, &(0x7f0000000340)={[0x6fc0]}, 0x8, 0x0) 3.237295253s ago: executing program 1 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x44208, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x7015000000000000, 0x0, 0x24004844}, 0x8000002) 2.880782138s ago: executing program 1 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x18, 0x100, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}, {0x85, 0x0, 0x0, 0xa4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000004380)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000140)=""/39, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.765253175s ago: executing program 1 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000305000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 2.736148944s ago: executing program 1 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf254a0000007d00a8001c019168f2b57661b6f5a9cd8a2a16bc6e863ae86ac6e25f90ae2cd0e17ea45b2dc9b8474f97ae3e13121f5419ef7d3a03eab056fded9598b4cd2fa6ec95944496feca9f95c4907eea3e6a50c4c6c5a1130416270392b772f6f2c73c6bba7d18dbe495a4257363ff2fd30000000e00a80066697273746e616d6500"/158], 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x8002) timer_create(0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2f86dd"], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000002180)=0x100000000) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newchain={0x874, 0x64, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0x3, 0xd}, {0x6, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x844, 0x2, [@TCA_CGROUP_POLICE={0x840, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5189}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xffffffe8, 0x4, 0x80, 0x7, 0x3, 0xcf, 0x4, 0x7bfc, 0x4, 0xffffff83, 0x9, 0x4, 0x6, 0x0, 0x9, 0x8001, 0xffffffff, 0x7, 0x1, 0x80000001, 0x48bc, 0x9, 0x1, 0xffffff56, 0x2, 0x6, 0x81, 0x2, 0x5, 0x7, 0x6, 0x5cb, 0x0, 0x9, 0x8, 0x10000, 0x6, 0x4, 0x6, 0x2, 0x7f, 0x9, 0xa9e1, 0x80000000, 0x9, 0x9, 0xfffffff9, 0x8, 0x9, 0x2ff, 0x1, 0x4, 0x57b, 0x1, 0x8000, 0x6e71ed08, 0x100, 0x6, 0x0, 0x140000, 0x8, 0xab0b, 0x80000000, 0x8000, 0x8, 0x0, 0x9a, 0x9, 0x9, 0x4, 0x100, 0x40, 0x40, 0x2, 0x3, 0xe9, 0x2, 0xa349, 0x7, 0x3, 0xc7, 0xbfe, 0x0, 0x542, 0x96, 0x200, 0x2, 0x5, 0x9, 0x3, 0x0, 0x1, 0x1, 0x1, 0x8, 0x9, 0x9, 0x3, 0x8f5, 0x2, 0x3, 0x400, 0x3ff, 0x4, 0x9, 0x6, 0x80000001, 0x75, 0x8, 0x6, 0x100000, 0x84, 0x0, 0xfff, 0x6, 0x5, 0x9, 0x3, 0x4, 0x0, 0x7, 0x5, 0x3ff, 0x9, 0x41, 0x0, 0x2, 0x4, 0x6, 0x5, 0x8, 0x5, 0x6, 0x9, 0x4, 0x5, 0xa, 0x3, 0x6, 0x400, 0x5, 0x1, 0x4a, 0x5, 0x8, 0x7fffffff, 0xb, 0x1ba1, 0x2, 0x1, 0x2, 0x8, 0x6be, 0x3, 0x9, 0x0, 0x1, 0xc2c, 0xfffffff8, 0x0, 0x400, 0x80, 0xe9, 0x8, 0x3, 0x401, 0x9ca, 0x1000, 0x9, 0x3, 0x7, 0xffffff81, 0x2, 0xbac, 0x648c, 0x7f, 0xb, 0x3, 0x200, 0x785ba55e, 0x0, 0x5b31, 0x10000, 0x1, 0x7ff, 0x5, 0x1, 0xfff, 0xfff, 0x101, 0xffff, 0x9, 0x4800, 0x2, 0x1, 0xfb7, 0x2e0e, 0x2, 0x4, 0x2, 0x7ff, 0x6a6, 0x5, 0x800, 0x7, 0xec, 0x98, 0x8000, 0x8001, 0xfffff000, 0x2, 0x81, 0xff, 0x2, 0x0, 0xa66, 0x5, 0x0, 0x7fffffff, 0x400, 0x5, 0x0, 0x9, 0xa9e, 0x400, 0xffff, 0x10000, 0x7, 0x10, 0x1, 0x9, 0xa, 0x1, 0x100, 0x8, 0x6, 0x8, 0x1, 0xffffffff, 0xd, 0x10001, 0x0, 0xef9, 0x3, 0x0, 0x15, 0x8, 0x7, 0x1, 0xc953, 0x2, 0xa302, 0x6c5, 0xd2, 0x2a4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffd6}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0x100, 0x0, 0x7, 0x3, 0x8b8, 0x1000, 0x800, 0x1, 0x7, 0xa7f9, 0x2, 0x0, 0x4f7a9be7, 0xfffffffe, 0x2, 0x200, 0xfffffbff, 0xd587, 0x361, 0x80, 0x9, 0x1, 0x4, 0xe, 0x5, 0x4, 0x7, 0x7, 0x11, 0x4, 0x1fd1, 0x4, 0xd, 0x3ff, 0x0, 0x10000, 0x5, 0x6dcd8114, 0x87, 0x1, 0x2, 0x7, 0xfffff820, 0x4, 0x800, 0x5, 0x9, 0x7, 0xffffffff, 0x7, 0x101, 0x2, 0x7fff, 0x3, 0x1, 0x1, 0xfffffe88, 0xcbd, 0xfffffff9, 0x7, 0x4, 0x6, 0x14000000, 0x8, 0x1000, 0xffffa8b8, 0x3, 0x6, 0x9, 0x4, 0x1, 0x0, 0x3, 0x3, 0x7, 0x100, 0x924c, 0x9, 0xca, 0x7, 0xffff, 0xfe, 0x1, 0x71a7f693, 0x1, 0x5, 0x4, 0x7, 0x100, 0x2, 0x3ff, 0x1, 0x3ff, 0x4, 0xfffffffc, 0xfffffff6, 0x5, 0xf3e1, 0x1, 0x3ff, 0x7, 0x6, 0x0, 0x3d47, 0xa0c8, 0x1, 0xee552255, 0x9, 0xfffffffd, 0x4, 0x7, 0x0, 0x7, 0x259, 0x8, 0x7fff, 0x38, 0x9, 0x0, 0x1000, 0x6, 0x1, 0x9, 0x5, 0x7d8, 0x8, 0x11, 0x0, 0xffffffff, 0x4000, 0x9, 0x8, 0xd, 0x5, 0x5, 0x8, 0x8, 0x1, 0x7fff, 0x2, 0x0, 0x8, 0x6, 0x4, 0x0, 0x4, 0x4, 0x6, 0x4000000, 0x5, 0x7c, 0x3, 0x8, 0x100, 0x4, 0x2, 0x2, 0x2, 0x9, 0xc, 0x8, 0xffff, 0xfff, 0x4, 0x1, 0x8, 0x1, 0x3, 0x2, 0x8, 0x7, 0x7, 0xffffffff, 0x6, 0x1, 0xffff, 0x8, 0xffffffb8, 0x0, 0xb, 0x3, 0x1, 0x2, 0xfffffff8, 0x9, 0x4, 0x200, 0x3, 0x2, 0x80000000, 0x5, 0x7, 0x2008, 0x1, 0x6, 0xd, 0x7, 0x0, 0x9, 0x8, 0x2, 0x5, 0xe, 0x3, 0x97, 0x1, 0x400, 0x563, 0x2, 0x7fffffff, 0x2, 0x9, 0x5, 0x8, 0x5, 0x1, 0x0, 0x6, 0xc, 0x2, 0x6, 0x65e223ad, 0x6, 0x0, 0x3, 0x101, 0x80000000, 0x200, 0x3, 0x9, 0x4, 0x1, 0x5, 0xffff7fff, 0x4, 0x373f, 0x3, 0x9, 0xfff, 0xa33, 0x7, 0x10001, 0x1, 0x46, 0x0, 0x7f, 0x9, 0x20000000, 0x3, 0x8000, 0xe43a, 0x0, 0xfffffff7, 0x4f]}]}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x542a1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2.595389996s ago: executing program 2 (id=328): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0xc, 0xfffffff9}}, 0xe8) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) (async, rerun: 64) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000a00)={0x20, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) (async) r5 = syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT, @ANYRESDEC, @ANYRES64=r0], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b07, 0x0) 2.047799926s ago: executing program 2 (id=329): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000740)="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", 0x1e9}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2e2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/207, 0xcf}, {&(0x7f0000000f00)="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", 0x16b}, {&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f00000004c0)="6f5a805865eeef6df56a4a066060a57f040815401a8ba9f3022a97141eaafc45fcdccd0978326dd08efa751bba43d86d0f0dc7d9233096dfedc763587a0910455725b18469a62cb29e2476a098", 0x4d}, {&(0x7f00000005c0)="eaa496f21cfe2c370920a46df4841a22c0b729953454967ccef4aaaa4f3dd95ec6892c6ec59d0ad89dbdc90ecd3fd366efa6d9ec0f2bb2d5f25fc025bba196657382f98920cc3e28f83a9589d7cb9e13bf66f519910125c69089863262281b3a726e", 0x62}], 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x6000000000000000) 1.824660801s ago: executing program 2 (id=330): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x2}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000002cc0)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000000380)="d0da4cb79ca1616107792e7e35cf4115a9b2008d60ea9f18df880b1100108dab7bc5a7c0fd267f91f70963a66fb5baaab1a789bfebaf0a903ddacd8d42373a9a34b0b53f9910f8c504519fe1fcb15fc07e48d5e5bc634a4e8619bcf60042617ab6f8263c7d102c6d475c69ea76776bd642ac7ffc13fef3fdb0e3421d19a8a099da07b27f5ce527166e53747ccfa5dacfedee04e081e83ab3cd1772f744af6628e759e3951e", 0xa5}, {&(0x7f0000000440)="36dc0cefa302be26a9ba5213ed9a8adc8d9a917406dc3b935307093ba34a0310f74f9576b23273c1db148138d528aa9a2c1e4666722f75d8bffced8d8cfdf0d103065aa751f86b6c0b8e74ed4d8a17d36e620a477be6477c85d91dfcf67db02272da912e8c0e18a5487507432d60b03909e17e4ec56221ff4606258086f19ce8bdcfe7781d3028862a28499e5860f813038ca25a0152cc", 0x97}, {&(0x7f0000000500)="aa735da330eccc2513614b29a17bcf40cb8947805976f498174c0adf6c07bee527cc8d", 0x23}, {&(0x7f00000007c0)="672ba9e260ef22164d1c4bf416babe7288b72d127280e362641baa1d87b385e654c14516466b758f061504e8fbde97be17c252698bc472a5633b18feb6118b4967365b450f5eeb43b4f63dde83c3c468c3feacd3384eaf77ef90fadd4ff9d0e72b1fdf6953feab978d2a6bb2c2a70d1cbfeeeae9e7bbc9a918ceb6695e94c6e644d3f21c231d056de7c83eadcaabc2e01cb1637e0e23622f3b33394c319c2c6562fbc40502064a11e98974dc55b985352921e2444662c8daab7473f152003d470e4cb103b561a323affa241c534449a70582e31b0ba8c3190ec5195a220de2784e396e3aa2f9d6dab1b8d8847b89273a533d40ff7fc813", 0xf7}, {&(0x7f0000001300)="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", 0x7f0}, {&(0x7f0000002300)="44ba4821477df4a2ee4cf264c14cd3b3f77d6b609b7899c027df5f129eb42c12b52c977d121be83ea694d6d5eae11b6f2ee9d1d41d21afc7e23eb5decfbae19c64cc8099e69f0eaa5f7b7d404b0fbc52250880a71ddbbd0e6cfaef1474b31649f11975914e6a", 0x66}, {&(0x7f0000002380)="6fcd79397c0039b261bc51fcd9d59f6aec7c6cf59224f56f70a17c8c980cdf31fb0a847be0aa5de086b1004a3469318b06f5f9ffb4069a0618d9bd349d026c30bbb892ae3188cafd8b6b9ed05b45001f102bb4d17559daf3e406b35a17785801f3c4ec526bf58695c9", 0x69}], 0x7, &(0x7f0000002b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="00140aea1e000000000000000140000000000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32], 0x168, 0x4008891}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="010000000000000000", @ANYBLOB="000000000400000000000000000000000000090000000d0000000000"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, 0x0, 0x80) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, 0x0, 0x0) 863.258814ms ago: executing program 4 (id=331): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002e00090027bd700003000000040000003aacef339abe4fa497f46024d2405090790f6190d3811fc006d9220822a1a86aec7664552db212f157d83e33b2ac8570db0fc406203911ab65145f6283a22793b10a5eca53828c7eea68f94bbb610f67280aa17001e46d5d6ebe06f470e3ee2c7d24a765c6ffc07d10d7b04fae9882193c4761b407063a391b338af81f96bb4a943e9473407f"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "b963"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 316.770406ms ago: executing program 0 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000002400000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 0s ago: executing program 1 (id=333): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20000001) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d, 0x0, 0xfefdffffffffffff}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 86.492235][ T5813] cgroup: Unknown subsys name 'net' [ 86.614316][ T5813] cgroup: Unknown subsys name 'cpuset' [ 86.627513][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.726787][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.303722][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.330073][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.345178][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.367200][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.376044][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.376418][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.394332][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.401191][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.406956][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.413785][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.419318][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.431966][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.433998][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.445451][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.466014][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.474465][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.476223][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.493381][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.502010][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.503812][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.513338][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.524790][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.532567][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.541949][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.554522][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.947502][ T2154] cfg80211: failed to load regulatory.db [ 92.408344][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 92.487196][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 92.538648][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 92.669012][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 92.712444][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 92.892653][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.901720][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.909273][ T5851] bridge_slave_0: entered allmulticast mode [ 92.921018][ T5851] bridge_slave_0: entered promiscuous mode [ 92.976518][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.984370][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.992701][ T5851] bridge_slave_1: entered allmulticast mode [ 93.001338][ T5851] bridge_slave_1: entered promiscuous mode [ 93.009314][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.017116][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.025273][ T5849] bridge_slave_0: entered allmulticast mode [ 93.032947][ T5849] bridge_slave_0: entered promiscuous mode [ 93.086381][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.094278][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.103404][ T5849] bridge_slave_1: entered allmulticast mode [ 93.112041][ T5849] bridge_slave_1: entered promiscuous mode [ 93.133935][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.141793][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.149286][ T5850] bridge_slave_0: entered allmulticast mode [ 93.157290][ T5850] bridge_slave_0: entered promiscuous mode [ 93.206398][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.228825][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.237642][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.246904][ T5850] bridge_slave_1: entered allmulticast mode [ 93.255585][ T5850] bridge_slave_1: entered promiscuous mode [ 93.292175][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.303132][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.310820][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.319117][ T5845] bridge_slave_0: entered allmulticast mode [ 93.327065][ T5845] bridge_slave_0: entered promiscuous mode [ 93.347865][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.355807][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.363906][ T5848] bridge_slave_0: entered allmulticast mode [ 93.372258][ T5848] bridge_slave_0: entered promiscuous mode [ 93.383357][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.407243][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.415406][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.423053][ T5845] bridge_slave_1: entered allmulticast mode [ 93.431545][ T5845] bridge_slave_1: entered promiscuous mode [ 93.465368][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.472901][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.480280][ T5848] bridge_slave_1: entered allmulticast mode [ 93.488375][ T5848] bridge_slave_1: entered promiscuous mode [ 93.498908][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.549516][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.588712][ T5851] team0: Port device team_slave_0 added [ 93.598319][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.611388][ T5835] Bluetooth: hci4: command tx timeout [ 93.611582][ T5146] Bluetooth: hci0: command tx timeout [ 93.617901][ T5835] Bluetooth: hci3: command tx timeout [ 93.624897][ T5832] Bluetooth: hci1: command tx timeout [ 93.637540][ T51] Bluetooth: hci2: command tx timeout [ 93.645387][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.670097][ T5849] team0: Port device team_slave_0 added [ 93.678051][ T5851] team0: Port device team_slave_1 added [ 93.686566][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.711762][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.723904][ T5849] team0: Port device team_slave_1 added [ 93.784565][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.836967][ T5850] team0: Port device team_slave_0 added [ 93.857902][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.865890][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.892648][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.906010][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.914237][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.943000][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.958888][ T5845] team0: Port device team_slave_0 added [ 93.970878][ T5845] team0: Port device team_slave_1 added [ 93.982447][ T5850] team0: Port device team_slave_1 added [ 94.016394][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.024556][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.055152][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.076873][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.085010][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.117260][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.181276][ T5848] team0: Port device team_slave_0 added [ 94.188134][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.196265][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.225138][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.239323][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.247462][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.277754][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.320333][ T5848] team0: Port device team_slave_1 added [ 94.370354][ T5851] hsr_slave_0: entered promiscuous mode [ 94.377889][ T5851] hsr_slave_1: entered promiscuous mode [ 94.386320][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.393788][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.421654][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.434828][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.442582][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.471283][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.517855][ T5849] hsr_slave_0: entered promiscuous mode [ 94.524759][ T5849] hsr_slave_1: entered promiscuous mode [ 94.532109][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 94.538466][ T5849] Cannot create hsr debugfs directory [ 94.570710][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.578426][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.606562][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.658602][ T5850] hsr_slave_0: entered promiscuous mode [ 94.666078][ T5850] hsr_slave_1: entered promiscuous mode [ 94.674433][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 94.680663][ T5850] Cannot create hsr debugfs directory [ 94.689219][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.697065][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.725127][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.913859][ T5845] hsr_slave_0: entered promiscuous mode [ 94.922204][ T5845] hsr_slave_1: entered promiscuous mode [ 94.929272][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 94.935254][ T5845] Cannot create hsr debugfs directory [ 95.115206][ T5848] hsr_slave_0: entered promiscuous mode [ 95.123266][ T5848] hsr_slave_1: entered promiscuous mode [ 95.130464][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 95.136787][ T5848] Cannot create hsr debugfs directory [ 95.584727][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.601875][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.651332][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.689924][ T51] Bluetooth: hci1: command tx timeout [ 95.696214][ T51] Bluetooth: hci4: command tx timeout [ 95.703131][ T5146] Bluetooth: hci2: command tx timeout [ 95.709185][ T5146] Bluetooth: hci3: command tx timeout [ 95.715484][ T5835] Bluetooth: hci0: command tx timeout [ 95.729900][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.822239][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.858445][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.874694][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.887569][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.993123][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.023948][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.039458][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.054774][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.193787][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.232845][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.272188][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.301029][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.310905][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.382766][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.442944][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.453492][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.469187][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.498218][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.505729][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.519168][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.545004][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.553150][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.563940][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.574465][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.602755][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.610589][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.673483][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.681603][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.835337][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.946589][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.961765][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.996764][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.004759][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.027305][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.055223][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.108162][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.116564][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.135060][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.163224][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.189391][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.197260][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.242343][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.250450][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.293171][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.346185][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.354745][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.375917][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.384084][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.448113][ T5851] veth0_vlan: entered promiscuous mode [ 97.465640][ T5850] veth0_vlan: entered promiscuous mode [ 97.515075][ T5851] veth1_vlan: entered promiscuous mode [ 97.523786][ T5850] veth1_vlan: entered promiscuous mode [ 97.676603][ T5850] veth0_macvtap: entered promiscuous mode [ 97.705498][ T5851] veth0_macvtap: entered promiscuous mode [ 97.717700][ T5851] veth1_macvtap: entered promiscuous mode [ 97.738438][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.750967][ T5850] veth1_macvtap: entered promiscuous mode [ 97.764959][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.779622][ T5835] Bluetooth: hci4: command tx timeout [ 97.785879][ T5835] Bluetooth: hci2: command tx timeout [ 97.793787][ T5146] Bluetooth: hci0: command tx timeout [ 97.793921][ T5827] Bluetooth: hci1: command tx timeout [ 97.810282][ T51] Bluetooth: hci3: command tx timeout [ 97.818987][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.856582][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.883056][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.927513][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.956681][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.972004][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.980775][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.997457][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.026689][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.047029][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.081991][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.093156][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.117873][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.235646][ T5849] veth0_vlan: entered promiscuous mode [ 98.257955][ T5848] veth0_vlan: entered promiscuous mode [ 98.265749][ T5845] veth0_vlan: entered promiscuous mode [ 98.332307][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.347494][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.347887][ T5849] veth1_vlan: entered promiscuous mode [ 98.369070][ T5845] veth1_vlan: entered promiscuous mode [ 98.380521][ T5848] veth1_vlan: entered promiscuous mode [ 98.452090][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.461560][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.536967][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.550798][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.569249][ T5845] veth0_macvtap: entered promiscuous mode [ 98.590378][ T5849] veth0_macvtap: entered promiscuous mode [ 98.604026][ T5845] veth1_macvtap: entered promiscuous mode [ 98.638278][ T5849] veth1_macvtap: entered promiscuous mode [ 98.686465][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.697966][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.703822][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.745181][ T5848] veth0_macvtap: entered promiscuous mode [ 98.802344][ T5848] veth1_macvtap: entered promiscuous mode [ 98.856578][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.876844][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.953853][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.985554][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.005032][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.046333][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.260913][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.279505][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.711009][ T335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.756823][ T335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.861485][ T5827] Bluetooth: hci1: command tx timeout [ 99.868524][ T5827] Bluetooth: hci3: command tx timeout [ 99.875305][ T51] Bluetooth: hci4: command tx timeout [ 99.881753][ T5827] Bluetooth: hci2: command tx timeout [ 99.889503][ T5832] Bluetooth: hci0: command tx timeout [ 100.093373][ T335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.132692][ T335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.178374][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.248140][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.277017][ T335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.304443][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.338057][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.506545][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.527420][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.538611][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.576284][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.621844][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.631297][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.749583][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.785381][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.821435][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.842308][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.956578][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.010008][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.203981][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.242790][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.644990][ T5826] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.870622][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 101.887755][ T5826] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 101.938137][ T5826] usb 4-1: config 0 has no interface number 0 [ 101.997785][ T5826] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.170770][ T30] audit: type=1326 audit(1775823265.828:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 102.240969][ T5826] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 102.304133][ T5826] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 102.321110][ T30] audit: type=1326 audit(1775823265.838:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 102.337503][ T5826] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.467752][ T5826] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 102.498493][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.510964][ T30] audit: type=1326 audit(1775823265.868:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 102.569539][ T5826] usb 4-1: Product: syz [ 102.620238][ T5826] usb 4-1: Manufacturer: syz [ 102.658827][ T30] audit: type=1326 audit(1775823265.868:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 102.661895][ T5826] usb 4-1: SerialNumber: syz [ 102.705289][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 102.815326][ T30] audit: type=1326 audit(1775823265.878:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 102.865185][ T30] audit: type=1326 audit(1775823265.878:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 102.943318][ T30] audit: type=1326 audit(1775823265.878:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 103.038218][ T5826] usb 4-1: config 0 descriptor?? [ 103.048735][ T30] audit: type=1326 audit(1775823265.878:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 103.124615][ T5949] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.132643][ T30] audit: type=1326 audit(1775823265.878:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 103.244570][ T30] audit: type=1326 audit(1775823265.878:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0ad79c819 code=0x7ffc0000 [ 103.304589][ T5974] program syz.0.14 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.330313][ T797] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.354377][ T5974] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 103.394279][ T5826] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input5 [ 103.439054][ T5181] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 103.550526][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 103.592377][ T797] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 103.619366][ T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.727200][ T797] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 103.782031][ T797] usb 3-1: config 0 has no interface number 0 [ 103.805322][ T797] usb 3-1: too many endpoints for config 0 interface 1 altsetting 61: 142, using maximum allowed: 30 [ 103.856601][ T797] usb 3-1: config 0 interface 1 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 103.875655][ T797] usb 3-1: config 0 interface 1 has no altsetting 0 [ 103.884682][ T797] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 103.898056][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.097644][ T797] usb 3-1: config 0 descriptor?? [ 104.205410][ T5981] kAFS: unable to lookup cell '' [ 104.299481][ T797] usb 3-1: selecting invalid altsetting 0 [ 104.739332][ T797] usb 3-1: USB disconnect, device number 2 [ 104.783443][ T24] usb 4-1: USB disconnect, device number 2 [ 105.182503][ T5989] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19'. [ 105.200005][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 105.794747][ T5826] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.979833][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 106.334529][ T5826] usb 1-1: config 0 has no interfaces? [ 106.437545][ T5826] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 106.498734][ T5826] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 106.518194][ T5826] usb 1-1: Manufacturer: syz [ 106.580089][ T5826] usb 1-1: config 0 descriptor?? [ 106.792872][ T6007] netlink: 80 bytes leftover after parsing attributes in process `syz.3.21'. [ 107.053596][ T5991] Zero length message leads to an empty skb [ 108.480602][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.700633][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 108.827326][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.899890][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.949140][ T5913] usb 1-1: USB disconnect, device number 2 [ 108.949921][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.071874][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.091706][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.113630][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.026462][ T6020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.136277][ T6030] macvtap1: entered allmulticast mode [ 110.194355][ T6030] vlan0: entered allmulticast mode [ 110.239954][ T6030] veth0_vlan: entered allmulticast mode [ 110.301272][ T6030] team0: Device macvtap1 failed to register rx_handler [ 110.389027][ T6030] vlan0: left allmulticast mode [ 110.440252][ T6030] veth0_vlan: left allmulticast mode [ 111.485170][ T5943] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.680470][ T5943] usb 1-1: device descriptor read/64, error -71 [ 111.766258][ T9] usb 3-1: usb_control_msg returned -71 [ 111.800325][ T9] usbtmc 3-1:16.0: can't read capabilities [ 111.940250][ T5943] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.965077][ T9] usb 3-1: USB disconnect, device number 3 [ 112.109946][ T5826] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.119278][ T5943] usb 1-1: device descriptor read/64, error -71 [ 112.247371][ T5943] usb usb1-port1: attempt power cycle [ 112.279943][ T5826] usb 5-1: Using ep0 maxpacket: 16 [ 112.289859][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.310001][ T5826] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.358350][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.420177][ T5826] usb 5-1: config 0 descriptor?? [ 112.599292][ T6052] xt_hashlimit: max too large, truncated to 1048576 [ 112.609799][ T5943] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.661344][ T5943] usb 1-1: device descriptor read/8, error -71 [ 112.940383][ T5943] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.950935][ T5826] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 113.002841][ T5943] usb 1-1: device descriptor read/8, error -71 [ 113.130409][ T5943] usb usb1-port1: unable to enumerate USB device [ 113.154147][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.194263][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.241226][ T6057] batadv0: entered promiscuous mode [ 113.266814][ T6057] vlan2: entered promiscuous mode [ 113.381208][ T6057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.410290][ T6057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.497049][ T5826] usb 5-1: USB disconnect, device number 2 [ 114.442730][ T6069] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 115.775604][ T6091] netlink: 148 bytes leftover after parsing attributes in process `syz.3.47'. [ 116.001977][ C1] sd 0:0:1:0: [sda] tag#8802 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 116.014503][ C1] sd 0:0:1:0: [sda] tag#8802 CDB: Read(6) 08 00 00 00 00 00 [ 116.159859][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 116.195175][ T6102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.50'. [ 116.465375][ T6110] fuse: Unknown parameter '0x000000000000000c' [ 116.490008][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 116.669861][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.686550][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 116.698146][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.711555][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.725671][ T24] usb 4-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 116.741388][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.753469][ T24] usb 4-1: Product: syz [ 116.766079][ T24] usb 4-1: Manufacturer: syz [ 116.771389][ T24] usb 4-1: SerialNumber: syz [ 117.117347][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.202903][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.235748][ T24] usb 4-1: unit 2 not found! [ 117.242798][ T24] usb 4-1: unit 8 not found! [ 117.386046][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 117.575461][ T24] usb 4-1: USB disconnect, device number 3 [ 117.619920][ T5826] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.690644][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.790806][ T5826] usb 5-1: Using ep0 maxpacket: 16 [ 117.813438][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 117.848103][ T5826] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.876340][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.928744][ T5826] usb 5-1: Product: syz [ 117.938195][ T5826] usb 5-1: Manufacturer: syz [ 117.949248][ T5826] usb 5-1: SerialNumber: syz [ 118.002312][ T5826] usb 5-1: config 0 descriptor?? [ 118.034918][ T5826] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.045647][ T5826] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 118.847799][ T5826] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 119.019391][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 119.260264][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 119.278163][ T6147] tipc: Failed to remove unknown binding: 66,0,0/0:877585738/877585739 [ 119.296642][ T5826] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 119.316046][ T5826] em28xx 5-1:0.0: board has no eeprom [ 119.331681][ T6147] tipc: Failed to remove unknown binding: 66,0,0/0:877585738/877585739 [ 119.375425][ T6149] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 119.458159][ T6149] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 119.493552][ T6154] fuse: Bad value for 'fd' [ 119.623295][ T5826] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 119.635264][ T5826] em28xx 5-1:0.0: dvb set to bulk mode. [ 119.651664][ T5943] em28xx 5-1:0.0: Binding DVB extension [ 119.710921][ T5826] usb 5-1: USB disconnect, device number 3 [ 119.736810][ T6159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.69'. [ 119.746047][ T5826] em28xx 5-1:0.0: Disconnecting em28xx [ 119.819973][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 119.850594][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 119.892928][ T5943] em28xx 5-1:0.0: Registering input extension [ 119.937893][ T5826] em28xx 5-1:0.0: Closing input extension [ 120.034726][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.055760][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.087678][ T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 120.104715][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 120.136464][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 120.150570][ T5826] em28xx 5-1:0.0: Freeing device [ 120.195390][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 120.207290][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.207325][ T24] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.218648][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.329813][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.344444][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.344477][ T24] usb 2-1: Product: syz [ 120.344496][ T24] usb 2-1: Manufacturer: syz [ 120.344514][ T24] usb 2-1: SerialNumber: syz [ 120.394112][ T6156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.466231][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.466393][ T24] cdc_mbim 2-1:1.0: skipping garbage [ 120.477842][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.636315][ T24] cdc_mbim 2-1:1.0: bind() failure [ 120.717913][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 120.746120][ T797] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.765507][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 120.770943][ T24] cdc_ncm 2-1:1.1: bind() failure [ 120.792682][ T24] usb 2-1: USB disconnect, device number 2 [ 120.838787][ T9] usbtmc 1-1:16.0: can't read capabilities [ 120.931343][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 120.948814][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 121.150285][ T797] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.169821][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.216208][ T797] usb 3-1: Product: syz [ 121.250172][ T797] usb 3-1: Manufacturer: syz [ 121.275508][ T797] usb 3-1: SerialNumber: syz [ 121.355558][ T797] usb 3-1: config 0 descriptor?? [ 121.393737][ T797] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.419377][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 121.444772][ T797] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 121.549920][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.845497][ T6178] netlink: 64 bytes leftover after parsing attributes in process `syz.1.75'. [ 121.870955][ T24] usb 5-1: no configurations [ 121.883415][ T24] usb 5-1: can't read configurations, error -22 [ 122.000209][ T797] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 122.019823][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.296865][ T24] usb 5-1: no configurations [ 122.301746][ T24] usb 5-1: can't read configurations, error -22 [ 122.324271][ T24] usb usb5-port1: attempt power cycle [ 122.403158][ T6182] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 122.419997][ T797] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 122.428109][ T797] em28xx 3-1:0.0: board has no eeprom [ 122.717003][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.742018][ T797] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 122.777251][ T797] em28xx 3-1:0.0: dvb set to bulk mode. [ 122.783555][ T5913] em28xx 3-1:0.0: Binding DVB extension [ 122.883604][ T24] usb 5-1: no configurations [ 122.936731][ T24] usb 5-1: can't read configurations, error -22 [ 123.069826][ T5921] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 123.119922][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.214037][ T24] usb 5-1: no configurations [ 123.250877][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 123.263649][ T24] usb 5-1: can't read configurations, error -22 [ 123.278911][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 123.305381][ T24] usb usb5-port1: unable to enumerate USB device [ 123.353556][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 123.389228][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 123.458198][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 123.504263][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 123.555752][ T5921] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 123.596006][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.641008][ T5921] usb 4-1: Product: syz [ 123.653304][ T5921] usb 4-1: Manufacturer: syz [ 123.669390][ T5921] usb 4-1: SerialNumber: syz [ 123.708300][ T5921] usb 4-1: config 0 descriptor?? [ 123.744372][ T5921] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 123.765400][ T5921] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 123.830560][ T9] usb 1-1: USB disconnect, device number 7 [ 123.863115][ T6168] em28xx 3-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 124.035039][ T5921] usb 3-1: USB disconnect, device number 4 [ 124.086578][ T5921] em28xx 3-1:0.0: Disconnecting em28xx [ 124.212527][ T5913] em28xx 3-1:0.0: Registering input extension [ 124.225796][ T5921] em28xx 3-1:0.0: Closing input extension [ 124.258463][ T6197] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 124.283798][ T5921] em28xx 3-1:0.0: Freeing device [ 124.303849][ T6197] dummy0: entered promiscuous mode [ 125.219737][ T5920] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.279862][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 125.382268][ T5920] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.382304][ T5920] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.382365][ T5920] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.382384][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.386542][ T6206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.396217][ T5920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.409785][ T5921] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.468223][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 125.477542][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.477578][ T9] usb 1-1: config 0 has no interface number 0 [ 125.477621][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.486836][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.486875][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.486899][ T9] usb 1-1: Product: syz [ 125.486915][ T9] usb 1-1: Manufacturer: syz [ 125.486933][ T9] usb 1-1: SerialNumber: syz [ 125.498773][ T9] usb 1-1: config 0 descriptor?? [ 125.530744][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 125.530841][ T9] em28xx 1-1:0.132: Video interface 132 found: isoc [ 125.561286][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 125.564128][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.565570][ T5921] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 125.568861][ T5921] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 125.568897][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.568921][ T5921] usb 3-1: Product: syz [ 125.568938][ T5921] usb 3-1: Manufacturer: syz [ 125.568956][ T5921] usb 3-1: SerialNumber: syz [ 125.628878][ T5920] usb 2-1: USB disconnect, device number 3 [ 125.815227][ T5921] usb 3-1: Invalid number of CPorts: 0 [ 125.815274][ T5921] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 125.873778][ T5921] usb 4-1: USB disconnect, device number 4 [ 125.914582][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 125.979745][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 125.979800][ T9] em28xx 1-1:0.132: board has no eeprom [ 126.049772][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 126.058308][ T9] em28xx 1-1:0.132: analog set to isoc mode. [ 126.067762][ T5920] em28xx 1-1:0.132: Registering V4L2 extension [ 126.181579][ T9] usb 1-1: USB disconnect, device number 8 [ 126.260437][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.286147][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 126.371089][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.757930][ T5920] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 126.758011][ T5920] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 126.758030][ T5920] em28xx 1-1:0.132: No AC97 audio processor [ 126.888159][ T5920] usb 1-1: Decoder not found [ 126.920123][ T5920] em28xx 1-1:0.132: failed to create media graph [ 126.938736][ T5920] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 126.968000][ T5920] em28xx 1-1:0.132: Remote control support is not available for this card. [ 126.980104][ T9] em28xx 1-1:0.132: Closing input extension [ 127.092872][ T9] em28xx 1-1:0.132: Freeing device [ 127.832493][ T6268] netlink: 'syz.0.101': attribute type 9 has an invalid length. [ 129.718287][ T6284] syz.3.106 uses obsolete (PF_INET,SOCK_PACKET) [ 129.768921][ T24] usb 3-1: USB disconnect, device number 5 [ 129.780957][ T6284] syzkaller1: entered promiscuous mode [ 129.786523][ T6284] syzkaller1: entered allmulticast mode [ 129.883869][ T6289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.108'. [ 130.279784][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.327616][ T6302] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 130.545419][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 130.567123][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.611857][ T24] usb 3-1: config 0 has no interface number 0 [ 130.635538][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.661944][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.711759][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 130.736950][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.773377][ T24] usb 3-1: config 0 descriptor?? [ 130.883683][ T6310] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 131.123246][ T6312] netlink: 80 bytes leftover after parsing attributes in process `syz.3.117'. [ 131.436730][ T24] uclogic 0003:28BD:0071.0002: pen parameters not found [ 131.447216][ T6320] fuse: Bad value for 'fd' [ 131.488042][ T24] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 131.593941][ T5826] hid (null): unknown global tag 0xd [ 131.647137][ T5826] hid-generic 0000:DC1E:000E.0003: unknown main item tag 0x0 [ 131.675141][ T5826] hid-generic 0000:DC1E:000E.0003: unknown main item tag 0x0 [ 131.696228][ T5826] hid-generic 0000:DC1E:000E.0003: unknown main item tag 0x0 [ 131.722841][ T6325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.750353][ T6325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.788064][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 131.797910][ T5826] hid-generic 0000:DC1E:000E.0003: unknown main item tag 0x0 [ 131.805549][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 131.821607][ T6324] netlink: 64 bytes leftover after parsing attributes in process `syz.4.121'. [ 131.837811][ T5826] hid-generic 0000:DC1E:000E.0003: unknown main item tag 0x2 [ 131.856191][ T5826] hid-generic 0000:DC1E:000E.0003: unknown main item tag 0x0 [ 131.874364][ T5826] hid-generic 0000:DC1E:000E.0003: unknown main item tag 0x0 [ 131.894244][ T5826] hid-generic 0000:DC1E:000E.0003: unknown global tag 0xd [ 131.921181][ T5826] hid-generic 0000:DC1E:000E.0003: item 0 0 1 13 parsing failed [ 131.950325][ T5826] hid-generic 0000:DC1E:000E.0003: probe with driver hid-generic failed with error -22 [ 131.982233][ T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 131.991851][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 132.004182][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 132.029467][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.129557][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.169489][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.493455][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 132.499213][ T9] usbtmc 4-1:16.0: can't read capabilities [ 132.667691][ T6341] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 132.734748][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 132.745069][ T6320] usbtmc 4-1:16.0: Unable to send data, error -71 [ 132.898632][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906104][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.909966][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 133.020425][ T5826] usb 3-1: USB disconnect, device number 6 [ 133.123435][ T9] usb 1-1: string descriptor 0 read error: -22 [ 133.144928][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 133.171546][ T6347] tap0: tun_chr_ioctl cmd 1074025677 [ 133.177529][ T6347] tap0: linktype set to 778 [ 133.322353][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.363187][ T9] usb 1-1: config 0 descriptor?? [ 133.386467][ T9] usbtest 1-1:0.0: FX2 device [ 133.392230][ T9] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 133.580488][ T9] usb 1-1: USB disconnect, device number 9 [ 134.422571][ T24] usb 4-1: USB disconnect, device number 5 [ 134.667513][ T6366] program syz.3.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.913308][ T6378] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 135.053664][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.073132][ T6382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.139'. [ 135.103323][ T6382] netlink: 'syz.1.139': attribute type 11 has an invalid length. [ 135.281533][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 135.295196][ T6392] fuse: Bad value for 'fd' [ 135.324319][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.342342][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.374258][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 135.403017][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.473992][ T9] usb 1-1: config 0 descriptor?? [ 135.612655][ T5913] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 135.789751][ T5820] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.949800][ T5913] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 135.958614][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 135.974686][ T9] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 135.985547][ T6400] fuse: Bad value for 'fd' [ 136.019868][ T9] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 136.050933][ T5820] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 136.055072][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 136.079824][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.094385][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.109711][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.119374][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.166636][ T9] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 136.175804][ T5820] usb 3-1: config 0 descriptor?? [ 136.181283][ T9] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -5 [ 136.205310][ T5820] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 136.295910][ T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 136.430054][ T5913] usb 4-1: GET_CAPABILITIES returned 0 [ 136.435850][ T5913] usbtmc 4-1:16.0: can't read capabilities [ 136.604130][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.613277][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.645236][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 136.654947][ T6392] usbtmc 4-1:16.0: Unable to send data, error -71 [ 136.677438][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.701677][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.817961][ T24] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 136.831865][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 136.884119][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 136.900857][ T5820] gp8psk: usb in 128 operation failed. [ 136.978343][ T5820] gp8psk: usb in 137 operation failed. [ 137.026723][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.089409][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.123123][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.125616][ T5820] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 137.197019][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.212150][ T5820] usb 3-1: media controller created [ 137.302049][ T6410] fuse: Bad value for 'fd' [ 137.396614][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.619930][ T5913] usb 1-1: USB disconnect, device number 10 [ 137.640657][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 137.647939][ T24] usbtmc 5-1:16.0: can't read capabilities [ 137.788140][ T5820] gp8psk_fe: Frontend attached [ 137.849623][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 137.859390][ T6400] usbtmc 4-1:16.0: Unable to send data, error -71 [ 137.890072][ T5820] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 137.907673][ T5820] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 137.999754][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.060380][ T5820] gp8psk: usb in 138 operation failed. [ 138.068631][ T5820] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 138.137544][ T5820] gp8psk: found Genpix USB device pID = 203 (hex) [ 138.155201][ T5820] usb 3-1: USB disconnect, device number 7 [ 138.171975][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 138.181573][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.192942][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.206312][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 138.216639][ T24] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 138.247623][ T24] usb 2-1: Product: syz [ 138.257009][ T24] usb 2-1: Manufacturer: syz [ 138.380802][ T24] hub 2-1:4.0: USB hub found [ 138.419106][ T5820] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 138.766105][ T5820] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 138.780917][ T24] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 138.839326][ T24] usb 2-1: USB disconnect, device number 4 [ 138.919364][ T6423] netlink: 'syz.0.152': attribute type 9 has an invalid length. [ 138.972080][ T5820] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 138.982073][ T5820] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 139.019594][ T5820] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 139.060078][ T5820] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.169795][ T5820] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.189886][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.489967][ T6425] syzkaller0: entered promiscuous mode [ 139.495629][ T6425] syzkaller0: entered allmulticast mode [ 139.577325][ T5820] usb 3-1: GET_CAPABILITIES returned 0 [ 139.584616][ T5820] usbtmc 3-1:16.0: can't read capabilities [ 139.602080][ T5913] usb 4-1: USB disconnect, device number 6 [ 139.625517][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 139.683722][ T6427] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 139.717346][ T6427] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 139.953038][ T6431] bridge0: port 3(hsr0) entered blocking state [ 139.959606][ T6431] bridge0: port 3(hsr0) entered disabled state [ 140.029527][ T6431] hsr0: entered allmulticast mode [ 140.042799][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.155'. [ 140.058859][ T6431] hsr_slave_0: entered allmulticast mode [ 140.069244][ T6431] hsr_slave_1: entered allmulticast mode [ 140.085620][ T6431] hsr0: entered promiscuous mode [ 140.103927][ T6431] bridge0: port 3(hsr0) entered blocking state [ 140.110954][ T6431] bridge0: port 3(hsr0) entered forwarding state [ 140.307419][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 140.322461][ T6437] netlink: 60 bytes leftover after parsing attributes in process `syz.0.158'. [ 140.343190][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 140.475461][ T5943] usb 5-1: USB disconnect, device number 8 [ 140.740586][ T6446] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 140.970344][ T5943] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.026676][ T6451] bond1: (slave geneve2): making interface the new active one [ 141.065921][ T6451] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 141.086830][ T58] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 141.131927][ T58] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 141.159806][ T5943] usb 5-1: Using ep0 maxpacket: 8 [ 141.175100][ T5943] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 141.189512][ T5943] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 141.200082][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.213874][ T5943] usb 5-1: Product: 쪥茽䔂អ媕読⢬㜲佋䶰즭ř窟⢚࣭䄭焉妘놂콨徖췌䷬ꁌ㐯螀糅Ṛ쒙꼸環ᥩ肿왳₌᪓콨텫虳蓇︗ཙ发釵蹟濊䭗ᑓ柱役佋檣ᑂű댽髕褷贿죴摜쭳គᢐ悂刎퉙严䛚ڦ䚐媚狹U眶藆ሱ⢸㶅 [ 141.244012][ T58] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 141.255033][ T58] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 141.278914][ T5913] usb 3-1: USB disconnect, device number 8 [ 141.283023][ T5943] usb 5-1: Manufacturer: 㐊 [ 141.324156][ T5943] usb 5-1: SerialNumber: 㩶৺٦迶李媳ᦇ㐽館㦭䆛ͅﭞ佑˳譱妘墁椷峟딮촵⒙୫⏱㓓ᗪ쩑力䣃藫䨰跲飪鵩ǔ횭 [ 141.379975][ T6443] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.941938][ T6473] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 142.148053][ T6478] fuse: Bad value for 'fd' [ 142.220229][ T5943] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 142.227417][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 142.258693][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.172'. [ 142.269789][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.172'. [ 142.288591][ T5943] usb 5-1: USB disconnect, device number 9 [ 142.317949][ T6473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.325611][ T6477] dummy0: entered promiscuous mode [ 142.349073][ T6477] bond2: (slave dummy0): making interface the new active one [ 142.370239][ T6477] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 142.439315][ T5943] usblp0: removed [ 142.561989][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 142.788646][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 142.920458][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 142.940280][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 142.958156][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.041714][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.085029][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.161505][ T6489] Cannot find add_set index 0 as target [ 143.236898][ T6494] netdevsim netdevsim4: Direct firmware load for / [ 143.236898][ T6494] failed with error -2 [ 143.309052][ T6494] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 143.309052][ T6494] [ 143.363876][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 143.371706][ T9] usbtmc 3-1:16.0: can't read capabilities [ 143.391657][ T5826] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.680217][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 143.749384][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.765584][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.855193][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.879155][ T5826] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.889105][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.982356][ T5826] usb 2-1: config 0 descriptor?? [ 145.436963][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.490337][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.587131][ T5826] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 145.614388][ T5826] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0 [ 145.685409][ T5826] microsoft 0003:045E:07DA.0005: implement() called with n (152) > 32! (kworker/0:4) [ 145.785886][ T5826] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0 [ 145.838895][ T5826] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 145.896613][ T5826] microsoft 0003:045E:07DA.0005: no inputs found [ 145.930432][ T5826] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 146.019502][ T5913] usb 3-1: USB disconnect, device number 9 [ 146.039398][ T5826] usb 2-1: USB disconnect, device number 5 [ 146.187381][ T6514] fido_id[6514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 146.206226][ T6524] Cannot find add_set index 3 as target [ 146.232779][ T6522] program syz.0.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.436508][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 146.500129][ T5913] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.682968][ T5913] usb 3-1: config 0 has an invalid interface number: 22 but max is 0 [ 146.694866][ T5913] usb 3-1: config 0 has no interface number 0 [ 146.711249][ T5913] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.740824][ T5913] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.767405][ T5913] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 146.794735][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.845425][ T5913] usb 3-1: config 0 descriptor?? [ 146.989405][ T6537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.300586][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.470845][ T24] usb 4-1: device descriptor read/64, error -71 [ 147.857422][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.029911][ T24] usb 4-1: device descriptor read/64, error -71 [ 148.142903][ T24] usb usb4-port1: attempt power cycle [ 148.155688][ T5826] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.319125][ T6556] fuse: Bad value for 'fd' [ 148.354111][ T5826] usb 1-1: config index 0 descriptor too short (expected 65535, got 18) [ 148.440337][ T5826] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 148.511035][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.520764][ T5826] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 148.562050][ T24] usb 4-1: device descriptor read/8, error -71 [ 148.586141][ T5826] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 148.665838][ T5826] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 148.773630][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.819807][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 148.821129][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.844980][ T5826] usb 1-1: Product: syz [ 148.849405][ T5826] usb 1-1: Manufacturer: syz [ 148.869178][ T5826] usb 1-1: SerialNumber: syz [ 148.890801][ T24] usb 4-1: device descriptor read/8, error -71 [ 149.021553][ T24] usb usb4-port1: unable to enumerate USB device [ 149.023227][ T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 149.059279][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 149.079947][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 149.139657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 149.323466][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.334949][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.344041][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.368901][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.382797][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.424675][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.462218][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.852995][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 149.858597][ T9] usbtmc 2-1:16.0: can't read capabilities [ 150.134091][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 150.144704][ T6556] usbtmc 2-1:16.0: Unable to send data, error -71 [ 150.192569][ T6521] syz.2.187 (6521): drop_caches: 2 [ 150.384241][ T6562] kvm: emulating exchange as write [ 150.577913][ T5913] usbhid 3-1:0.22: can't add hid device: -71 [ 150.615121][ T5913] usbhid 3-1:0.22: probe with driver usbhid failed with error -71 [ 150.726564][ T5913] usb 3-1: USB disconnect, device number 10 [ 150.878195][ T9] usb 1-1: USB disconnect, device number 11 [ 151.654639][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 152.178894][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.205'. [ 152.371681][ T5943] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.397329][ T5921] usb 2-1: USB disconnect, device number 6 [ 152.408265][ T6600] netlink: 80 bytes leftover after parsing attributes in process `syz.2.208'. [ 152.539771][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 152.550450][ T5913] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 152.830162][ T6603] netlink: 'syz.1.209': attribute type 4 has an invalid length. [ 152.860044][ T5943] usb 5-1: config 0 has no interfaces? [ 152.971861][ T5943] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.981912][ T5943] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.991788][ T5943] usb 5-1: Manufacturer: syz [ 153.019755][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 153.031152][ T6607] netlink: 'syz.1.209': attribute type 4 has an invalid length. [ 153.039946][ T5943] usb 5-1: config 0 descriptor?? [ 153.083169][ T5913] usb 4-1: config 0 has no interfaces? [ 153.110912][ T5913] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.131298][ T6603] netlink: 'syz.1.209': attribute type 4 has an invalid length. [ 153.149273][ T5913] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.242137][ T5913] usb 4-1: Manufacturer: syz [ 153.290205][ T5913] usb 4-1: config 0 descriptor?? [ 153.889796][ T5913] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.099880][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 154.131823][ T5913] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.157120][ T5913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.187943][ T5913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.223415][ T5913] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.287363][ T5913] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.316665][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.681875][ T5913] usb 2-1: GET_CAPABILITIES returned 0 [ 154.687474][ T5913] usbtmc 2-1:16.0: can't read capabilities [ 154.885366][ T5921] usb 2-1: USB disconnect, device number 7 [ 155.138081][ T5921] usb 5-1: USB disconnect, device number 10 [ 155.273118][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 155.329570][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 155.383226][ T9] usb 4-1: USB disconnect, device number 11 [ 155.440812][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 155.536270][ T6630] binder: 6628:6630 ioctl c0306201 200000000640 returned -22 [ 155.659026][ T6639] fuse: Bad value for 'fd' [ 155.758774][ T6638] netlink: 'syz.3.221': attribute type 27 has an invalid length. [ 155.799773][ T6638] netlink: 'syz.3.221': attribute type 3 has an invalid length. [ 155.807534][ T6638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.221'. [ 156.360467][ T5943] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 156.499904][ T5820] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 156.522561][ T5943] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 156.530884][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 156.546694][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 156.583788][ T5943] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.616358][ T5943] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.650442][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.661604][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 156.676292][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.715701][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.946736][ T5820] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 156.965964][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.994380][ T5820] usb 1-1: config 0 descriptor?? [ 157.050362][ T5943] usb 2-1: GET_CAPABILITIES returned 0 [ 157.056198][ T5943] usbtmc 2-1:16.0: can't read capabilities [ 157.696348][ T5820] usbhid 1-1:0.0: can't add hid device: -71 [ 157.728037][ T5820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 157.797573][ T5820] usb 1-1: USB disconnect, device number 12 [ 158.555443][ T6658] program syz.0.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.002413][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 159.092069][ T5943] usb 2-1: USB disconnect, device number 8 [ 159.180034][ T2154] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 159.190022][ T5913] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.500753][ T2154] usb 1-1: Using ep0 maxpacket: 8 [ 159.506193][ T5913] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.530963][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.534850][ T2154] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.541652][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.592667][ T6673] xt_TCPMSS: Only works on TCP SYN packets [ 159.598991][ T5913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.612039][ T5913] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.629433][ T5913] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.639550][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.648344][ T5913] usb 3-1: Product: syz [ 159.654597][ T5913] usb 3-1: Manufacturer: syz [ 159.675283][ T5913] cdc_wdm 3-1:1.0: skipping garbage [ 159.680893][ T5913] cdc_wdm 3-1:1.0: skipping garbage [ 159.689584][ T5913] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 159.697061][ T2154] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.719091][ T2154] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.741326][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 159.748146][ T2154] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.767020][ T5913] cdc_wdm 3-1:1.0: Unknown control protocol [ 159.953700][ T24] usb 5-1: config 0 has no interfaces? [ 159.992163][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 160.077572][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 160.110040][ T24] usb 5-1: Manufacturer: syz [ 160.130012][ T2154] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.142890][ T24] usb 5-1: config 0 descriptor?? [ 160.148924][ T2154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.209735][ T5921] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.301045][ T5943] usb 3-1: USB disconnect, device number 11 [ 160.404774][ T5921] usb 4-1: no configurations [ 160.414832][ T5921] usb 4-1: can't read configurations, error -22 [ 160.430072][ T2154] usb 1-1: GET_CAPABILITIES returned 0 [ 160.436029][ T2154] usbtmc 1-1:16.0: can't read capabilities [ 160.458036][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 160.528831][ T6689] ipvlan2: entered promiscuous mode [ 160.571561][ T5921] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.643567][ T2154] usb 1-1: USB disconnect, device number 13 [ 160.741088][ T5921] usb 4-1: no configurations [ 160.760927][ T5921] usb 4-1: can't read configurations, error -22 [ 160.831714][ T5921] usb usb4-port1: attempt power cycle [ 161.098446][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 161.219783][ T5921] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 161.283032][ T5921] usb 4-1: no configurations [ 161.283051][ T5921] usb 4-1: can't read configurations, error -22 [ 161.409845][ T5921] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.445826][ T5921] usb 4-1: no configurations [ 161.461812][ T5921] usb 4-1: can't read configurations, error -22 [ 161.485370][ T5921] usb usb4-port1: unable to enumerate USB device [ 162.594156][ T5913] usb 5-1: USB disconnect, device number 11 [ 163.229917][ T5913] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.259777][ T5921] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.389735][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 163.402116][ T5913] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.420069][ T5913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.430440][ T5913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.442874][ T5913] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.454585][ T5943] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 163.466241][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 163.480095][ T5913] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.490063][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.500725][ T5921] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 163.550129][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.573102][ T5921] usb 2-1: config 0 descriptor?? [ 163.639744][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 163.646850][ T5943] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 163.663996][ T5943] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 163.668699][ T6734] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 163.683647][ T5943] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 163.695741][ T5943] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 163.702672][ T6734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.731010][ T5943] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 163.737480][ T5913] usb 5-1: GET_CAPABILITIES returned 0 [ 163.749723][ T5943] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.749781][ T5943] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.779411][ T5913] usbtmc 5-1:16.0: can't read capabilities [ 163.792794][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.826465][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.834793][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.899816][ T5921] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 163.932427][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.957774][ T2154] usb 5-1: USB disconnect, device number 12 [ 163.970072][ T5921] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 163.977307][ T5921] usb 2-1: media controller created [ 164.052582][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.084621][ T5943] usb 3-1: usb_control_msg returned -32 [ 164.091343][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 164.100431][ T5943] usbtmc 3-1:16.0: can't read capabilities [ 164.132067][ T6739] dummy0: entered promiscuous mode [ 164.143079][ T6739] dummy0: left promiscuous mode [ 164.225622][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 164.291037][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.309039][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.412182][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 164.432623][ T5921] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 164.514418][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.578424][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.628558][ T6751] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 164.636594][ T2154] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 164.655885][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 164.693400][ T5921] Registered IR keymap rc-empty [ 164.698740][ T5921] dvb-usb: could not initialize remote control. [ 164.743069][ T5921] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 164.805017][ T6751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.817310][ T6754] dummy0: entered promiscuous mode [ 164.822630][ T2154] usb 4-1: Using ep0 maxpacket: 16 [ 164.873254][ T2154] usb 4-1: config 0 has no interfaces? [ 164.886311][ T2154] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 164.904287][ T2154] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 164.912820][ T2154] usb 4-1: Manufacturer: syz [ 164.926288][ T5921] usb 2-1: USB disconnect, device number 9 [ 164.934367][ T2154] usb 4-1: config 0 descriptor?? [ 164.961859][ T6754] bond1: (slave dummy0): making interface the new active one [ 165.002113][ T6754] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 165.161557][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 165.210384][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 165.221181][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 165.791755][ T5913] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 165.962566][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.974599][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.165496][ T5921] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 166.176839][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 166.196317][ T5913] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.227324][ T2154] usb 3-1: USB disconnect, device number 12 [ 166.235216][ T5913] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.311427][ T5913] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.393101][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.411507][ T5913] usb 1-1: Product: syz [ 166.426373][ T5913] usb 1-1: Manufacturer: syz [ 166.437069][ T5913] usb 1-1: SerialNumber: syz [ 166.456579][ T6764] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 166.636731][ T5913] cdc_mbim 1-1:1.0: skipping garbage [ 166.697358][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.263'. [ 166.854358][ T5913] cdc_mbim 1-1:1.0: bind() failure [ 166.993474][ T5913] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 167.005173][ T5913] cdc_ncm 1-1:1.1: bind() failure [ 167.039247][ T5913] usb 1-1: USB disconnect, device number 14 [ 167.137028][ T5921] usb 4-1: USB disconnect, device number 16 [ 167.512747][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 167.512793][ T6787] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 167.567040][ T6784] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.569071][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 167.569804][ T5921] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 167.720062][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 167.722005][ T5921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.722037][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.722064][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.722089][ T5921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.722132][ T5921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.722156][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.952032][ T5921] usb 5-1: GET_CAPABILITIES returned 0 [ 167.952071][ T5921] usbtmc 5-1:16.0: can't read capabilities [ 168.153055][ T5943] usb 5-1: USB disconnect, device number 13 [ 168.395321][ T6797] input: syz0 as /devices/virtual/input/input17 [ 168.649963][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.952974][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 169.260931][ T6815] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.384032][ T6812] program syz.1.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.429735][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.582510][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 169.596339][ T5921] usb 5-1: config 0 has no interfaces? [ 169.622312][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 169.653478][ T5921] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 169.690725][ T5921] usb 5-1: Manufacturer: syz [ 169.720212][ T5921] usb 5-1: config 0 descriptor?? [ 169.828389][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.282'. [ 170.038569][ T6823] xt_TCPMSS: Only works on TCP SYN packets [ 170.522400][ T6836] netlink: 'syz.3.287': attribute type 29 has an invalid length. [ 170.552314][ T6836] netlink: 148 bytes leftover after parsing attributes in process `syz.3.287'. [ 170.637978][ T6836] syz.3.287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 171.703990][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 171.982878][ T24] usb 5-1: USB disconnect, device number 14 [ 172.781703][ T6863] Cannot find add_set index 0 as target [ 172.882983][ T6863] netdevsim netdevsim4: Direct firmware load for / [ 172.882983][ T6863] failed with error -2 [ 172.898223][ T6863] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 172.898223][ T6863] [ 174.499737][ T5921] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 174.732469][ T5921] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.743187][ T5921] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.801927][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.823054][ T6887] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 174.831015][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 174.844788][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 174.921794][ T5921] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.954587][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.986198][ T6889] bond1: (slave geneve2): making interface the new active one [ 175.006368][ T5921] usb 1-1: Product: syz [ 175.021293][ T5921] usb 1-1: Manufacturer: syz [ 175.025214][ T6889] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 175.039648][ T3502] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 175.050210][ T3502] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 175.083248][ T3502] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 175.116051][ T5921] cdc_wdm 1-1:1.0: skipping garbage [ 175.146959][ T58] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 175.159807][ T5921] cdc_wdm 1-1:1.0: skipping garbage [ 175.195611][ T5921] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 175.210089][ T5921] cdc_wdm 1-1:1.0: Unknown control protocol [ 175.355841][ T5820] usb 1-1: USB disconnect, device number 15 [ 175.930208][ T5921] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 176.049843][ T5943] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 176.089700][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 176.111312][ T5921] usb 5-1: config 0 has no interfaces? [ 176.119225][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 176.132169][ T5921] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.163573][ T5921] usb 5-1: Manufacturer: syz [ 176.203776][ T5921] usb 5-1: config 0 descriptor?? [ 176.484112][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 176.497555][ T5943] usb 3-1: no configurations [ 176.503602][ T5943] usb 3-1: can't read configurations, error -22 [ 176.596199][ T5921] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.709691][ T5943] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 176.719752][ T6912] No such timeout policy "syz1" [ 177.030038][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 177.056111][ T5943] usb 3-1: no configurations [ 177.075736][ T5943] usb 3-1: can't read configurations, error -22 [ 177.091375][ T5921] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 177.340472][ T5943] usb usb3-port1: attempt power cycle [ 177.361113][ T5921] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 177.444838][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.489435][ T5921] usb 2-1: Product: syz [ 177.507211][ T5921] usb 2-1: Manufacturer: syz [ 177.522134][ T5921] usb 2-1: SerialNumber: syz [ 177.705838][ T5943] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 177.758218][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.777751][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.811251][ T5943] usb 3-1: no configurations [ 177.815950][ T5943] usb 3-1: can't read configurations, error -22 [ 177.997176][ T5943] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 178.035347][ T5943] usb 3-1: no configurations [ 178.072837][ T5943] usb 3-1: can't read configurations, error -22 [ 178.110670][ T5921] usb 2-1: USB disconnect, device number 10 [ 178.134957][ T5943] usb usb3-port1: unable to enumerate USB device [ 178.168805][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.299687][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.645080][ T5820] usb 5-1: USB disconnect, device number 15 [ 179.665225][ T5943] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 179.908437][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 179.924638][ T6933] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 179.940603][ T6933] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 179.949358][ T5943] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.964858][ T5943] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.984319][ T5943] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 180.020081][ T5943] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.031319][ T5943] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.080733][ T5943] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.113812][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.162030][ T5943] usb 4-1: Product: syz [ 180.174741][ T5943] usb 4-1: Manufacturer: syz [ 180.198234][ T5943] usb 4-1: SerialNumber: syz [ 180.246549][ T6927] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 180.305204][ T5943] cdc_mbim 4-1:1.0: skipping garbage [ 180.487621][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 180.499277][ T5943] cdc_mbim 4-1:1.0: bind() failure [ 180.584761][ T5943] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 180.602152][ T5943] cdc_ncm 4-1:1.1: bind() failure [ 180.639956][ T5943] usb 4-1: USB disconnect, device number 17 [ 181.151467][ T6958] netlink: 68 bytes leftover after parsing attributes in process `syz.1.323'. [ 181.529998][ T5913] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 181.689775][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 181.697969][ T5913] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 181.704877][ T5943] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 181.708613][ T5913] usb 1-1: config 0 has no interface number 0 [ 181.778957][ T5913] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.883247][ T5913] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 181.902465][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.931250][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 181.943643][ T5943] usb 4-1: config 0 has no interfaces? [ 181.951094][ T5913] usb 1-1: Product: syz [ 181.951133][ T5943] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.966630][ T5913] usb 1-1: Manufacturer: syz [ 181.969866][ T5943] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.981625][ T5943] usb 4-1: Manufacturer: syz [ 181.986579][ T5913] usb 1-1: SerialNumber: syz [ 182.001471][ T5913] usb 1-1: config 0 descriptor?? [ 182.046675][ T5943] usb 4-1: config 0 descriptor?? [ 182.070183][ T5913] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 182.106654][ T5913] em28xx 1-1:0.132: Video interface 132 found: [ 182.450643][ T5913] em28xx 1-1:0.132: chip ID is em2874 [ 183.070661][ T5913] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 183.083679][ T5913] em28xx 1-1:0.132: board has no eeprom [ 183.159755][ T5913] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 183.172888][ T5913] em28xx 1-1:0.132: analog set to bulk mode. [ 183.189384][ T5921] em28xx 1-1:0.132: Registering V4L2 extension [ 183.525033][ T5921] em28xx 1-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 183.528562][ T5820] usb 1-1: USB disconnect, device number 16 [ 183.547298][ T5921] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 183.588516][ T5921] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 183.597961][ T5921] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 183.644907][ T5921] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-19) [ 183.654330][ T5921] em28xx 1-1:0.132: failed to trigger read from i2c address 0x86 (error=-19) [ 183.684492][ T5820] em28xx 1-1:0.132: Disconnecting em28xx [ 183.892951][ T5921] usb 1-1: Decoder not found [ 184.301508][ T5921] em28xx 1-1:0.132: failed to create media graph [ 184.532670][ T5921] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 184.563774][ T5921] em28xx 1-1:0.132: Remote control support is not available for this card. [ 184.566139][ T6997] ================================================================== [ 184.580582][ T6997] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 184.588015][ T6997] Read of size 8 at addr ffff88807f3ec790 by task v4l_id/6997 [ 184.595619][ T6997] [ 184.598017][ T6997] CPU: 0 UID: 0 PID: 6997 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 184.598049][ T6997] Tainted: [L]=SOFTLOCKUP [ 184.598054][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.598070][ T6997] Call Trace: [ 184.598078][ T6997] [ 184.598085][ T6997] dump_stack_lvl+0xe8/0x150 [ 184.598111][ T6997] print_report+0xba/0x230 [ 184.598130][ T6997] ? v4l2_fh_open+0xac/0x420 [ 184.598151][ T6997] kasan_report+0x117/0x150 [ 184.598172][ T6997] ? v4l2_fh_open+0xac/0x420 [ 184.598195][ T6997] v4l2_fh_open+0xac/0x420 [ 184.598217][ T6997] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.598258][ T6997] em28xx_v4l2_open+0x157/0x9a0 [ 184.598276][ T6997] ? do_raw_spin_lock+0x12b/0x2f0 [ 184.598296][ T6997] v4l2_open+0x1bf/0x3a0 [ 184.598322][ T6997] chrdev_open+0x4cd/0x5e0 [ 184.598343][ T6997] ? __pfx_chrdev_open+0x10/0x10 [ 184.598361][ T6997] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 184.598380][ T6997] ? __pfx_chrdev_open+0x10/0x10 [ 184.598398][ T6997] do_dentry_open+0x785/0x14e0 [ 184.598425][ T6997] vfs_open+0x3b/0x340 [ 184.598445][ T6997] ? path_openat+0x2df0/0x3860 [ 184.598463][ T6997] path_openat+0x2e08/0x3860 [ 184.598486][ T6997] ? __pfx_stack_trace_save+0x10/0x10 [ 184.598504][ T6997] ? stack_depot_save_flags+0x33/0x810 [ 184.598532][ T6997] ? __pfx_path_openat+0x10/0x10 [ 184.598548][ T6997] ? __x64_sys_openat+0x138/0x170 [ 184.598569][ T6997] ? do_syscall_64+0x14d/0xf80 [ 184.598590][ T6997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.598608][ T6997] ? __lock_acquire+0x6b5/0x2cf0 [ 184.598631][ T6997] do_file_open+0x23e/0x4a0 [ 184.598650][ T6997] ? __pfx_do_file_open+0x10/0x10 [ 184.598674][ T6997] ? _raw_spin_unlock+0x28/0x50 [ 184.598691][ T6997] ? alloc_fd+0x64b/0x6c0 [ 184.598717][ T6997] do_sys_openat2+0x113/0x200 [ 184.598740][ T6997] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.598763][ T6997] ? exc_page_fault+0x6a/0xc0 [ 184.598784][ T6997] ? do_user_addr_fault+0xc6f/0x1340 [ 184.598805][ T6997] __x64_sys_openat+0x138/0x170 [ 184.598830][ T6997] do_syscall_64+0x14d/0xf80 [ 184.598850][ T6997] ? trace_irq_disable+0x3b/0x150 [ 184.598864][ T6997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.598879][ T6997] ? clear_bhb_loop+0x40/0x90 [ 184.598897][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.598913][ T6997] RIP: 0033:0x7f548a0a7407 [ 184.598931][ T6997] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 184.598944][ T6997] RSP: 002b:00007fffbdddf660 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 184.598965][ T6997] RAX: ffffffffffffffda RBX: 00007f548a7f8880 RCX: 00007f548a0a7407 [ 184.598977][ T6997] RDX: 0000000000000000 RSI: 00007fffbdddff1b RDI: ffffffffffffff9c [ 184.598987][ T6997] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 184.598996][ T6997] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 184.599005][ T6997] R13: 00007fffbdddf8b0 R14: 00007f548a95f000 R15: 00005605750f14d8 [ 184.599022][ T6997] [ 184.599028][ T6997] [ 184.902746][ T6997] Allocated by task 5921: [ 184.907609][ T6997] kasan_save_track+0x3e/0x80 [ 184.912420][ T6997] __kasan_kmalloc+0x93/0xb0 [ 184.917498][ T6997] __kmalloc_cache_noprof+0x31c/0x660 [ 184.923090][ T6997] em28xx_v4l2_init+0x10b/0x2e70 [ 184.928295][ T6997] em28xx_init_extension+0x120/0x1c0 [ 184.933626][ T6997] process_scheduled_works+0xb6e/0x18c0 [ 184.939388][ T6997] worker_thread+0xa53/0xfc0 [ 184.944015][ T6997] kthread+0x388/0x470 [ 184.948391][ T6997] ret_from_fork+0x51e/0xb90 [ 184.953216][ T6997] ret_from_fork_asm+0x1a/0x30 [ 184.958134][ T6997] [ 184.960509][ T6997] Freed by task 5921: [ 184.964527][ T6997] kasan_save_track+0x3e/0x80 [ 184.969224][ T6997] kasan_save_free_info+0x46/0x50 [ 184.974266][ T6997] __kasan_slab_free+0x5c/0x80 [ 184.979057][ T6997] kfree+0x1c1/0x630 [ 184.983048][ T6997] em28xx_v4l2_init+0x1683/0x2e70 [ 184.988123][ T6997] em28xx_init_extension+0x120/0x1c0 [ 184.993453][ T6997] process_scheduled_works+0xb6e/0x18c0 [ 184.999060][ T6997] worker_thread+0xa53/0xfc0 [ 185.003677][ T6997] kthread+0x388/0x470 [ 185.007805][ T6997] ret_from_fork+0x51e/0xb90 [ 185.012428][ T6997] ret_from_fork_asm+0x1a/0x30 [ 185.017317][ T6997] [ 185.019660][ T6997] The buggy address belongs to the object at ffff88807f3ec000 [ 185.019660][ T6997] which belongs to the cache kmalloc-8k of size 8192 [ 185.033817][ T6997] The buggy address is located 1936 bytes inside of [ 185.033817][ T6997] freed 8192-byte region [ffff88807f3ec000, ffff88807f3ee000) [ 185.047924][ T6997] [ 185.050403][ T6997] The buggy address belongs to the physical page: [ 185.056934][ T6997] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f3e8 [ 185.065793][ T6997] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 185.074405][ T6997] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 185.082072][ T6997] page_type: f5(slab) [ 185.086078][ T6997] raw: 00fff00000000040 ffff88813fea7280 dead000000000100 dead000000000122 [ 185.095157][ T6997] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 185.104061][ T6997] head: 00fff00000000040 ffff88813fea7280 dead000000000100 dead000000000122 [ 185.112873][ T6997] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 185.121571][ T6997] head: 00fff00000000003 ffffea0001fcfa01 00000000ffffffff 00000000ffffffff [ 185.130259][ T6997] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 185.138941][ T6997] page dumped because: kasan: bad access detected [ 185.145371][ T6997] page_owner tracks the page as allocated [ 185.151100][ T6997] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5848, tgid 5848 (syz-executor), ts 92251162633, free_ts 92222872384 [ 185.172334][ T6997] post_alloc_hook+0x231/0x280 [ 185.177236][ T6997] get_page_from_freelist+0x24dc/0x2580 [ 185.182824][ T6997] __alloc_frozen_pages_noprof+0x18d/0x380 [ 185.188688][ T6997] allocate_slab+0x77/0x660 [ 185.193302][ T6997] refill_objects+0x331/0x3c0 [ 185.198039][ T6997] __pcs_replace_empty_main+0x2e6/0x730 [ 185.203609][ T6997] __kvmalloc_node_noprof+0x657/0x8a0 [ 185.208993][ T6997] pfifo_fast_init+0x372/0x6c0 [ 185.213767][ T6997] qdisc_create_dflt+0x13b/0x510 [ 185.218746][ T6997] dev_activate+0x378/0x1150 [ 185.223364][ T6997] __dev_open+0x67a/0x830 [ 185.227712][ T6997] __dev_change_flags+0x1f7/0x690 [ 185.232754][ T6997] netif_change_flags+0x88/0x1a0 [ 185.237711][ T6997] do_setlink+0xf82/0x4590 [ 185.242168][ T6997] rtnl_newlink+0x15ad/0x1bb0 [ 185.246860][ T6997] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 185.251819][ T6997] page last free pid 5849 tgid 5849 stack trace: [ 185.258162][ T6997] register_dummy_stack+0x98/0x100 [ 185.260817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 185.263352][ T6997] init_page_owner+0x2e/0x600 [ 185.276351][ T6997] page_ext_init+0x500/0x540 [ 185.281052][ T6997] mm_core_init+0x51/0x70 [ 185.285518][ T6997] [ 185.287861][ T6997] Memory state around the buggy address: [ 185.293522][ T6997] ffff88807f3ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.301603][ T6997] ffff88807f3ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.309706][ T6997] >ffff88807f3ec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.317993][ T6997] ^ [ 185.322603][ T6997] ffff88807f3ec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.331551][ T6997] ffff88807f3ec880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.339711][ T6997] ================================================================== [ 185.442321][ T9] usb 4-1: USB disconnect, device number 18 [ 185.575954][ T5820] em28xx 1-1:0.132: Closing input extension [ 185.678540][ T6997] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 185.685843][ T6997] CPU: 0 UID: 0 PID: 6997 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 185.696680][ T6997] Tainted: [L]=SOFTLOCKUP [ 185.701138][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.711245][ T6997] Call Trace: [ 185.714594][ T6997] [ 185.717551][ T6997] vpanic+0x56c/0xa60 [ 185.721775][ T6997] ? __pfx_vpanic+0x10/0x10 [ 185.726307][ T6997] panic+0xc5/0xd0 [ 185.730058][ T6997] ? __pfx_panic+0x10/0x10 [ 185.734532][ T6997] ? preempt_schedule_thunk+0x16/0x30 [ 185.740062][ T6997] ? preempt_schedule_thunk+0x16/0x30 [ 185.745551][ T6997] ? v4l2_fh_open+0xac/0x420 [ 185.750221][ T6997] check_panic_on_warn+0x89/0xb0 [ 185.755217][ T6997] ? v4l2_fh_open+0xac/0x420 [ 185.759868][ T6997] end_report+0x73/0x180 [ 185.764174][ T6997] ? v4l2_fh_open+0xac/0x420 [ 185.768853][ T6997] kasan_report+0x128/0x150 [ 185.773515][ T6997] ? v4l2_fh_open+0xac/0x420 [ 185.778181][ T6997] v4l2_fh_open+0xac/0x420 [ 185.782669][ T6997] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.788707][ T6997] em28xx_v4l2_open+0x157/0x9a0 [ 185.793604][ T6997] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.798667][ T6997] v4l2_open+0x1bf/0x3a0 [ 185.802952][ T6997] chrdev_open+0x4cd/0x5e0 [ 185.807403][ T6997] ? __pfx_chrdev_open+0x10/0x10 [ 185.812370][ T6997] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 185.818738][ T6997] ? __pfx_chrdev_open+0x10/0x10 [ 185.823727][ T6997] do_dentry_open+0x785/0x14e0 [ 185.828544][ T6997] vfs_open+0x3b/0x340 [ 185.832668][ T6997] ? path_openat+0x2df0/0x3860 [ 185.837577][ T6997] path_openat+0x2e08/0x3860 [ 185.842270][ T6997] ? __pfx_stack_trace_save+0x10/0x10 [ 185.847787][ T6997] ? stack_depot_save_flags+0x33/0x810 [ 185.853301][ T6997] ? __pfx_path_openat+0x10/0x10 [ 185.858282][ T6997] ? __x64_sys_openat+0x138/0x170 [ 185.863785][ T6997] ? do_syscall_64+0x14d/0xf80 [ 185.868594][ T6997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.874809][ T6997] ? __lock_acquire+0x6b5/0x2cf0 [ 185.879901][ T6997] do_file_open+0x23e/0x4a0 [ 185.884617][ T6997] ? __pfx_do_file_open+0x10/0x10 [ 185.889826][ T6997] ? _raw_spin_unlock+0x28/0x50 [ 185.894848][ T6997] ? alloc_fd+0x64b/0x6c0 [ 185.899235][ T6997] do_sys_openat2+0x113/0x200 [ 185.904061][ T6997] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.909404][ T6997] ? exc_page_fault+0x6a/0xc0 [ 185.914340][ T6997] ? do_user_addr_fault+0xc6f/0x1340 [ 185.919723][ T6997] __x64_sys_openat+0x138/0x170 [ 185.924641][ T6997] do_syscall_64+0x14d/0xf80 [ 185.929272][ T6997] ? trace_irq_disable+0x3b/0x150 [ 185.934331][ T6997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.940548][ T6997] ? clear_bhb_loop+0x40/0x90 [ 185.945428][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.951381][ T6997] RIP: 0033:0x7f548a0a7407 [ 185.955931][ T6997] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 185.975576][ T6997] RSP: 002b:00007fffbdddf660 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 185.984036][ T6997] RAX: ffffffffffffffda RBX: 00007f548a7f8880 RCX: 00007f548a0a7407 [ 185.992084][ T6997] RDX: 0000000000000000 RSI: 00007fffbdddff1b RDI: ffffffffffffff9c [ 186.000147][ T6997] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 186.008284][ T6997] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 186.016501][ T6997] R13: 00007fffbdddf8b0 R14: 00007f548a95f000 R15: 00005605750f14d8 [ 186.024918][ T6997] [ 186.028571][ T6997] Kernel Offset: disabled [ 186.032915][ T6997] Rebooting in 86400 seconds..