last executing test programs: 1m49.399833835s ago: executing program 3 (id=494): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m48.431957653s ago: executing program 3 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.235985133s ago: executing program 3 (id=501): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffff76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r6, 0x400454e2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b0b, &(0x7f0000000100)={'virt_wifi0\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0xe, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 1m48.058965152s ago: executing program 3 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x105, 0x80000000, 0x4, 0x4, 0x3}, 0x1, 0x7}, [{0x5b, 0x8, 0x40, 0x98e2, 0x9, 0x6}, {0x7, 0xc11d, 0x6, 0x0, 0x54c83b4b, 0x2}, {0x4, 0x8, 0x7, 0x8, 0x6, 0x40}, {0x6, 0x7ff, 0x10001, 0x6, 0x8000, 0x3}, {0x17, 0x1, 0xb, 0x4, 0x0, 0x3}, {0x0, 0x7, 0x10001, 0x2, 0x6, 0x81}, {0xa7b, 0x48c081f1, 0x3, 0x0, 0x0, 0x6}, {0x2, 0xfff, 0x2, 0x4, 0x3, 0x7f}, {0x0, 0x9e, 0x3, 0x7, 0x8, 0x1}, {0xaa, 0x6, 0x8, 0x6, 0x5, 0x2}, {0x0, 0x5, 0x7, 0xec9, 0xaa12, 0x4}, {0xff, 0x5, 0x4, 0x10, 0xfff, 0x80000001}, {0x0, 0x9, 0x10000, 0x0, 0x6487875c, 0xc}, {0x6, 0xd, 0x8, 0xea, 0x2, 0x9}, {0xfffffffc, 0x0, 0x7, 0x6, 0x7fff, 0x5}, {0x4, 0x1, 0x8, 0x9, 0x0, 0x8}, {0x2, 0x4689, 0x4, 0xca6, 0x7c2, 0x5}, {0x0, 0x81, 0x8, 0x10000, 0x7, 0x8001}, {0x4, 0x3, 0x7, 0xafb9, 0x8000, 0x10000}, {0x1000, 0xb, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x4, 0x5, 0x6, 0x6}, {0x8, 0x9, 0x81, 0x1, 0x7, 0xbbb}, {0x9, 0x6, 0x1000, 0x8, 0x2, 0x1}, {0x2, 0x3, 0x70, 0x4, 0x4, 0x3}, {0x3, 0x8, 0x6, 0x7, 0x3a555fb9, 0x101}, {0x101, 0x20000000, 0x2, 0x5, 0x9, 0x10}, {0x5, 0x6, 0x0, 0x1, 0x9, 0x5}, {0x7fffffff, 0x1000, 0x1, 0x81, 0x1ff4}, {0x58ab449b, 0x7, 0x9, 0x80000001, 0xff, 0xa697}, {0xfffffffb, 0x8f, 0x6941, 0x6, 0x6, 0x7}, {0x4d2, 0x26, 0xe8c, 0xffff, 0x3391, 0x10001}, {0xfbde, 0x80000001, 0x9, 0x101, 0x2, 0x7fff}, {0x7fffffff, 0x8, 0x8, 0x2, 0x1, 0x9}, {0x90f1, 0x3, 0x7, 0x6, 0x8, 0x1ff}, {0x3, 0x10, 0x8, 0x6, 0x6, 0x2}, {0x8, 0x5, 0x1c05, 0x986a, 0xd, 0x8}, {0x8000, 0x5, 0x5, 0x2, 0x1, 0x7}, {0x3ff, 0x2, 0x6a, 0x5, 0x9, 0x3}, {0x1, 0x5, 0x0, 0x7fffffff, 0x8, 0xc72}, {0x3b5f774a, 0x1, 0x0, 0x10001, 0x77, 0x2}, {0x6, 0x4, 0x4, 0x0, 0xffffffff, 0x8}, {0x6, 0x7b4, 0x6, 0x4, 0xe, 0x4}, {0x6, 0x6, 0xcc5f, 0x3c88, 0x1000, 0xce}, {0x6, 0x1ff, 0x8, 0x200000, 0x2, 0x2}, {0x2, 0x1, 0x3ff, 0x0, 0x7, 0x8001}, {0x1ff, 0x2, 0x5, 0x4, 0xf, 0xa}, {0x7f, 0x200, 0x9000, 0x9, 0x2, 0x81}, {0xb12, 0x8, 0x9, 0x8, 0x5, 0x2}, {0x8, 0x7, 0x2, 0x7, 0x2, 0x5}, {0x6, 0x5, 0xffff, 0x5b46, 0x0, 0x5}, {0x401, 0x1, 0xe, 0x1205478f, 0x9, 0x6}, {0x10001, 0x7fff, 0x1, 0x3, 0x7ff, 0xc}, {0xb304, 0x0, 0x8, 0x400, 0x1, 0x3}, {0x5, 0x5, 0x8, 0x9, 0x3ff, 0x83}, {0x1ff, 0x4, 0x5, 0x80000000, 0x81, 0x6}, {0x9, 0x0, 0x5caa, 0x7fff, 0x1, 0x7fffffff}, {0xf, 0x10000, 0xffff, 0x100, 0x80, 0x3e}, {0x2, 0x8, 0x6, 0xe911, 0x7, 0x8}, {0x7, 0x3, 0x10000, 0xd, 0x5, 0x6}, {0x8, 0x7fffffff, 0x10000, 0x3, 0x3, 0x1fc28}, {0x53a, 0xffffffff, 0x4, 0x408, 0xe, 0x7fff}, {0xffff, 0x8, 0xff, 0x2, 0x0, 0xe00}, {0x2, 0x0, 0x4, 0xd, 0x9, 0x3}, {0x4, 0x0, 0x81, 0x0, 0x7, 0x3}, {0x3, 0x9b1f, 0x3, 0xdc5e, 0x4, 0x6}, {0x58, 0x7, 0x1, 0xffffff00, 0x3, 0x6}, {0x7fff, 0x0, 0xff, 0x7, 0xf2, 0x2}, {0x96f2, 0x2, 0x5, 0x8, 0x9b, 0x1}, {0x9, 0x143, 0x0, 0xd, 0x6, 0x7}, {0x2, 0x380, 0x8353, 0xa3, 0x1}, {0x80, 0x8, 0x2, 0x8, 0xe8b, 0x6}, {0x1, 0x4, 0x3, 0x67b2, 0x8, 0x7}, {0x777e, 0x4, 0x1, 0xfffffff7, 0x8, 0x9}, {0x10, 0xf76, 0xfffffff9, 0x2, 0x4, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x8000, 0x9}, {0x3, 0x4, 0x8001, 0x4, 0x0, 0x1}, {0x0, 0x3caf, 0xfe, 0x101, 0x3, 0x6}, {0x4, 0xfffffff9, 0x0, 0x7, 0x9, 0xfffffff7}, {0x2, 0xffffffff, 0x75, 0x7, 0x136c, 0x7}, {0xfffffff8, 0x7, 0x4, 0x81, 0x7, 0x81cd}, {0x76c0, 0x8, 0x80000000, 0x8a2, 0x7, 0x3}, {0x1ff, 0x2, 0x9, 0xc, 0xa, 0x8}, {0xffff8001, 0x2, 0x415, 0x6, 0x2, 0x2}, {0x0, 0x8, 0x3, 0x8, 0x5, 0x2}, {0x7, 0x4, 0x7, 0xfffffb37, 0x0, 0x4}, {0x70, 0xffffffff, 0x4, 0x9, 0x200, 0x4}, {0x1, 0x6, 0x2, 0x3, 0x7, 0x80000000}, {0xea, 0xb1, 0x0, 0xc, 0x6, 0x6}, {0x130cf172, 0x7, 0x8, 0x0, 0x7, 0x99}, {0x3, 0x7, 0x7fffffff, 0x6, 0x200, 0x7}, {0xa3, 0xffffffff, 0x3ff, 0x4, 0x8, 0xe}, {0x7, 0x5, 0x3f5, 0x1, 0x6, 0x3}, {0x200, 0x0, 0x144d, 0x100, 0x6, 0x7}, {0x10000, 0x3ff, 0x0, 0x8b0d, 0x2, 0x3}, {0x3, 0x8, 0x3ff, 0xffffff83, 0xa0bb}, {0x5, 0x2, 0x9, 0x1, 0x8000, 0x18000000}, {0x1, 0xb1, 0x78d, 0x9, 0xe2e}, {0xe121, 0x800, 0xffff2014, 0x100, 0x200, 0x2}, {0x609, 0x7, 0x7, 0xfffffbff, 0x6, 0x6f}, {0x3, 0x0, 0x7ff, 0x0, 0x7, 0x10001}, {0x10000, 0x401, 0x5, 0x2, 0x8, 0x5}, {0x8000, 0xe, 0x9, 0x3, 0xc5f, 0x8}, {0x3, 0x30000000, 0x9, 0x9, 0x8}, {0x62872137, 0xc24, 0x101, 0xffffff12, 0x1000, 0x100}, {0xfffffffb, 0xf, 0x10, 0x1, 0x0, 0x4}, {0x2, 0x0, 0xb, 0x306c, 0xff, 0x10000}, {0x10000, 0x3, 0x5, 0xa, 0x3, 0xa}, {0x3, 0x300000, 0x6, 0xd28b, 0x8, 0x1000}, {0x59, 0x3, 0x5, 0x3, 0x80000001, 0x7}, {0x7ceb, 0x9, 0x7, 0x261, 0x8, 0x7ff}, {0x40, 0x4, 0x6, 0x1, 0x7, 0x6}, {0x4, 0x4, 0x9, 0x1000, 0x4, 0xd}, {0x4c, 0x1, 0x3, 0x2, 0x2, 0x7}, {0x2f, 0x1, 0x6, 0x7fffffff, 0xffffffff, 0xfffff954}, {0x3, 0x6, 0x0, 0x5, 0x7, 0x4}, {0x8001, 0x4, 0xffffffff, 0xa2b, 0x5d, 0x8}, {0x40, 0xe, 0xe, 0x1, 0x97f, 0x2d00}, {0x3e3, 0x6, 0x1, 0x7, 0xfffffffa, 0xa0}, {0x5, 0x9, 0x3aa, 0xd, 0x7ffff7ff, 0xa}, {0x7ff, 0x3, 0x4, 0x5, 0x80, 0x7}, {0xb51, 0x7, 0xffff, 0x9, 0xffff, 0x2}, {0x10001, 0x6, 0x7, 0x1, 0x5, 0x6}, {0x0, 0x1, 0x0, 0x4, 0x40, 0x1}, {0x800000, 0x7, 0x0, 0x8, 0x6, 0x8}, {0xcb, 0x7, 0x7, 0x0, 0xfffffffc, 0x1}, {0x7, 0xc, 0x9, 0x2, 0x40, 0x1}, {0xccb7, 0x1, 0x800, 0x0, 0x6, 0x229c}, {0x4, 0x5, 0x6, 0x8, 0x2, 0xdf1}], [{0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0xb}, {0x8dfb4a42dae2f56d}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x5c96fd0c102cb707}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {0x861c20290662cc64}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, 0x0}, 0x4) 1m47.68433028s ago: executing program 3 (id=504): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x9, 0x1, 0xc}, 0xb, 0x40000000, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m47.385348275s ago: executing program 3 (id=507): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x2, 0x2, 0x0, 0x3}}, 0x26) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000700)={0x141, 0x29, 0x2, {0x7fff, [{{0x40, 0x2, 0x2}, 0x2, 0x1, 0x7, './file0'}, {{0x20, 0x1, 0x8}, 0x4, 0x5, 0x7, './file0'}, {{0x4, 0x1, 0x4}, 0x4, 0x6, 0x7, './file0'}, {{0x8, 0x4}, 0x3, 0xa, 0x7, './file0'}, {{0x2, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x4, 0x9, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x32, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x7}, 0x1, 0x8, 0x7, './file0'}, {{0x10, 0x1}, 0x6, 0x1, 0x7, './file0'}, {{0x2, 0x3, 0x5}, 0x5, 0x7, 0x7, './file0'}]}}, 0x141) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000001c0)={"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"}) socket$inet6(0xa, 0x4, 0x8) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000780)=ANY=[], 0x50) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) iopl(0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1m31.699893763s ago: executing program 32 (id=507): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x2, 0x2, 0x0, 0x3}}, 0x26) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000700)={0x141, 0x29, 0x2, {0x7fff, [{{0x40, 0x2, 0x2}, 0x2, 0x1, 0x7, './file0'}, {{0x20, 0x1, 0x8}, 0x4, 0x5, 0x7, './file0'}, {{0x4, 0x1, 0x4}, 0x4, 0x6, 0x7, './file0'}, {{0x8, 0x4}, 0x3, 0xa, 0x7, './file0'}, {{0x2, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x4, 0x9, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x32, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x7}, 0x1, 0x8, 0x7, './file0'}, {{0x10, 0x1}, 0x6, 0x1, 0x7, './file0'}, {{0x2, 0x3, 0x5}, 0x5, 0x7, 0x7, './file0'}]}}, 0x141) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03716c15894eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea6274bf512e7d6ebb8ff8f83a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b899638e8df1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f2"}) socket$inet6(0xa, 0x4, 0x8) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000780)=ANY=[], 0x50) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) iopl(0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1m30.978074709s ago: executing program 4 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x105, 0x80000000, 0x4, 0x4, 0x3}, 0x1, 0x7}, [{0x5b, 0x8, 0x40, 0x98e2, 0x9, 0x6}, {0x7, 0xc11d, 0x6, 0x0, 0x54c83b4b, 0x2}, {0x4, 0x8, 0x7, 0x8, 0x6, 0x40}, {0x6, 0x7ff, 0x10001, 0x6, 0x8000, 0x3}, {0x17, 0x1, 0xb, 0x4, 0x0, 0x3}, {0x0, 0x7, 0x10001, 0x2, 0x6, 0x81}, {0xa7b, 0x48c081f1, 0x3, 0x0, 0x0, 0x6}, {0x2, 0xfff, 0x2, 0x4, 0x3, 0x7f}, {0x0, 0x9e, 0x3, 0x7, 0x8, 0x1}, {0xaa, 0x6, 0x8, 0x6, 0x5, 0x2}, {0x0, 0x5, 0x7, 0xec9, 0xaa12, 0x4}, {0xff, 0x5, 0x4, 0x10, 0xfff, 0x80000001}, {0x0, 0x9, 0x10000, 0x0, 0x6487875c, 0xc}, {0x6, 0xd, 0x8, 0xea, 0x2, 0x9}, {0xfffffffc, 0x0, 0x7, 0x6, 0x7fff, 0x5}, {0x4, 0x1, 0x8, 0x9, 0x0, 0x8}, {0x2, 0x4689, 0x4, 0xca6, 0x7c2, 0x5}, {0x0, 0x81, 0x8, 0x10000, 0x7, 0x8001}, {0x4, 0x3, 0x7, 0xafb9, 0x8000, 0x10000}, {0x1000, 0xb, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x4, 0x5, 0x6, 0x6}, {0x8, 0x9, 0x81, 0x1, 0x7, 0xbbb}, {0x9, 0x6, 0x1000, 0x8, 0x2, 0x1}, {0x2, 0x3, 0x70, 0x4, 0x4, 0x3}, {0x3, 0x8, 0x6, 0x7, 0x3a555fb9, 0x101}, {0x101, 0x20000000, 0x2, 0x5, 0x9, 0x10}, {0x5, 0x6, 0x0, 0x1, 0x9, 0x5}, {0x7fffffff, 0x1000, 0x1, 0x81, 0x1ff4}, {0x58ab449b, 0x7, 0x9, 0x80000001, 0xff, 0xa697}, {0xfffffffb, 0x8f, 0x6941, 0x6, 0x6, 0x7}, {0x4d2, 0x26, 0xe8c, 0xffff, 0x3391, 0x10001}, {0xfbde, 0x80000001, 0x9, 0x101, 0x2, 0x7fff}, {0x7fffffff, 0x8, 0x8, 0x2, 0x1, 0x9}, {0x90f1, 0x3, 0x7, 0x6, 0x8, 0x1ff}, {0x3, 0x10, 0x8, 0x6, 0x6, 0x2}, {0x8, 0x5, 0x1c05, 0x986a, 0xd, 0x8}, {0x8000, 0x5, 0x5, 0x2, 0x1, 0x7}, {0x3ff, 0x2, 0x6a, 0x5, 0x9, 0x3}, {0x1, 0x5, 0x0, 0x7fffffff, 0x8, 0xc72}, {0x3b5f774a, 0x1, 0x0, 0x10001, 0x77, 0x2}, {0x6, 0x4, 0x4, 0x0, 0xffffffff, 0x8}, {0x6, 0x7b4, 0x6, 0x4, 0xe, 0x4}, {0x6, 0x6, 0xcc5f, 0x3c88, 0x1000, 0xce}, {0x6, 0x1ff, 0x8, 0x200000, 0x2, 0x2}, {0x2, 0x1, 0x3ff, 0x0, 0x7, 0x8001}, {0x1ff, 0x2, 0x5, 0x4, 0xf, 0xa}, {0x7f, 0x200, 0x9000, 0x9, 0x2, 0x81}, {0xb12, 0x8, 0x9, 0x8, 0x5, 0x2}, {0x8, 0x7, 0x2, 0x7, 0x2, 0x5}, {0x6, 0x5, 0xffff, 0x5b46, 0x0, 0x5}, {0x401, 0x1, 0xe, 0x1205478f, 0x9, 0x6}, {0x10001, 0x7fff, 0x1, 0x3, 0x7ff, 0xc}, {0xb304, 0x0, 0x8, 0x400, 0x1, 0x3}, {0x5, 0x5, 0x8, 0x9, 0x3ff, 0x83}, {0x1ff, 0x4, 0x5, 0x80000000, 0x81, 0x6}, {0x9, 0x0, 0x5caa, 0x7fff, 0x1, 0x7fffffff}, {0xf, 0x10000, 0xffff, 0x100, 0x80, 0x3e}, {0x2, 0x8, 0x6, 0xe911, 0x7, 0x8}, {0x7, 0x3, 0x10000, 0xd, 0x5, 0x6}, {0x8, 0x7fffffff, 0x10000, 0x3, 0x3, 0x1fc28}, {0x53a, 0xffffffff, 0x4, 0x408, 0xe, 0x7fff}, {0xffff, 0x8, 0xff, 0x2, 0x0, 0xe00}, {0x2, 0x0, 0x4, 0xd, 0x9, 0x3}, {0x4, 0x0, 0x81, 0x0, 0x7, 0x3}, {0x3, 0x9b1f, 0x3, 0xdc5e, 0x4, 0x6}, {0x58, 0x7, 0x1, 0xffffff00, 0x3, 0x6}, {0x7fff, 0x0, 0xff, 0x7, 0xf2, 0x2}, {0x96f2, 0x2, 0x5, 0x8, 0x9b, 0x1}, {0x9, 0x143, 0x0, 0xd, 0x6, 0x7}, {0x2, 0x380, 0x8353, 0xa3, 0x1}, {0x80, 0x8, 0x2, 0x8, 0xe8b, 0x6}, {0x1, 0x4, 0x3, 0x67b2, 0x8, 0x7}, {0x777e, 0x4, 0x1, 0xfffffff7, 0x8, 0x9}, {0x10, 0xf76, 0xfffffff9, 0x2, 0x4, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x8000, 0x9}, {0x3, 0x4, 0x8001, 0x4, 0x0, 0x1}, {0x0, 0x3caf, 0xfe, 0x101, 0x3, 0x6}, {0x4, 0xfffffff9, 0x0, 0x7, 0x9, 0xfffffff7}, {0x2, 0xffffffff, 0x75, 0x7, 0x136c, 0x7}, {0xfffffff8, 0x7, 0x4, 0x81, 0x7, 0x81cd}, {0x76c0, 0x8, 0x80000000, 0x8a2, 0x7, 0x3}, {0x1ff, 0x2, 0x9, 0xc, 0xa, 0x8}, {0xffff8001, 0x2, 0x415, 0x6, 0x2, 0x2}, {0x0, 0x8, 0x3, 0x8, 0x5, 0x2}, {0x7, 0x4, 0x7, 0xfffffb37, 0x0, 0x4}, {0x70, 0xffffffff, 0x4, 0x9, 0x200, 0x4}, {0x1, 0x6, 0x2, 0x3, 0x7, 0x80000000}, {0xea, 0xb1, 0x0, 0xc, 0x6, 0x6}, {0x130cf172, 0x7, 0x8, 0x0, 0x7, 0x99}, {0x3, 0x7, 0x7fffffff, 0x6, 0x200, 0x7}, {0xa3, 0xffffffff, 0x3ff, 0x4, 0x8, 0xe}, {0x7, 0x5, 0x3f5, 0x1, 0x6, 0x3}, {0x200, 0x0, 0x144d, 0x100, 0x6, 0x7}, {0x10000, 0x3ff, 0x0, 0x8b0d, 0x2, 0x3}, {0x3, 0x8, 0x3ff, 0xffffff83, 0xa0bb}, {0x5, 0x2, 0x9, 0x1, 0x8000, 0x18000000}, {0x1, 0xb1, 0x78d, 0x9, 0xe2e}, {0xe121, 0x800, 0xffff2014, 0x100, 0x200, 0x2}, {0x609, 0x7, 0x7, 0xfffffbff, 0x6, 0x6f}, {0x3, 0x0, 0x7ff, 0x0, 0x7, 0x10001}, {0x10000, 0x401, 0x5, 0x2, 0x8, 0x5}, {0x8000, 0xe, 0x9, 0x3, 0xc5f, 0x8}, {0x3, 0x30000000, 0x9, 0x9, 0x8}, {0x62872137, 0xc24, 0x101, 0xffffff12, 0x1000, 0x100}, {0xfffffffb, 0xf, 0x10, 0x1, 0x0, 0x4}, {0x2, 0x0, 0xb, 0x306c, 0xff, 0x10000}, {0x10000, 0x3, 0x5, 0xa, 0x3, 0xa}, {0x3, 0x300000, 0x6, 0xd28b, 0x8, 0x1000}, {0x59, 0x3, 0x5, 0x3, 0x80000001, 0x7}, {0x7ceb, 0x9, 0x7, 0x261, 0x8, 0x7ff}, {0x40, 0x4, 0x6, 0x1, 0x7, 0x6}, {0x4, 0x4, 0x9, 0x1000, 0x4, 0xd}, {0x4c, 0x1, 0x3, 0x2, 0x2, 0x7}, {0x2f, 0x1, 0x6, 0x7fffffff, 0xffffffff, 0xfffff954}, {0x3, 0x6, 0x0, 0x5, 0x7, 0x4}, {0x8001, 0x4, 0xffffffff, 0xa2b, 0x5d, 0x8}, {0x40, 0xe, 0xe, 0x1, 0x97f, 0x2d00}, {0x3e3, 0x6, 0x1, 0x7, 0xfffffffa, 0xa0}, {0x5, 0x9, 0x3aa, 0xd, 0x7ffff7ff, 0xa}, {0x7ff, 0x3, 0x4, 0x5, 0x80, 0x7}, {0xb51, 0x7, 0xffff, 0x9, 0xffff, 0x2}, {0x10001, 0x6, 0x7, 0x1, 0x5, 0x6}, {0x0, 0x1, 0x0, 0x4, 0x40, 0x1}, {0x800000, 0x7, 0x0, 0x8, 0x6, 0x8}, {0xcb, 0x7, 0x7, 0x0, 0xfffffffc, 0x1}, {0x7, 0xc, 0x9, 0x2, 0x40, 0x1}, {0xccb7, 0x1, 0x800, 0x0, 0x6, 0x229c}, {0x4, 0x5, 0x6, 0x8, 0x2, 0xdf1}], [{0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0xb}, {0x8dfb4a42dae2f56d}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x5c96fd0c102cb707}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {0x861c20290662cc64}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {0x0}], 0x2}, 0x4) 1m30.777994579s ago: executing program 4 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m30.684964823s ago: executing program 4 (id=595): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffff76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r6, 0x400454e2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b0b, &(0x7f0000000100)={'virt_wifi0\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0xe, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 1m29.720390321s ago: executing program 4 (id=597): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd32f467963a47ef0300621fe45a92", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 1m29.408490626s ago: executing program 4 (id=599): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m28.401637496s ago: executing program 4 (id=602): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x2, 0x2, 0x0, 0x3}}, 0x26) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000700)={0x141, 0x29, 0x2, {0x7fff, [{{0x40, 0x2, 0x2}, 0x2, 0x1, 0x7, './file0'}, {{0x20, 0x1, 0x8}, 0x4, 0x5, 0x7, './file0'}, {{0x4, 0x1, 0x4}, 0x4, 0x6, 0x7, './file0'}, {{0x8, 0x4}, 0x3, 0xa, 0x7, './file0'}, {{0x2, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x4, 0x9, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x32, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x7}, 0x1, 0x8, 0x7, './file0'}, {{0x10, 0x1}, 0x6, 0x1, 0x7, './file0'}, {{0x2, 0x3, 0x5}, 0x5, 0x7, 0x7, './file0'}]}}, 0x141) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$inet6(0xa, 0x4, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) close(0x3) 1m13.194749791s ago: executing program 33 (id=602): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x2, 0x2, 0x0, 0x3}}, 0x26) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000700)={0x141, 0x29, 0x2, {0x7fff, [{{0x40, 0x2, 0x2}, 0x2, 0x1, 0x7, './file0'}, {{0x20, 0x1, 0x8}, 0x4, 0x5, 0x7, './file0'}, {{0x4, 0x1, 0x4}, 0x4, 0x6, 0x7, './file0'}, {{0x8, 0x4}, 0x3, 0xa, 0x7, './file0'}, {{0x2, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x4, 0x9, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x32, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x7}, 0x1, 0x8, 0x7, './file0'}, {{0x10, 0x1}, 0x6, 0x1, 0x7, './file0'}, {{0x2, 0x3, 0x5}, 0x5, 0x7, 0x7, './file0'}]}}, 0x141) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$inet6(0xa, 0x4, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) close(0x3) 10.269877521s ago: executing program 5 (id=1031): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 9.020697243s ago: executing program 6 (id=1040): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8000, 0x0, 0xb3, 0x2, 0xfffffe0000000001, 0x7, 0x2}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150002000000db1f98379ee743bce405e34adb49fbf4882956384975ca543c50abc866a7f2b2fbe56bea523ad42af8aee7d18450c9cf847cbabecc41147229a037fe8c9114b9f0a492449a1b08ece68ae135dd35fbfb2f9fe4ae2749c6a623bbd38b91511330591228e02579caa09c2a2ed5", @ANYRES32=r1, @ANYRES64=r2, @ANYRES8=r1, @ANYRES8=r2], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r3, @ANYRES32=r1, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setresuid(0x0, 0xee00, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb8, 0x400, 0x0, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000580)="ce5ad486ba4784cef5de942a40e8af07467f7be8d9f7d455faf4739e414a88a221e2f4e401ceaae3c3ef18a1ac93b0b4f4b37e3c97e6c9f2db9ba5ce8de6367a68318f2688d5055c572bf4d06864fca0fdce6686d47a2ccc", 0x58, 0x4004810}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 6.928690267s ago: executing program 6 (id=1048): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 6.014966623s ago: executing program 2 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000640)=@ethtool_stats}) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) r3 = socket(0x40000000015, 0x5, 0x0) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xe1) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000082) unshare(0x24020400) flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/56, 0x38) 5.999836173s ago: executing program 5 (id=1053): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x4c, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x46, 0x7, {0x4e20, 0x4e20, [0x39, 0x5, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x7c, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffff44, 0x51}}}}, [@NL80211_ATTR_FRAME={0x5a, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @random="25c67244f305", @from_mac=@broadcast, {0x5, 0x5}}, @random="2b5ac0d4ee069100047c0eb5f626b9bc4ec17bd84fc64102c9b750196e54a5d969c7d880db1bae2c03e297709000955625528ac7477843c99397ee03d21f"}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200041c1}, 0x4008000) 5.767545534s ago: executing program 5 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x1000000}, 0x0) 5.756329375s ago: executing program 2 (id=1056): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffff76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r6, 0x400454e2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b0b, &(0x7f0000000100)={'virt_wifi0\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0xe, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 5.609708052s ago: executing program 5 (id=1057): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) syslog(0x3, 0x0, 0x0) r1 = socket(0x2, 0x3, 0xff) close_range(r1, 0xffffffffffffffff, 0x2) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40014) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0x4, 0x0) 5.332805086s ago: executing program 0 (id=1059): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd32f467963a47ef0300621fe45a92", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 4.946769175s ago: executing program 0 (id=1060): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 4.694010498s ago: executing program 2 (id=1061): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) 4.64855934s ago: executing program 6 (id=1062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4.553839035s ago: executing program 0 (id=1063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.507918797s ago: executing program 2 (id=1064): syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000740)=@string={0x29, 0x3, "69872b478735e3e26568d0288cdee5b5fa77be139ff304cac06714d08ef70f3d37785da8f9dedf"}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xe}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(r4, 0xf, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 4.418214951s ago: executing program 6 (id=1065): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.218787552s ago: executing program 0 (id=1066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000640)=@ethtool_stats}) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) writev(r1, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xe1) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000082) unshare(0x24020400) flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/56, 0x38) 4.065934209s ago: executing program 0 (id=1067): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x4c, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x46, 0x7, {0x4e20, 0x4e20, [0x39, 0x5, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x7c, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffff44, 0x51}}}}, [@NL80211_ATTR_FRAME={0x5a, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @random="25c67244f305", @from_mac=@broadcast, {0x5, 0x5}}, @random="2b5ac0d4ee069100047c0eb5f626b9bc4ec17bd84fc64102c9b750196e54a5d969c7d880db1bae2c03e297709000955625528ac7477843c99397ee03d21f"}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200041c1}, 0x4008000) 3.930058456s ago: executing program 0 (id=1068): syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000740)=@string={0x29, 0x3, "69872b478735e3e26568d0288cdee5b5fa77be139ff304cac06714d08ef70f3d37785da8f9dedf"}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xe}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(r4, 0xf, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 2.574351443s ago: executing program 5 (id=1072): unshare(0x62000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) 2.02883106s ago: executing program 5 (id=1073): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 1.63309792s ago: executing program 1 (id=1074): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') fcntl$setstatus(r0, 0x4, 0x40800) r1 = syz_io_uring_setup(0xbd9, &(0x7f00000002c0)={0x0, 0x9009, 0x1000, 0x0, 0x3c3}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xa1f, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c080000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRESOCT=r3, @ANYRES32, @ANYRES16=r1], 0x50) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fddbdf2500000000", @ANYRES32=r6], 0x1c}}, 0x20000000) r7 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800}) 1.453848148s ago: executing program 1 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.315577515s ago: executing program 1 (id=1076): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x5], 0x1}}, 0x200}) 1.105529066s ago: executing program 1 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 788.402802ms ago: executing program 1 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000640)=@ethtool_stats}) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) writev(r1, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xe1) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000082) unshare(0x24020400) flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/56, 0x38) 559.912123ms ago: executing program 1 (id=1079): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8000, 0x0, 0xb3, 0x2, 0xfffffe0000000001, 0x7, 0x2}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150002000000db1f98379ee743bce405e34adb49fbf4882956384975ca543c50abc866a7f2b2fbe56bea523ad42af8aee7d18450c9cf847cbabecc41147229a037fe8c9114b9f0a492449a1b08ece68ae135dd35fbfb2f9fe4ae2749c6a623bbd38b91511330591228e02579caa09c2a2ed5", @ANYRES32=r1, @ANYRES64=r2, @ANYRES8=r1, @ANYRES8=r2], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r3, @ANYRES32=r1, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setresuid(0x0, 0xee00, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb8, 0x400, 0x0, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000580)="ce5ad486ba4784cef5de942a40e8af07467f7be8d9f7d455faf4739e414a88a221e2f4e401ceaae3c3ef18a1ac93b0b4f4b37e3c97e6c9f2db9ba5ce8de6367a68318f2688d5055c572bf4d06864fca0fdce6686d47a2ccc", 0x58, 0x4004810}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 507.037506ms ago: executing program 6 (id=1080): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x4c, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x46, 0x7, {0x4e20, 0x4e20, [0x39, 0x5, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x7c, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffff44, 0x51}}}}, [@NL80211_ATTR_FRAME={0x5a, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @random="25c67244f305", @from_mac=@broadcast, {0x5, 0x5}}, @random="2b5ac0d4ee069100047c0eb5f626b9bc4ec17bd84fc64102c9b750196e54a5d969c7d880db1bae2c03e297709000955625528ac7477843c99397ee03d21f"}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200041c1}, 0x4008000) 389.897412ms ago: executing program 2 (id=1081): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff00000000"], 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd32f467963a47ef0300621fe45a92", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 268.305888ms ago: executing program 6 (id=1082): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) syslog(0x3, 0x0, 0x0) r1 = socket(0x2, 0x3, 0xff) close_range(r1, 0xffffffffffffffff, 0x2) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40014) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0x4, 0x0) 0s ago: executing program 2 (id=1083): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r2, 0x8, 0x20}, &(0x7f00000002c0)=0xc) kernel console output (not intermixed with test programs): 012][ T5243] tipc: Node identity eadf74efbe33, cluster identity 4711 [ 95.255654][ T4260] usb 4-1: Manufacturer: syz [ 95.263549][ T4260] usb 4-1: SerialNumber: syz [ 95.269933][ T5243] tipc: Enabled bearer , priority 0 [ 95.281843][ T5247] device syzkaller0 entered promiscuous mode [ 95.312366][ T5243] tipc: Resetting bearer [ 95.349616][ T5242] tipc: Disabling bearer [ 95.480778][ T5254] device syzkaller0 entered promiscuous mode [ 95.597676][ T5266] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 95.642788][ T4260] usb 4-1: USB disconnect, device number 3 [ 95.704007][ T5268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.782845][ T5263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.841571][ T5263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.876718][ T5270] device syzkaller0 entered promiscuous mode [ 96.262782][ T5281] device syzkaller0 entered promiscuous mode [ 96.276136][ T5265] loop0: detected capacity change from 0 to 32768 [ 96.341773][ T5265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.257 (5265) [ 96.514685][ T5265] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 96.539643][ T5265] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 96.570049][ T5265] BTRFS info (device loop0): trying to use backup root at mount time [ 96.588939][ T5265] BTRFS info (device loop0): setting nodatasum [ 96.607444][ T5290] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 96.610530][ T5265] BTRFS info (device loop0): enabling ssd optimizations [ 96.649204][ T5265] BTRFS info (device loop0): using spread ssd allocation scheme [ 96.701513][ T5265] BTRFS info (device loop0): turning on flush-on-commit [ 96.757876][ T5265] BTRFS info (device loop0): force zlib compression, level 3 [ 96.772126][ T5265] BTRFS info (device loop0): using free space tree [ 96.828488][ T5265] BTRFS info (device loop0): has skinny extents [ 96.840669][ T5294] device syzkaller0 entered promiscuous mode [ 97.150695][ T5265] BTRFS info (device loop0): balance: start -d -m [ 97.189914][ T5265] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 97.333532][ T4451] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.380543][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 97.390076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 97.517319][ T5265] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 97.555890][ T5325] device syzkaller0 entered promiscuous mode [ 97.753467][ T4451] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.762691][ T4451] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 97.774199][ T4451] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.795283][ T4451] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 97.811099][ T4451] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 97.858918][ T5333] device syzkaller0 entered promiscuous mode [ 98.038137][ T4451] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.060825][ T4451] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.081189][ T5338] tipc: Enabled bearer , priority 0 [ 98.093302][ T4451] usb 3-1: Product: syz [ 98.109214][ T4451] usb 3-1: Manufacturer: syz [ 98.123058][ T5265] BTRFS info (device loop0): found 12 extents, stage: move data extents [ 98.135626][ T5338] tipc: Resetting bearer [ 98.156424][ T5337] tipc: Disabling bearer [ 98.156863][ T5341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.197348][ T4451] cdc_wdm 3-1:1.0: skipping garbage [ 98.205078][ T4451] cdc_wdm 3-1:1.0: skipping garbage [ 98.229462][ T5265] BTRFS info (device loop0): balance: canceled [ 98.250158][ T4451] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 98.260591][ T4451] cdc_wdm 3-1:1.0: Unknown control protocol [ 98.269004][ T5341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.305737][ T5341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.480711][ T5345] device syzkaller0 entered promiscuous mode [ 98.652408][ T4586] usb 3-1: USB disconnect, device number 3 [ 98.663701][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 98.671224][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 98.677341][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 98.929267][ T5354] device syzkaller0 entered promiscuous mode [ 99.149443][ T5358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 99.355671][ T5364] device syzkaller0 entered promiscuous mode [ 99.517016][ T5368] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 99.713606][ T5374] device syzkaller0 entered promiscuous mode [ 99.960313][ T5384] device syzkaller0 entered promiscuous mode [ 100.080876][ T5386] tipc: Enabled bearer , priority 0 [ 100.106427][ T5386] tipc: Resetting bearer [ 100.205063][ T5385] tipc: Disabling bearer [ 100.315404][ T5392] device syzkaller0 entered promiscuous mode [ 100.420506][ T5397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 100.463586][ T5396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.578560][ T5382] loop0: detected capacity change from 0 to 32768 [ 100.579900][ T5396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.595345][ T5401] device syzkaller0 entered promiscuous mode [ 100.637166][ T5396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.659137][ T5382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.285 (5382) [ 100.727429][ T5382] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 100.740645][ T5382] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 100.752877][ T5382] BTRFS info (device loop0): trying to use backup root at mount time [ 100.761902][ T5382] BTRFS info (device loop0): setting nodatasum [ 100.778525][ T5382] BTRFS info (device loop0): enabling ssd optimizations [ 100.788334][ T5382] BTRFS info (device loop0): using spread ssd allocation scheme [ 100.822502][ T5382] BTRFS info (device loop0): turning on flush-on-commit [ 100.841332][ T5382] BTRFS info (device loop0): force zlib compression, level 3 [ 100.851025][ T5382] BTRFS info (device loop0): using free space tree [ 100.859170][ T5382] BTRFS info (device loop0): has skinny extents [ 100.903439][ T5010] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.051739][ T5424] device syzkaller0 entered promiscuous mode [ 101.152924][ T5382] BTRFS info (device loop0): balance: start -d -m [ 101.173838][ T5382] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 101.221396][ T5437] device syzkaller0 entered promiscuous mode [ 101.363805][ T5010] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.386512][ T5382] BTRFS info (device loop0): found 3 extents, stage: move data extents [ 101.475499][ T5010] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.500659][ T5010] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 101.544214][ T5010] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.575801][ T5382] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 101.665958][ T5450] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 101.723521][ T5010] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 101.755162][ T5010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.806095][ T5010] usb 4-1: Product: syz [ 101.832119][ T5010] usb 4-1: Manufacturer: syz [ 101.843664][ T5452] tipc: Enabled bearer , priority 0 [ 101.867681][ T5452] tipc: Resetting bearer [ 101.868107][ T5010] usb 4-1: SerialNumber: syz [ 101.899218][ T5451] tipc: Disabling bearer [ 101.963762][ T5382] BTRFS info (device loop0): found 14 extents, stage: move data extents [ 102.072258][ T5455] device syzkaller0 entered promiscuous mode [ 102.152961][ T5382] BTRFS info (device loop0): found 4 extents, stage: update data pointers [ 102.265479][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 102.294966][ T5459] device syzkaller0 entered promiscuous mode [ 102.325236][ T5010] usb 4-1: USB disconnect, device number 4 [ 102.582576][ T5382] BTRFS info (device loop0): balance: ended with status: 0 [ 102.644308][ T4839] udevd[4839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.034698][ T5475] device syzkaller0 entered promiscuous mode [ 103.193652][ T5480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.207348][ T5478] device syzkaller0 entered promiscuous mode [ 103.237448][ T4260] wlan1: authenticate with 08:02:11:00:00:00 [ 103.246525][ T4260] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 103.267642][ T5480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.277750][ T4249] wlan1: authenticated [ 103.282474][ T4586] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 103.297338][ T4586] wlan1: associating with AP with corrupt probe response [ 103.306108][ T5480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.326835][ T4292] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 103.369124][ T5483] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 103.380496][ T4292] wlan1: associated [ 103.431349][ T5483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.306'. [ 103.753300][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 103.820673][ T5493] tipc: Enabling of bearer rejected, failed to enable media [ 103.865966][ T5496] device syzkaller0 entered promiscuous mode [ 104.553446][ T4260] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.647809][ T5518] device syzkaller0 entered promiscuous mode [ 104.966166][ T5527] device syzkaller0 entered promiscuous mode [ 104.993606][ T4260] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.038308][ T5529] device syzkaller0 entered promiscuous mode [ 105.113661][ T4260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.134107][ T4260] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 105.153396][ T4260] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.343668][ T4260] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 105.365027][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.377329][ T4260] usb 4-1: Product: syz [ 105.389052][ T4260] usb 4-1: Manufacturer: syz [ 105.403066][ T4260] usb 4-1: SerialNumber: syz [ 105.449195][ T5538] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 105.529510][ T5538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 105.661119][ T5541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.737234][ T5544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.787129][ T5541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.838552][ T4260] usb 4-1: USB disconnect, device number 5 [ 106.351998][ T5548] tipc: Enabling of bearer rejected, failed to enable media [ 106.384084][ T5546] device syzkaller0 entered promiscuous mode [ 106.405514][ T5543] loop4: detected capacity change from 0 to 32768 [ 106.480150][ T5543] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.328 (5543) [ 106.539703][ T5543] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 106.596438][ T5543] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 106.660388][ T5543] BTRFS info (device loop4): trying to use backup root at mount time [ 106.703109][ T5543] BTRFS info (device loop4): setting nodatasum [ 106.711712][ T5558] device syzkaller0 entered promiscuous mode [ 106.730613][ T5543] BTRFS info (device loop4): enabling ssd optimizations [ 106.759627][ T5543] BTRFS info (device loop4): using spread ssd allocation scheme [ 106.792304][ T5543] BTRFS info (device loop4): turning on flush-on-commit [ 106.810042][ T5543] BTRFS info (device loop4): force zlib compression, level 3 [ 106.857466][ T5543] BTRFS info (device loop4): using free space tree [ 106.877744][ T5543] BTRFS info (device loop4): has skinny extents [ 106.991797][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 107.114453][ T5583] device syzkaller0 entered promiscuous mode [ 107.248738][ T5594] device syzkaller0 entered promiscuous mode [ 107.257818][ T5543] BTRFS info (device loop4): balance: start -d -m [ 107.269537][ T5543] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 107.320332][ T5543] BTRFS info (device loop4): found 3 extents, stage: move data extents [ 107.353691][ T5543] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 107.409907][ T5543] BTRFS info (device loop4): found 9 extents, stage: move data extents [ 107.487798][ T5543] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 107.772842][ T5543] BTRFS info (device loop4): balance: ended with status: 0 [ 108.263375][ T5008] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.420494][ T5612] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 108.582921][ T5616] device syzkaller0 entered promiscuous mode [ 108.715265][ T5008] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.803747][ T5008] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.823591][ T5008] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 108.837889][ T5008] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.843413][ T4586] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.003869][ T5008] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 109.023666][ T5008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.031705][ T5008] usb 1-1: Product: syz [ 109.056715][ T5008] usb 1-1: Manufacturer: syz [ 109.068805][ T5008] usb 1-1: SerialNumber: syz [ 109.181234][ T5621] device syzkaller0 entered promiscuous mode [ 109.283918][ T4586] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.305891][ T5623] tipc: Enabling of bearer rejected, failed to enable media [ 109.331983][ T4586] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 109.353776][ T4586] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.364075][ T4586] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 109.389541][ T4586] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 109.539255][ T5008] usb 1-1: USB disconnect, device number 4 [ 109.548348][ T5632] device syzkaller0 entered promiscuous mode [ 109.564978][ T4586] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.585994][ T4586] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.615514][ T4586] usb 3-1: Product: syz [ 109.625943][ T4586] usb 3-1: Manufacturer: syz [ 109.702130][ T4586] cdc_wdm 3-1:1.0: skipping garbage [ 109.708530][ T5639] device syzkaller0 entered promiscuous mode [ 109.719296][ T4586] cdc_wdm 3-1:1.0: skipping garbage [ 109.728550][ T5639] tc action pedit 'at' offset 39138 out of bounds [ 109.742215][ T4586] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 109.757103][ T4586] cdc_wdm 3-1:1.0: Unknown control protocol [ 109.789959][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 110.013439][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 110.020099][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 110.034165][ T4193] usb 3-1: USB disconnect, device number 4 [ 110.356644][ T5657] loop1: detected capacity change from 0 to 32768 [ 110.375745][ T5657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.354 (5657) [ 110.444998][ T5657] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 110.461663][ T5659] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 110.467500][ T5657] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 110.502231][ T5659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.353'. [ 110.519349][ T5657] BTRFS info (device loop1): trying to use backup root at mount time [ 110.528334][ T5657] BTRFS info (device loop1): setting nodatasum [ 110.535077][ T5657] BTRFS info (device loop1): enabling ssd optimizations [ 110.542310][ T5657] BTRFS info (device loop1): using spread ssd allocation scheme [ 110.551409][ T5657] BTRFS info (device loop1): turning on flush-on-commit [ 110.561348][ T5657] BTRFS info (device loop1): force zlib compression, level 3 [ 110.572252][ T5657] BTRFS info (device loop1): using free space tree [ 110.582147][ T5657] BTRFS info (device loop1): has skinny extents [ 110.788666][ T5657] BTRFS info (device loop1): balance: start -d -m [ 110.814438][ T5657] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 110.901203][ T5683] device syzkaller0 entered promiscuous mode [ 111.016105][ T5657] BTRFS info (device loop1): found 3 extents, stage: move data extents [ 111.209576][ T5690] device syzkaller0 entered promiscuous mode [ 111.212522][ T5657] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 111.496434][ T5693] tipc: Enabling of bearer rejected, failed to enable media [ 111.510762][ T5657] BTRFS info (device loop1): found 9 extents, stage: move data extents [ 111.637589][ T5701] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 111.667941][ T5657] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 111.760537][ T5701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 111.802271][ T5657] BTRFS info (device loop1): balance: ended with status: 0 [ 112.140862][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 112.290955][ T5713] device syzkaller0 entered promiscuous mode [ 112.863346][ T4603] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.942278][ T5717] device syzkaller0 entered promiscuous mode [ 113.323419][ T4603] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.403559][ T4603] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.418879][ T4603] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 113.442189][ T4603] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.483366][ T4602] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.614680][ T4603] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 113.637424][ T4603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.657979][ T4603] usb 5-1: Product: syz [ 113.668596][ T4603] usb 5-1: Manufacturer: syz [ 113.683591][ T4603] usb 5-1: SerialNumber: syz [ 113.700805][ T5728] device syzkaller0 entered promiscuous mode [ 113.841818][ T5730] device syzkaller0 entered promiscuous mode [ 113.848496][ T4602] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.862497][ T4602] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.885382][ T4602] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.903996][ T4602] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 113.922515][ T4602] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 114.073550][ T4602] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.081117][ T5733] tipc: Enabling of bearer rejected, failed to enable media [ 114.122534][ T4602] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.138107][ T4603] usb 5-1: USB disconnect, device number 2 [ 114.173467][ T4602] usb 2-1: Product: syz [ 114.229327][ T4602] usb 2-1: Manufacturer: syz [ 114.292746][ T4841] udevd[4841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.334317][ T4602] cdc_wdm 2-1:1.0: skipping garbage [ 114.340253][ T4602] cdc_wdm 2-1:1.0: skipping garbage [ 114.391580][ T4602] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 114.421949][ T4602] cdc_wdm 2-1:1.0: Unknown control protocol [ 114.517652][ T5752] device syzkaller0 entered promiscuous mode [ 114.683809][ T5008] usb 2-1: USB disconnect, device number 2 [ 114.791324][ T5763] device syzkaller0 entered promiscuous mode [ 115.110668][ T5757] loop0: detected capacity change from 0 to 32768 [ 115.137820][ T5757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.376 (5757) [ 115.240712][ T5757] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 115.288601][ T5757] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 115.306959][ T5757] BTRFS info (device loop0): trying to use backup root at mount time [ 115.320829][ T5757] BTRFS info (device loop0): setting nodatasum [ 115.347404][ T5757] BTRFS info (device loop0): enabling ssd optimizations [ 115.366857][ T5757] BTRFS info (device loop0): using spread ssd allocation scheme [ 115.387130][ T5757] BTRFS info (device loop0): turning on flush-on-commit [ 115.401772][ T5775] device syzkaller0 entered promiscuous mode [ 115.407464][ T5757] BTRFS info (device loop0): force zlib compression, level 3 [ 115.447244][ T5757] BTRFS info (device loop0): using free space tree [ 115.482556][ T5757] BTRFS info (device loop0): has skinny extents [ 115.490388][ T5777] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 115.525182][ T5777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.379'. [ 115.546864][ T5778] device syzkaller0 entered promiscuous mode [ 115.746777][ T5757] BTRFS info (device loop0): balance: start -d -m [ 115.821006][ T5757] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 116.158701][ T5757] BTRFS info (device loop0): found 2 extents, stage: move data extents [ 116.263515][ T4879] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.342645][ T5757] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 116.703265][ T5814] tipc: Enabling of bearer rejected, failed to enable media [ 116.713530][ T4879] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.788092][ T5757] BTRFS info (device loop0): found 17 extents, stage: move data extents [ 116.833490][ T4879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.856821][ T4879] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 116.893150][ T4879] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.082519][ T5824] device syzkaller0 entered promiscuous mode [ 117.103596][ T4879] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 117.121252][ T4879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.147920][ T4879] usb 2-1: Product: syz [ 117.159832][ T5757] BTRFS info (device loop0): found 6 extents, stage: update data pointers [ 117.170346][ T4879] usb 2-1: Manufacturer: syz [ 117.181816][ T4879] usb 2-1: SerialNumber: syz [ 117.538506][ T5757] BTRFS info (device loop0): balance: ended with status: 0 [ 117.607155][ T4879] usb 2-1: USB disconnect, device number 3 [ 118.107355][ T5828] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 118.535469][ T5841] device syzkaller0 entered promiscuous mode [ 118.675502][ T5843] device syzkaller0 entered promiscuous mode [ 118.753422][ T4879] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.945471][ T5008] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.981910][ T5855] tipc: Enabling of bearer rejected, failed to enable media [ 119.173632][ T4879] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.192964][ T4879] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 119.210148][ T4879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.233491][ T4879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 119.255269][ T4879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 119.360015][ T5865] loop2: detected capacity change from 0 to 32768 [ 119.373703][ T5008] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.382791][ T5008] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 119.394655][ T4879] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.404227][ T5008] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.424146][ T5865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.401 (5865) [ 119.426866][ T4879] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.445831][ T5008] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 119.457988][ T4879] usb 2-1: Product: syz [ 119.462728][ T5008] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 119.476002][ T4879] usb 2-1: Manufacturer: syz [ 119.497568][ T5865] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 119.509870][ T5865] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 119.522706][ T5865] BTRFS info (device loop2): trying to use backup root at mount time [ 119.524737][ T4879] cdc_wdm 2-1:1.0: skipping garbage [ 119.535507][ T5865] BTRFS info (device loop2): setting nodatasum [ 119.539670][ T4879] cdc_wdm 2-1:1.0: skipping garbage [ 119.553910][ T4879] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 119.560195][ T4879] cdc_wdm 2-1:1.0: Unknown control protocol [ 119.563368][ T5865] BTRFS info (device loop2): enabling ssd optimizations [ 119.591879][ T5865] BTRFS info (device loop2): using spread ssd allocation scheme [ 119.613570][ T5008] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.618126][ T5865] BTRFS info (device loop2): turning on flush-on-commit [ 119.628304][ T5008] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.633103][ T5865] BTRFS info (device loop2): force zlib compression, level 3 [ 119.652751][ T5865] BTRFS info (device loop2): using free space tree [ 119.659482][ T5008] usb 5-1: Product: syz [ 119.659507][ T5008] usb 5-1: Manufacturer: syz [ 119.677633][ T5865] BTRFS info (device loop2): has skinny extents [ 119.704497][ T5008] cdc_wdm 5-1:1.0: skipping garbage [ 119.709767][ T5008] cdc_wdm 5-1:1.0: skipping garbage [ 119.752029][ T5008] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 119.787577][ T5008] cdc_wdm 5-1:1.0: Unknown control protocol [ 119.818843][ T5865] BTRFS info (device loop2): balance: start -d -m [ 119.836982][ T5865] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 119.989424][ T5865] BTRFS info (device loop2): found 3 extents, stage: move data extents [ 120.161688][ T5865] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 120.173407][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 120.180235][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 120.189518][ T4602] usb 2-1: USB disconnect, device number 4 [ 120.286723][ T4231] usb 5-1: USB disconnect, device number 3 [ 120.297792][ T4447] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.456454][ T5865] BTRFS info (device loop2): found 11 extents, stage: move data extents [ 120.492768][ T5912] device syzkaller0 entered promiscuous mode [ 120.516083][ T5865] BTRFS info (device loop2): found 2 extents, stage: update data pointers [ 120.549208][ T5865] BTRFS info (device loop2): balance: ended with status: 0 [ 120.723437][ T4447] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.772365][ T5917] device syzkaller0 entered promiscuous mode [ 120.807409][ T4447] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.820137][ T4447] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 120.840479][ T4447] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.877241][ T5918] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 120.898760][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.408'. [ 121.053385][ T4447] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 121.067976][ T4447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.099534][ T4447] usb 1-1: Product: syz [ 121.131020][ T4447] usb 1-1: Manufacturer: syz [ 121.166872][ T4447] usb 1-1: SerialNumber: syz [ 121.642535][ T4447] usb 1-1: USB disconnect, device number 5 [ 121.700738][ T5922] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 121.807477][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.410'. [ 122.042693][ T5933] tipc: Enabling of bearer rejected, failed to enable media [ 122.733339][ T4879] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.878633][ T5952] device syzkaller0 entered promiscuous mode [ 123.093688][ T4879] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.118368][ T4879] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 123.188172][ T4879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 123.214255][ T4879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 123.226325][ T4879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 123.363546][ T4879] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 123.383310][ T4229] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.402948][ T4879] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.413020][ T4879] usb 4-1: Product: syz [ 123.427056][ T4879] usb 4-1: Manufacturer: syz [ 123.487890][ T4879] cdc_wdm 4-1:1.0: skipping garbage [ 123.497992][ T4879] cdc_wdm 4-1:1.0: skipping garbage [ 123.526981][ T4879] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 123.542581][ T4879] cdc_wdm 4-1:1.0: Unknown control protocol [ 123.773577][ T4229] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.799886][ T4229] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 123.803433][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 123.817773][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 123.828659][ T4879] usb 4-1: USB disconnect, device number 6 [ 123.873368][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 123.889146][ T5958] loop0: detected capacity change from 0 to 32768 [ 123.930609][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 123.931476][ T5958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.421 (5958) [ 123.981810][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 124.071387][ T5964] device syzkaller0 entered promiscuous mode [ 124.072075][ T5958] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 124.096905][ T5958] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 124.108634][ T5958] BTRFS info (device loop0): trying to use backup root at mount time [ 124.117398][ T5958] BTRFS info (device loop0): setting nodatasum [ 124.123616][ T4229] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.124948][ T5958] BTRFS info (device loop0): enabling ssd optimizations [ 124.132997][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.133021][ T4229] usb 3-1: Product: syz [ 124.133034][ T4229] usb 3-1: Manufacturer: syz [ 124.185306][ T5958] BTRFS info (device loop0): using spread ssd allocation scheme [ 124.203083][ T5958] BTRFS info (device loop0): turning on flush-on-commit [ 124.211218][ T5958] BTRFS info (device loop0): force zlib compression, level 3 [ 124.225943][ T5958] BTRFS info (device loop0): using free space tree [ 124.236092][ T5958] BTRFS info (device loop0): has skinny extents [ 124.245839][ T4229] cdc_wdm 3-1:1.0: skipping garbage [ 124.253567][ T4229] cdc_wdm 3-1:1.0: skipping garbage [ 124.261593][ T4229] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 124.298469][ T4229] cdc_wdm 3-1:1.0: Unknown control protocol [ 124.497093][ T5958] BTRFS info (device loop0): balance: start -d -m [ 124.591293][ T5958] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 124.642843][ T5994] tipc: Enabling of bearer rejected, failed to enable media [ 124.787981][ T4229] usb 3-1: USB disconnect, device number 5 [ 124.884772][ T4879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.023662][ T5958] BTRFS info (device loop0): found 1 extents, stage: move data extents [ 125.189566][ T6015] device syzkaller0 entered promiscuous mode [ 125.265218][ T5958] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 125.313462][ T4879] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.409725][ T4879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.409881][ T6022] device syzkaller0 entered promiscuous mode [ 125.440267][ T4879] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 125.453675][ T4879] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.546728][ T5958] BTRFS info (device loop0): found 11 extents, stage: move data extents [ 125.653979][ T4879] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 125.687951][ T4879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.732912][ T4879] usb 2-1: Product: syz [ 125.757468][ T5958] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 125.783582][ T4879] usb 2-1: Manufacturer: syz [ 125.806714][ T4879] usb 2-1: SerialNumber: syz [ 126.045470][ T5958] BTRFS info (device loop0): balance: ended with status: 0 [ 126.224913][ T4229] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.253876][ T6040] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 126.293867][ T4879] usb 2-1: USB disconnect, device number 5 [ 126.324677][ T6041] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 126.585094][ T4841] udevd[4841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.613645][ T4229] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.629459][ T4229] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.688716][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.737469][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 126.784967][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 126.817396][ T6044] tipc: Enabling of bearer rejected, failed to enable media [ 126.933423][ T4229] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.959124][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.013618][ T4229] usb 3-1: Product: syz [ 127.039188][ T4229] usb 3-1: Manufacturer: syz [ 127.114404][ T4229] cdc_wdm 3-1:1.0: skipping garbage [ 127.119730][ T4229] cdc_wdm 3-1:1.0: skipping garbage [ 127.186515][ T4229] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 127.213287][ T4229] cdc_wdm 3-1:1.0: Unknown control protocol [ 127.469009][ T4447] usb 3-1: USB disconnect, device number 6 [ 127.483295][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 127.490077][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 127.496371][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 128.154572][ T6064] device syzkaller0 entered promiscuous mode [ 128.206228][ T6067] device syzkaller0 entered promiscuous mode [ 128.473453][ T1111] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.568479][ T6088] tipc: Enabling of bearer rejected, failed to enable media [ 128.833589][ T1111] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.872358][ T1111] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.893399][ T4435] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.956325][ T1111] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.981343][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 129.002712][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 129.062671][ T6106] device syzkaller0 entered promiscuous mode [ 129.153624][ T1111] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.197557][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.238365][ T6113] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 129.249934][ T6114] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 129.262053][ T1111] usb 5-1: Product: syz [ 129.266850][ T1111] usb 5-1: Manufacturer: syz [ 129.311485][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'. [ 129.315124][ T1111] cdc_wdm 5-1:1.0: skipping garbage [ 129.333677][ T4435] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.344557][ T6114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 129.351137][ T1111] cdc_wdm 5-1:1.0: skipping garbage [ 129.370013][ T1111] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 129.381710][ T1111] cdc_wdm 5-1:1.0: Unknown control protocol [ 129.434466][ T4435] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.482652][ T4435] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 129.513647][ T4435] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.637145][ T6119] device syzkaller0 entered promiscuous mode [ 129.763533][ T4435] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 129.790260][ T4435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.835804][ T4435] usb 2-1: Product: syz [ 129.841207][ T4435] usb 2-1: Manufacturer: syz [ 129.847182][ T4435] usb 2-1: SerialNumber: syz [ 130.294921][ T4435] usb 2-1: USB disconnect, device number 6 [ 131.193441][ T1111] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.230497][ T4228] usb 5-1: USB disconnect, device number 4 [ 131.314198][ T6142] tipc: Enabling of bearer rejected, failed to enable media [ 131.574053][ T1111] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.594760][ T1111] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.629992][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.671553][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 131.718289][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 131.831140][ T6152] device syzkaller0 entered promiscuous mode [ 131.915600][ T1111] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.968681][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.034392][ T1111] usb 2-1: Product: syz [ 132.042642][ T1111] usb 2-1: Manufacturer: syz [ 132.120374][ T1111] cdc_wdm 2-1:1.0: skipping garbage [ 132.166063][ T1111] cdc_wdm 2-1:1.0: skipping garbage [ 132.196753][ T1111] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 132.224245][ T6164] device syzkaller0 entered promiscuous mode [ 132.231881][ T1111] cdc_wdm 2-1:1.0: Unknown control protocol [ 132.443349][ T4435] usb 2-1: USB disconnect, device number 7 [ 132.453369][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 132.460370][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 132.466547][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 132.625232][ T6186] tipc: Enabled bearer , priority 0 [ 132.646775][ T6186] tipc: Resetting bearer [ 132.662891][ T6184] tipc: Disabling bearer [ 132.769205][ T6191] device syzkaller0 entered promiscuous mode [ 132.803631][ T4587] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.873452][ T1111] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.204925][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.211374][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.213572][ T4587] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.263732][ T1111] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.282109][ T1111] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 133.306084][ T1111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.323541][ T4587] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.344405][ T4587] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 133.363037][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 133.392300][ T4587] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.408761][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 133.554226][ T1111] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.573631][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.583992][ T4587] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 133.605968][ T4587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.619195][ T1111] usb 1-1: Product: syz [ 133.630529][ T1111] usb 1-1: Manufacturer: syz [ 133.641136][ T4587] usb 3-1: Product: syz [ 133.662154][ T4587] usb 3-1: Manufacturer: syz [ 133.681020][ T4587] usb 3-1: SerialNumber: syz [ 133.694518][ T1111] cdc_wdm 1-1:1.0: skipping garbage [ 133.703306][ T1111] cdc_wdm 1-1:1.0: skipping garbage [ 133.733707][ T1111] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 133.771428][ T1111] cdc_wdm 1-1:1.0: Unknown control protocol [ 134.062034][ T6204] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 134.131619][ T4587] usb 3-1: USB disconnect, device number 7 [ 134.561700][ T6217] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 134.623685][ T6216] device syzkaller0 entered promiscuous mode [ 135.090865][ T6231] device syzkaller0 entered promiscuous mode [ 135.192984][ T6233] tipc: Enabled bearer , priority 0 [ 135.232879][ T6233] tipc: Resetting bearer [ 135.298258][ T6232] tipc: Disabling bearer [ 135.616575][ T4435] usb 1-1: USB disconnect, device number 6 [ 135.653575][ T1111] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.044981][ T1111] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.068511][ T1111] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 136.127764][ T1111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.166037][ T1111] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 136.187684][ T1111] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 136.333761][ T1111] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.393499][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.412098][ T1111] usb 3-1: Product: syz [ 136.432417][ T1111] usb 3-1: Manufacturer: syz [ 136.537032][ T1111] cdc_wdm 3-1:1.0: skipping garbage [ 136.546417][ T1111] cdc_wdm 3-1:1.0: skipping garbage [ 136.594858][ T1111] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 136.603366][ T1111] cdc_wdm 3-1:1.0: Unknown control protocol [ 136.634192][ T4586] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.830811][ T6263] device syzkaller0 entered promiscuous mode [ 136.838262][ T1111] usb 3-1: USB disconnect, device number 8 [ 136.844549][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 136.844582][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 136.844599][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 137.113663][ T4586] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.183783][ T6271] device syzkaller0 entered promiscuous mode [ 137.233724][ T4586] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.248515][ T4586] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 137.289228][ T4586] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.330798][ T6276] tipc: Enabled bearer , priority 0 [ 137.360408][ T6276] tipc: Resetting bearer [ 137.397326][ T6275] tipc: Disabling bearer [ 137.473681][ T4586] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 137.504071][ T4586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.518521][ T4586] usb 5-1: Product: syz [ 137.522806][ T4586] usb 5-1: Manufacturer: syz [ 137.539860][ T4586] usb 5-1: SerialNumber: syz [ 137.673312][ T2352] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.777650][ T6292] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 137.905185][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.506'. [ 137.988155][ T4586] usb 5-1: USB disconnect, device number 5 [ 138.073617][ T2352] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.096571][ T2352] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 138.126206][ T2352] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.136796][ T2352] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 138.161527][ T2352] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 138.262881][ T6294] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 138.303422][ T2352] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.313511][ T2352] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.344267][ T2352] usb 4-1: Product: syz [ 138.352199][ T2352] usb 4-1: Manufacturer: syz [ 138.483400][ T2352] cdc_wdm 4-1:1.0: skipping garbage [ 138.534929][ T2352] cdc_wdm 4-1:1.0: skipping garbage [ 138.652633][ T2352] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 138.739709][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 138.747611][ T2352] cdc_wdm 4-1:1.0: Unknown control protocol [ 139.019823][ T6312] device syzkaller0 entered promiscuous mode [ 140.023931][ T6326] device syzkaller0 entered promiscuous mode [ 140.159081][ T6328] device syzkaller0 entered promiscuous mode [ 140.623291][ T4452] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.833459][ T4435] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.884900][ T6347] device syzkaller0 entered promiscuous mode [ 141.033435][ T4452] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.043343][ T4452] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.053872][ T4452] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.062962][ T4452] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 141.074978][ T4452] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 141.213650][ T4452] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.224438][ T4452] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.232525][ T4452] usb 3-1: Product: syz [ 141.237150][ T4452] usb 3-1: Manufacturer: syz [ 141.284364][ T4452] cdc_wdm 3-1:1.0: skipping garbage [ 141.289824][ T4435] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.298096][ T4452] cdc_wdm 3-1:1.0: skipping garbage [ 141.308160][ T4452] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 141.314604][ T4452] cdc_wdm 3-1:1.0: Unknown control protocol [ 141.393511][ T4435] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.406937][ T4435] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 141.419436][ T4435] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.625147][ T4587] usb 3-1: USB disconnect, device number 9 [ 141.626676][ T4435] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 141.655539][ T4435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.669277][ T4435] usb 5-1: Product: syz [ 141.675690][ T4435] usb 5-1: Manufacturer: syz [ 141.680598][ T4435] usb 5-1: SerialNumber: syz [ 141.956233][ T6361] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 141.990211][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.530'. [ 142.064811][ T6363] device syzkaller0 entered promiscuous mode [ 142.076860][ T4435] usb 5-1: USB disconnect, device number 6 [ 142.432893][ T6368] device syzkaller0 entered promiscuous mode [ 142.968086][ T6380] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 143.041642][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'. [ 143.821366][ T6387] device syzkaller0 entered promiscuous mode [ 144.115312][ T6399] device syzkaller0 entered promiscuous mode [ 144.563450][ T1111] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 144.813297][ T1111] usb 5-1: Using ep0 maxpacket: 32 [ 144.933636][ T1111] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 144.951908][ T1111] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 144.993075][ T1111] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 145.017842][ T1111] usb 5-1: config 1 has no interface number 0 [ 145.030438][ T1111] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 1792, setting to 1024 [ 145.048561][ T1111] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 145.072625][ T1111] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 145.089184][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.124562][ T6401] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.148006][ T1111] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 145.358189][ T6401] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.376059][ T1111] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 145.629905][ T1111] usb 5-1: USB disconnect, device number 7 [ 145.648843][ T1111] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 145.697884][ T6408] device syzkaller0 entered promiscuous mode [ 146.033410][ T4587] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.249579][ T6428] device syzkaller0 entered promiscuous mode [ 146.390408][ T6430] device syzkaller0 entered promiscuous mode [ 146.453653][ T4587] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.467731][ T4587] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 146.479219][ T4587] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.493603][ T4587] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 146.509696][ T4587] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 146.644336][ T4587] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.664039][ T4587] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.712544][ T4587] usb 2-1: Product: syz [ 146.724308][ T4587] usb 2-1: Manufacturer: syz [ 146.784360][ T4587] cdc_wdm 2-1:1.0: skipping garbage [ 146.791040][ T4587] cdc_wdm 2-1:1.0: skipping garbage [ 146.801833][ T4587] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 146.812881][ T4587] cdc_wdm 2-1:1.0: Unknown control protocol [ 147.128151][ T4435] usb 2-1: USB disconnect, device number 8 [ 147.315805][ T6443] device syzkaller0 entered promiscuous mode [ 147.447160][ T6445] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 147.521347][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.559'. [ 147.867969][ T6462] device syzkaller0 entered promiscuous mode [ 148.011100][ T6466] device syzkaller0 entered promiscuous mode [ 148.213319][ T4228] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.516379][ T4228] usb 1-1: Using ep0 maxpacket: 32 [ 148.653359][ T4228] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 148.663353][ T4228] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 148.681958][ T4228] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 148.702285][ T4228] usb 1-1: config 1 has no interface number 0 [ 148.723405][ T4228] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 1792, setting to 1024 [ 148.736009][ T4228] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 148.751185][ T6470] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 148.805547][ T4228] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 148.846515][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.933680][ T6463] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.996479][ T4228] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 149.198623][ T6463] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 149.226595][ T4228] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 149.459464][ T4228] usb 1-1: USB disconnect, device number 7 [ 149.476425][ T4228] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 149.736886][ T6480] device syzkaller0 entered promiscuous mode [ 150.538535][ T6497] device syzkaller0 entered promiscuous mode [ 150.555418][ T6499] device syzkaller0 entered promiscuous mode [ 150.943318][ T1111] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.063467][ T4586] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 151.096141][ T6509] device syzkaller0 entered promiscuous mode [ 151.229949][ T6515] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 151.263410][ T4586] usb 5-1: device descriptor read/64, error -71 [ 151.306427][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'. [ 151.313591][ T1111] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.331894][ T1111] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 151.342983][ T1111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.372757][ T1111] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 151.392677][ T1111] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 151.494552][ T6520] mmap: syz.1.587 (6520) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 151.533519][ T1111] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.553323][ T4586] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 151.566937][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.583319][ T1111] usb 3-1: Product: syz [ 151.594794][ T1111] usb 3-1: Manufacturer: syz [ 151.655236][ T1111] cdc_wdm 3-1:1.0: skipping garbage [ 151.661160][ T1111] cdc_wdm 3-1:1.0: skipping garbage [ 151.683404][ T1111] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 151.697035][ T1111] cdc_wdm 3-1:1.0: Unknown control protocol [ 151.763374][ T4586] usb 5-1: device descriptor read/64, error -71 [ 151.883549][ T4586] usb usb5-port1: attempt power cycle [ 152.008840][ T2352] usb 3-1: USB disconnect, device number 10 [ 152.293368][ T4586] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.413614][ T4586] usb 5-1: device descriptor read/8, error -71 [ 152.683328][ T4586] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.784830][ T4586] usb 5-1: device descriptor read/8, error -71 [ 152.914025][ T4586] usb usb5-port1: unable to enumerate USB device [ 153.559816][ T6533] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 153.601446][ T6533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.590'. [ 153.780288][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 153.903167][ T6539] device syzkaller0 entered promiscuous mode [ 153.986048][ T6541] device syzkaller0 entered promiscuous mode [ 154.090520][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.105458][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.115566][ T6530] device bridge_slave_0 entered promiscuous mode [ 154.139455][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.172317][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.204435][ T6530] device bridge_slave_1 entered promiscuous mode [ 154.293160][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.364516][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.441158][ T6530] team0: Port device team_slave_0 added [ 154.465895][ T6530] team0: Port device team_slave_1 added [ 154.534851][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.542631][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.596455][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.657755][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.674861][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.709712][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.797397][ T6530] device hsr_slave_0 entered promiscuous mode [ 154.807128][ T6530] device hsr_slave_1 entered promiscuous mode [ 154.823411][ T6530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.837884][ T6530] Cannot create hsr debugfs directory [ 155.336716][ T6530] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.426116][ T6561] device syzkaller0 entered promiscuous mode [ 155.441827][ T6530] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.469098][ T6530] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.516921][ T6530] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.533497][ T4435] Bluetooth: hci5: command 0x0409 tx timeout [ 155.912920][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.968523][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.980707][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.001753][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.023448][ T4435] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.069366][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.089034][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.118238][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.125714][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.149359][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.232682][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.233500][ T4435] usb 1-1: device descriptor read/64, error -71 [ 156.327985][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.362257][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.369447][ T4284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.424148][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.449419][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.474843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.509626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.533474][ T4435] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.536056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.606515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.651832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.692875][ T6530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.693853][ T4229] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.708920][ T6530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.747439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.774142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.794206][ T4435] usb 1-1: device descriptor read/64, error -71 [ 156.811865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.832017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.848558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.928072][ T4435] usb usb1-port1: attempt power cycle [ 156.968049][ T6578] device syzkaller0 entered promiscuous mode [ 157.020551][ T6584] device syzkaller0 entered promiscuous mode [ 157.067140][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.080506][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.089188][ T4229] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.101902][ T4229] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.113173][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.119526][ T4229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.131997][ T4229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 157.150392][ T4229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 157.273669][ T4229] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.292513][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.301580][ T4229] usb 5-1: Product: syz [ 157.312410][ T4229] usb 5-1: Manufacturer: syz [ 157.347494][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.360341][ T4229] cdc_wdm 5-1:1.0: skipping garbage [ 157.363314][ T4435] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 157.367900][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.383507][ T4229] cdc_wdm 5-1:1.0: skipping garbage [ 157.407624][ T4229] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 157.422380][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.427991][ T4229] cdc_wdm 5-1:1.0: Unknown control protocol [ 157.435636][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.459156][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.486860][ T4435] usb 1-1: device descriptor read/8, error -71 [ 157.508428][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.517687][ T6530] device veth0_vlan entered promiscuous mode [ 157.549571][ T6530] device veth1_vlan entered promiscuous mode [ 157.601613][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.613451][ T2352] Bluetooth: hci5: command 0x041b tx timeout [ 157.619900][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.638444][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.652431][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.670455][ T6530] device veth0_macvtap entered promiscuous mode [ 157.695220][ T6530] device veth1_macvtap entered promiscuous mode [ 157.736970][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.752224][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.776144][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.793332][ T4435] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.794675][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.821471][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.841813][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.852733][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.864924][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.878665][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.901760][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.919171][ T4435] usb 1-1: device descriptor read/8, error -71 [ 157.931183][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.953963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.963044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.971272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.980538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.998624][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.009747][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.028739][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.040569][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.053007][ T4435] usb usb1-port1: unable to enumerate USB device [ 158.069753][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.082519][ T6612] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 158.093514][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.112062][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.127964][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.138664][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'. [ 158.148245][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.162860][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.180297][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.211251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.227547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.249964][ T6530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.304568][ T6530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.320523][ T6530] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.338523][ T6530] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.513789][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.535233][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.559721][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.620564][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.637901][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.653143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.889538][ T6625] device syzkaller0 entered promiscuous mode [ 159.694061][ T4228] Bluetooth: hci5: command 0x040f tx timeout [ 159.771924][ T6634] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 160.080673][ T6639] device syzkaller0 entered promiscuous mode [ 160.307489][ T6641] device syzkaller0 entered promiscuous mode [ 160.409496][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.5.613'. [ 161.103297][ T4435] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 161.323470][ T4435] usb 3-1: device descriptor read/64, error -71 [ 161.594016][ T4435] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 161.763477][ T2352] Bluetooth: hci5: command 0x0419 tx timeout [ 161.793380][ T4435] usb 3-1: device descriptor read/64, error -71 [ 161.913535][ T4435] usb usb3-port1: attempt power cycle [ 162.323946][ T4435] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 162.369703][ T6669] device syzkaller0 entered promiscuous mode [ 162.413675][ T4435] usb 3-1: device descriptor read/8, error -71 [ 162.693451][ T4435] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 162.783415][ T4435] usb 3-1: device descriptor read/8, error -71 [ 162.905194][ T6677] device syzkaller0 entered promiscuous mode [ 162.937017][ T4435] usb usb3-port1: unable to enumerate USB device [ 163.129922][ T6679] device syzkaller0 entered promiscuous mode [ 163.872891][ T6703] device syzkaller0 entered promiscuous mode [ 163.899747][ T6705] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 163.979310][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.633'. [ 164.551743][ T6711] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 164.691873][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 165.497670][ T6721] device syzkaller0 entered promiscuous mode [ 166.828360][ T6725] device syzkaller0 entered promiscuous mode [ 168.103338][ T4586] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 168.305131][ T6752] device syzkaller0 entered promiscuous mode [ 168.313526][ T4586] usb 1-1: device descriptor read/64, error -71 [ 168.521221][ T6756] device syzkaller0 entered promiscuous mode [ 168.603350][ T4586] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.679249][ T6762] device syzkaller0 entered promiscuous mode [ 168.823425][ T4586] usb 1-1: device descriptor read/64, error -71 [ 168.869145][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 168.943533][ T4586] usb usb1-port1: attempt power cycle [ 169.146211][ T6780] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 169.207647][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.5.652'. [ 169.363351][ T4586] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 169.453468][ T4586] usb 1-1: device descriptor read/8, error -71 [ 169.726672][ T4586] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 169.826774][ T4586] usb 1-1: device descriptor read/8, error -71 [ 169.953623][ T4586] usb usb1-port1: unable to enumerate USB device [ 170.024187][ T6783] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.478049][ T6788] device syzkaller0 entered promiscuous mode [ 170.927887][ T6796] device syzkaller0 entered promiscuous mode [ 171.016651][ T6798] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 171.048752][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.662'. [ 171.079509][ T6800] device syzkaller0 entered promiscuous mode [ 171.431435][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 172.442939][ T6826] device syzkaller0 entered promiscuous mode [ 172.597731][ T6819] chnl_net:caif_netlink_parms(): no params data found [ 172.895841][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.942731][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.963386][ T4435] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.020722][ T6819] device bridge_slave_0 entered promiscuous mode [ 173.078173][ T6822] device geneve0 entered promiscuous mode [ 173.090375][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.103485][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.112869][ T6819] device bridge_slave_1 entered promiscuous mode [ 173.173516][ T4435] usb 2-1: device descriptor read/64, error -71 [ 173.212633][ T6819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.234804][ T6841] device syzkaller0 entered promiscuous mode [ 173.258537][ T6819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.383000][ T6819] team0: Port device team_slave_0 added [ 173.432145][ T6819] team0: Port device team_slave_1 added [ 173.451152][ T6843] device syzkaller0 entered promiscuous mode [ 173.483395][ T4435] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 173.557215][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.569746][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.602249][ T6819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.637958][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.651917][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.681'. [ 173.671596][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.700887][ T6819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.723358][ T4435] usb 2-1: device descriptor read/64, error -71 [ 173.843618][ T4435] usb usb2-port1: attempt power cycle [ 173.944021][ T6819] device hsr_slave_0 entered promiscuous mode [ 173.980669][ T6819] device hsr_slave_1 entered promiscuous mode [ 174.003553][ T2352] Bluetooth: hci6: command 0x0409 tx timeout [ 174.017652][ T6819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.033403][ T6819] Cannot create hsr debugfs directory [ 174.045441][ T6859] device bridge0 entered promiscuous mode [ 174.060519][ T6859] device vlan2 entered promiscuous mode [ 174.239068][ T6861] device syzkaller0 entered promiscuous mode [ 174.273309][ T4435] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.347923][ T6819] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.375045][ T6819] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.384801][ T4435] usb 2-1: device descriptor read/8, error -71 [ 174.418387][ T6819] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.458802][ T6865] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 174.477432][ T6819] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.541681][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.683418][ T4435] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 174.731681][ T6819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.783377][ T4435] usb 2-1: device descriptor read/8, error -71 [ 174.802355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.815142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.825898][ T6819] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.859382][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.891324][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.903497][ T4435] usb usb2-port1: unable to enumerate USB device [ 174.935038][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.942298][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.976815][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.001379][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.021336][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.046411][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.053622][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.066727][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.097940][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.232843][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.282333][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.324782][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.349967][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.426358][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.479225][ T6875] netlink: 'syz.0.689': attribute type 3 has an invalid length. [ 175.511984][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.559509][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.600959][ T6819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.660662][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.704821][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.724294][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.906575][ T6881] device syzkaller0 entered promiscuous mode [ 175.936940][ T6879] device syzkaller0 entered promiscuous mode [ 176.083731][ T4588] Bluetooth: hci6: command 0x041b tx timeout [ 176.213719][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.235744][ T6886] netlink: 32 bytes leftover after parsing attributes in process `syz.0.693'. [ 176.254162][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.329951][ T6819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.676115][ T6901] device syzkaller0 entered promiscuous mode [ 176.948017][ T6908] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 177.235030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.251729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.401833][ T6819] device veth0_vlan entered promiscuous mode [ 177.427267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.439653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.469714][ T6819] device veth1_vlan entered promiscuous mode [ 177.505657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.518755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.539304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.591798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.618068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.657412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.696483][ T6819] device veth0_macvtap entered promiscuous mode [ 177.733906][ T6819] device veth1_macvtap entered promiscuous mode [ 177.813360][ T4587] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 177.841693][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.913121][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.003551][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.027962][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.043515][ T4587] usb 1-1: device descriptor read/64, error -71 [ 178.070160][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.131681][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.150946][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.172714][ T4586] Bluetooth: hci6: command 0x040f tx timeout [ 178.201715][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.222655][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.254189][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.303837][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.333351][ T4587] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 178.341214][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.426141][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.444785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.458621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.524964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.533688][ T4587] usb 1-1: device descriptor read/64, error -71 [ 178.544324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.545952][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.704'. [ 178.575791][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.610204][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.621270][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.638372][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.653529][ T4587] usb usb1-port1: attempt power cycle [ 178.696772][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.724817][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.739809][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.758922][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.771135][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.786845][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.798002][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.816932][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.848706][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.865843][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.877150][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.891548][ T6819] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.901871][ T6819] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.912037][ T6819] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.923340][ T6819] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.073466][ T4587] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 179.173660][ T4587] usb 1-1: device descriptor read/8, error -71 [ 179.241013][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.249428][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.279016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.343644][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.356900][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.394946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.453594][ T4587] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 179.543607][ T4587] usb 1-1: device descriptor read/8, error -71 [ 179.647009][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 179.673612][ T4587] usb usb1-port1: unable to enumerate USB device [ 179.716163][ T6957] device syzkaller0 entered promiscuous mode [ 180.245301][ T1111] Bluetooth: hci6: command 0x0419 tx timeout [ 180.631708][ T6970] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 180.635777][ T6969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.714'. [ 180.903727][ T6973] device syzkaller0 entered promiscuous mode [ 181.057247][ T6984] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 181.247761][ T6983] device syzkaller0 entered promiscuous mode [ 181.384971][ T4587] Bluetooth: hci1: command 0x0406 tx timeout [ 181.406101][ T4587] Bluetooth: hci0: command 0x0406 tx timeout [ 181.437848][ T4587] Bluetooth: hci2: command 0x0406 tx timeout [ 181.473372][ T4587] Bluetooth: hci3: command 0x0406 tx timeout [ 181.489751][ T4587] Bluetooth: hci4: command 0x0406 tx timeout [ 182.157997][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.726'. [ 182.183451][ T1111] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 182.542035][ T7021] netlink: 64 bytes leftover after parsing attributes in process `syz.1.729'. [ 182.613480][ T1111] usb 7-1: unable to get BOS descriptor or descriptor too short [ 182.656330][ T7023] device syzkaller0 entered promiscuous mode [ 182.693522][ T1111] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.708877][ T1111] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.719792][ T1111] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 182.884566][ T1111] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 182.890430][ T7034] device syzkaller0 entered promiscuous mode [ 182.899206][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.923921][ T1111] usb 7-1: Product: syz [ 182.928141][ T1111] usb 7-1: Manufacturer: syz [ 182.932849][ T1111] usb 7-1: SerialNumber: syz [ 183.096874][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'. [ 183.271102][ T1111] usb 7-1: USB disconnect, device number 2 [ 183.664881][ T7057] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 183.692700][ T7059] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 183.788141][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.737'. [ 184.016551][ T7065] device syzkaller0 entered promiscuous mode [ 184.848994][ T7079] device syzkaller0 entered promiscuous mode [ 185.194971][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.750'. [ 185.816435][ T7095] device syzkaller0 entered promiscuous mode [ 185.923304][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 186.423508][ T4228] usb 6-1: unable to get BOS descriptor or descriptor too short [ 186.549036][ T4228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.613315][ T4228] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.658194][ T4228] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 186.704877][ T7118] device syzkaller0 entered promiscuous mode [ 186.843387][ T4228] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 186.852457][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.884023][ T4228] usb 6-1: Product: syz [ 186.888319][ T4228] usb 6-1: Manufacturer: syz [ 186.914491][ T4228] usb 6-1: SerialNumber: syz [ 187.293602][ T4228] usb 6-1: USB disconnect, device number 2 [ 187.399048][ T4852] udevd[4852]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.488871][ T7130] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 187.537509][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 187.618831][ T7134] device syzkaller0 entered promiscuous mode [ 187.843581][ T4587] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 188.093517][ T4587] usb 2-1: Using ep0 maxpacket: 16 [ 188.206459][ T7153] device syzkaller0 entered promiscuous mode [ 188.234305][ T4587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.321918][ T4587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.440088][ T4587] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.531427][ T4587] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.545106][ T4587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.561838][ T4587] usb 2-1: config 0 descriptor?? [ 189.033078][ T7159] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 189.046717][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.100151][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.118263][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.145579][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.165813][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.178441][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.181923][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.6.773'. [ 189.201458][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.218173][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.265342][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.283015][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.308054][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.321831][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.330873][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.343343][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.361850][ T4587] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 189.459058][ T4587] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 189.556524][ T4587] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 189.671848][ T4587] usb 2-1: USB disconnect, device number 13 [ 189.795369][ T7168] fido_id[7168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 190.109363][ T7176] device syzkaller0 entered promiscuous mode [ 190.568908][ T7192] device syzkaller0 entered promiscuous mode [ 190.803631][ T5006] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 191.225851][ T5006] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.316529][ T5006] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.338473][ T5006] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.386891][ T5006] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 191.673491][ T5006] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 191.695106][ T5006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.716823][ T5006] usb 2-1: Product: syz [ 191.745772][ T5006] usb 2-1: Manufacturer: syz [ 191.760178][ T5006] usb 2-1: SerialNumber: syz [ 192.031664][ T7224] device syzkaller0 entered promiscuous mode [ 192.111011][ T5006] usb 2-1: USB disconnect, device number 14 [ 192.181643][ T4852] udevd[4852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.442826][ T7235] device syzkaller0 entered promiscuous mode [ 192.954262][ T7255] x_tables: duplicate underflow at hook 4 [ 192.988538][ T7255] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 193.161097][ T7259] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 193.909344][ T7268] device syzkaller0 entered promiscuous mode [ 194.075942][ T7273] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 194.644554][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.650876][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.773332][ T4587] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 195.039561][ T7294] device syzkaller0 entered promiscuous mode [ 195.089087][ T7297] syz.1.818 uses obsolete (PF_INET,SOCK_PACKET) [ 195.193517][ T4587] usb 6-1: unable to get BOS descriptor or descriptor too short [ 195.303491][ T4587] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.321917][ T4587] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.363819][ T4587] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 195.419432][ T7306] device syzkaller0 entered promiscuous mode [ 195.508361][ T7308] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.543530][ T4587] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 195.570228][ T4587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.603354][ T4587] usb 6-1: Product: syz [ 195.607661][ T4587] usb 6-1: Manufacturer: syz [ 195.634460][ T4587] usb 6-1: SerialNumber: syz [ 195.758797][ T7310] loop2: detected capacity change from 0 to 7 [ 195.780266][ T4839] Dev loop2: unable to read RDB block 7 [ 195.786203][ T4839] loop2: unable to read partition table [ 195.792518][ T4839] loop2: partition table beyond EOD, truncated [ 195.887894][ T7310] Dev loop2: unable to read RDB block 7 [ 195.903949][ T7310] loop2: unable to read partition table [ 195.922729][ T7310] loop2: partition table beyond EOD, truncated [ 195.948051][ T7310] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 195.962289][ T3562] Dev loop2: unable to read RDB block 7 [ 195.968901][ T3562] loop2: unable to read partition table [ 195.993568][ T4587] usb 6-1: USB disconnect, device number 3 [ 195.996073][ T3562] loop2: partition table beyond EOD, truncated [ 196.141358][ T7331] device syzkaller0 entered promiscuous mode [ 196.389452][ T4841] udevd[4841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.805900][ T7345] device syzkaller0 entered promiscuous mode [ 197.043824][ T7347] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 197.665646][ T7357] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 197.672571][ T7357] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 197.735462][ T7357] vhci_hcd vhci_hcd.0: Device attached [ 197.793985][ T7358] vhci_hcd: connection closed [ 197.804517][ T4284] vhci_hcd: stop threads [ 197.866917][ T4284] vhci_hcd: release socket [ 197.913364][ T4284] vhci_hcd: disconnect device [ 198.320860][ T7365] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 198.837768][ T7382] device syzkaller0 entered promiscuous mode [ 199.034799][ T7387] device syzkaller0 entered promiscuous mode [ 199.123742][ T4594] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 199.543977][ T4594] usb 6-1: unable to get BOS descriptor or descriptor too short [ 199.653518][ T4594] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.673041][ T4594] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 199.702959][ T4594] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 199.883241][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 199.889875][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 199.901358][ T4587] usb 4-1: USB disconnect, device number 7 [ 199.907288][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 199.907307][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 199.907316][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 199.933516][ T4594] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 199.967992][ T4594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.011255][ T4594] usb 6-1: Product: syz [ 200.047154][ T4594] usb 6-1: Manufacturer: syz [ 200.095112][ T4594] usb 6-1: SerialNumber: syz [ 200.527618][ T4594] usb 6-1: USB disconnect, device number 4 [ 200.558669][ T7412] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 200.741829][ T5006] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 200.850148][ T4284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.183904][ T5006] usb 2-1: not running at top speed; connect to a high speed hub [ 201.212232][ T4284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.303389][ T5006] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 201.330386][ T1111] usb 5-1: USB disconnect, device number 12 [ 201.339000][ T5006] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 143, changing to 4 [ 201.408038][ T4284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.553620][ T5006] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 201.561633][ T4284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.573371][ T5006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.573399][ T5006] usb 2-1: Product: syz [ 201.573415][ T5006] usb 2-1: Manufacturer: syz [ 201.573431][ T5006] usb 2-1: SerialNumber: syz [ 201.726838][ T7441] device syzkaller0 entered promiscuous mode [ 202.003485][ T5006] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 202.015272][ T5006] usb 2-1: 1:1 : sample bitwidth 202 in over sample bytes 2 [ 202.034053][ T5006] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 202.103443][ T5006] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 202.175442][ T5006] usb 2-1: USB disconnect, device number 15 [ 202.260064][ T7456] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 202.346214][ T4284] tipc: Left network mode [ 202.595130][ T4594] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 202.661312][ T4594] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.833353][ T2352] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 203.283572][ T2352] usb 7-1: unable to get BOS descriptor or descriptor too short [ 203.374061][ T2352] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.422110][ T2352] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.476287][ T2352] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 203.501447][ T7486] tipc: Enabling of bearer rejected, failed to enable media [ 203.691340][ T7490] device syzkaller0 entered promiscuous mode [ 203.743665][ T2352] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 203.793299][ T2352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.827577][ T2352] usb 7-1: Product: syz [ 203.837072][ T4284] device hsr_slave_0 left promiscuous mode [ 203.863082][ T2352] usb 7-1: Manufacturer: syz [ 203.876201][ T2352] usb 7-1: SerialNumber: syz [ 203.884091][ T4284] device hsr_slave_1 left promiscuous mode [ 203.914737][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.922476][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.979657][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.018502][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.092923][ T4284] device bridge_slave_1 left promiscuous mode [ 204.122494][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.238067][ T4284] device bridge_slave_0 left promiscuous mode [ 204.255695][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.265865][ T2352] usb 7-1: USB disconnect, device number 3 [ 204.366420][ T7509] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 204.394992][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.873'. [ 204.417697][ T4284] device veth1_macvtap left promiscuous mode [ 204.425126][ T4284] device veth0_macvtap left promiscuous mode [ 204.440172][ T4284] device veth1_vlan left promiscuous mode [ 204.453963][ T4284] device veth0_vlan left promiscuous mode [ 204.588012][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.041783][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 205.074248][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 205.114935][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.151371][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.331655][ T4284] bond0 (unregistering): Released all slaves [ 206.145745][ T7535] device syzkaller0 entered promiscuous mode [ 207.317019][ T7566] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 207.831348][ T26] audit: type=1326 audit(1774462639.344:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.5.886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c80a1e799 code=0x0 [ 208.003455][ T4229] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 208.413623][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.504610][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.553881][ T4229] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 208.605561][ T7589] tipc: Enabling of bearer rejected, failed to enable media [ 208.673094][ T7592] device syzkaller0 entered promiscuous mode [ 208.813736][ T4229] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 208.843854][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.885649][ T4229] usb 1-1: Product: syz [ 208.903264][ T4229] usb 1-1: Manufacturer: syz [ 208.933547][ T4229] usb 1-1: SerialNumber: syz [ 209.058564][ T7600] device syzkaller0 entered promiscuous mode [ 209.305453][ T4229] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 209.384631][ T4229] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 209.530427][ T4229] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 209.568125][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.577892][ T4229] usb 1-1: USB disconnect, device number 20 [ 210.012546][ T7637] process 'syz.0.898' launched './file2' with NULL argv: empty string added [ 210.328980][ T7648] tipc: Enabling of bearer rejected, failed to enable media [ 210.488219][ T7648] device syzkaller0 entered promiscuous mode [ 210.648640][ T7658] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 210.733086][ T7660] device syzkaller0 entered promiscuous mode [ 210.905032][ T4284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.277866][ T4284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.590686][ T4284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.704367][ T4284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.330657][ T4284] tipc: Left network mode [ 212.507335][ T7690] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 213.203376][ T4594] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 213.328602][ T4284] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 213.608363][ T4284] device hsr_slave_0 left promiscuous mode [ 213.628323][ T4284] device hsr_slave_1 left promiscuous mode [ 213.656957][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.683433][ T4594] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.705379][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.740601][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.768719][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.783340][ T4594] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.809415][ T4594] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 213.857612][ T4284] device bridge_slave_1 left promiscuous mode [ 213.883557][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.922215][ T4284] device bridge_slave_0 left promiscuous mode [ 213.934974][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.980709][ T4284] device veth1_macvtap left promiscuous mode [ 213.990263][ T4284] device veth0_macvtap left promiscuous mode [ 214.007426][ T4284] device veth1_vlan left promiscuous mode [ 214.025687][ T4284] device veth0_vlan left promiscuous mode [ 214.043373][ T4594] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 214.059845][ T4594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.099927][ T4594] usb 1-1: Product: syz [ 214.106971][ T4594] usb 1-1: Manufacturer: syz [ 214.112010][ T4594] usb 1-1: SerialNumber: syz [ 214.454273][ T4594] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 214.533761][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 214.534060][ T4594] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 214.594967][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 214.621380][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.673853][ T4594] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 214.709876][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.714054][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.728740][ T4594] usb 1-1: USB disconnect, device number 21 [ 214.978526][ T4284] bond0 (unregistering): Released all slaves [ 215.052893][ T7728] tipc: Enabling of bearer rejected, failed to enable media [ 216.013276][ T5008] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 216.181862][ T7786] device syzkaller0 entered promiscuous mode [ 216.211449][ T7788] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 216.279693][ T7789] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 216.322251][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.924'. [ 216.390945][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.922'. [ 216.423548][ T5008] usb 7-1: unable to get BOS descriptor or descriptor too short [ 216.444787][ T7792] tipc: Enabling of bearer rejected, failed to enable media [ 216.469961][ T7792] device syzkaller0 entered promiscuous mode [ 216.514714][ T5008] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.550917][ T5008] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 216.753541][ T5008] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 216.774807][ T5008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.805469][ T5008] usb 7-1: Product: syz [ 216.822380][ T5008] usb 7-1: Manufacturer: syz [ 216.851918][ T5008] usb 7-1: SerialNumber: syz [ 217.204335][ T5008] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 217.284830][ T5008] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 217.552272][ T5008] snd-usb-audio: probe of 7-1:1.2 failed with error -22 [ 217.679570][ T4841] udevd[4841]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.699191][ T5008] usb 7-1: USB disconnect, device number 4 [ 217.783788][ T7824] syz.1.937 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 218.921794][ T7846] device syzkaller0 entered promiscuous mode [ 219.074214][ T7851] tipc: Enabling of bearer rejected, failed to enable media [ 219.128930][ T7854] device syzkaller0 entered promiscuous mode [ 220.133452][ T4229] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 220.345498][ T7894] device syzkaller0 entered promiscuous mode [ 220.573561][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.663745][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.693712][ T4229] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 220.755818][ T4229] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.993502][ T4229] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 221.013407][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.074061][ T4229] usb 3-1: Product: syz [ 221.089785][ T4229] usb 3-1: Manufacturer: syz [ 221.119170][ T4229] usb 3-1: SerialNumber: syz [ 221.191478][ T7904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.955'. [ 221.297445][ T7913] tipc: Enabling of bearer rejected, failed to enable media [ 221.334261][ T7913] device syzkaller0 entered promiscuous mode [ 221.484639][ T4229] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 221.564108][ T4229] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 221.812851][ T4229] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 221.857374][ T4229] usb 3-1: USB disconnect, device number 15 [ 221.926926][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.502073][ T7946] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 222.535732][ T7952] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 222.552911][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.5.958'. [ 222.662800][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.6.960'. [ 222.703328][ T4229] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 222.773117][ T7958] device syzkaller0 entered promiscuous mode [ 222.953448][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 223.073538][ T4229] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 223.098769][ T4229] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 223.161750][ T4229] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 223.257928][ T4229] usb 1-1: config 9 has no interface number 0 [ 223.289024][ T4229] usb 1-1: config 9 interface 221 altsetting 64 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 223.346858][ T4229] usb 1-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 223.367397][ T4229] usb 1-1: config 9 interface 221 has no altsetting 0 [ 223.500081][ T7977] device syzkaller1 entered promiscuous mode [ 223.544064][ T4229] usb 1-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 223.582880][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.685294][ T4229] usb 1-1: Product: syz [ 223.711826][ T4229] usb 1-1: Manufacturer: syz [ 223.722918][ T4229] usb 1-1: SerialNumber: syz [ 223.981896][ T7982] tipc: Enabling of bearer rejected, failed to enable media [ 224.011575][ T7982] device syzkaller0 entered promiscuous mode [ 224.025490][ T7949] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 224.082764][ T7949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.655696][ T4229] usb 1-1: USB disconnect, device number 22 [ 225.673290][ T5008] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 225.760286][ T8026] device syzkaller0 entered promiscuous mode [ 225.884157][ T4852] udevd[4852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.133548][ T5008] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.254405][ T5008] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.292117][ T5008] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 226.321814][ T5008] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.384475][ T8046] tipc: Enabling of bearer rejected, failed to enable media [ 226.452579][ T8047] device syzkaller0 entered promiscuous mode [ 226.543469][ T5008] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 226.563264][ T5008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.571790][ T5008] usb 2-1: Product: syz [ 226.583009][ T5008] usb 2-1: Manufacturer: syz [ 226.609104][ T5008] usb 2-1: SerialNumber: syz [ 227.056867][ T5008] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 227.143927][ T5008] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 227.325910][ T5008] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 227.378627][ T5008] usb 2-1: USB disconnect, device number 16 [ 227.445055][ T8081] device syzkaller0 entered promiscuous mode [ 227.684070][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.728298][ T8091] device syzkaller0 entered promiscuous mode [ 228.239568][ T8118] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 228.529728][ T8134] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 228.692158][ T8140] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.759231][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.991'. [ 229.813298][ T4451] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 230.263562][ T4451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 230.363556][ T4451] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.391093][ T4451] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 230.454339][ T4451] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.663616][ T4451] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 230.731603][ T4451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.757131][ T8183] device syzkaller0 entered promiscuous mode [ 230.775689][ T4451] usb 6-1: Product: syz [ 230.785650][ T4451] usb 6-1: Manufacturer: syz [ 230.810116][ T4451] usb 6-1: SerialNumber: syz [ 231.170021][ T4451] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 231.172338][ T8193] device syzkaller0 entered promiscuous mode [ 231.273984][ T4451] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 231.406588][ T4451] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 231.466731][ T4451] usb 6-1: USB disconnect, device number 5 [ 231.775236][ T4841] udevd[4841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.958178][ T8222] device syzkaller0 entered promiscuous mode [ 232.794002][ T8258] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 233.643338][ T2352] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 234.103510][ T2352] usb 7-1: unable to get BOS descriptor or descriptor too short [ 234.243490][ T2352] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.289641][ T2352] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 234.391503][ T8291] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 234.413630][ T2352] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.443834][ T8309] device syzkaller0 entered promiscuous mode [ 234.633591][ T2352] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 234.662247][ T2352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.698569][ T2352] usb 7-1: Product: syz [ 234.710446][ T2352] usb 7-1: Manufacturer: syz [ 234.723556][ T2352] usb 7-1: SerialNumber: syz [ 235.064149][ T2352] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 235.144135][ T2352] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 235.287378][ T8330] device syzkaller0 entered promiscuous mode [ 235.291408][ T2352] snd-usb-audio: probe of 7-1:1.2 failed with error -22 [ 235.305394][ T2352] usb 7-1: USB disconnect, device number 5 [ 235.537635][ T8342] libceph: resolve ' [ 235.537635][ T8342] -&fYǝa2i [ 235.537635][ T8342] .?&*&' (ret=-3): failed [ 235.580592][ T4840] udevd[4840]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.428138][ T8367] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 237.710679][ T8377] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 238.323504][ T4451] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 238.380049][ T8396] device syzkaller0 entered promiscuous mode [ 238.763547][ T4451] usb 7-1: unable to get BOS descriptor or descriptor too short [ 238.883525][ T4451] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.901136][ T4451] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 238.913369][ T4451] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.119489][ T4451] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 239.153228][ T4451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.161371][ T4451] usb 7-1: Product: syz [ 239.228743][ T4451] usb 7-1: Manufacturer: syz [ 239.252333][ T4451] usb 7-1: SerialNumber: syz [ 239.635400][ T4451] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 239.694276][ T4451] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 239.783379][ T4451] snd-usb-audio: probe of 7-1:1.2 failed with error -22 [ 239.835170][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.879601][ T4451] usb 7-1: USB disconnect, device number 6 [ 240.310633][ T8453] device syzkaller0 entered promiscuous mode [ 241.084032][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1064'. [ 241.637000][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1068'. [ 243.163361][ T4451] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 243.593493][ T4451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.703421][ T4451] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.737115][ T4451] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 243.751913][ T8519] device syzkaller0 entered promiscuous mode [ 243.798485][ T4451] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.013394][ T4451] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 244.033035][ T4451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.088545][ T4451] usb 6-1: Product: syz [ 244.092964][ T4451] usb 6-1: Manufacturer: syz [ 244.127540][ T4451] usb 6-1: SerialNumber: syz [ 244.480145][ T4451] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 244.585365][ T4451] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 244.678970][ T4451] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 244.730005][ T4841] udevd[4841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.763531][ T4451] usb 6-1: USB disconnect, device number 6 [ 245.843811][ C1] ================================================================== [ 245.852468][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 245.860095][ C1] Read of size 2 at addr ffff88801bca2c2a by task kworker/u4:7/4292 [ 245.868189][ C1] [ 245.870541][ C1] CPU: 1 PID: 4292 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 245.878184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.888347][ C1] Workqueue: netns cleanup_net [ 245.893319][ C1] Call Trace: [ 245.896607][ C1] [ 245.899578][ C1] dump_stack_lvl+0x188/0x250 [ 245.904277][ C1] ? show_regs_print_info+0x20/0x20 [ 245.909608][ C1] ? _printk+0xda/0x130 [ 245.914055][ C1] ? rose_timer_expiry+0x470/0x490 [ 245.919358][ C1] ? load_image+0x400/0x400 [ 245.924088][ C1] print_address_description+0x60/0x2d0 [ 245.929759][ C1] ? rose_timer_expiry+0x470/0x490 [ 245.934984][ C1] kasan_report+0xdf/0x130 [ 245.939776][ C1] ? rose_timer_expiry+0x470/0x490 [ 245.945194][ C1] rose_timer_expiry+0x470/0x490 [ 245.950244][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 245.955652][ C1] call_timer_fn+0x17b/0x540 [ 245.960358][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 245.965583][ C1] ? __run_timers+0x800/0x800 [ 245.970390][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 245.975621][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.981025][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 245.986164][ C1] __run_timers+0x53e/0x800 [ 245.990880][ C1] ? detach_timer+0x2b0/0x2b0 [ 245.995586][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 246.001683][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 246.006822][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 246.012321][ C1] run_timer_softirq+0x63/0xf0 [ 246.017201][ C1] handle_softirqs+0x339/0x830 [ 246.022529][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 246.027512][ C1] ? do_softirq+0x210/0x210 [ 246.032245][ C1] __irq_exit_rcu+0x13b/0x230 [ 246.037186][ C1] ? irq_exit_rcu+0x20/0x20 [ 246.041737][ C1] irq_exit_rcu+0x5/0x20 [ 246.046087][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 246.051736][ C1] [ 246.054754][ C1] [ 246.057760][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 246.063831][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 246.069457][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 246.089334][ C1] RSP: 0018:ffffc9000333f900 EFLAGS: 00000206 [ 246.095412][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 747f267fa3012a00 [ 246.103381][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980 [ 246.111340][ C1] RBP: ffffc9000333fa20 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 246.119382][ C1] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffffffff8c31eaa0 [ 246.127486][ C1] R13: 1ffff92000667f2c R14: 0000000000000246 R15: dffffc0000000000 [ 246.135592][ C1] ? rcu_lock_release+0x5/0x20 [ 246.140362][ C1] ? read_lock_is_recursive+0x10/0x10 [ 246.145724][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 246.151007][ C1] rcu_lock_acquire+0x2a/0x30 [ 246.155692][ C1] ? rcu_lock_acquire+0x5/0x30 [ 246.160611][ C1] inet_twsk_purge+0x119/0x840 [ 246.165487][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 246.170858][ C1] ? iput+0x706/0x8a0 [ 246.174846][ C1] ? dccp_v6_exit_net+0x80/0x80 [ 246.179691][ C1] cleanup_net+0x791/0xba0 [ 246.184307][ C1] ? ops_free_list+0x330/0x330 [ 246.189110][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 246.194990][ C1] ? _raw_spin_unlock+0x40/0x40 [ 246.199835][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 246.205027][ C1] process_one_work+0x85f/0x1010 [ 246.209972][ C1] ? worker_detach_from_pool+0x240/0x240 [ 246.215599][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 246.220871][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 246.225882][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 246.231425][ C1] ? wq_worker_running+0x97/0x170 [ 246.236443][ C1] worker_thread+0xaa6/0x1290 [ 246.241325][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 246.246547][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 246.252826][ C1] kthread+0x436/0x520 [ 246.257018][ C1] ? rcu_lock_release+0x20/0x20 [ 246.262005][ C1] ? kthread_blkcg+0xd0/0xd0 [ 246.266693][ C1] ret_from_fork+0x1f/0x30 [ 246.271286][ C1] [ 246.274290][ C1] [ 246.276605][ C1] Allocated by task 4284: [ 246.281011][ C1] __kasan_kmalloc+0xb5/0xf0 [ 246.285624][ C1] __alloc_skb+0x22c/0x750 [ 246.290025][ C1] inet6_netconf_notify_devconf+0x10b/0x1d0 [ 246.296246][ C1] addrconf_ifdown+0x1678/0x19c0 [ 246.301252][ C1] addrconf_notify+0x445/0xf00 [ 246.306179][ C1] raw_notifier_call_chain+0xcb/0x160 [ 246.312148][ C1] unregister_netdevice_many+0x1049/0x19f0 [ 246.318235][ C1] default_device_exit_batch+0x364/0x3c0 [ 246.323855][ C1] cleanup_net+0x791/0xba0 [ 246.328261][ C1] process_one_work+0x85f/0x1010 [ 246.333275][ C1] worker_thread+0xaa6/0x1290 [ 246.338020][ C1] kthread+0x436/0x520 [ 246.342080][ C1] ret_from_fork+0x1f/0x30 [ 246.346665][ C1] [ 246.349044][ C1] The buggy address belongs to the object at ffff88801bca2c00 [ 246.349044][ C1] which belongs to the cache kmalloc-512 of size 512 [ 246.363169][ C1] The buggy address is located 42 bytes inside of [ 246.363169][ C1] 512-byte region [ffff88801bca2c00, ffff88801bca2e00) [ 246.376524][ C1] The buggy address belongs to the page: [ 246.382504][ C1] page:ffffea00006f2800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801bca3400 pfn:0x1bca0 [ 246.394219][ C1] head:ffffea00006f2800 order:2 compound_mapcount:0 compound_pincount:0 [ 246.402834][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 246.411131][ C1] raw: 00fff00000010200 ffffea0001821e08 ffffea0000b00908 ffff888016c41c80 [ 246.419875][ C1] raw: ffff88801bca3400 0000000000100007 00000001ffffffff 0000000000000000 [ 246.429166][ C1] page dumped because: kasan: bad access detected [ 246.435766][ C1] page_owner tracks the page as allocated [ 246.441599][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3563, ts 20031675215, free_ts 19963965289 [ 246.461006][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 246.466567][ C1] __alloc_pages+0x1ee/0x480 [ 246.471158][ C1] new_slab+0xc0/0x4b0 [ 246.475305][ C1] ___slab_alloc+0x80a/0xdd0 [ 246.480070][ C1] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 246.485431][ C1] kernfs_fop_open+0x3da/0xbf0 [ 246.490184][ C1] do_dentry_open+0x7ff/0xf80 [ 246.494974][ C1] path_openat+0x26f5/0x2fa0 [ 246.500377][ C1] do_filp_open+0x1e2/0x410 [ 246.505078][ C1] do_sys_openat2+0x150/0x4b0 [ 246.509839][ C1] __x64_sys_openat+0x135/0x160 [ 246.514857][ C1] do_syscall_64+0x4c/0xa0 [ 246.519263][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.525143][ C1] page last free stack trace: [ 246.529814][ C1] free_unref_page_prepare+0x637/0x6c0 [ 246.535279][ C1] free_unref_page+0x8f/0x2a0 [ 246.539972][ C1] __unfreeze_partials+0x1a5/0x200 [ 246.545156][ C1] put_cpu_partial+0x12d/0x190 [ 246.550018][ C1] qlist_free_all+0x35/0x90 [ 246.554509][ C1] kasan_quarantine_reduce+0x150/0x160 [ 246.560038][ C1] __kasan_slab_alloc+0x2f/0xd0 [ 246.564982][ C1] slab_post_alloc_hook+0x4c/0x380 [ 246.570085][ C1] __kmalloc+0x127/0x330 [ 246.574319][ C1] kernfs_fop_write_iter+0x155/0x4c0 [ 246.579588][ C1] vfs_write+0x745/0xd60 [ 246.583814][ C1] ksys_write+0x152/0x260 [ 246.588270][ C1] do_syscall_64+0x4c/0xa0 [ 246.592850][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.598826][ C1] [ 246.601141][ C1] Memory state around the buggy address: [ 246.606839][ C1] ffff88801bca2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.615253][ C1] ffff88801bca2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.624014][ C1] >ffff88801bca2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.632156][ C1] ^ [ 246.637678][ C1] ffff88801bca2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.645721][ C1] ffff88801bca2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.654030][ C1] ================================================================== [ 246.662189][ C1] Disabling lock debugging due to kernel taint [ 246.668627][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 246.676111][ C1] CPU: 1 PID: 4292 Comm: kworker/u4:7 Tainted: G B syzkaller #0 [ 246.685775][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.695993][ C1] Workqueue: netns cleanup_net [ 246.700797][ C1] Call Trace: [ 246.704085][ C1] [ 246.706966][ C1] dump_stack_lvl+0x188/0x250 [ 246.711929][ C1] ? show_regs_print_info+0x20/0x20 [ 246.717331][ C1] ? load_image+0x400/0x400 [ 246.721858][ C1] panic+0x2e5/0x810 [ 246.725878][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 246.730706][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 246.736900][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 246.742847][ C1] ? _raw_spin_unlock+0x40/0x40 [ 246.747723][ C1] ? print_memory_metadata+0x314/0x400 [ 246.753208][ C1] ? rose_timer_expiry+0x470/0x490 [ 246.758464][ C1] check_panic_on_warn+0x80/0xa0 [ 246.763601][ C1] ? rose_timer_expiry+0x470/0x490 [ 246.768744][ C1] end_report+0x6d/0xf0 [ 246.773015][ C1] kasan_report+0x102/0x130 [ 246.777544][ C1] ? rose_timer_expiry+0x470/0x490 [ 246.782861][ C1] rose_timer_expiry+0x470/0x490 [ 246.787858][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 246.792904][ C1] call_timer_fn+0x17b/0x540 [ 246.797742][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 246.802798][ C1] ? __run_timers+0x800/0x800 [ 246.807622][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 246.812972][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 246.818197][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 246.823420][ C1] __run_timers+0x53e/0x800 [ 246.827961][ C1] ? detach_timer+0x2b0/0x2b0 [ 246.832770][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 246.838953][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 246.843832][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 246.849338][ C1] run_timer_softirq+0x63/0xf0 [ 246.854230][ C1] handle_softirqs+0x339/0x830 [ 246.859120][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 246.864788][ C1] ? do_softirq+0x210/0x210 [ 246.869330][ C1] __irq_exit_rcu+0x13b/0x230 [ 246.874028][ C1] ? irq_exit_rcu+0x20/0x20 [ 246.878656][ C1] irq_exit_rcu+0x5/0x20 [ 246.882921][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 246.888972][ C1] [ 246.891919][ C1] [ 246.894872][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 246.900987][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 246.906391][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 246.926194][ C1] RSP: 0018:ffffc9000333f900 EFLAGS: 00000206 [ 246.932381][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 747f267fa3012a00 [ 246.941297][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980 [ 246.949376][ C1] RBP: ffffc9000333fa20 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 246.957367][ C1] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffffffff8c31eaa0 [ 246.965633][ C1] R13: 1ffff92000667f2c R14: 0000000000000246 R15: dffffc0000000000 [ 246.973956][ C1] ? rcu_lock_release+0x5/0x20 [ 246.978756][ C1] ? read_lock_is_recursive+0x10/0x10 [ 246.984255][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 246.989316][ C1] rcu_lock_acquire+0x2a/0x30 [ 246.994363][ C1] ? rcu_lock_acquire+0x5/0x30 [ 246.999216][ C1] inet_twsk_purge+0x119/0x840 [ 247.004225][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 247.009752][ C1] ? iput+0x706/0x8a0 [ 247.013777][ C1] ? dccp_v6_exit_net+0x80/0x80 [ 247.018744][ C1] cleanup_net+0x791/0xba0 [ 247.023361][ C1] ? ops_free_list+0x330/0x330 [ 247.028160][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 247.034082][ C1] ? _raw_spin_unlock+0x40/0x40 [ 247.039098][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 247.044325][ C1] process_one_work+0x85f/0x1010 [ 247.049289][ C1] ? worker_detach_from_pool+0x240/0x240 [ 247.055116][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 247.060434][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 247.065478][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 247.071124][ C1] ? wq_worker_running+0x97/0x170 [ 247.076340][ C1] worker_thread+0xaa6/0x1290 [ 247.081157][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 247.086425][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 247.092423][ C1] kthread+0x436/0x520 [ 247.096601][ C1] ? rcu_lock_release+0x20/0x20 [ 247.101472][ C1] ? kthread_blkcg+0xd0/0xd0 [ 247.106252][ C1] ret_from_fork+0x1f/0x30 [ 247.110690][ C1] [ 247.114177][ C1] Kernel Offset: disabled [ 247.118700][ C1] Rebooting in 86400 seconds..