last executing test programs: 4.272778138s ago: executing program 1 (id=464): syz_open_dev$ttys(0xc, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {0xa, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xe79b04dd2a128718, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_ethernet(0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb00000000001839b3fd4aabb4"], 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) socket$netlink(0x10, 0x3, 0x0) 4.108484831s ago: executing program 3 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0xc4c4) 3.900324815s ago: executing program 3 (id=466): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) socket(0xa, 0x2400000001, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6821, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0) 3.6163222s ago: executing program 0 (id=467): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.208512978s ago: executing program 1 (id=469): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.964198253s ago: executing program 3 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b920, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe0, 0xb}, {0x2, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x20008044) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.893723894s ago: executing program 3 (id=471): syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x7, {0x400e802, 0x8001, 0x400, 0x804}}) 2.808223906s ago: executing program 3 (id=473): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0) 2.773460377s ago: executing program 0 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0xc4c4) 2.674268728s ago: executing program 0 (id=478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x60, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x0, 0x83}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@remote}, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0x0, @in=@broadcast, 0x800000, 0x1, 0x0, 0x4b}]}]}, 0x17c}}, 0x20004040) 2.634247429s ago: executing program 0 (id=479): socket(0x1f, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r2 = msgget$private(0x0, 0x2) msgctl$MSG_STAT(r2, 0xb, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48094) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) sendfile(r4, r4, 0x0, 0xffffffff) r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000001780)) 2.374821205s ago: executing program 4 (id=480): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) socket(0xa, 0x2400000001, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6821, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0) 2.326248915s ago: executing program 1 (id=481): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[], 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000", @ANYRES8=r5, @ANYBLOB="0000000000000000140012800b", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x1841) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) 1.880251834s ago: executing program 0 (id=482): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f848b880180000000000000f23c00f21f83500000d000f23f80f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x7b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 1.56137779s ago: executing program 1 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b920, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe0, 0xb}, {0x2, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x20008044) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.472948782s ago: executing program 4 (id=484): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='G', 0x1}], 0x1) 1.411933212s ago: executing program 4 (id=485): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, 0x0, 0x0) 1.410884443s ago: executing program 1 (id=486): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.352193994s ago: executing program 4 (id=487): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"}}}}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r9, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 1.078450889s ago: executing program 2 (id=488): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)="00d881aef1b7599919e9c08c1cfc931687d5d467", 0x14, 0x4044005, &(0x7f0000000040)={0xa, 0x4e24, 0xb, @loopback, 0x9}, 0x1c) 1.007380141s ago: executing program 2 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70200000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b9267aa0b28d69a74ffdea613e892f0f9ff9468e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff180aa18b625d1667459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da21f6f57020dd4f1f4f15edd7a0b1e24c6f79e3ea72a29c7928f000000006c5c8dddea685405273c7967d2c1a14efe0d53cb4b95a1ed7203000000ed52e5c08822cdcf2bc058ff9aab481926312fc7c88b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c8b10ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e40891"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0xc4c4) 922.952912ms ago: executing program 2 (id=490): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec020000", @ANYRES16, @ANYBLOB="02002cbd7000ffdbdf25010000001400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="00000b003c00018008000300020000000800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300020000000800030001000000040001800c0102805400018008000100050000000800010005000000080001000300000008000100060000000800010000000000080001000400000008000100000000000800010007000000080001000800000008000100050000002c000180080001000800000008000100020000000800010003000000080001000200000008000100030000002c000180080001000100000008000100080000000800010003000000080001000400000008000100070000000c00018008000100000000001c00018008000100050000000800010001000000080001000100000034000180080001000400000008000100000000000800010005000000080001000000000008000100070000000800010008000000740102803c00018008000100060000000800010004000000080001000100000008000100070000000800010003000000080001000700000008000100030000001c0001800800010006000000080001000000000008000100020000002c000180080001000300000008000100030000000800010007000000080001000100000008000100070000000c0001800800010007000000440001800800010008000000080001000000000008000100080000000800010006000000080001000200000008000100050000000800010000000000080001000300000034000180080001000000000008000100040000000800010001000000080001000200000008000100080000000800010000000000240001800800010004000000080001000400000008000100070000000800010007000000440001800800010004000000080001000500000008000100040000000800010002000000080001000300000008000100070000000800010000000000080001"], 0x2ec}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 748.132945ms ago: executing program 3 (id=491): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 539.441309ms ago: executing program 1 (id=492): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000380)={r1, 0x2, r0, 0x8000000, 0x80000}) 396.040862ms ago: executing program 4 (id=493): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x10) 324.247564ms ago: executing program 4 (id=494): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) socket(0xa, 0x2400000001, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6821, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0) 249.284295ms ago: executing program 0 (id=495): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000028c0)={0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x10}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x0, r2}) 69.090348ms ago: executing program 2 (id=496): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) 260.01µs ago: executing program 2 (id=497): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, 0x0, 0x0) 0s ago: executing program 2 (id=498): write(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): on device team0 [ 55.644899][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.654849][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.663689][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.680695][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.689471][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.711495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.720493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.730074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.739553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.747931][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.755128][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.763120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.773839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.782892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.794663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.803713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.813222][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.820450][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.844694][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.854655][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.863843][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.886383][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.898005][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.923221][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.934864][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.943765][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.953934][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.963000][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.971873][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.980726][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.995116][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.005766][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.037526][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.059425][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.067585][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.075939][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.085780][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.094704][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.111108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.126021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.135363][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.142485][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.156632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.166161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.180546][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.187619][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.202725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.212042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.221727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.237051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.245877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.256720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.266262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.288873][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.299111][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.307765][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.323032][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.333130][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.341939][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.353470][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.362588][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.370550][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.380807][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.389889][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.404484][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.415930][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.431087][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.440942][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.450877][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.459669][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.467300][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.481529][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.494378][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.502257][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.514366][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.537336][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.578134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.588977][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 56.591288][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 56.606825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.616874][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 56.627084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.627226][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 56.638295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.641865][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 56.655367][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.662468][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.670681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.679530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.687836][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.694909][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.708487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.734708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.747665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.759471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.770417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.779143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.787904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.797007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.809931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.819638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.851774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.860232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.867704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.876151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.893106][ T4182] device veth0_vlan entered promiscuous mode [ 56.903861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.912590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.921744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.930622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.941827][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.959438][ T4182] device veth1_vlan entered promiscuous mode [ 56.969491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.978062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.987679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.003595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.015318][ T4183] device veth0_vlan entered promiscuous mode [ 57.029800][ T4183] device veth1_vlan entered promiscuous mode [ 57.037690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.046488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.054994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.063301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.071900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.091082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.100639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.112067][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.133715][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.168413][ T4182] device veth0_macvtap entered promiscuous mode [ 57.179945][ T4182] device veth1_macvtap entered promiscuous mode [ 57.191101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.200109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.209477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.217988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.227105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.241762][ T4194] device veth0_vlan entered promiscuous mode [ 57.253537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.267626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.296886][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.323948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.338208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.347852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.356967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.366357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.375703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.387677][ T4194] device veth1_vlan entered promiscuous mode [ 57.397095][ T4183] device veth0_macvtap entered promiscuous mode [ 57.410346][ T4183] device veth1_macvtap entered promiscuous mode [ 57.435246][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.453967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.470507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.483712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.498188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.506923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.516007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.528897][ T4194] device veth0_macvtap entered promiscuous mode [ 57.538445][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.548131][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.558785][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.567534][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.581146][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.592986][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.604880][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.615202][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.625840][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.637746][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.646497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.655643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.664198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.673058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.682261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.691124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.700293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.710153][ T4194] device veth1_macvtap entered promiscuous mode [ 57.731738][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.742325][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.752684][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.764979][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.776536][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.786654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.795252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.802941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.810612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.820501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.833871][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.843853][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.852749][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.861627][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.884488][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.903105][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.913847][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.924370][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.935218][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.946203][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.978469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.987119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.996270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.006027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.014908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.024051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.049734][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.058452][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.067467][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.077870][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.105175][ T4185] device veth0_vlan entered promiscuous mode [ 58.141875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.159453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.167972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.176723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.192116][ T4185] device veth1_vlan entered promiscuous mode [ 58.243787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.253402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.263240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.272787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.296125][ T4184] device veth0_vlan entered promiscuous mode [ 58.310190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.319985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.334539][ T4185] device veth0_macvtap entered promiscuous mode [ 58.344541][ T4185] device veth1_macvtap entered promiscuous mode [ 58.354567][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.358081][ T4184] device veth1_vlan entered promiscuous mode [ 58.370950][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.376427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.389500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.401082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.410017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.417943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.426453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.448237][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.460359][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.470967][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.481857][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.492107][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.502816][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.515316][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.549168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.558426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.568162][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.580024][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.590227][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.603129][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.613224][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.624072][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.635506][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.651531][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.663306][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.669644][ T4173] Bluetooth: hci2: command 0x040f tx timeout [ 58.677692][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.685418][ T4173] Bluetooth: hci3: command 0x040f tx timeout [ 58.685980][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.697306][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 58.700632][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.706126][ T4173] Bluetooth: hci1: command 0x040f tx timeout [ 58.720122][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.720947][ T4173] Bluetooth: hci4: command 0x040f tx timeout [ 58.742130][ T3111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.755808][ T3111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.757111][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.774082][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.784114][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.793174][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.813759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.827363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.836416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.838927][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.863704][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.874406][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.887894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.899861][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.915380][ T4184] device veth0_macvtap entered promiscuous mode [ 58.935098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.948277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.984743][ T4184] device veth1_macvtap entered promiscuous mode [ 59.044716][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.059421][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.071814][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.090397][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.123624][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.156159][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.177440][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.197126][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.235258][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.253678][ T4305] program syz.1.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.255332][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.275070][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.320740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.329383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.338040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.359929][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.371395][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.382262][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.394384][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.405415][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.421068][ T26] audit: type=1326 audit(1757507526.363:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4a95bba9 code=0x7ffc0000 [ 59.448795][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.458967][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.471012][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.482995][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.500140][ T26] audit: type=1326 audit(1757507526.393:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8d4a95bba9 code=0x7ffc0000 [ 59.526921][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.536006][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.536578][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.558002][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.567732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.581768][ T26] audit: type=1326 audit(1757507526.393:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d4a95bbe3 code=0x7ffc0000 [ 59.610144][ T26] audit: type=1326 audit(1757507526.393:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d4a95bbe3 code=0x7ffc0000 [ 59.635910][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.635942][ T26] audit: type=1326 audit(1757507526.393:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4a95bba9 code=0x7ffc0000 [ 59.669916][ T26] audit: type=1326 audit(1757507526.393:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4a95bba9 code=0x7ffc0000 [ 59.682761][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.723226][ T26] audit: type=1326 audit(1757507526.393:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8d4a95bba9 code=0x7ffc0000 [ 59.747593][ T26] audit: type=1326 audit(1757507526.393:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4a95bba9 code=0x7ffc0000 [ 59.772356][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.797326][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.800523][ T26] audit: type=1326 audit(1757507526.393:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f8d4a95bba9 code=0x7ffc0000 [ 59.876430][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.892226][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.953805][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.004123][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.047407][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.105665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.152326][ T4316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'. [ 60.165774][ T3111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.178220][ T3111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.194717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.658845][ T4238] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.687188][ T4294] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.708804][ T4277] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.749314][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 60.755836][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 60.772493][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 60.792716][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 60.812985][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 60.968836][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 60.973979][ T4277] usb 1-1: Using ep0 maxpacket: 32 [ 61.049154][ T4238] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.072191][ T4238] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 61.088797][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.109283][ T4277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.120706][ T4294] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 61.133467][ T4328] process 'syz.4.4' launched './file0' with NULL argv: empty string added [ 61.149567][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.167147][ T4238] usb 2-1: config 0 descriptor?? [ 61.172480][ T4277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.212134][ T4238] pwc: Askey VC010 type 2 USB webcam detected. [ 61.253480][ T4294] usb 4-1: config 0 descriptor?? [ 61.261763][ T4277] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 61.271338][ T4277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.289025][ T4277] usb 1-1: config 0 descriptor?? [ 61.340501][ T4277] hub 1-1:0.0: USB hub found [ 61.528845][ T4294] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 61.584192][ T4294] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 61.594083][ T4277] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 61.659158][ T4294] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 61.663001][ T4238] pwc: recv_control_msg error -32 req 02 val 2b00 [ 61.666522][ T4294] usb 4-1: media controller created [ 61.709850][ T4173] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.835494][ T4294] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.898829][ T4277] usbhid 1-1:0.0: can't add hid device: -71 [ 61.913459][ T4277] usbhid: probe of 1-1:0.0 failed with error -71 [ 61.952120][ T4238] pwc: recv_control_msg error -71 req 02 val 2c00 [ 61.959030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 61.968067][ T4173] usb 3-1: Using ep0 maxpacket: 8 [ 61.998780][ T4238] pwc: recv_control_msg error -71 req 04 val 1000 [ 62.045036][ T4238] pwc: recv_control_msg error -71 req 04 val 1300 [ 62.089068][ T4173] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 62.101430][ T4238] pwc: recv_control_msg error -71 req 04 val 1400 [ 62.113241][ T4173] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 62.147665][ T4173] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.161495][ T4238] pwc: recv_control_msg error -71 req 02 val 2000 [ 62.175291][ T4277] usb 1-1: USB disconnect, device number 2 [ 62.181316][ T4294] DVB: Unable to find symbol dib7000p_attach() [ 62.190159][ T4238] pwc: recv_control_msg error -71 req 02 val 2100 [ 62.217296][ T4173] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 62.229890][ T4238] pwc: recv_control_msg error -71 req 04 val 1500 [ 62.264706][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.275881][ T4238] pwc: recv_control_msg error -71 req 02 val 2500 [ 62.310845][ T4238] pwc: recv_control_msg error -71 req 02 val 2400 [ 62.329333][ T4294] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 62.341135][ T4238] pwc: recv_control_msg error -71 req 02 val 2600 [ 62.360867][ T4173] usbtmc 3-1:16.0: bulk endpoints not found [ 62.367670][ T4238] pwc: recv_control_msg error -71 req 02 val 2900 [ 62.419830][ T4238] pwc: recv_control_msg error -71 req 02 val 2800 [ 62.472966][ T4238] pwc: recv_control_msg error -71 req 04 val 1100 [ 62.519919][ T4238] pwc: recv_control_msg error -71 req 04 val 1200 [ 62.548909][ T4294] rc_core: IR keymap rc-dib0700-rc5 not found [ 62.555058][ T4294] Registered IR keymap rc-empty [ 62.588366][ T4238] pwc: Registered as video103. [ 62.596739][ T4337] dib0700: tx buffer length is larger than 4. Not supported. [ 62.632303][ T4238] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 62.661796][ T4294] dvb-usb: could not initialize remote control. [ 62.668190][ T4294] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 62.701766][ T4238] usb 2-1: USB disconnect, device number 2 [ 62.729222][ T4333] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 62.888908][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.906628][ T4333] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.030675][ T4358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.119581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 63.172458][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 63.298981][ T4232] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 63.311777][ T4232] usb 5-1: config 0 has no interface number 0 [ 63.498908][ T4232] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 63.517358][ T4294] usb 4-1: USB disconnect, device number 2 [ 63.538716][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.614549][ T4232] usb 5-1: Product: syz [ 63.616607][ T4294] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 63.643798][ T4232] usb 5-1: Manufacturer: syz [ 63.665005][ T4232] usb 5-1: SerialNumber: syz [ 63.688683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.723022][ T4232] usb 5-1: config 0 descriptor?? [ 63.809885][ T4232] smsc95xx v2.0.0 [ 63.813721][ T4232] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 63.881716][ T4232] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 63.978838][ T4222] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 64.208114][ T4294] usb 5-1: USB disconnect, device number 2 [ 64.448877][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.628816][ T4222] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 64.752503][ T4222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.829359][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.869344][ T4222] usb 2-1: Product: syz [ 64.873848][ T4232] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 64.895762][ T4222] usb 2-1: Manufacturer: syz [ 64.921579][ T4222] usb 2-1: SerialNumber: syz [ 64.938547][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.998374][ T4232] usb 4-1: config 0 descriptor?? [ 65.009818][ T4222] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 65.120970][ T4232] pwc: Askey VC010 type 2 USB webcam detected. [ 65.232028][ T4238] usb 3-1: USB disconnect, device number 2 [ 65.558816][ T4232] pwc: recv_control_msg error -32 req 02 val 2b00 [ 65.708871][ T4222] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 65.824664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #01!!! [ 65.839347][ T4232] pwc: recv_control_msg error -71 req 02 val 2c00 [ 65.872196][ T4232] pwc: recv_control_msg error -71 req 04 val 1000 [ 65.899429][ T4232] pwc: recv_control_msg error -71 req 04 val 1300 [ 65.931160][ T4232] pwc: recv_control_msg error -71 req 04 val 1400 [ 65.959428][ T4232] pwc: recv_control_msg error -71 req 02 val 2000 [ 66.001218][ T4232] pwc: recv_control_msg error -71 req 02 val 2100 [ 66.032141][ T4232] pwc: recv_control_msg error -71 req 04 val 1500 [ 66.079437][ T4232] pwc: recv_control_msg error -71 req 02 val 2500 [ 66.111789][ T4232] pwc: recv_control_msg error -71 req 02 val 2400 [ 66.148821][ T4232] pwc: recv_control_msg error -71 req 02 val 2600 [ 66.178841][ T4232] pwc: recv_control_msg error -71 req 02 val 2900 [ 66.198833][ T4232] pwc: recv_control_msg error -71 req 02 val 2800 [ 66.219441][ T4232] pwc: recv_control_msg error -71 req 04 val 1100 [ 66.238781][ T4232] pwc: recv_control_msg error -71 req 04 val 1200 [ 66.262889][ T4232] pwc: Registered as video103. [ 66.283075][ T4232] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 66.332782][ T4232] usb 4-1: USB disconnect, device number 3 [ 66.839734][ T4222] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 66.860528][ T4222] ath9k_htc: Failed to initialize the device [ 66.958902][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 66.974538][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 66.984106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.993023][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 67.002312][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 67.011261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 67.020166][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 67.268907][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 67.335955][ T4397] tipc: Started in network mode [ 67.370002][ T4397] tipc: Node identity 328126aa6e91, cluster identity 4711 [ 67.388913][ T4232] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 67.429471][ T4397] tipc: Enabled bearer , priority 0 [ 67.439741][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.465012][ T4400] device syzkaller0 entered promiscuous mode [ 67.495298][ T4232] usb 4-1: config 0 descriptor?? [ 67.540786][ T4232] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 67.573349][ T4397] tipc: Resetting bearer [ 67.612537][ T4396] tipc: Resetting bearer [ 67.622731][ T4238] usb 2-1: USB disconnect, device number 3 [ 67.661561][ T4238] usb 2-1: ath9k_htc: USB layer deinitialized [ 67.683068][ T4396] tipc: Disabling bearer [ 67.847814][ T4408] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET) [ 69.243627][ T4222] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.258004][ T4422] Zero length message leads to an empty skb [ 69.628966][ T4222] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 69.658749][ T4222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.698345][ T4222] usb 1-1: config 0 descriptor?? [ 69.750691][ T4222] gspca_main: spca508-2.14.0 probing 8086:0110 [ 69.933526][ T4384] Set syz1 is full, maxelem 65536 reached [ 69.968901][ T4222] gspca_spca508: reg_read err -32 [ 70.031415][ T4222] gspca_spca508: reg_read err -32 [ 70.078876][ T4222] gspca_spca508: reg_read err -32 [ 70.338860][ T4222] gspca_spca508: reg_read err -71 [ 70.359504][ T4232] gspca_sonixj: reg_w1 err -71 [ 70.364375][ T4232] sonixj: probe of 4-1:0.0 failed with error -71 [ 70.369634][ T4222] gspca_spca508: reg write: error -71 [ 70.387106][ T4222] spca508: probe of 1-1:0.0 failed with error -71 [ 70.396066][ T4232] usb 4-1: USB disconnect, device number 4 [ 70.410151][ T4222] usb 1-1: USB disconnect, device number 3 [ 70.461231][ T4437] tipc: Started in network mode [ 70.466237][ T4437] tipc: Node identity a6a5a8299185, cluster identity 4711 [ 70.473961][ T4437] tipc: Enabled bearer , priority 0 [ 70.482275][ T4437] device syzkaller0 entered promiscuous mode [ 70.494550][ T4437] tipc: Resetting bearer [ 70.503457][ T4436] tipc: Resetting bearer [ 70.512347][ T4436] tipc: Disabling bearer [ 70.518894][ T4335] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 70.619475][ T4238] syzkaller0: tun_net_xmit 76 [ 70.624667][ T4238] syzkaller0: tun_net_xmit 48 [ 70.644053][ T4439] syzkaller0: tun_net_xmit 1280 [ 70.649472][ T4439] syzkaller0: create flow: hash 2753065487 index 1 [ 70.662909][ T4438] syzkaller0: delete flow: hash 2753065487 index 1 [ 70.960535][ T4335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.991302][ T4335] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 71.019211][ T4335] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 71.031185][ T4335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.039615][ T4238] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.071900][ T4335] usb 2-1: config 0 descriptor?? [ 71.111186][ T4335] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 71.117836][ T4335] dvb-usb: bulk message failed: -22 (3/0) [ 71.140950][ T4335] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 71.180048][ T4335] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 71.190665][ T4335] usb 2-1: media controller created [ 71.219717][ T4335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.241438][ T4335] dvb-usb: bulk message failed: -22 (6/0) [ 71.248157][ T4335] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 71.248239][ T4460] tipc: Started in network mode [ 71.261114][ T4460] tipc: Node identity 163e82d9a0b2, cluster identity 4711 [ 71.268552][ T4460] tipc: Enabled bearer , priority 0 [ 71.279352][ T4460] device syzkaller0 entered promiscuous mode [ 71.295838][ T4460] tipc: Resetting bearer [ 71.298785][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 71.303584][ T4335] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 71.327179][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.331037][ T4431] dvb-usb: bulk message failed: -22 (2/0) [ 71.333790][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.348869][ T4238] usb 5-1: Using ep0 maxpacket: 8 [ 71.361076][ T4335] dvb-usb: schedule remote query interval to 150 msecs. [ 71.377846][ T4335] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 71.391188][ T4459] tipc: Resetting bearer [ 71.400754][ T4335] usb 2-1: USB disconnect, device number 4 [ 71.415026][ T4459] tipc: Disabling bearer [ 71.435040][ T4335] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 71.478957][ T4238] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 71.491004][ T4238] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.516268][ T4238] usb 5-1: config 0 has no interface number 0 [ 71.523260][ T4238] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 71.536358][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.554996][ T4238] usb 5-1: config 0 descriptor?? [ 71.610190][ T4238] ldusb 5-1:0.55: Interrupt in endpoint not found [ 71.648902][ T1108] usb 1-1: too many configurations: 69, using maximum allowed: 8 [ 71.738917][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.828924][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.859454][ T4222] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 71.870367][ T4441] kvm: pic: single mode not supported [ 71.870420][ T4441] kvm: pic: level sensitive irq not supported [ 71.918844][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.920234][ T4474] udc-core: couldn't find an available UDC or it's busy [ 71.942378][ T4474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.011059][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.036679][ T4238] usb 5-1: USB disconnect, device number 3 [ 72.098847][ T4222] usb 4-1: Using ep0 maxpacket: 8 [ 72.104151][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.199024][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.219006][ T4222] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 72.228848][ T4222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.240313][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 72.249502][ T4480] device bridge_slave_1 left promiscuous mode [ 72.256332][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.265626][ T4222] usb 4-1: config 0 has no interfaces? [ 72.272618][ T4222] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 72.282034][ T4294] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 72.289794][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.300566][ T4222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.313044][ T4222] usb 4-1: config 0 descriptor?? [ 72.341620][ T4480] device bridge_slave_0 left promiscuous mode [ 72.349409][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.357557][ T4238] Bluetooth: hci4: command 0x0405 tx timeout [ 72.388864][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.548737][ T4294] usb 2-1: Using ep0 maxpacket: 16 [ 72.559017][ T1108] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.586498][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.608886][ T4222] usb 4-1: string descriptor 0 read error: -71 [ 72.624980][ T4222] usb 4-1: USB disconnect, device number 5 [ 72.637445][ T1108] usb 1-1: Product: syz [ 72.642163][ T1108] usb 1-1: Manufacturer: syz [ 72.647572][ T1108] usb 1-1: SerialNumber: syz [ 72.688914][ T4294] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 72.700729][ T1108] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 72.738852][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.795610][ T4294] usb 2-1: config 0 descriptor?? [ 72.840582][ T4294] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 73.348797][ T1108] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.508816][ T4335] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 73.646686][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 73.780075][ T4335] usb 4-1: Using ep0 maxpacket: 8 [ 73.906311][ T26] audit: type=1326 audit(1757507540.843:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 73.929414][ T26] audit: type=1326 audit(1757507540.853:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 73.929456][ T4335] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 73.952813][ T4335] usb 4-1: config 0 has no interface number 0 [ 73.961324][ T26] audit: type=1326 audit(1757507540.853:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 73.966792][ T4238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.003118][ T4335] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 74.015082][ T4335] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 74.015380][ T26] audit: type=1326 audit(1757507540.853:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 74.026110][ T4335] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.068292][ T4335] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 74.077958][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.094586][ T4335] usb 4-1: config 0 descriptor?? [ 74.120147][ T26] audit: type=1326 audit(1757507540.853:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 74.149777][ T4335] ldusb 4-1:0.55: Interrupt in endpoint not found [ 74.191549][ T26] audit: type=1326 audit(1757507540.853:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 74.239119][ T26] audit: type=1326 audit(1757507540.853:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 74.282122][ T26] audit: type=1326 audit(1757507540.853:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 74.397967][ T4335] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.428818][ T1108] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 74.430967][ T4335] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.451290][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 74.458096][ T1108] ath9k_htc: Failed to initialize the device [ 74.693236][ T21] usb 1-1: USB disconnect, device number 4 [ 74.702360][ T4238] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 74.713022][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.749058][ T4238] usb 3-1: Product: syz [ 74.753462][ T4238] usb 3-1: Manufacturer: syz [ 74.759158][ T4238] usb 3-1: SerialNumber: syz [ 74.761074][ T21] usb 1-1: ath9k_htc: USB layer deinitialized [ 74.774163][ T4238] usb 3-1: config 0 descriptor?? [ 74.899384][ T4238] usb 4-1: USB disconnect, device number 6 [ 75.120677][ T13] usb 3-1: USB disconnect, device number 3 [ 75.689319][ T4294] gspca_sonixj: reg_w1 err -71 [ 75.696607][ T4294] sonixj: probe of 2-1:0.0 failed with error -71 [ 75.726883][ T4294] usb 2-1: USB disconnect, device number 5 [ 75.828754][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 76.098725][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 76.218931][ T1108] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 76.228998][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.265209][ T1108] usb 4-1: config 0 has no interface number 0 [ 76.277146][ T1108] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 76.289135][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.321852][ T1108] usb 4-1: config 0 descriptor?? [ 76.374337][ T1108] ldusb 4-1:0.55: Interrupt in endpoint not found [ 76.434951][ T1324] cfg80211: failed to load regulatory.db [ 76.643247][ T4517] kvm: pic: single mode not supported [ 76.643266][ T4517] kvm: pic: level sensitive irq not supported [ 76.695870][ T4535] udc-core: couldn't find an available UDC or it's busy [ 76.743318][ T4535] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.305555][ T26] audit: type=1326 audit(1757507544.243:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 77.343648][ T26] audit: type=1326 audit(1757507544.283:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978d1bba9 code=0x7ffc0000 [ 77.438720][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 77.813841][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.840557][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.867468][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.908799][ T1108] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.930268][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.979293][ T1108] usb 2-1: config 0 descriptor?? [ 78.269148][ T1324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.274193][ T4294] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.464418][ T1108] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 78.514808][ T1108] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 78.568979][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 78.588228][ T13] usb 4-1: USB disconnect, device number 7 [ 78.649045][ T4294] usb 3-1: config 0 has no interfaces? [ 78.724027][ T1324] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 78.734442][ T4238] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.755571][ T1324] usb 5-1: config 0 has no interface number 0 [ 78.771948][ T1324] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 78.812582][ T1324] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 78.823994][ T1324] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.837451][ T1324] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 78.843602][ T4294] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 78.847228][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.870907][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.880203][ T1324] usb 5-1: config 0 descriptor?? [ 78.885418][ T4294] usb 3-1: Product: syz [ 78.887199][ T13] usb 2-1: USB disconnect, device number 6 [ 78.889891][ T4294] usb 3-1: Manufacturer: syz [ 78.904858][ T4294] usb 3-1: SerialNumber: syz [ 78.922582][ T1324] ldusb 5-1:0.55: Interrupt in endpoint not found [ 78.925653][ T4294] usb 3-1: config 0 descriptor?? [ 79.131974][ T1324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.152475][ T1324] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.178932][ T4238] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.187897][ T4238] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.200272][ T4238] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.211736][ T4238] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 79.223257][ T4238] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 79.359081][ T4238] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.381123][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.420086][ T4238] usb 1-1: Product: syz [ 79.440866][ T4238] usb 1-1: Manufacturer: syz [ 79.491712][ T4238] cdc_wdm 1-1:1.0: skipping garbage [ 79.500602][ T4238] cdc_wdm 1-1:1.0: skipping garbage [ 79.526582][ T4238] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 79.534848][ T4238] cdc_wdm 1-1:1.0: Unknown control protocol [ 79.707048][ T1108] usb 5-1: USB disconnect, device number 4 [ 79.713317][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 79.757710][ T26] audit: type=1326 audit(1757507546.693:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.0.88" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f300991eba9 code=0x0 [ 79.968792][ T4294] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 79.988862][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 80.108960][ T21] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 80.118504][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.128936][ T21] usb 2-1: config 0 descriptor?? [ 80.171085][ T21] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 80.328918][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.340267][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.350975][ T4294] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 80.360406][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.374713][ T4294] usb 4-1: config 0 descriptor?? [ 80.862637][ T4294] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 80.985067][ T4222] usb 3-1: USB disconnect, device number 4 [ 81.068919][ T4294] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 81.076640][ T4294] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 81.087788][ T4294] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 81.098040][ T4294] usb 4-1: USB disconnect, device number 8 [ 81.191388][ T4574] fido_id[4574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 81.501561][ T13] usb 1-1: USB disconnect, device number 5 [ 81.928906][ T4238] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 81.948964][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.168780][ T4238] usb 4-1: Using ep0 maxpacket: 8 [ 82.189426][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 82.290043][ T4238] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 82.298210][ T4238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.308913][ T13] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 82.317246][ T13] usb 1-1: config 0 has no interface number 0 [ 82.323685][ T4238] usb 4-1: config 0 has no interface number 0 [ 82.328756][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.330477][ T4238] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 82.347239][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.357659][ T4238] usb 4-1: config 0 descriptor?? [ 82.400246][ T4238] ldusb 4-1:0.55: Interrupt in endpoint not found [ 82.498849][ T13] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 82.507992][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.516541][ T13] usb 1-1: Product: syz [ 82.520921][ T13] usb 1-1: Manufacturer: syz [ 82.525658][ T13] usb 1-1: SerialNumber: syz [ 82.532634][ T13] usb 1-1: config 0 descriptor?? [ 82.570185][ T13] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 82.588849][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 82.635475][ T4586] kvm: pic: single mode not supported [ 82.635488][ T4586] kvm: pic: level sensitive irq not supported [ 82.687268][ T4599] udc-core: couldn't find an available UDC or it's busy [ 82.707074][ T4599] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.734882][ T1108] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 82.745428][ T1108] usb 5-1: config 0 has no interface number 0 [ 82.759133][ T1108] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 82.775834][ T1108] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 82.787312][ T1108] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.807015][ T1108] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 82.816802][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.862294][ T1108] usb 5-1: config 0 descriptor?? [ 82.920420][ T1108] ldusb 5-1:0.55: Interrupt in endpoint not found [ 82.979034][ T21] gspca_sonixj: reg_w1 err -71 [ 82.984310][ T21] sonixj: probe of 2-1:0.0 failed with error -71 [ 83.003368][ T21] usb 2-1: USB disconnect, device number 7 [ 83.008898][ T13] gspca_sn9c2028: read1 error -71 [ 83.028803][ T13] gspca_sn9c2028: read1 error -71 [ 83.033948][ T13] sn9c2028: probe of 1-1:0.119 failed with error -71 [ 83.063350][ T13] usb 1-1: USB disconnect, device number 6 [ 83.148939][ T1108] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.180784][ T1108] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.666867][ T4238] usb 5-1: USB disconnect, device number 5 [ 83.838756][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 83.988745][ T1108] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 84.078758][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 84.208911][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.225722][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.251521][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.271630][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 84.292460][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.378933][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.408812][ T21] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 84.424528][ T21] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 84.433420][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.463797][ T21] usb 2-1: Manufacturer: syz [ 84.474872][ T1108] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 84.499565][ T21] usb 2-1: config 0 descriptor?? [ 84.507565][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.536999][ T1108] usb 1-1: config 0 descriptor?? [ 84.715205][ T4222] usb 4-1: USB disconnect, device number 9 [ 84.838882][ T21] rc_core: IR keymap rc-hauppauge not found [ 84.854152][ T21] Registered IR keymap rc-empty [ 84.860303][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 84.888846][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 84.920051][ T21] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 84.934569][ T21] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 84.952451][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 84.999958][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.021743][ T1108] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 85.030566][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.037945][ T1108] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 85.045762][ T1108] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 85.054740][ T1108] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 85.062662][ T1108] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 85.070348][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.079411][ T1108] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 85.100065][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.128912][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.159424][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.188844][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.228975][ T1108] playstation 0003:054C:0DF2.0006: Invalid byte count transferred, expected 20 got 0 [ 85.238754][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.246076][ T1108] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 85.255895][ T1108] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 85.264633][ T1108] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 85.273912][ T1108] playstation: probe of 0003:054C:0DF2.0006 failed with error -22 [ 85.282414][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.340149][ T21] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 85.357127][ T21] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 85.444141][ T21] usb 1-1: USB disconnect, device number 7 [ 85.868898][ T4222] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 86.108888][ T4222] usb 4-1: Using ep0 maxpacket: 16 [ 86.228867][ T4222] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 86.238050][ T4222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.253399][ T4222] usb 4-1: config 0 descriptor?? [ 86.290104][ T4222] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 86.524492][ T13] usb 2-1: USB disconnect, device number 8 [ 86.603787][ T4238] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.813658][ T26] audit: type=1800 audit(1757507553.753:22): pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.120" name="/" dev="fuse" ino=0 res=0 errno=0 [ 86.868430][ T4665] input: syz0 as /devices/virtual/input/input10 [ 86.899040][ T4238] usb 5-1: Using ep0 maxpacket: 8 [ 87.048949][ T4238] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 87.057182][ T13] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 87.064880][ T4238] usb 5-1: config 0 has no interface number 0 [ 87.071368][ T4238] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 87.082250][ T4238] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 87.093111][ T4238] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 87.106524][ T4238] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 87.115637][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.125677][ T4238] usb 5-1: config 0 descriptor?? [ 87.170014][ T4238] ldusb 5-1:0.55: Interrupt in endpoint not found [ 87.311248][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 87.377519][ T4238] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 87.386508][ T4238] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.444036][ T13] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 87.456597][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.485138][ T13] usb 2-1: config 0 has no interface number 0 [ 87.515171][ T13] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 87.554196][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.567771][ T13] usb 2-1: config 0 descriptor?? [ 87.610123][ T13] ldusb 2-1:0.55: Interrupt in endpoint not found [ 87.714815][ T4679] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.804938][ T13] usb 5-1: USB disconnect, device number 6 [ 87.870488][ T4655] kvm: pic: single mode not supported [ 87.870500][ T4655] kvm: pic: level sensitive irq not supported [ 87.922143][ T4684] udc-core: couldn't find an available UDC or it's busy [ 87.941165][ T4684] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.918897][ T4277] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.118864][ T4222] gspca_sonixj: reg_w1 err -71 [ 89.123730][ T4222] sonixj: probe of 4-1:0.0 failed with error -71 [ 89.140896][ T4222] usb 4-1: USB disconnect, device number 10 [ 89.198874][ T4277] usb 3-1: Using ep0 maxpacket: 8 [ 89.338810][ T4277] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 89.346927][ T4277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.369145][ T4277] usb 3-1: config 0 has no interface number 0 [ 89.375440][ T4277] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 89.384636][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.396909][ T4277] usb 3-1: config 0 descriptor?? [ 89.450102][ T4277] ldusb 3-1:0.55: Interrupt in endpoint not found [ 89.509135][ T4703] tipc: Enabled bearer , priority 0 [ 89.529061][ T4703] device syzkaller0 entered promiscuous mode [ 89.562431][ T4703] tipc: Resetting bearer [ 89.612785][ T4702] tipc: Resetting bearer [ 89.632577][ T4702] tipc: Disabling bearer [ 89.692436][ T4173] usb 2-1: USB disconnect, device number 9 [ 89.749807][ T4710] netlink: 11 bytes leftover after parsing attributes in process `syz.1.142'. [ 89.784574][ T4695] kvm: pic: single mode not supported [ 89.784591][ T4695] kvm: pic: level sensitive irq not supported [ 89.968871][ T4238] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 90.258749][ T4222] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 90.274566][ T4238] usb 1-1: Using ep0 maxpacket: 8 [ 90.279804][ T4173] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 90.419032][ T4238] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 90.437899][ T4238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.485940][ T4238] usb 1-1: config 0 has no interfaces? [ 90.508490][ T4238] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 90.538756][ T4222] usb 4-1: Using ep0 maxpacket: 8 [ 90.548326][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.585131][ T4238] usb 1-1: config 0 descriptor?? [ 90.658803][ T4222] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 90.667059][ T4222] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 90.678535][ T4173] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.701528][ T4173] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 90.719727][ T4222] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.734543][ T4173] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 90.747211][ T4173] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.778811][ T4222] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.797406][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.801468][ T4222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.944200][ T4222] usbtmc 4-1:16.0: bulk endpoints not found [ 91.104723][ T4173] snd-usb-audio: probe of 2-1:27.0 failed with error -12 [ 91.126498][ T4720] udc-core: couldn't find an available UDC or it's busy [ 91.137095][ T4720] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.183964][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.739538][ T4277] usb 3-1: USB disconnect, device number 5 [ 92.469062][ T4294] usb 2-1: USB disconnect, device number 10 [ 92.598876][ T4238] usb 1-1: string descriptor 0 read error: -71 [ 92.616293][ T4238] usb 1-1: USB disconnect, device number 8 [ 93.082714][ T4294] usb 4-1: USB disconnect, device number 11 [ 93.579770][ T4238] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.828846][ T4238] usb 5-1: Using ep0 maxpacket: 8 [ 93.958887][ T4238] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 93.967132][ T4238] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.977683][ T4238] usb 5-1: config 0 has no interface number 0 [ 93.984031][ T4238] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 93.993257][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.003619][ T4238] usb 5-1: config 0 descriptor?? [ 94.053682][ T4238] ldusb 5-1:0.55: Interrupt in endpoint not found [ 94.158953][ T4335] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.262760][ T4784] tipc: Started in network mode [ 94.282503][ T4784] tipc: Node identity 92b6afc49994, cluster identity 4711 [ 94.293796][ T4784] tipc: Enabled bearer , priority 0 [ 94.303840][ T4784] device syzkaller0 entered promiscuous mode [ 94.304748][ T4761] kvm: pic: single mode not supported [ 94.310033][ T4761] kvm: pic: level sensitive irq not supported [ 94.328673][ T4784] tipc: Resetting bearer [ 94.352565][ T4783] tipc: Resetting bearer [ 94.360631][ T4786] udc-core: couldn't find an available UDC or it's busy [ 94.371098][ T4783] tipc: Disabling bearer [ 94.376605][ T4786] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.398882][ T4335] usb 3-1: Using ep0 maxpacket: 8 [ 94.425689][ T4238] usb 5-1: USB disconnect, device number 7 [ 94.462599][ T1108] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 94.519830][ T4335] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 94.527942][ T4335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.527964][ T4335] usb 3-1: config 0 has no interface number 0 [ 94.528001][ T4335] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 94.556133][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.566131][ T4335] usb 3-1: config 0 descriptor?? [ 94.610444][ T4335] ldusb 3-1:0.55: Interrupt in endpoint not found [ 94.731549][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 94.848913][ T1108] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 94.860619][ T1108] usb 4-1: config 0 has no interface number 0 [ 94.866915][ T1108] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 94.879643][ T1108] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 94.891197][ T1108] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.905262][ T1108] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 94.915078][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.943094][ T1108] usb 4-1: config 0 descriptor?? [ 94.971869][ T4772] kvm: pic: single mode not supported [ 94.971881][ T4772] kvm: pic: level sensitive irq not supported [ 95.000455][ T1108] ldusb 4-1:0.55: Interrupt in endpoint not found [ 95.240917][ T4277] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 95.261094][ T4277] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.836048][ T4238] usb 4-1: USB disconnect, device number 12 [ 96.925570][ T1108] usb 3-1: USB disconnect, device number 6 [ 97.023323][ T4831] tipc: Enabled bearer , priority 0 [ 97.041608][ T4831] device syzkaller0 entered promiscuous mode [ 97.066515][ T4831] tipc: Resetting bearer [ 97.076085][ T4830] tipc: Resetting bearer [ 97.090161][ T4830] tipc: Disabling bearer [ 97.468909][ T4238] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 97.718889][ T4238] usb 2-1: Using ep0 maxpacket: 8 [ 97.868987][ T4238] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 97.877266][ T4238] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.978793][ T4238] usb 2-1: config 0 has no interface number 0 [ 98.022135][ T4238] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 98.047211][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.073614][ T4238] usb 2-1: config 0 descriptor?? [ 98.122253][ T4238] ldusb 2-1:0.55: Interrupt in endpoint not found [ 98.218773][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 98.365500][ T4839] kvm: pic: single mode not supported [ 98.365513][ T4839] kvm: pic: level sensitive irq not supported [ 98.430171][ T4864] udc-core: couldn't find an available UDC or it's busy [ 98.468742][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 98.478253][ T4864] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.557938][ T1108] usb 2-1: USB disconnect, device number 11 [ 98.618876][ T21] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 98.627525][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.638244][ T21] usb 1-1: config 0 has no interface number 0 [ 98.644545][ T21] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 98.653962][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.664814][ T21] usb 1-1: config 0 descriptor?? [ 98.720290][ T21] ldusb 1-1:0.55: Interrupt in endpoint not found [ 98.898752][ T4277] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.971972][ T4871] tipc: Enabled bearer , priority 0 [ 98.979994][ T4871] device syzkaller0 entered promiscuous mode [ 98.993098][ T4858] kvm: pic: single mode not supported [ 98.993116][ T4858] kvm: pic: level sensitive irq not supported [ 98.997473][ T4871] tipc: Resetting bearer [ 99.013657][ T4870] tipc: Resetting bearer [ 99.026731][ T4870] tipc: Disabling bearer [ 99.159018][ T4277] usb 5-1: Using ep0 maxpacket: 8 [ 99.279849][ T4277] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 99.288433][ T4277] usb 5-1: config 0 has no interface number 0 [ 99.301034][ T4277] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 99.317698][ T4277] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 99.336100][ T4277] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.355391][ T4277] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 99.364941][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.399496][ T4277] usb 5-1: config 0 descriptor?? [ 99.440400][ T4277] ldusb 5-1:0.55: Interrupt in endpoint not found [ 99.654076][ T4238] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 99.682926][ T4238] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.226101][ T1324] usb 5-1: USB disconnect, device number 8 [ 101.056271][ T4909] tipc: Enabled bearer , priority 0 [ 101.092436][ T1108] usb 1-1: USB disconnect, device number 9 [ 101.099202][ T4909] device syzkaller0 entered promiscuous mode [ 101.156828][ T4909] tipc: Resetting bearer [ 101.185356][ T4908] tipc: Resetting bearer [ 101.205920][ T4908] tipc: Disabling bearer [ 101.568745][ T1108] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 101.818755][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 101.938889][ T1108] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 101.947627][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.961957][ T1108] usb 1-1: config 0 has no interface number 0 [ 101.968275][ T1108] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 101.977579][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.991108][ T1108] usb 1-1: config 0 descriptor?? [ 102.030076][ T1108] ldusb 1-1:0.55: Interrupt in endpoint not found [ 102.283412][ T4915] kvm: pic: single mode not supported [ 102.283430][ T4915] kvm: pic: level sensitive irq not supported [ 102.344060][ T4944] udc-core: couldn't find an available UDC or it's busy [ 102.357594][ T4944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.403288][ T4294] usb 1-1: USB disconnect, device number 10 [ 102.598764][ T1324] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 102.838782][ T1324] usb 4-1: Using ep0 maxpacket: 8 [ 102.958956][ T1324] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 102.967203][ T1324] usb 4-1: config 0 has no interface number 0 [ 102.978971][ T1324] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 102.993778][ T4173] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.003669][ T1324] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 103.021049][ T1324] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.034194][ T1324] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 103.043469][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.053078][ T1324] usb 4-1: config 0 descriptor?? [ 103.090116][ T1324] ldusb 4-1:0.55: Interrupt in endpoint not found [ 103.134087][ T4957] tipc: Enabled bearer , priority 0 [ 103.144204][ T4957] device syzkaller0 entered promiscuous mode [ 103.165538][ T4957] tipc: Resetting bearer [ 103.173873][ T4956] tipc: Resetting bearer [ 103.186333][ T4956] tipc: Disabling bearer [ 103.268777][ T4173] usb 3-1: Using ep0 maxpacket: 8 [ 103.297703][ T1324] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.311837][ T1324] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.389070][ T4173] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 103.426374][ T4173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.453958][ T4173] usb 3-1: config 0 has no interface number 0 [ 103.501061][ T4173] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 103.526228][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.551430][ T4173] usb 3-1: config 0 descriptor?? [ 103.590187][ T4173] ldusb 3-1:0.55: Interrupt in endpoint not found [ 103.884711][ T4947] udc-core: couldn't find an available UDC or it's busy [ 103.901003][ T4947] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.946985][ T1108] usb 4-1: USB disconnect, device number 13 [ 104.137052][ T4173] usb 3-1: USB disconnect, device number 7 [ 104.818803][ T4294] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 105.047812][ T4998] tipc: Enabled bearer , priority 0 [ 105.055284][ T4998] device syzkaller0 entered promiscuous mode [ 105.068884][ T4294] usb 4-1: Using ep0 maxpacket: 8 [ 105.073777][ T4998] tipc: Resetting bearer [ 105.080918][ T4997] tipc: Resetting bearer [ 105.094382][ T4997] tipc: Disabling bearer [ 105.208961][ T4294] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 105.225108][ T4294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.247829][ T4294] usb 4-1: config 0 has no interface number 0 [ 105.256832][ T4294] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 105.266390][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.276713][ T4294] usb 4-1: config 0 descriptor?? [ 105.330887][ T4294] ldusb 4-1:0.55: Interrupt in endpoint not found [ 105.611445][ T4985] kvm: pic: single mode not supported [ 105.611457][ T4985] kvm: pic: level sensitive irq not supported [ 105.663456][ T5013] udc-core: couldn't find an available UDC or it's busy [ 105.689211][ T5013] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.797268][ T1108] usb 4-1: USB disconnect, device number 14 [ 106.108921][ T4277] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 106.368883][ T4277] usb 1-1: Using ep0 maxpacket: 8 [ 106.519299][ T4277] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 106.531096][ T4277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.542062][ T4277] usb 1-1: config 0 has no interface number 0 [ 106.548336][ T4277] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 106.560570][ T4277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.572305][ T4277] usb 1-1: config 0 descriptor?? [ 106.594383][ T1108] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 106.621742][ T4277] ldusb 1-1:0.55: Interrupt in endpoint not found [ 106.838986][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 106.858443][ T5015] udc-core: couldn't find an available UDC or it's busy [ 106.865583][ T5015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.900854][ T4294] usb 1-1: USB disconnect, device number 11 [ 106.958271][ T5037] tipc: Enabled bearer , priority 0 [ 106.968602][ T5037] device syzkaller0 entered promiscuous mode [ 106.987574][ T5037] tipc: Resetting bearer [ 106.993526][ T1108] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 107.002523][ T1108] usb 2-1: config 0 has no interface number 0 [ 107.003137][ T5036] tipc: Resetting bearer [ 107.008681][ T1108] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 107.008706][ T1108] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 107.008724][ T1108] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.008758][ T1108] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 107.008777][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.019187][ T1108] usb 2-1: config 0 descriptor?? [ 107.075258][ T5036] tipc: Disabling bearer [ 107.120868][ T1108] ldusb 2-1:0.55: Interrupt in endpoint not found [ 107.336967][ T1108] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 107.358553][ T1108] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.738757][ T4238] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 107.804890][ T1324] usb 2-1: USB disconnect, device number 12 [ 107.978742][ T4238] usb 1-1: Using ep0 maxpacket: 8 [ 108.099090][ T4238] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 108.107441][ T4238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.117763][ T4238] usb 1-1: config 0 has no interface number 0 [ 108.123955][ T4238] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 108.133634][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.152672][ T4238] usb 1-1: config 0 descriptor?? [ 108.199811][ T4238] ldusb 1-1:0.55: Interrupt in endpoint not found [ 108.504424][ T5053] kvm: pic: single mode not supported [ 108.504450][ T5053] kvm: pic: level sensitive irq not supported [ 108.567925][ T5070] udc-core: couldn't find an available UDC or it's busy [ 108.648293][ T5070] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 108.737858][ T5075] tipc: Enabled bearer , priority 0 [ 108.760345][ T5075] device syzkaller0 entered promiscuous mode [ 108.807772][ T4238] usb 1-1: USB disconnect, device number 12 [ 108.831960][ T5075] tipc: Resetting bearer [ 108.848908][ T5074] tipc: Resetting bearer [ 108.875802][ T5074] tipc: Disabling bearer [ 109.568783][ T1108] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.838766][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 109.969627][ T1108] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 109.977946][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.988956][ T1108] usb 5-1: config 0 has no interface number 0 [ 109.995074][ T1108] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.019256][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.053849][ T1108] usb 5-1: config 0 descriptor?? [ 110.100649][ T1108] ldusb 5-1:0.55: Interrupt in endpoint not found [ 110.288388][ T5108] tipc: Enabled bearer , priority 0 [ 110.297554][ T5108] device syzkaller0 entered promiscuous mode [ 110.318215][ T5108] tipc: Resetting bearer [ 110.325849][ T5107] tipc: Resetting bearer [ 110.342347][ T5107] tipc: Disabling bearer [ 110.361007][ T5086] udc-core: couldn't find an available UDC or it's busy [ 110.367949][ T5086] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.437636][ T1108] usb 5-1: USB disconnect, device number 9 [ 110.478996][ T1324] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 110.721160][ T1324] usb 2-1: Using ep0 maxpacket: 8 [ 110.858854][ T1324] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 110.868393][ T1324] usb 2-1: config 0 has no interface number 0 [ 110.874900][ T1324] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 110.885949][ T1324] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 110.938212][ T1324] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.012025][ T1324] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 111.022219][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.035872][ T1324] usb 2-1: config 0 descriptor?? [ 111.080106][ T1324] ldusb 2-1:0.55: Interrupt in endpoint not found [ 111.284828][ T1324] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 111.316999][ T1324] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.379934][ T4277] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.438861][ T1108] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 111.638886][ T4277] usb 3-1: Using ep0 maxpacket: 8 [ 111.690193][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 111.768952][ T4277] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 111.787735][ T4277] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 111.798362][ T4277] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.811892][ T1108] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 111.820574][ T4277] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.830963][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.841296][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.849463][ T1108] usb 1-1: config 0 has no interface number 0 [ 111.883278][ T1108] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 111.912016][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.929675][ T4277] usbtmc 3-1:16.0: bulk endpoints not found [ 111.937120][ T4335] usb 2-1: USB disconnect, device number 13 [ 111.978267][ T1108] usb 1-1: config 0 descriptor?? [ 112.019565][ T1108] ldusb 1-1:0.55: Interrupt in endpoint not found [ 112.261148][ T5126] kvm: pic: single mode not supported [ 112.261166][ T5126] kvm: pic: level sensitive irq not supported [ 112.323142][ T5137] udc-core: couldn't find an available UDC or it's busy [ 112.354327][ T5137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 112.427191][ T4335] usb 1-1: USB disconnect, device number 13 [ 113.348737][ T1324] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 113.588831][ T1324] usb 1-1: Using ep0 maxpacket: 8 [ 113.709022][ T1324] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 113.717381][ T1324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.728189][ T1324] usb 1-1: config 0 has no interface number 0 [ 113.744156][ T1324] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 113.763567][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.797924][ T1324] usb 1-1: config 0 descriptor?? [ 113.853072][ T1324] ldusb 1-1:0.55: Interrupt in endpoint not found [ 114.038250][ T4277] usb 3-1: USB disconnect, device number 8 [ 114.140786][ T5157] udc-core: couldn't find an available UDC or it's busy [ 114.148792][ T5157] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.230245][ T1324] usb 1-1: USB disconnect, device number 14 [ 114.572426][ T5179] tipc: Enabled bearer , priority 0 [ 114.585379][ T5179] device syzkaller0 entered promiscuous mode [ 114.618787][ T4277] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 114.624310][ T5179] tipc: Resetting bearer [ 114.640901][ T5178] tipc: Resetting bearer [ 114.659636][ T5178] tipc: Disabling bearer [ 114.888805][ T4277] usb 3-1: Using ep0 maxpacket: 8 [ 115.018848][ T4277] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 115.027046][ T4277] usb 3-1: config 0 has no interface number 0 [ 115.033267][ T4277] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 115.044117][ T4277] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 115.054778][ T4277] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.067873][ T4277] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 115.077117][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.087020][ T4277] usb 3-1: config 0 descriptor?? [ 115.118908][ T4173] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 115.129804][ T4277] ldusb 3-1:0.55: Interrupt in endpoint not found [ 115.341768][ T4335] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 115.369183][ T4335] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.379012][ T4173] usb 1-1: Using ep0 maxpacket: 8 [ 115.498929][ T4173] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 115.513318][ T4173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.524165][ T4173] usb 1-1: config 0 has no interface number 0 [ 115.530971][ T4173] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 115.540742][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.558041][ T4173] usb 1-1: config 0 descriptor?? [ 115.600517][ T4173] ldusb 1-1:0.55: Interrupt in endpoint not found [ 115.820183][ T4277] usb 3-1: USB disconnect, device number 9 [ 115.852312][ T5187] kvm: pic: single mode not supported [ 115.852330][ T5187] kvm: pic: level sensitive irq not supported [ 115.966640][ T1108] usb 1-1: USB disconnect, device number 15 [ 116.358835][ T4173] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.583310][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 116.608725][ T4173] usb 5-1: Using ep0 maxpacket: 8 [ 116.721224][ T5214] tipc: Enabled bearer , priority 0 [ 116.729287][ T4173] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 116.748374][ T4173] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 116.771388][ T4173] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.805490][ T4173] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.827498][ T5222] device syzkaller0 entered promiscuous mode [ 116.831986][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.872971][ T5211] tipc: Resetting bearer [ 116.893083][ T4173] usbtmc 5-1:16.0: bulk endpoints not found [ 116.919813][ T5211] tipc: Disabling bearer [ 117.108718][ T1324] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 117.358728][ T1324] usb 2-1: Using ep0 maxpacket: 8 [ 117.478980][ T1324] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.488531][ T1324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.499997][ T1324] usb 2-1: config 0 has no interface number 0 [ 117.513455][ T1324] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.528951][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.542199][ T1324] usb 2-1: config 0 descriptor?? [ 117.590332][ T1324] ldusb 2-1:0.55: Interrupt in endpoint not found [ 117.837465][ T5220] udc-core: couldn't find an available UDC or it's busy [ 117.846336][ T5220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.896870][ T4238] usb 2-1: USB disconnect, device number 14 [ 118.768749][ T1324] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 119.008754][ T1324] usb 1-1: Using ep0 maxpacket: 8 [ 119.131191][ T1324] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 119.137562][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 119.178813][ T4238] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 119.186555][ T1324] usb 1-1: config 0 has no interface number 0 [ 119.224828][ T1324] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 119.235870][ T1324] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 119.246945][ T1324] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.260099][ T1324] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 119.269578][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.287485][ T4173] usb 5-1: USB disconnect, device number 10 [ 119.305013][ T1324] usb 1-1: config 0 descriptor?? [ 119.316728][ T5256] tipc: Started in network mode [ 119.340705][ T5256] tipc: Node identity 92800c72b05, cluster identity 4711 [ 119.347898][ T5256] tipc: Enabled bearer , priority 0 [ 119.355422][ T5255] device syzkaller0 entered promiscuous mode [ 119.356320][ T1324] ldusb 1-1:0.55: Interrupt in endpoint not found [ 119.385514][ T5254] tipc: Resetting bearer [ 119.411000][ T5254] tipc: Disabling bearer [ 119.438786][ T4238] usb 4-1: Using ep0 maxpacket: 8 [ 119.558832][ T4238] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 119.580568][ T4238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.596866][ T4238] usb 4-1: config 0 has no interface number 0 [ 119.601457][ T4277] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 119.613447][ T4238] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 119.623120][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.630159][ T4277] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.660508][ T4238] usb 4-1: config 0 descriptor?? [ 119.700093][ T4238] ldusb 4-1:0.55: Interrupt in endpoint not found [ 119.964494][ T4277] usb 4-1: USB disconnect, device number 15 [ 120.067998][ T4238] usb 1-1: USB disconnect, device number 16 [ 120.978742][ T4238] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 121.074166][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 121.218762][ T4238] usb 1-1: Using ep0 maxpacket: 8 [ 121.315301][ T5297] tipc: Enabled bearer , priority 0 [ 121.322794][ T5297] device syzkaller0 entered promiscuous mode [ 121.334478][ T5296] tipc: Resetting bearer [ 121.340509][ T4238] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 121.354934][ T4238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.365303][ T4238] usb 1-1: config 0 has no interface number 0 [ 121.366796][ T5296] tipc: Disabling bearer [ 121.376373][ T4238] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 121.386529][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.402857][ T4238] usb 1-1: config 0 descriptor?? [ 121.442288][ T4238] ldusb 1-1:0.55: Interrupt in endpoint not found [ 121.680157][ T5285] udc-core: couldn't find an available UDC or it's busy [ 121.696302][ T5285] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 121.773873][ T4238] usb 1-1: USB disconnect, device number 17 [ 121.878789][ T4232] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 122.128814][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 122.248813][ T4232] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 122.261784][ T4232] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 122.273427][ T4232] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.296669][ T4232] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.345077][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.420351][ T4232] usbtmc 4-1:16.0: bulk endpoints not found [ 122.688798][ T1108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 122.898762][ T21] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 122.958796][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 123.098953][ T1108] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.107264][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.117591][ T1108] usb 5-1: config 0 has no interface number 0 [ 123.123828][ T1108] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.133109][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.143982][ T1108] usb 5-1: config 0 descriptor?? [ 123.158825][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 123.190524][ T1108] ldusb 5-1:0.55: Interrupt in endpoint not found [ 123.288912][ T21] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.297757][ T21] usb 1-1: config 0 has no interface number 0 [ 123.303994][ T21] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 123.314838][ T21] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 123.335753][ T21] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.349057][ T21] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.358424][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.378071][ T21] usb 1-1: config 0 descriptor?? [ 123.420186][ T21] ldusb 1-1:0.55: Interrupt in endpoint not found [ 123.491942][ T21] usb 5-1: USB disconnect, device number 11 [ 123.627104][ T4294] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 123.646987][ T4294] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.279043][ T21] usb 1-1: USB disconnect, device number 18 [ 124.422319][ T5348] tipc: Enabled bearer , priority 0 [ 124.433503][ T5348] device syzkaller0 entered promiscuous mode [ 124.444483][ T5347] tipc: Resetting bearer [ 124.462836][ T5347] tipc: Disabling bearer [ 124.521007][ T4232] usb 4-1: USB disconnect, device number 16 [ 125.148957][ T4232] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 125.393171][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 125.509015][ T4232] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 125.517132][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.565881][ T4232] usb 2-1: config 0 has no interface number 0 [ 125.572271][ T4232] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 125.585256][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.597166][ T4232] usb 2-1: config 0 descriptor?? [ 125.640795][ T4232] ldusb 2-1:0.55: Interrupt in endpoint not found [ 125.828791][ T1108] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 125.895643][ T5358] udc-core: couldn't find an available UDC or it's busy [ 125.902893][ T5358] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 125.964759][ T21] usb 2-1: USB disconnect, device number 15 [ 126.068730][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 126.092947][ T5383] tipc: Enabled bearer , priority 0 [ 126.093541][ T5383] device syzkaller0 entered promiscuous mode [ 126.114671][ T5382] tipc: Resetting bearer [ 126.133824][ T5382] tipc: Disabling bearer [ 126.188953][ T1108] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 126.218852][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.239309][ T1108] usb 4-1: config 0 has no interface number 0 [ 126.247981][ T1108] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 126.257412][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.289471][ T1108] usb 4-1: config 0 descriptor?? [ 126.330378][ T1108] ldusb 4-1:0.55: Interrupt in endpoint not found [ 126.643796][ T1108] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 126.692993][ T4232] usb 4-1: USB disconnect, device number 17 [ 126.908898][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 127.038936][ T1108] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 127.051750][ T1108] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 127.067673][ T1108] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.090172][ T1108] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.107175][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.160421][ T1108] usbtmc 1-1:16.0: bulk endpoints not found [ 127.209056][ T4232] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.469022][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 127.598946][ T4232] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 127.608529][ T4232] usb 5-1: config 0 has no interface number 0 [ 127.629607][ T4232] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 127.651494][ T4232] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 127.670793][ T4232] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.698799][ T4232] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 127.714090][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.734714][ T4232] usb 5-1: config 0 descriptor?? [ 127.800720][ T4232] ldusb 5-1:0.55: Interrupt in endpoint not found [ 128.009388][ T1108] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 128.020100][ T1108] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.458114][ T5427] tipc: Enabled bearer , priority 0 [ 128.465881][ T5427] device syzkaller0 entered promiscuous mode [ 128.477451][ T5426] tipc: Resetting bearer [ 128.487600][ T21] usb 5-1: USB disconnect, device number 12 [ 128.499207][ T5426] tipc: Disabling bearer [ 128.838803][ T1108] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 129.078879][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 129.198839][ T1108] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 129.220869][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.258326][ T1108] usb 2-1: config 0 has no interface number 0 [ 129.279299][ T1108] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 129.297051][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.297779][ T1324] usb 1-1: USB disconnect, device number 19 [ 129.328007][ T1108] usb 2-1: config 0 descriptor?? [ 129.360395][ T1108] ldusb 2-1:0.55: Interrupt in endpoint not found [ 129.593222][ T5429] udc-core: couldn't find an available UDC or it's busy [ 129.600710][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.611724][ T5429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.675794][ T1108] usb 2-1: USB disconnect, device number 16 [ 129.861597][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 129.998787][ T21] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 130.006944][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.021871][ T21] usb 3-1: config 0 has no interface number 0 [ 130.029188][ T21] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 130.038400][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.049244][ T21] usb 3-1: config 0 descriptor?? [ 130.095089][ T21] ldusb 3-1:0.55: Interrupt in endpoint not found [ 130.427120][ T4232] usb 3-1: USB disconnect, device number 10 [ 131.004699][ T5470] tipc: Enabled bearer , priority 0 [ 131.033530][ T5470] tipc: Resetting bearer [ 131.043445][ T5469] tipc: Disabling bearer [ 131.438836][ T4232] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 131.668725][ T4238] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.688816][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 131.778816][ T13] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 131.808963][ T4232] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 131.831250][ T4232] usb 2-1: config 0 has no interface number 0 [ 131.837492][ T4232] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 131.849310][ T4232] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 131.860687][ T4232] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.874908][ T4232] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 131.885189][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.908718][ T4238] usb 5-1: Using ep0 maxpacket: 8 [ 131.920352][ T4232] usb 2-1: config 0 descriptor?? [ 131.970929][ T4232] ldusb 2-1:0.55: Interrupt in endpoint not found [ 132.028817][ T4238] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 132.039115][ T4238] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 132.049472][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 132.055734][ T4238] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.070688][ T4238] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.081067][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.129825][ T4238] usbtmc 5-1:16.0: bulk endpoints not found [ 132.168936][ T13] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 132.194614][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.224246][ T13] usb 3-1: config 0 has no interface number 0 [ 132.250334][ T13] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 132.294405][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.328116][ T4238] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 132.341143][ T13] usb 3-1: config 0 descriptor?? [ 132.349784][ T4238] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.412604][ T13] ldusb 3-1:0.55: Interrupt in endpoint not found [ 132.643447][ T5490] udc-core: couldn't find an available UDC or it's busy [ 132.652686][ T5490] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.719785][ T1108] usb 3-1: USB disconnect, device number 11 [ 132.751672][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.760072][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.806656][ T4294] usb 2-1: USB disconnect, device number 17 [ 133.038897][ T13] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 133.298850][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 133.438887][ T4294] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 133.449004][ T13] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 133.458064][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.468724][ T13] usb 4-1: config 0 descriptor?? [ 133.511066][ T13] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 133.681394][ T4294] usb 1-1: Using ep0 maxpacket: 8 [ 133.798899][ T4294] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 133.807228][ T4294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.817991][ T4294] usb 1-1: config 0 has no interface number 0 [ 133.824316][ T4294] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 133.833628][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.845799][ T4294] usb 1-1: config 0 descriptor?? [ 133.911994][ T4294] ldusb 1-1:0.55: Interrupt in endpoint not found [ 134.215891][ T21] usb 1-1: USB disconnect, device number 20 [ 134.260132][ T4232] usb 5-1: USB disconnect, device number 13 [ 134.428997][ T4294] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.698753][ T4294] usb 3-1: Using ep0 maxpacket: 16 [ 134.818892][ T4294] usb 3-1: config 0 has no interfaces? [ 134.824393][ T4294] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 134.834873][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.844650][ T4294] usb 3-1: config 0 descriptor?? [ 135.455766][ T5536] loop7: detected capacity change from 0 to 16384 [ 135.670915][ T5541] tipc: Enabled bearer , priority 0 [ 135.699785][ T5541] tipc: Resetting bearer [ 135.714916][ T5540] tipc: Disabling bearer [ 135.850213][ T5539] loop_set_status: loop7 () has still dirty pages (nrpages=160) [ 135.924069][ T4294] usb 3-1: USB disconnect, device number 12 [ 136.322694][ T13] gspca_sonixj: reg_w1 err -71 [ 136.327545][ T13] sonixj: probe of 4-1:0.0 failed with error -71 [ 136.376484][ T13] usb 4-1: USB disconnect, device number 18 [ 139.793466][ T5625] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.209023][ T4238] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 140.458904][ T4238] usb 1-1: Using ep0 maxpacket: 8 [ 140.578915][ T4238] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.590727][ T4238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.621196][ T4238] usb 1-1: config 0 has no interface number 0 [ 140.627976][ T4238] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 140.637557][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.664641][ T4238] usb 1-1: config 0 descriptor?? [ 140.710420][ T4238] ldusb 1-1:0.55: Interrupt in endpoint not found [ 140.780199][ T5652] device syzkaller0 entered promiscuous mode [ 141.034095][ T4238] usb 1-1: USB disconnect, device number 21 [ 141.158896][ T13] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 141.336857][ T5657] loop6: detected capacity change from 0 to 7 [ 141.356243][ T5657] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 141.380735][ T5657] loop6: partition table partially beyond EOD, truncated [ 141.408419][ T5657] loop6: p1 size 1585496431 extends beyond EOD, truncated [ 141.408739][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 141.560332][ T4332] udevd[4332]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 141.589023][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 141.799710][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.808935][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.816951][ T13] usb 4-1: Product: syz [ 141.821626][ T13] usb 4-1: Manufacturer: syz [ 141.826245][ T13] usb 4-1: SerialNumber: syz [ 141.833902][ T13] usb 4-1: config 0 descriptor?? [ 141.893393][ T13] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.902845][ T13] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 141.978769][ T4238] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.338841][ T4238] usb 5-1: config index 0 descriptor too short (expected 65188, got 149) [ 142.347807][ T4238] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.482195][ T5680] kvm: pic: non byte write [ 142.500880][ T5680] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 142.509009][ T4238] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 142.527698][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.537667][ T4238] usb 5-1: Product: syz [ 142.542278][ T13] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 142.553558][ T4238] usb 5-1: Manufacturer: syz [ 142.558255][ T4238] usb 5-1: SerialNumber: syz [ 142.619760][ T4238] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 142.726454][ T5692] sctp: Trying to GSO but underlying device doesn't support it. [ 143.039005][ T13] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 143.057766][ T4173] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 143.071887][ T13] em28xx 4-1:0.0: board has no eeprom [ 143.188892][ T13] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 143.202172][ T13] em28xx 4-1:0.0: dvb set to bulk mode. [ 143.209176][ T4238] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 143.227266][ T4232] em28xx 4-1:0.0: Binding DVB extension [ 143.250764][ T13] usb 4-1: USB disconnect, device number 19 [ 143.268254][ T13] em28xx 4-1:0.0: Disconnecting em28xx [ 143.298870][ T4173] usb 3-1: Using ep0 maxpacket: 8 [ 143.326496][ T4232] em28xx 4-1:0.0: Registering input extension [ 143.334397][ T13] em28xx 4-1:0.0: Closing input extension [ 143.417385][ T13] em28xx 4-1:0.0: Freeing device [ 143.422774][ T4173] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 143.428601][ T5670] udc-core: couldn't find an available UDC or it's busy [ 143.449700][ T4173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.458699][ T5670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 143.462086][ T4173] usb 3-1: config 0 has no interface number 0 [ 143.495967][ T4173] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.537316][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.542107][ T5670] input: syz1 as /devices/virtual/input/input12 [ 143.573212][ T4173] usb 3-1: config 0 descriptor?? [ 143.651896][ T4173] ldusb 3-1:0.55: Interrupt in endpoint not found [ 143.680130][ T5670] netlink: 260 bytes leftover after parsing attributes in process `syz.4.452'. [ 144.264438][ T4173] usb 3-1: USB disconnect, device number 13 [ 144.270508][ T4238] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 144.285071][ T4238] ath9k_htc: Failed to initialize the device [ 144.331874][ T4247] usb 5-1: USB disconnect, device number 14 [ 144.369068][ T4247] usb 5-1: ath9k_htc: USB layer deinitialized [ 144.692409][ T5726] device syzkaller0 entered promiscuous mode [ 145.119133][ T21] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 145.258871][ T4238] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 145.358785][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 145.488908][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.512176][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.561631][ T4238] usb 3-1: Using ep0 maxpacket: 8 [ 145.568006][ T21] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 145.596065][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.637983][ T21] usb 4-1: config 0 descriptor?? [ 145.660480][ T4247] ODEBUG: Out of memory. ODEBUG disabled [ 145.683729][ T4238] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 145.706654][ T4238] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.729278][ T4238] usb 3-1: config 0 has no interface number 0 [ 145.735528][ T4238] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 145.765732][ T4238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.786136][ T4238] usb 3-1: config 0 descriptor?? [ 145.829650][ T4238] ldusb 3-1:0.55: Interrupt in endpoint not found [ 146.040435][ T5741] udc-core: couldn't find an available UDC or it's busy [ 146.055256][ T5741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.068737][ T4247] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 146.076445][ T4238] usb 3-1: USB disconnect, device number 14 [ 146.135464][ T5760] device syzkaller0 entered promiscuous mode [ 146.151346][ T21] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x4 [ 146.158995][ T21] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x2 [ 146.166456][ T21] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 146.174726][ T21] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 146.182032][ T21] hid-rmi 0003:06CB:81A7.0012: unbalanced collection at end of report description [ 146.191914][ T21] hid-rmi 0003:06CB:81A7.0012: parse failed [ 146.198179][ T21] hid-rmi: probe of 0003:06CB:81A7.0012 failed with error -22 [ 146.338793][ T4247] usb 1-1: Using ep0 maxpacket: 8 [ 146.354817][ T4238] usb 4-1: USB disconnect, device number 20 [ 146.488986][ T4247] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 146.501179][ T4247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.512990][ T4247] usb 1-1: config 0 has no interface number 0 [ 146.522832][ T4247] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.533408][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.559027][ T4247] usb 1-1: config 0 descriptor?? [ 146.609793][ T4247] ldusb 1-1:0.55: Interrupt in endpoint not found [ 146.902770][ T4173] usb 1-1: USB disconnect, device number 22 [ 147.684398][ T5801] [ 147.686763][ T5801] ============================= [ 147.694828][ T5801] WARNING: suspicious RCU usage [ 147.702547][ T5801] syzkaller #0 Not tainted [ 147.706970][ T5801] ----------------------------- [ 147.715307][ T5801] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 147.723962][ T5801] [ 147.723962][ T5801] other info that might help us debug this: [ 147.723962][ T5801] [ 147.734404][ T5801] [ 147.734404][ T5801] rcu_scheduler_active = 2, debug_locks = 1 [ 147.742680][ T5801] 1 lock held by syz.2.498/5801: [ 147.747622][ T5801] #0: ffffffff8d237d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 147.757522][ T5801] [ 147.757522][ T5801] stack backtrace: [ 147.763731][ T5801] CPU: 1 PID: 5801 Comm: syz.2.498 Not tainted syzkaller #0 [ 147.771023][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.781094][ T5801] Call Trace: [ 147.784372][ T5801] [ 147.787295][ T5801] dump_stack_lvl+0x168/0x230 [ 147.792050][ T5801] ? load_image+0x3b0/0x3b0 [ 147.796546][ T5801] ? show_regs_print_info+0x20/0x20 [ 147.801737][ T5801] ? lockdep_rcu_suspicious+0x110/0x180 [ 147.807271][ T5801] ? local_bh_enable+0x20/0x20 [ 147.812059][ T5801] rhltable_lookup+0x77b/0x790 [ 147.816821][ T5801] ? mr_mfc_find_parent+0x190/0x190 [ 147.822002][ T5801] ? mark_lock+0x94/0x320 [ 147.826329][ T5801] ? local_bh_enable+0x20/0x20 [ 147.831081][ T5801] ? mark_lock+0x94/0x320 [ 147.835398][ T5801] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 147.841363][ T5801] ? lock_chain_count+0x20/0x20 [ 147.846201][ T5801] mr_mfc_find_any_parent+0xb6/0x1e0 [ 147.851469][ T5801] ? local_bh_enable+0x20/0x20 [ 147.856218][ T5801] ip_mr_forward+0x24c/0xf90 [ 147.860803][ T5801] ipmr_mfc_add+0x2466/0x2eb0 [ 147.865477][ T5801] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 147.870401][ T5801] ? __lock_acquire+0x7c60/0x7c60 [ 147.875422][ T5801] ip_mroute_setsockopt+0xe33/0x11a0 [ 147.880700][ T5801] ? ipmr_rule_default+0x70/0x70 [ 147.885642][ T5801] ? __might_sleep+0xf0/0xf0 [ 147.890229][ T5801] ip_setsockopt+0x4ad/0x3070 [ 147.894901][ T5801] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 147.900253][ T5801] ? aa_sk_perm+0x7b4/0x8f0 [ 147.904741][ T5801] ? aa_af_perm+0x2b0/0x2b0 [ 147.909224][ T5801] ? __fget_files+0x40f/0x480 [ 147.914092][ T5801] ? aa_sock_opt_perm+0x74/0x100 [ 147.919017][ T5801] ? sock_common_setsockopt+0x32/0xb0 [ 147.924377][ T5801] ? raw_setsockopt+0xc5/0x180 [ 147.929129][ T5801] ? sock_common_recvmsg+0x1b0/0x1b0 [ 147.934408][ T5801] __sys_setsockopt+0x2bf/0x3d0 [ 147.939246][ T5801] __x64_sys_setsockopt+0xb1/0xc0 [ 147.944252][ T5801] do_syscall_64+0x4c/0xa0 [ 147.948651][ T5801] ? clear_bhb_loop+0x30/0x80 [ 147.953351][ T5801] ? clear_bhb_loop+0x30/0x80 [ 147.958019][ T5801] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.963899][ T5801] RIP: 0033:0x7f3ed8abcba9 [ 147.968302][ T5801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.987903][ T5801] RSP: 002b:00007f3ed6d24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.996415][ T5801] RAX: ffffffffffffffda RBX: 00007f3ed8d03fa0 RCX: 00007f3ed8abcba9 [ 148.004391][ T5801] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 148.012360][ T5801] RBP: 00007f3ed8b3fe19 R08: 000000000000003c R09: 0000000000000000 [ 148.020404][ T5801] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 148.028541][ T5801] R13: 00007f3ed8d04038 R14: 00007f3ed8d03fa0 R15: 00007ffd3a050588 [ 148.036505][ T5801] [ 148.054047][ T5801] [ 148.056401][ T5801] ============================= [ 148.064971][ T5801] WARNING: suspicious RCU usage [ 148.074385][ T5801] syzkaller #0 Not tainted [ 148.080001][ T5801] ----------------------------- [ 148.085126][ T5801] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 148.094272][ T5801] [ 148.094272][ T5801] other info that might help us debug this: [ 148.094272][ T5801] [ 148.106244][ T5801] [ 148.106244][ T5801] rcu_scheduler_active = 2, debug_locks = 1 [ 148.114787][ T5801] 1 lock held by syz.2.498/5801: [ 148.122829][ T5801] #0: ffffffff8d237d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 148.132706][ T5801] [ 148.132706][ T5801] stack backtrace: [ 148.138605][ T5801] CPU: 1 PID: 5801 Comm: syz.2.498 Not tainted syzkaller #0 [ 148.145913][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.155963][ T5801] Call Trace: [ 148.159261][ T5801] [ 148.162195][ T5801] dump_stack_lvl+0x168/0x230 [ 148.166887][ T5801] ? load_image+0x3b0/0x3b0 [ 148.171400][ T5801] ? show_regs_print_info+0x20/0x20 [ 148.176589][ T5801] ? lockdep_rcu_suspicious+0x110/0x180 [ 148.182131][ T5801] ? local_bh_enable+0x20/0x20 [ 148.186909][ T5801] rhltable_lookup+0x504/0x790 [ 148.191843][ T5801] ? local_bh_enable+0x20/0x20 [ 148.196602][ T5801] ? mr_mfc_find_parent+0x190/0x190 [ 148.201798][ T5801] ? mark_lock+0x94/0x320 [ 148.206138][ T5801] ? local_bh_enable+0x20/0x20 [ 148.210911][ T5801] ? mark_lock+0x94/0x320 [ 148.215238][ T5801] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 148.221324][ T5801] ? lock_chain_count+0x20/0x20 [ 148.226192][ T5801] mr_mfc_find_any_parent+0xb6/0x1e0 [ 148.231487][ T5801] ? local_bh_enable+0x20/0x20 [ 148.236236][ T5801] ip_mr_forward+0x24c/0xf90 [ 148.240945][ T5801] ipmr_mfc_add+0x2466/0x2eb0 [ 148.245632][ T5801] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 148.250681][ T5801] ? __lock_acquire+0x7c60/0x7c60 [ 148.255704][ T5801] ip_mroute_setsockopt+0xe33/0x11a0 [ 148.260991][ T5801] ? ipmr_rule_default+0x70/0x70 [ 148.265964][ T5801] ? __might_sleep+0xf0/0xf0 [ 148.270546][ T5801] ip_setsockopt+0x4ad/0x3070 [ 148.275232][ T5801] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 148.280597][ T5801] ? aa_sk_perm+0x7b4/0x8f0 [ 148.285130][ T5801] ? aa_af_perm+0x2b0/0x2b0 [ 148.289627][ T5801] ? __fget_files+0x40f/0x480 [ 148.294291][ T5801] ? aa_sock_opt_perm+0x74/0x100 [ 148.299228][ T5801] ? sock_common_setsockopt+0x32/0xb0 [ 148.304639][ T5801] ? raw_setsockopt+0xc5/0x180 [ 148.309394][ T5801] ? sock_common_recvmsg+0x1b0/0x1b0 [ 148.314666][ T5801] __sys_setsockopt+0x2bf/0x3d0 [ 148.319514][ T5801] __x64_sys_setsockopt+0xb1/0xc0 [ 148.324539][ T5801] do_syscall_64+0x4c/0xa0 [ 148.328941][ T5801] ? clear_bhb_loop+0x30/0x80 [ 148.333600][ T5801] ? clear_bhb_loop+0x30/0x80 [ 148.338267][ T5801] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.344161][ T5801] RIP: 0033:0x7f3ed8abcba9 [ 148.348560][ T5801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.368249][ T5801] RSP: 002b:00007f3ed6d24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.376652][ T5801] RAX: ffffffffffffffda RBX: 00007f3ed8d03fa0 RCX: 00007f3ed8abcba9 [ 148.384617][ T5801] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 148.392611][ T5801] RBP: 00007f3ed8b3fe19 R08: 000000000000003c R09: 0000000000000000 [ 148.400576][ T5801] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 148.408550][ T5801] R13: 00007f3ed8d04038 R14: 00007f3ed8d03fa0 R15: 00007ffd3a050588 [ 148.416525][ T5801] [ 148.421895][ T5801] [ 148.424277][ T26] audit: type=1326 audit(1757507615.363:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.454389][ T5801] ============================= [ 148.461175][ T26] audit: type=1326 audit(1757507615.363:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.475829][ T5801] WARNING: suspicious RCU usage [ 148.483216][ T26] audit: type=1326 audit(1757507615.363:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.483248][ T26] audit: type=1326 audit(1757507615.363:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.483272][ T26] audit: type=1326 audit(1757507615.363:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.483297][ T26] audit: type=1326 audit(1757507615.363:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.495204][ T5801] syzkaller #0 Not tainted [ 148.518862][ T26] audit: type=1326 audit(1757507615.363:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.532867][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.537767][ T5801] ----------------------------- [ 148.557494][ T26] audit: type=1326 audit(1757507615.363:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.582675][ T5801] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 148.605327][ T26] audit: type=1326 audit(1757507615.363:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.619152][ T5801] [ 148.619152][ T5801] other info that might help us debug this: [ 148.619152][ T5801] [ 148.637912][ T26] audit: type=1326 audit(1757507615.363:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300991eba9 code=0x7fc00000 [ 148.651032][ T5801] [ 148.651032][ T5801] rcu_scheduler_active = 2, debug_locks = 1 [ 148.700790][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.715459][ T5801] 1 lock held by syz.2.498/5801: [ 148.720780][ T5801] #0: ffffffff8d237d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 148.730759][ T5801] [ 148.730759][ T5801] stack backtrace: [ 148.736665][ T5801] CPU: 0 PID: 5801 Comm: syz.2.498 Not tainted syzkaller #0 [ 148.743940][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.754012][ T5801] Call Trace: [ 148.757275][ T5801] [ 148.760186][ T5801] dump_stack_lvl+0x168/0x230 [ 148.764844][ T5801] ? load_image+0x3b0/0x3b0 [ 148.769327][ T5801] ? show_regs_print_info+0x20/0x20 [ 148.774511][ T5801] ? lockdep_rcu_suspicious+0x110/0x180 [ 148.780041][ T5801] ? local_bh_enable+0x20/0x20 [ 148.784811][ T5801] rhltable_lookup+0x5f8/0x790 [ 148.789583][ T5801] ? local_bh_enable+0x20/0x20 [ 148.794346][ T5801] ? mr_mfc_find_parent+0x190/0x190 [ 148.799526][ T5801] ? mark_lock+0x94/0x320 [ 148.803838][ T5801] ? local_bh_enable+0x20/0x20 [ 148.808586][ T5801] ? mark_lock+0x94/0x320 [ 148.812920][ T5801] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 148.818916][ T5801] ? lock_chain_count+0x20/0x20 [ 148.823754][ T5801] mr_mfc_find_any_parent+0xb6/0x1e0 [ 148.829038][ T5801] ? local_bh_enable+0x20/0x20 [ 148.833804][ T5801] ip_mr_forward+0x24c/0xf90 [ 148.838396][ T5801] ipmr_mfc_add+0x2466/0x2eb0 [ 148.843066][ T5801] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 148.847998][ T5801] ? __lock_acquire+0x7c60/0x7c60 [ 148.853019][ T5801] ip_mroute_setsockopt+0xe33/0x11a0 [ 148.858293][ T5801] ? ipmr_rule_default+0x70/0x70 [ 148.863219][ T5801] ? __might_sleep+0xf0/0xf0 [ 148.867945][ T5801] ip_setsockopt+0x4ad/0x3070 [ 148.872643][ T5801] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 148.877997][ T5801] ? aa_sk_perm+0x7b4/0x8f0 [ 148.882495][ T5801] ? aa_af_perm+0x2b0/0x2b0 [ 148.887011][ T5801] ? __fget_files+0x40f/0x480 [ 148.891675][ T5801] ? aa_sock_opt_perm+0x74/0x100 [ 148.896596][ T5801] ? sock_common_setsockopt+0x32/0xb0 [ 148.901950][ T5801] ? raw_setsockopt+0xc5/0x180 [ 148.906698][ T5801] ? sock_common_recvmsg+0x1b0/0x1b0 [ 148.911969][ T5801] __sys_setsockopt+0x2bf/0x3d0 [ 148.916798][ T5801] __x64_sys_setsockopt+0xb1/0xc0 [ 148.921812][ T5801] do_syscall_64+0x4c/0xa0 [ 148.926205][ T5801] ? clear_bhb_loop+0x30/0x80 [ 148.930869][ T5801] ? clear_bhb_loop+0x30/0x80 [ 148.935548][ T5801] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.941453][ T5801] RIP: 0033:0x7f3ed8abcba9 [ 148.945861][ T5801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.965459][ T5801] RSP: 002b:00007f3ed6d24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.973856][ T5801] RAX: ffffffffffffffda RBX: 00007f3ed8d03fa0 RCX: 00007f3ed8abcba9 [ 148.981815][ T5801] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 148.989782][ T5801] RBP: 00007f3ed8b3fe19 R08: 000000000000003c R09: 0000000000000000 [ 148.997759][ T5801] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 149.005716][ T5801] R13: 00007f3ed8d04038 R14: 00007f3ed8d03fa0 R15: 00007ffd3a050588 [ 149.013678][ T5801] [ 149.016876][ C0] vkms_vblank_simulate: vblank timer overrun