last executing test programs: 26.782040897s ago: executing program 2 (id=318): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 26.254528141s ago: executing program 2 (id=320): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x237, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r4, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000002}, 0x44810) r7 = io_uring_setup(0x3b84, &(0x7f0000000140)={0x0, 0x1ab5, 0x100, 0x3, 0x131}) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 16.25442734s ago: executing program 3 (id=341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff02000000660000002300000016000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x40}}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a0005", 0x3b, 0x40080, 0x0, 0x0) 15.802365968s ago: executing program 2 (id=343): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0xc, 0x0, 0x0) 13.532350658s ago: executing program 2 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 12.820076963s ago: executing program 2 (id=349): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0xc0802) write$binfmt_elf32(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x40, 0x30, 0xb, "49bd7fa620b9759d2654c3"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}}) 8.398246804s ago: executing program 2 (id=358): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x80108907, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) dup(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @mcast1}, 0x1c) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 7.696601353s ago: executing program 4 (id=360): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) 6.811479946s ago: executing program 1 (id=361): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) sendto$inet(r0, &(0x7f0000000200)="9ea623240dd60abe450ce329a9a14635b68b8085b3ab570904c3e32d647adc9fd2b4d20f483d83bf555309d70c9ef0c50f32209a52bb9e58cb4ac7880c1c172588eced1d25334c7d2e5537d51fdfa1f70191c5ac03c02f4238408baf3d51a090b737ecff7e66afbfed711a647563d1db1c07e80b5779b2e7e626cbb5762eff32e51f694dbacb29359b236a9035029de5a0aa7b0634e05bf0c5bd533e80e22903a7a34e1f0000000000", 0xa9, 0x4040845, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 6.068018766s ago: executing program 4 (id=363): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x10c, 0x65, 0x2, 0x3, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb8, 0x2, [@TCA_CGROUP_ACT={0x80, 0x1, [@m_csum={0x7c, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0xc03a, 0x4, 0x7, 0x1}, 0x5c}}]}, {0x31, 0x6, "e74670b59cabc7fa65697fe66a1ce059a1d20f485ae35387641d50a8c5c10c4c6cedb532531e5f7e635039fa97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xffff}, {0x4, 0x2, 0x2, "779c"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.898336115s ago: executing program 1 (id=364): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 5.628466943s ago: executing program 0 (id=365): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r1 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.057319274s ago: executing program 3 (id=366): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) 4.785043858s ago: executing program 1 (id=367): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffd, 0x0, 0x9, 0xfffffffffffffffa, 0x1, 0x7fffffff}, 0x0, 0x0) 4.588988049s ago: executing program 4 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a77630af9"], 0x40}}, 0x0) 4.554174552s ago: executing program 0 (id=369): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0xc, 0x0, 0x0) 3.795752896s ago: executing program 1 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0xea, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x0, 0x2, 0x16, 0x0, 0x4, 0x4, {0x6, 0x80, 0x8, 0x6, 0x0, 0x8, 0x8, 0x800, 0x6, 0x8000, 0x7fffffff, r4, r5, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x41c5) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6, 0x3, [0xb, 0x3, 0xf]}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 3.681083833s ago: executing program 0 (id=371): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c22, 0x10100, 0x0, 0x17f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/81, 0x51}], 0x1}, 0x0) 3.541633435s ago: executing program 4 (id=372): socket$nl_route(0x10, 0x3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) 3.40813929s ago: executing program 3 (id=373): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) 2.647630089s ago: executing program 4 (id=374): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000200000000ff010000000000000000000000000001fc0000000000000000000000000000020000000000000000020080a000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003f"], 0xf8}}, 0x20000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.26811488s ago: executing program 1 (id=375): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 2.052145104s ago: executing program 0 (id=376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) 1.81251353s ago: executing program 3 (id=377): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r0) creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c) 1.441569146s ago: executing program 4 (id=378): syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="eb", 0x1}], 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x8, 0x0, 0x0, 0x0}], 0x1}) socket$can_raw(0x1d, 0x3, 0x1) 1.140284138s ago: executing program 0 (id=379): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r1 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.070117199s ago: executing program 1 (id=380): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffd, 0x0, 0x9, 0xfffffffffffffffa, 0x1, 0x7fffffff}, 0x0, 0x0) 997.7289ms ago: executing program 3 (id=381): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0xc, 0x0, 0x0) 344.798419ms ago: executing program 0 (id=382): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x714f, 0x0) 0s ago: executing program 3 (id=383): pipe2(&(0x7f0000000040), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 189.318477][ T5772] cgroup: Unknown subsys name 'net' [ 189.455938][ T5772] cgroup: Unknown subsys name 'cpuset' [ 189.475046][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.345209][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.351920][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.434123][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 246.802752][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.811023][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.819811][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.828628][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.851337][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.860305][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.874007][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.877507][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.886423][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.895491][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.900150][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.904781][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.912824][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.919914][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.925808][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.940753][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.949767][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.964542][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.977280][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.987006][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.006531][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.019744][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.034597][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.044845][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.086430][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.070620][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 248.810462][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 248.967384][ T5794] Bluetooth: hci1: command tx timeout [ 249.074118][ T5794] Bluetooth: hci0: command tx timeout [ 249.123519][ T5794] Bluetooth: hci4: command tx timeout [ 249.129244][ T5794] Bluetooth: hci2: command tx timeout [ 249.247565][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 249.272461][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.281085][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.289012][ T5788] bridge_slave_0: entered allmulticast mode [ 249.299034][ T5788] bridge_slave_0: entered promiscuous mode [ 249.331090][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 249.363798][ T5794] Bluetooth: hci3: command tx timeout [ 249.377815][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.385980][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.393924][ T5788] bridge_slave_1: entered allmulticast mode [ 249.403793][ T5788] bridge_slave_1: entered promiscuous mode [ 249.651682][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.712756][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 249.747245][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.025639][ T5788] team0: Port device team_slave_0 added [ 250.196732][ T5788] team0: Port device team_slave_1 added [ 250.208483][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.216672][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.226905][ T5791] bridge_slave_0: entered allmulticast mode [ 250.236854][ T5791] bridge_slave_0: entered promiscuous mode [ 250.372889][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.382116][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.390046][ T5791] bridge_slave_1: entered allmulticast mode [ 250.399725][ T5791] bridge_slave_1: entered promiscuous mode [ 250.539509][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.546900][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.573641][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.709206][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.717074][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.724973][ T5799] bridge_slave_0: entered allmulticast mode [ 250.734919][ T5799] bridge_slave_0: entered promiscuous mode [ 250.766804][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.774415][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.800916][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.841063][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.877458][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.885223][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.892903][ T5789] bridge_slave_0: entered allmulticast mode [ 250.902811][ T5789] bridge_slave_0: entered promiscuous mode [ 250.925884][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.933830][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.941565][ T5799] bridge_slave_1: entered allmulticast mode [ 250.951461][ T5799] bridge_slave_1: entered promiscuous mode [ 250.980013][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.991337][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.999312][ T5789] bridge_slave_1: entered allmulticast mode [ 251.009010][ T5789] bridge_slave_1: entered promiscuous mode [ 251.031955][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.064035][ T5794] Bluetooth: hci1: command tx timeout [ 251.124988][ T5794] Bluetooth: hci0: command tx timeout [ 251.214252][ T5794] Bluetooth: hci2: command tx timeout [ 251.219946][ T5794] Bluetooth: hci4: command tx timeout [ 251.307140][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.329175][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.393490][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.445396][ T5790] Bluetooth: hci3: command tx timeout [ 251.626735][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.645160][ T5799] team0: Port device team_slave_0 added [ 251.653436][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.661035][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.669047][ T5793] bridge_slave_0: entered allmulticast mode [ 251.678641][ T5793] bridge_slave_0: entered promiscuous mode [ 251.697882][ T5791] team0: Port device team_slave_0 added [ 251.706218][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.714268][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.721975][ T5793] bridge_slave_1: entered allmulticast mode [ 251.731909][ T5793] bridge_slave_1: entered promiscuous mode [ 251.756913][ T5788] hsr_slave_0: entered promiscuous mode [ 251.767211][ T5788] hsr_slave_1: entered promiscuous mode [ 251.818041][ T5799] team0: Port device team_slave_1 added [ 251.876477][ T5791] team0: Port device team_slave_1 added [ 252.074321][ T5789] team0: Port device team_slave_0 added [ 252.125964][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.133573][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.160062][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.223765][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.240294][ T5789] team0: Port device team_slave_1 added [ 252.269593][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.277093][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.303599][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.318612][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.326074][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.352567][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.375584][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.492647][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.499977][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.526534][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.685471][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.692669][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.719123][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.750470][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.757921][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.784313][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.854496][ T5793] team0: Port device team_slave_0 added [ 252.991352][ T5793] team0: Port device team_slave_1 added [ 253.014050][ T5799] hsr_slave_0: entered promiscuous mode [ 253.024248][ T5799] hsr_slave_1: entered promiscuous mode [ 253.033350][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.041214][ T5799] Cannot create hsr debugfs directory [ 253.129575][ T5790] Bluetooth: hci1: command tx timeout [ 253.207960][ T5790] Bluetooth: hci0: command tx timeout [ 253.230921][ T5791] hsr_slave_0: entered promiscuous mode [ 253.241268][ T5791] hsr_slave_1: entered promiscuous mode [ 253.251151][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.259268][ T5791] Cannot create hsr debugfs directory [ 253.283429][ T5790] Bluetooth: hci4: command tx timeout [ 253.289130][ T5790] Bluetooth: hci2: command tx timeout [ 253.485534][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.492738][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.520217][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.533207][ T5790] Bluetooth: hci3: command tx timeout [ 253.594462][ T5789] hsr_slave_0: entered promiscuous mode [ 253.604416][ T5789] hsr_slave_1: entered promiscuous mode [ 253.612525][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.620525][ T5789] Cannot create hsr debugfs directory [ 253.653293][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.660515][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.687171][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.000692][ T5793] hsr_slave_0: entered promiscuous mode [ 254.010857][ T5793] hsr_slave_1: entered promiscuous mode [ 254.020061][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.027907][ T5793] Cannot create hsr debugfs directory [ 254.783624][ T5788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.821443][ T5788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 254.962714][ T5788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.000240][ T5788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.213548][ T5790] Bluetooth: hci1: command tx timeout [ 255.280254][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.313347][ T5790] Bluetooth: hci0: command tx timeout [ 255.364098][ T5790] Bluetooth: hci2: command tx timeout [ 255.369802][ T5790] Bluetooth: hci4: command tx timeout [ 255.416405][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.441026][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.528847][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.556740][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.603636][ T5794] Bluetooth: hci3: command tx timeout [ 255.691967][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.763739][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.800770][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.890682][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.942307][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.048568][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.090599][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.148848][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.224600][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.260459][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.340577][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 256.804079][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.976135][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.093637][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.101223][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.196798][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.223929][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.231554][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.281494][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.418805][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.560319][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.568060][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.620290][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.739739][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.756487][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.764153][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.851142][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.858848][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.980837][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.988883][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.102251][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.269229][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.276931][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.292902][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.300603][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.340491][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.579240][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.621133][ T5789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.632061][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.745487][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.753434][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.989907][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.997695][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.993693][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.547155][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.579670][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.904737][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.951010][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.188189][ T5799] veth0_vlan: entered promiscuous mode [ 261.275279][ T5789] veth0_vlan: entered promiscuous mode [ 261.379463][ T5799] veth1_vlan: entered promiscuous mode [ 261.424823][ T5789] veth1_vlan: entered promiscuous mode [ 261.625967][ T5791] veth0_vlan: entered promiscuous mode [ 261.753148][ T5791] veth1_vlan: entered promiscuous mode [ 261.904867][ T5789] veth0_macvtap: entered promiscuous mode [ 261.918135][ T5799] veth0_macvtap: entered promiscuous mode [ 261.930645][ T5793] veth0_vlan: entered promiscuous mode [ 261.972635][ T5789] veth1_macvtap: entered promiscuous mode [ 262.041672][ T5793] veth1_vlan: entered promiscuous mode [ 262.096401][ T5799] veth1_macvtap: entered promiscuous mode [ 262.205369][ T5791] veth0_macvtap: entered promiscuous mode [ 262.234841][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.346579][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.360186][ T5791] veth1_macvtap: entered promiscuous mode [ 262.442593][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.453668][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.469132][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.541663][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.551091][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.560659][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.570799][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.668438][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.680334][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.695816][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.739416][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.750324][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.760566][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.771336][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.786667][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.805257][ T5793] veth0_macvtap: entered promiscuous mode [ 262.873485][ T5799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.882559][ T5799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.891877][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.901767][ T5799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.955146][ T5793] veth1_macvtap: entered promiscuous mode [ 263.039867][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.050974][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.063178][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.074050][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.089185][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.124841][ T5788] veth0_vlan: entered promiscuous mode [ 263.182930][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.195361][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.207359][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.218236][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.228411][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.239209][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.254882][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.288844][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.299682][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.310127][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.320938][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.331354][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.342282][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.357789][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.422454][ T5788] veth1_vlan: entered promiscuous mode [ 263.449634][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.459257][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.468655][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.478063][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.516081][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.527916][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.538481][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.549572][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.962305][ T5788] veth0_macvtap: entered promiscuous mode [ 264.061715][ T5788] veth1_macvtap: entered promiscuous mode [ 264.317982][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.331066][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.344156][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.355138][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.365332][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.376244][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.386445][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.397317][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.413286][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.611772][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.624156][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.635646][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.648607][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.659136][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.669935][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.680311][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.691251][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.708223][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.090194][ T5788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.101285][ T5788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.110831][ T5788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.120096][ T5788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.296815][ T3864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.305290][ T3864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.402242][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.411112][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.626113][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.634457][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.941523][ T4775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.952659][ T4775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.107750][ T4775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.115989][ T4775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.308715][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.316987][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.497967][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.506423][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.666113][ T5789] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 270.679153][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.689224][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.568779][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.577029][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.603966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 271.613288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 271.668249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 271.770463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 271.874397][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.882521][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.795372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 273.693658][ T5930] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 273.820066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 273.923627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 274.024921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 274.637097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 274.807045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 275.201470][ T5930] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.210823][ T5930] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.221667][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.231847][ T5930] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.301533][ T5930] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.311468][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.319967][ T5930] usb 4-1: Product: syz [ 276.324563][ T5930] usb 4-1: Manufacturer: syz [ 276.592543][ T5930] cdc_wdm 4-1:1.0: skipping garbage [ 276.598423][ T5930] cdc_wdm 4-1:1.0: skipping garbage [ 276.620288][ T6006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.630101][ T6006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.641208][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 276.716819][ T5930] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 276.723399][ T5930] cdc_wdm 4-1:1.0: Unknown control protocol [ 276.877096][ T6007] /dev/nullb0: Can't open blockdev [ 277.149876][ T5850] usb 4-1: USB disconnect, device number 2 [ 278.406468][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 282.322305][ T5930] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 282.599473][ T5850] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 282.792320][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 282.864206][ T5850] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 282.872583][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.883454][ T5850] usb 3-1: config 0 has no interface number 0 [ 282.889828][ T5850] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.093726][ T5850] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 283.103767][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 283.112146][ T5850] usb 3-1: Product: syz [ 283.116890][ T5850] usb 3-1: SerialNumber: syz [ 283.266654][ T5850] usb 3-1: config 0 descriptor?? [ 283.313791][ T5850] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 283.514455][ T5850] usb 3-1: USB disconnect, device number 2 [ 284.294092][ T5794] Bluetooth: hci0: unexpected cc 0x042e length: 1 < 7 [ 285.801240][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.808184][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.095701][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 288.172204][ T6094] veth1_macvtap: left promiscuous mode [ 290.382982][ C0] hrtimer: interrupt took 260083 ns [ 290.434779][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 290.794064][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 290.807027][ T5850] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 290.818970][ T5850] usb 4-1: config 1 has no interface number 0 [ 290.827099][ T5850] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 290.866910][ T5850] usb 4-1: config 1 interface 105 has no altsetting 0 [ 290.935030][ T5850] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 290.944536][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.952812][ T5850] usb 4-1: Product: syz [ 290.957351][ T5850] usb 4-1: Manufacturer: syz [ 290.962206][ T5850] usb 4-1: SerialNumber: syz [ 291.073711][ T6110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.356026][ T5850] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 293.465028][ T5930] usb 4-1: USB disconnect, device number 3 [ 295.881806][ T6161] Zero length message leads to an empty skb [ 296.071368][ T6161] vlan2: entered allmulticast mode [ 296.077082][ T6161] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 297.403348][ T5850] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 297.678004][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 297.850938][ T5850] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 297.859934][ T5850] usb 4-1: config 1 has no interface number 0 [ 297.866687][ T5850] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 297.877166][ T5850] usb 4-1: config 1 interface 105 has no altsetting 0 [ 298.137354][ T6178] lo: entered promiscuous mode [ 298.146440][ T6178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.262484][ T5850] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 298.271893][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.280529][ T5850] usb 4-1: Product: syz [ 298.285117][ T5850] usb 4-1: Manufacturer: syz [ 298.293746][ T5850] usb 4-1: SerialNumber: syz [ 298.364623][ T6170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.736982][ T5850] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 300.045567][ T6187] tipc: Started in network mode [ 300.050761][ T6187] tipc: Node identity 4, cluster identity 4711 [ 300.057517][ T6187] tipc: Node number set to 4 [ 300.409086][ T5850] usb 4-1: USB disconnect, device number 4 [ 301.076667][ T6198] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 304.104264][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 304.337147][ T30] audit: type=1326 audit(1746691859.120:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 305.687762][ T5930] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 305.923562][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 305.942096][ T5930] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 305.950747][ T5930] usb 2-1: config 1 has no interface number 0 [ 305.957223][ T5930] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 305.972318][ T5930] usb 2-1: config 1 interface 105 has no altsetting 0 [ 306.055184][ T5930] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 306.064936][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.077165][ T5930] usb 2-1: Product: syz [ 306.081497][ T5930] usb 2-1: Manufacturer: syz [ 306.087531][ T5930] usb 2-1: SerialNumber: syz [ 306.183924][ T6235] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.413574][ T5930] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 307.235355][ T6248] netlink: 64 bytes leftover after parsing attributes in process `syz.3.95'. [ 308.675955][ T5930] usb 2-1: USB disconnect, device number 3 [ 311.364406][ T6284] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 311.625373][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 312.484129][ T5930] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 312.773236][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 312.796473][ T5930] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 312.805239][ T5930] usb 4-1: config 1 has no interface number 0 [ 312.811628][ T5930] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 312.822268][ T5930] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 312.837516][ T5930] usb 4-1: config 1 interface 105 has no altsetting 0 [ 312.977966][ T5930] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 312.987467][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.996132][ T5930] usb 4-1: Product: syz [ 313.000550][ T5930] usb 4-1: Manufacturer: syz [ 313.005507][ T5930] usb 4-1: SerialNumber: syz [ 313.027024][ T6292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 313.125377][ T6292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 313.716384][ T6292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 313.781185][ T6292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.076159][ T5930] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 314.088245][ T5930] aqc111 4-1:1.105: probe with driver aqc111 failed with error -32 [ 314.244977][ T5930] usb 4-1: USB disconnect, device number 5 [ 315.422072][ T6315] syz_tun: entered allmulticast mode [ 315.459992][ T6314] syz_tun: left allmulticast mode [ 318.520331][ T6339] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 318.527214][ T6339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 318.535548][ T6339] vhci_hcd vhci_hcd.0: Device attached [ 318.556046][ T6342] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 318.619620][ T5845] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 318.683490][ T6339] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 318.690433][ T6339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 318.698964][ T6339] vhci_hcd vhci_hcd.0: Device attached [ 318.729204][ T6342] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 318.736230][ T6342] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.744842][ T6342] vhci_hcd vhci_hcd.0: Device attached [ 318.818707][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 318.861677][ T6342] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 318.868622][ T6342] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 318.881165][ T6342] vhci_hcd vhci_hcd.0: Device attached [ 318.894819][ T5850] vhci_hcd: vhci_device speed not set [ 318.917087][ T5845] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 318.925842][ T5845] usb 1-1: config 1 has no interface number 0 [ 318.932222][ T5845] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 318.942707][ T5845] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 318.953381][ T5845] usb 1-1: config 1 interface 105 has no altsetting 0 [ 318.979461][ T5850] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 319.065930][ T6342] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 319.072886][ T6342] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 319.085627][ T6342] vhci_hcd vhci_hcd.0: Device attached [ 319.118413][ T5845] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 319.128445][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.137378][ T5845] usb 1-1: Product: syz [ 319.141803][ T5845] usb 1-1: Manufacturer: syz [ 319.146986][ T5845] usb 1-1: SerialNumber: syz [ 319.193869][ T6339] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(20) [ 319.200826][ T6339] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 319.209447][ T6339] vhci_hcd vhci_hcd.0: Device attached [ 319.272559][ T6337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.305383][ T6337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.331314][ T6354] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(23) [ 319.338262][ T6354] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 319.347327][ T6354] vhci_hcd vhci_hcd.0: Device attached [ 319.700833][ T6343] vhci_hcd: connection closed [ 319.702115][ T6340] vhci_hcd: connection reset by peer [ 319.715557][ T6356] vhci_hcd: connection closed [ 319.716174][ T6350] vhci_hcd: connection closed [ 319.719590][ T6352] vhci_hcd: connection closed [ 319.721694][ T6348] vhci_hcd: connection closed [ 319.732476][ T6345] vhci_hcd: connection closed [ 319.760450][ T3765] vhci_hcd: stop threads [ 319.770566][ T3765] vhci_hcd: release socket [ 319.776373][ T3765] vhci_hcd: disconnect device [ 319.802364][ T3765] vhci_hcd: stop threads [ 319.807574][ T3765] vhci_hcd: release socket [ 319.812406][ T3765] vhci_hcd: disconnect device [ 319.834146][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 319.867967][ T6337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.913494][ T1587] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 319.914088][ T3765] vhci_hcd: stop threads [ 319.926937][ T3765] vhci_hcd: release socket [ 319.931603][ T3765] vhci_hcd: disconnect device [ 319.939529][ T6337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 320.070858][ T5870] usb 3-1: config 0 has no interfaces? [ 320.077179][ T5870] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 320.077701][ T3765] vhci_hcd: stop threads [ 320.086750][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.091205][ T3765] vhci_hcd: release socket [ 320.108269][ T3765] vhci_hcd: disconnect device [ 320.154023][ T5870] usb 3-1: config 0 descriptor?? [ 320.179919][ T1587] usb 2-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 320.191022][ T1587] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 320.283686][ T5845] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 320.295810][ T5845] aqc111 1-1:1.105: probe with driver aqc111 failed with error -32 [ 320.336549][ T1587] usb 2-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 320.346520][ T1587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.355302][ T1587] usb 2-1: Product: syz [ 320.359724][ T1587] usb 2-1: Manufacturer: syz [ 320.364647][ T1587] usb 2-1: SerialNumber: syz [ 320.424359][ T3765] vhci_hcd: stop threads [ 320.428881][ T3765] vhci_hcd: release socket [ 320.433779][ T3765] vhci_hcd: disconnect device [ 320.504010][ T3765] vhci_hcd: stop threads [ 320.512490][ T3765] vhci_hcd: release socket [ 320.518812][ T3765] vhci_hcd: disconnect device [ 320.565228][ T3765] vhci_hcd: stop threads [ 320.569743][ T3765] vhci_hcd: release socket [ 320.574955][ T3765] vhci_hcd: disconnect device [ 320.599659][ T1587] usb 2-1: config 0 descriptor?? [ 320.603191][ T5845] usb 1-1: USB disconnect, device number 2 [ 320.710415][ T1587] usb 3-1: USB disconnect, device number 3 [ 320.948665][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 320.979735][ T6366] ipvlan2: entered promiscuous mode [ 320.990901][ T6366] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 324.136182][ T5850] vhci_hcd: vhci_device speed not set [ 324.547101][ T1587] usb 2-1: USB disconnect, device number 4 [ 329.043595][ T5863] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 329.298465][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 329.428067][ T5930] usb usb40-port8: attempt power cycle [ 329.700038][ T5863] usb 1-1: device descriptor read/all, error -71 [ 330.108993][ T5930] usb usb40-port8: unable to enumerate USB device [ 332.274373][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.158'. [ 332.913993][ T5794] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 333.273204][ T5850] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 334.408745][ T5850] usb 2-1: config 0 has no interfaces? [ 334.514330][ T5850] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 334.524109][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.532488][ T5850] usb 2-1: Product: syz [ 334.542674][ T5850] usb 2-1: Manufacturer: syz [ 334.548790][ T5850] usb 2-1: SerialNumber: syz [ 334.673417][ T5850] usb 2-1: config 0 descriptor?? [ 334.833694][ T5863] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 335.073350][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 335.114107][ T5863] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 335.122628][ T5863] usb 4-1: config 1 has no interface number 0 [ 335.129278][ T5863] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 335.139782][ T5863] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 335.150347][ T5863] usb 4-1: config 1 interface 105 has no altsetting 0 [ 335.425697][ T5863] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 335.435295][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.443862][ T5863] usb 4-1: Product: syz [ 335.448317][ T5863] usb 4-1: Manufacturer: syz [ 335.453407][ T5863] usb 4-1: SerialNumber: syz [ 335.713406][ T6437] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 335.721598][ T6437] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 336.361773][ T6437] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 336.387714][ T6437] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 336.620932][ T5863] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 336.633509][ T5863] aqc111 4-1:1.105: probe with driver aqc111 failed with error -32 [ 336.739372][ T5863] usb 4-1: USB disconnect, device number 6 [ 338.388951][ T6393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.369099][ T6474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.172'. [ 341.345628][ T5794] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 342.255550][ T5863] usb 2-1: USB disconnect, device number 5 [ 343.184519][ T5863] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 343.403423][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 343.429816][ T5863] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 343.438642][ T5863] usb 2-1: config 1 has no interface number 0 [ 343.445321][ T5863] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 343.460978][ T5863] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 343.471376][ T5863] usb 2-1: config 1 interface 105 has no altsetting 0 [ 343.706726][ T5863] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 343.716178][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.724762][ T5863] usb 2-1: Product: syz [ 343.729198][ T5863] usb 2-1: Manufacturer: syz [ 343.734552][ T5863] usb 2-1: SerialNumber: syz [ 343.894434][ T6481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.924670][ T6481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.975265][ T6481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 345.005048][ T6481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 345.080898][ T6489] kernel profiling enabled (shift: 17) [ 345.266502][ T5863] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 345.278348][ T5863] aqc111 2-1:1.105: probe with driver aqc111 failed with error -32 [ 345.444937][ T5863] usb 2-1: USB disconnect, device number 6 [ 347.256200][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.263202][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.706507][ T6505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.183'. [ 348.010975][ T5794] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 350.093423][ T5850] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 350.537995][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 350.550058][ T5850] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.640959][ T5850] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 350.651707][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.660654][ T5850] usb 2-1: Product: syz [ 350.665641][ T5850] usb 2-1: Manufacturer: syz [ 350.670761][ T5850] usb 2-1: SerialNumber: syz [ 350.806322][ T5850] usb 2-1: config 0 descriptor?? [ 350.814895][ T6518] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.866272][ T5850] usb 2-1: ucan: probing device on interface #0 [ 350.873372][ T5850] usb 2-1: ucan: invalid EP count (1) [ 350.873381][ T5863] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 350.886873][ T5850] usb 2-1: ucan: probe failed; try to update the device firmware [ 351.033768][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 351.145058][ T5863] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 351.154587][ T5863] usb 1-1: config 1 has no interface number 0 [ 351.161007][ T5863] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 351.171779][ T5863] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 351.182261][ T5863] usb 1-1: config 1 interface 105 has no altsetting 0 [ 351.416665][ T5863] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 351.426474][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.439164][ T5863] usb 1-1: Product: syz [ 351.445156][ T5863] usb 1-1: Manufacturer: syz [ 351.450043][ T5863] usb 1-1: SerialNumber: syz [ 351.506987][ T6523] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 351.534178][ T6523] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 352.206396][ T6523] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 352.234655][ T6523] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 352.495310][ T5863] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 352.507986][ T5863] aqc111 1-1:1.105: probe with driver aqc111 failed with error -32 [ 352.645721][ T5863] usb 1-1: USB disconnect, device number 5 [ 353.273660][ T5794] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 354.771877][ T5850] usb 2-1: USB disconnect, device number 7 [ 356.319366][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.206'. [ 356.343637][ T5863] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 356.621560][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.636145][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.646460][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.664154][ T5863] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.675456][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.806617][ T5863] usb 4-1: config 0 descriptor?? [ 357.216221][ T6570] netlink: 64 bytes leftover after parsing attributes in process `syz.2.209'. [ 357.328913][ T5863] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 357.415165][ T5863] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 358.624581][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 359.033324][ T1587] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 359.224324][ T1587] usb 1-1: Using ep0 maxpacket: 16 [ 359.285091][ T1587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 359.330295][ T1587] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 359.339856][ T1587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.348300][ T1587] usb 1-1: Product: syz [ 359.352635][ T1587] usb 1-1: Manufacturer: syz [ 359.357586][ T1587] usb 1-1: SerialNumber: syz [ 359.485226][ T5863] usb 4-1: USB disconnect, device number 7 [ 359.491003][ T1587] usb 1-1: config 0 descriptor?? [ 359.557633][ T1587] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 359.567455][ T1587] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 359.590023][ T6585] sctp: failed to load transform for md5: -2 [ 360.247436][ T1587] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 360.903923][ T1587] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 360.912388][ T1587] em28xx 1-1:0.0: board has no eeprom [ 361.136213][ T6583] em28xx 1-1:0.0: read from i2c device at 0x0 failed with unknown error (status=65) [ 361.413219][ T1587] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 361.421726][ T1587] em28xx 1-1:0.0: dvb set to bulk mode. [ 361.448886][ T5850] em28xx 1-1:0.0: Binding DVB extension [ 361.569680][ T1587] usb 1-1: USB disconnect, device number 6 [ 361.582732][ T1587] em28xx 1-1:0.0: Disconnecting em28xx [ 361.917433][ T5850] em28xx 1-1:0.0: Registering input extension [ 362.013343][ T1587] em28xx 1-1:0.0: Closing input extension [ 362.093969][ T1587] em28xx 1-1:0.0: Freeing device [ 362.159420][ T5982] udevd[5982]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 363.294646][ T6616] netlink: 64 bytes leftover after parsing attributes in process `syz.2.223'. [ 364.776440][ T30] audit: type=1326 audit(1746691919.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 364.923210][ T30] audit: type=1326 audit(1746691919.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 364.945492][ T30] audit: type=1326 audit(1746691919.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 364.970636][ T30] audit: type=1326 audit(1746691919.660:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 364.993713][ T30] audit: type=1326 audit(1746691919.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 365.015896][ T30] audit: type=1326 audit(1746691919.680:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 365.038206][ T30] audit: type=1326 audit(1746691919.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f56558 code=0x7ffc0000 [ 365.063589][ T30] audit: type=1326 audit(1746691919.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f56558 code=0x7ffc0000 [ 365.086675][ T30] audit: type=1326 audit(1746691919.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f56558 code=0x7ffc0000 [ 365.108863][ T30] audit: type=1326 audit(1746691919.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f56558 code=0x7ffc0000 [ 368.373518][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 368.623540][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 368.685554][ T5850] usb 5-1: config 0 has no interfaces? [ 368.691392][ T5850] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 368.700920][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.845955][ T5850] usb 5-1: config 0 descriptor?? [ 369.510082][ T6648] syz.4.234 uses obsolete (PF_INET,SOCK_PACKET) [ 369.770255][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 369.777105][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 369.784636][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 369.790919][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 369.798618][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 371.493821][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'. [ 371.522547][ T6666] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.531814][ T6666] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.541074][ T6666] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.550392][ T6666] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.594063][ T6666] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.603811][ T6666] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.619894][ T6666] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.631261][ T6666] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.884240][ T1587] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 374.313738][ T1587] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 374.322699][ T1587] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 374.335156][ T1587] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 374.346054][ T1587] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.461584][ T1587] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 374.471149][ T1587] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 374.484270][ T1587] usb 1-1: Product: syz [ 374.488614][ T1587] usb 1-1: Manufacturer: syz [ 374.546888][ T1587] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 374.565710][ T6687] process 'syz.2.250' launched './file0' with NULL argv: empty string added [ 374.844855][ T1587] usb 1-1: USB disconnect, device number 7 [ 378.997184][ T5863] usb 5-1: USB disconnect, device number 2 [ 380.403280][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 380.403356][ T30] audit: type=1326 audit(1746691935.210:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.260" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff4539 code=0x0 [ 380.588507][ T5863] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 380.795544][ T5863] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.804895][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.815459][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 380.828896][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.853838][ T5930] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 380.884512][ T5863] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 380.894162][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 380.902345][ T5863] usb 2-1: Product: syz [ 380.906834][ T5863] usb 2-1: Manufacturer: syz [ 380.942045][ T5863] cdc_wdm 2-1:1.0: skipping garbage [ 380.947744][ T5863] cdc_wdm 2-1:1.0: skipping garbage [ 380.999907][ T5863] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 381.006548][ T5863] cdc_wdm 2-1:1.0: Unknown control protocol [ 381.047797][ T5930] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 381.057137][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.067889][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.077314][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.151876][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.161933][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.223653][ T5930] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.237677][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.247683][ T5930] usb 5-1: Product: syz [ 381.252130][ T5930] usb 5-1: Manufacturer: syz [ 381.325003][ T5930] cdc_wdm 5-1:1.0: skipping garbage [ 381.330523][ T5930] cdc_wdm 5-1:1.0: skipping garbage [ 381.401983][ T5930] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 381.408514][ T5930] cdc_wdm 5-1:1.0: Unknown control protocol [ 381.423611][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.430530][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.444135][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.451055][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.464728][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.471623][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.480228][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.487097][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.493927][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.500719][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.507461][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.514258][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.521037][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.527864][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.534520][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.541329][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.551032][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.557813][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.564445][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 381.571199][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 381.614386][ T5863] usb 2-1: USB disconnect, device number 8 [ 381.614557][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 381.812476][ T5845] usb 5-1: USB disconnect, device number 3 [ 382.395825][ T5845] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 382.654409][ T5845] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 382.663735][ T5845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.678675][ T5845] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 382.689941][ T5845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.895043][ T5845] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 382.904728][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 382.913213][ T5845] usb 5-1: Product: syz [ 382.917650][ T5845] usb 5-1: Manufacturer: syz [ 383.017435][ T5845] cdc_wdm 5-1:1.0: skipping garbage [ 383.023085][ T5845] cdc_wdm 5-1:1.0: skipping garbage [ 383.136824][ T5845] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 383.143281][ T5845] cdc_wdm 5-1:1.0: Unknown control protocol [ 383.413385][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 383.437026][ T6723] ipvlan2: entered promiscuous mode [ 383.442478][ T6723] ipvlan2: entered allmulticast mode [ 383.448062][ T6723] hsr0: entered allmulticast mode [ 383.453395][ T6723] hsr_slave_0: entered allmulticast mode [ 383.459193][ T6723] hsr_slave_1: entered allmulticast mode [ 384.569472][ T5845] usb 5-1: USB disconnect, device number 4 [ 386.896004][ T5845] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 387.140692][ T5845] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 387.150247][ T5845] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.160846][ T5845] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 387.175241][ T5845] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.330788][ T5845] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 387.340517][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.349040][ T5845] usb 1-1: Product: syz [ 387.353805][ T5845] usb 1-1: Manufacturer: syz [ 387.453530][ T5845] cdc_wdm 1-1:1.0: skipping garbage [ 387.459158][ T5845] cdc_wdm 1-1:1.0: skipping garbage [ 387.565458][ T5845] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 387.571985][ T5845] cdc_wdm 1-1:1.0: Unknown control protocol [ 387.707260][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.716735][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.074782][ C1] wdm_int_callback: 123 callbacks suppressed [ 388.074897][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.087918][ C1] wdm_int_callback: 123 callbacks suppressed [ 388.088016][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.108036][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.114846][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.124305][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.131119][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.143228][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.150114][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.156696][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.163463][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.185508][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.192531][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.213024][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.219975][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.231158][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.238022][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.247249][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.254164][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.263236][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 388.270172][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 388.327269][ T1587] usb 1-1: USB disconnect, device number 8 [ 388.327435][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 390.313832][ T1587] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 390.581967][ T1587] usb 1-1: Using ep0 maxpacket: 32 [ 390.822813][ T1587] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.890110][ T1587] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 390.899602][ T1587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.907941][ T1587] usb 1-1: Product: syz [ 390.912253][ T1587] usb 1-1: Manufacturer: syz [ 390.917316][ T1587] usb 1-1: SerialNumber: syz [ 391.120977][ T1587] usb 1-1: config 0 descriptor?? [ 391.182765][ T1587] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 391.189732][ T1587] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 394.948518][ T6782] veth1: entered promiscuous mode [ 394.971086][ T6782] batadv_slave_1: entered promiscuous mode [ 395.023869][ T6781] batadv_slave_1: left promiscuous mode [ 395.031330][ T6781] veth1: left promiscuous mode [ 396.614101][ T1587] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 396.858668][ T1587] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 396.868247][ T1587] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.878835][ T1587] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 396.888366][ T1587] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.141739][ T1587] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 397.153534][ T1587] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 397.161852][ T1587] usb 2-1: Product: syz [ 397.171334][ T1587] usb 2-1: Manufacturer: syz [ 397.341187][ T1587] cdc_wdm 2-1:1.0: skipping garbage [ 397.346892][ T1587] cdc_wdm 2-1:1.0: skipping garbage [ 397.394945][ T1587] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 397.401195][ T1587] cdc_wdm 2-1:1.0: Unknown control protocol [ 397.572503][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.582711][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.871029][ C0] wdm_int_callback: 123 callbacks suppressed [ 397.871139][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.884275][ C0] wdm_int_callback: 123 callbacks suppressed [ 397.884346][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.902060][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.908987][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.915905][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.922803][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.933155][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.940167][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.947901][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.954701][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.961613][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.968439][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.975109][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.981876][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 397.988509][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 397.995284][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 398.001808][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 398.008614][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 398.015201][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 398.021958][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 398.046658][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 398.055794][ T5845] usb 2-1: USB disconnect, device number 9 [ 399.521227][ T5845] usb 1-1: USB disconnect, device number 9 [ 400.163460][ T5845] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 400.366339][ T5845] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 400.422202][ T5845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.431789][ T5845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.445209][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.507090][ T5845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.516808][ T5845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.528401][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.562345][ T5845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.571977][ T5845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.583467][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.646424][ T5845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.656178][ T5845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.667653][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.737057][ T5845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.746636][ T5845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.758118][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.861193][ T5845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.870890][ T5845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.882471][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.976413][ T5845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.986279][ T5845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 401.001890][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 401.028718][ T5845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 401.038554][ T5845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 401.050029][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 401.103906][ T5845] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 401.113501][ T5845] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 401.122236][ T5845] usb 5-1: Product: syz [ 401.127071][ T5845] usb 5-1: Manufacturer: syz [ 401.132009][ T5845] usb 5-1: SerialNumber: syz [ 401.146122][ T5845] usb 5-1: config 0 descriptor?? [ 401.174831][ T5845] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 401.589278][ T1587] usb 5-1: USB disconnect, device number 5 [ 401.639332][ T1587] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 404.323379][ T5845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 404.493412][ T5845] usb 2-1: device descriptor read/64, error -71 [ 404.743536][ T5845] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 404.943427][ T5845] usb 2-1: device descriptor read/64, error -71 [ 405.059997][ T5845] usb usb2-port1: attempt power cycle [ 405.536891][ T6870] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 405.536966][ T5845] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 405.788016][ T5845] usb 2-1: device descriptor read/8, error -71 [ 406.054380][ T5845] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 406.396372][ T5845] usb 2-1: device descriptor read/8, error -71 [ 406.514829][ T5845] usb usb2-port1: unable to enumerate USB device [ 406.741393][ T6877] loop6: detected capacity change from 0 to 524287999 [ 408.707348][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.714627][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 411.554359][ T5845] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 411.753916][ T5845] usb 2-1: device descriptor read/64, error -71 [ 412.003416][ T5845] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 412.245630][ T5845] usb 2-1: device descriptor read/64, error -71 [ 412.378987][ T5845] usb usb2-port1: attempt power cycle [ 412.793557][ T5845] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 412.865340][ T5845] usb 2-1: device descriptor read/8, error -71 [ 413.139817][ T5845] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 413.197999][ T5845] usb 2-1: device descriptor read/8, error -71 [ 413.330347][ T5845] usb usb2-port1: unable to enumerate USB device [ 417.539481][ T30] audit: type=1326 audit(1746691972.350:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.0.344" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f56539 code=0x0 [ 417.835004][ T6953] fuse: Bad value for 'fd' [ 419.316131][ T5845] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 419.513381][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 419.546892][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 419.584418][ T5845] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 419.593917][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.602077][ T5845] usb 3-1: Product: syz [ 419.606525][ T5845] usb 3-1: Manufacturer: syz [ 419.611265][ T5845] usb 3-1: SerialNumber: syz [ 419.753750][ T5845] usb 3-1: config 0 descriptor?? [ 419.813802][ T5845] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 419.823606][ T5845] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 420.404565][ T5845] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 420.868158][ T5845] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 420.876730][ T5845] em28xx 3-1:0.0: board has no eeprom [ 422.028094][ T6961] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 422.109564][ T5845] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 422.119185][ T5845] em28xx 3-1:0.0: dvb set to bulk mode. [ 422.130086][ T5863] em28xx 3-1:0.0: Binding DVB extension [ 422.241650][ T5845] usb 3-1: USB disconnect, device number 4 [ 422.249856][ T5845] em28xx 3-1:0.0: Disconnecting em28xx [ 422.619249][ T5863] em28xx 3-1:0.0: Registering input extension [ 422.687383][ T5845] em28xx 3-1:0.0: Closing input extension [ 422.787623][ T5845] em28xx 3-1:0.0: Freeing device [ 427.532544][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.368'. [ 429.645906][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 430.795946][ T5863] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 431.039297][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 431.147469][ T5863] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 431.157157][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.165722][ T5863] usb 5-1: Product: syz [ 431.170150][ T5863] usb 5-1: Manufacturer: syz [ 431.175259][ T5863] usb 5-1: SerialNumber: syz [ 431.306227][ T5863] usb 5-1: config 0 descriptor?? [ 431.377446][ T5863] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 431.385968][ T5863] usb 5-1: setting power ON [ 431.390759][ T5863] dvb-usb: bulk message failed: -22 (2/0) [ 431.539070][ T7056] dvb-usb: bulk message failed: -22 (3/0) [ 431.545328][ T7056] ===================================================== [ 431.552823][ T7056] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 431.564420][ T7056] cxusb_i2c_xfer+0x1303/0x18e0 [ 431.569490][ T7056] __i2c_transfer+0xec7/0x30e0 [ 431.574718][ T7056] i2c_transfer+0x300/0x4b0 [ 431.579564][ T7056] i2c_transfer_buffer_flags+0x138/0x200 [ 431.585634][ T7056] i2cdev_write+0x214/0x2b0 [ 431.590367][ T7056] vfs_writev+0x8db/0x1420 [ 431.595167][ T7056] do_writev+0x1b1/0x580 [ 431.599753][ T7056] __ia32_sys_writev+0x9c/0xf0 [ 431.605118][ T7056] ia32_sys_call+0x3f2a/0x42c0 [ 431.610095][ T7056] __do_fast_syscall_32+0xb0/0x110 [ 431.615688][ T7056] do_fast_syscall_32+0x38/0x80 [ 431.620827][ T7056] do_SYSENTER_32+0x1f/0x30 [ 431.625825][ T7056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.632434][ T7056] [ 431.635279][ T7056] Local variable i.i838 created at: [ 431.640627][ T7056] cxusb_i2c_xfer+0x304/0x18e0 [ 431.645800][ T7056] __i2c_transfer+0xec7/0x30e0 [ 431.652078][ T7056] [ 431.654717][ T7056] CPU: 0 UID: 0 PID: 7056 Comm: syz.4.378 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 431.667127][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 431.677516][ T7056] ===================================================== [ 431.684871][ T7056] Disabling lock debugging due to kernel taint [ 431.691291][ T7056] Kernel panic - not syncing: kmsan.panic set ... [ 431.697905][ T7056] CPU: 0 UID: 0 PID: 7056 Comm: syz.4.378 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 431.711737][ T7056] Tainted: [B]=BAD_PAGE [ 431.716026][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 431.726251][ T7056] Call Trace: [ 431.729667][ T7056] [ 431.732718][ T7056] __dump_stack+0x26/0x30 [ 431.737266][ T7056] dump_stack_lvl+0x53/0x270 [ 431.742154][ T7056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 431.748188][ T7056] dump_stack+0x1e/0x25 [ 431.752547][ T7056] panic+0x4bd/0xd50 [ 431.756700][ T7056] kmsan_report+0x29d/0x2a0 [ 431.761423][ T7056] ? vprintk_default+0x3f/0x50 [ 431.766393][ T7056] ? __msan_warning+0x96/0x120 [ 431.771351][ T7056] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 431.776566][ T7056] ? __i2c_transfer+0xec7/0x30e0 [ 431.781720][ T7056] ? i2c_transfer+0x300/0x4b0 [ 431.786606][ T7056] ? i2c_transfer_buffer_flags+0x138/0x200 [ 431.792639][ T7056] ? i2cdev_write+0x214/0x2b0 [ 431.797540][ T7056] ? vfs_writev+0x8db/0x1420 [ 431.802367][ T7056] ? do_writev+0x1b1/0x580 [ 431.807002][ T7056] ? __ia32_sys_writev+0x9c/0xf0 [ 431.812146][ T7056] ? ia32_sys_call+0x3f2a/0x42c0 [ 431.817276][ T7056] ? __do_fast_syscall_32+0xb0/0x110 [ 431.822781][ T7056] ? do_fast_syscall_32+0x38/0x80 [ 431.828024][ T7056] ? do_SYSENTER_32+0x1f/0x30 [ 431.832916][ T7056] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.839666][ T7056] ? kmsan_get_metadata+0x105/0x1b0 [ 431.845095][ T7056] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 431.851643][ T7056] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 431.857919][ T7056] ? kmsan_get_metadata+0x105/0x1b0 [ 431.863340][ T7056] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 431.869887][ T7056] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 431.876174][ T7056] ? mutex_unlock+0x29/0x50 [ 431.880884][ T7056] ? kmsan_get_metadata+0x105/0x1b0 [ 431.886318][ T7056] __msan_warning+0x96/0x120 [ 431.891114][ T7056] cxusb_i2c_xfer+0x1303/0x18e0 [ 431.896165][ T7056] ? do_fast_syscall_32+0x38/0x80 [ 431.901432][ T7056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 431.907483][ T7056] ? kmsan_get_metadata+0x105/0x1b0 [ 431.912909][ T7056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 431.918952][ T7056] ? kmsan_get_metadata+0x105/0x1b0 [ 431.924367][ T7056] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 431.929760][ T7056] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 431.935151][ T7056] __i2c_transfer+0xec7/0x30e0 [ 431.940150][ T7056] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 431.946706][ T7056] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 431.952673][ T7056] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 431.958964][ T7056] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 431.964930][ T7056] i2c_transfer+0x300/0x4b0 [ 431.969718][ T7056] i2c_transfer_buffer_flags+0x138/0x200 [ 431.975634][ T7056] i2cdev_write+0x214/0x2b0 [ 431.980384][ T7056] vfs_writev+0x8db/0x1420 [ 431.985119][ T7056] ? __pfx_i2cdev_write+0x10/0x10 [ 431.990378][ T7056] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 431.996994][ T7056] ? kmsan_get_metadata+0x105/0x1b0 [ 432.002417][ T7056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 432.008456][ T7056] do_writev+0x1b1/0x580 [ 432.012920][ T7056] ? kmsan_get_metadata+0x105/0x1b0 [ 432.018374][ T7056] __ia32_sys_writev+0x9c/0xf0 [ 432.023354][ T7056] ia32_sys_call+0x3f2a/0x42c0 [ 432.028302][ T7056] __do_fast_syscall_32+0xb0/0x110 [ 432.033661][ T7056] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 432.039618][ T7056] do_fast_syscall_32+0x38/0x80 [ 432.044694][ T7056] do_SYSENTER_32+0x1f/0x30 [ 432.049415][ T7056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.055984][ T7056] RIP: 0023:0xf7f77539 [ 432.060214][ T7056] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 432.080081][ T7056] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 432.088725][ T7056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680 [ 432.096887][ T7056] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.105062][ T7056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.113195][ T7056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 432.121328][ T7056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.129495][ T7056] [ 432.132967][ T7056] Kernel Offset: disabled [ 432.137392][ T7056] Rebooting in 86400 seconds..