last executing test programs: 1m6.099068867s ago: executing program 1 (id=214): syz_emit_ethernet(0x42, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x7, 0xffff, {0x6, 0x4, 0x1, 0xa, 0x9, 0x66, 0xd, 0x80, 0x33, 0x800, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2b}, {[@ssrr={0x89, 0x3, 0x57}]}}}}}}}, 0x0) 1m5.996189033s ago: executing program 1 (id=217): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000380)={0x0, 0x936, 0x0, 0xfffffffc, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 1m5.798073382s ago: executing program 1 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1m5.650554224s ago: executing program 1 (id=222): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r0, 0xb01, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 1m5.459426066s ago: executing program 1 (id=224): chdir(0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000080)=0x1) 1m5.205733108s ago: executing program 1 (id=227): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 50.120591784s ago: executing program 32 (id=227): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 4.307032355s ago: executing program 0 (id=622): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 2.949874428s ago: executing program 3 (id=630): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x0) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)={r1}) 2.650189847s ago: executing program 0 (id=634): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x1, 0x10001, 0xd, 0x6000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f03) 2.575147626s ago: executing program 3 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8a, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 2.427621872s ago: executing program 2 (id=636): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffdfffffffffffd}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.258933642s ago: executing program 0 (id=639): capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x40000000, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x18, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) 2.250919271s ago: executing program 2 (id=640): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x5, 0x2, 0x5, 0x10, 0xff, 0xd, 0x9, 0x8, 0xc, 0xe, 0xc, 0xd, 0x9, 0x2, 0x3, 0xc], 0x1, [0x1ff, 0xc, 0x101, 0x7, 0x688, 0x8001, 0x8, 0x1, 0x927, 0x2e, 0xb, 0x3, 0xfffc, 0x6, 0x6, 0xb], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0x614, 0x3, 0x3, 0xe3, 0xffff, 0x7, 0x5, 0x1, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500000000000401a8001600a40001402000", 0x3a}], 0x1}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 2.158937029s ago: executing program 4 (id=641): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r5, r6, 0x6, 0x0, 0xffffffff, 0x807, {0xffff8000, 0x1, 0x0, 0x6, 0xf47, 0x1, 0xfffe, 0x5, 0x9, 0xe154, 0x1000, 0x7f, 0x2000006, 0xffff033a, "fe1d00000000000b000000bc00"}}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) getpid() 2.158611735s ago: executing program 5 (id=642): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08060001080006040faf5ef6aaaaaa32ac1414bb000000000000ac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.067057071s ago: executing program 2 (id=643): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000010) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@s={0x5, @SEQ_MIDIPUTC=0xef, 0x1c, 0xb}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r2, 0x0, 0xbb) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5423) r4 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07ff", 0x1a) r6 = creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$sndseq(r6, &(0x7f0000000140)=[{0x9, 0x7, 0x8, 0x4, @time={0xf, 0x3}, {0x3, 0x8c}, {0x5d, 0x6}, @addr={0xfa, 0x9}}], 0x1c) ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, &(0x7f0000000180)=0x110938b4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)=""/19, 0x0) 2.035366138s ago: executing program 0 (id=644): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffe7d}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @mcast2, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac7100206000000ffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.973259298s ago: executing program 5 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108f60000000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.906814126s ago: executing program 3 (id=646): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.711571273s ago: executing program 2 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40400c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 1.613820516s ago: executing program 5 (id=648): socket$inet6_udp(0xa, 0x2, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2, 0x0) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0xfdff, 0x2, 0x3, 0x1, 0x1}, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setattr(r1, &(0x7f0000000380)={0x38, 0x6, 0x10000010, 0x2, 0x80, 0xdc, 0x4, 0xd517, 0x1, 0x80}, 0x0) capset(&(0x7f0000000200)={0x20080522}, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40001018, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) 1.613464088s ago: executing program 2 (id=649): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924", 0x66}], 0x3}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x10e00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.486450091s ago: executing program 0 (id=650): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffdfffffffffffd}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.374341113s ago: executing program 5 (id=651): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') eventfd(0x6) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 1.298102876s ago: executing program 3 (id=652): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtclass={0x80, 0x28, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x3}, {0xd, 0xfff3}}, [@c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8}]}}, @c_atm={{0x8}, {0x40, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x11, 0x3, "15c958bfd23d8cea847c8b2f94"}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.294814869s ago: executing program 0 (id=653): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)="0e", 0x1}], 0x1, 0x7c58fc9b, 0xc) 1.113377495s ago: executing program 2 (id=654): syz_usb_connect(0x3, 0x3f, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0xdd, 0x10, 0xb3, 0x10, 0x12d1, 0x3133, 0x5b62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x1, 0xfe, 0x50, 0x9, [{{0x9, 0x4, 0x57, 0x1, 0x1, 0xff, 0x3, 0x66, 0x7, [], [{{0x9, 0x5, 0xc, 0x1, 0x20, 0x5, 0x0, 0xe4}}]}}, {{0x9, 0x4, 0xa6, 0xf2, 0x1, 0x2, 0x2, 0xff, 0x9, [], [{{0x9, 0x5, 0x2, 0xc, 0x200, 0x7, 0x9, 0x6}}]}}]}}]}}, 0x0) 971.068699ms ago: executing program 5 (id=655): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08060001080006040faf5ef6aaaaaa32ac1414bb000000000000ac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 854.626204ms ago: executing program 4 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x21, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x6, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) 799.526981ms ago: executing program 5 (id=657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be", 0x13, 0x4040, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170, 0x0, r2}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) 674.108172ms ago: executing program 4 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c57596", 0xf}, {&(0x7f0000000180)="000002b7c70281", 0x7}], 0x2) 286.013114ms ago: executing program 4 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108f60000000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 193.659643ms ago: executing program 3 (id=660): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 192.261696ms ago: executing program 4 (id=661): socket$inet6_udp(0xa, 0x2, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2, 0x0) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0xfdff, 0x2, 0x3, 0x1, 0x1}, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setattr(r1, &(0x7f0000000380)={0x38, 0x6, 0x10000010, 0x2, 0x80, 0xdc, 0x4, 0xd517, 0x1, 0x80}, 0x0) capset(&(0x7f0000000200)={0x20080522}, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40001018, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 113.09678ms ago: executing program 3 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 0s ago: executing program 4 (id=663): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x4, 0x9, 0xb972, 0xe4, 0x6, "6b8018771b704f7b61e0888931a9a0d9f76c38"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 78.440129][ T5812] cgroup: Unknown subsys name 'net' [ 78.569198][ T5812] cgroup: Unknown subsys name 'cpuset' [ 78.579190][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.281443][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.457052][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.466298][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.466726][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.474437][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.481633][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.490587][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.496092][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.510536][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.511429][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.518935][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.526318][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.533125][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.540383][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.546712][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.553702][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.561731][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.569103][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.577323][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.583921][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.590593][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.608400][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.635166][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.635736][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.652132][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.660744][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.237096][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 83.319682][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 83.451757][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 83.521055][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 83.552996][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 83.620513][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.628309][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.636295][ T5846] bridge_slave_0: entered allmulticast mode [ 83.643367][ T5846] bridge_slave_0: entered promiscuous mode [ 83.676009][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.683256][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.690716][ T5842] bridge_slave_0: entered allmulticast mode [ 83.697928][ T5842] bridge_slave_0: entered promiscuous mode [ 83.717247][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.724995][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.732577][ T5846] bridge_slave_1: entered allmulticast mode [ 83.739815][ T5846] bridge_slave_1: entered promiscuous mode [ 83.768271][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.775412][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.782945][ T5842] bridge_slave_1: entered allmulticast mode [ 83.790087][ T5842] bridge_slave_1: entered promiscuous mode [ 83.873425][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.880775][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.888016][ T5845] bridge_slave_0: entered allmulticast mode [ 83.895110][ T5845] bridge_slave_0: entered promiscuous mode [ 83.906245][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.928596][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.954784][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.962425][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.969974][ T5845] bridge_slave_1: entered allmulticast mode [ 83.977248][ T5845] bridge_slave_1: entered promiscuous mode [ 83.986897][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.998430][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.007941][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.015260][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.022832][ T5843] bridge_slave_0: entered allmulticast mode [ 84.030076][ T5843] bridge_slave_0: entered promiscuous mode [ 84.079171][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.086427][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.093650][ T5843] bridge_slave_1: entered allmulticast mode [ 84.101037][ T5843] bridge_slave_1: entered promiscuous mode [ 84.156454][ T5842] team0: Port device team_slave_0 added [ 84.173126][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.181115][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.189057][ T5844] bridge_slave_0: entered allmulticast mode [ 84.196406][ T5844] bridge_slave_0: entered promiscuous mode [ 84.207020][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.218254][ T5846] team0: Port device team_slave_0 added [ 84.226299][ T5842] team0: Port device team_slave_1 added [ 84.246020][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.253234][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.260853][ T5844] bridge_slave_1: entered allmulticast mode [ 84.268163][ T5844] bridge_slave_1: entered promiscuous mode [ 84.277723][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.288765][ T5846] team0: Port device team_slave_1 added [ 84.307034][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.360363][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.402729][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.410120][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.436996][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.463502][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.475203][ T5845] team0: Port device team_slave_0 added [ 84.484356][ T5845] team0: Port device team_slave_1 added [ 84.491700][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.503111][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.529829][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.541863][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.549570][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.576224][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.601170][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.621723][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.628972][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.656394][ T5835] Bluetooth: hci3: command tx timeout [ 84.656402][ T5147] Bluetooth: hci2: command tx timeout [ 84.656621][ T5147] Bluetooth: hci0: command tx timeout [ 84.662139][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.667883][ T52] Bluetooth: hci4: command tx timeout [ 84.693164][ T5843] team0: Port device team_slave_0 added [ 84.721917][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.729235][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.755858][ T52] Bluetooth: hci1: command tx timeout [ 84.761598][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.774773][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.781953][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.808411][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.822733][ T5843] team0: Port device team_slave_1 added [ 84.892372][ T5844] team0: Port device team_slave_0 added [ 84.900772][ T5844] team0: Port device team_slave_1 added [ 84.918437][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.925418][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.952488][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.001907][ T5842] hsr_slave_0: entered promiscuous mode [ 85.008867][ T5842] hsr_slave_1: entered promiscuous mode [ 85.016164][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.023134][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.050018][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.068566][ T5846] hsr_slave_0: entered promiscuous mode [ 85.074845][ T5846] hsr_slave_1: entered promiscuous mode [ 85.081735][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 85.088137][ T5846] Cannot create hsr debugfs directory [ 85.128860][ T5845] hsr_slave_0: entered promiscuous mode [ 85.136021][ T5845] hsr_slave_1: entered promiscuous mode [ 85.142179][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 85.148011][ T5845] Cannot create hsr debugfs directory [ 85.157096][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.164055][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.190786][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.232638][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.239872][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.266201][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.386076][ T5843] hsr_slave_0: entered promiscuous mode [ 85.392640][ T5843] hsr_slave_1: entered promiscuous mode [ 85.399010][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 85.404740][ T5843] Cannot create hsr debugfs directory [ 85.476523][ T5844] hsr_slave_0: entered promiscuous mode [ 85.483293][ T5844] hsr_slave_1: entered promiscuous mode [ 85.489946][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 85.495849][ T5844] Cannot create hsr debugfs directory [ 85.951076][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.983090][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.993856][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.011943][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.058454][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.078725][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.090392][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.111581][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.191886][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.228862][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.240156][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.269238][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.361929][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.400488][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.423624][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.437365][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.461545][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.498459][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.550644][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.558413][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.579937][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.591741][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.608329][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.615649][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.645130][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.658871][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.674066][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.728464][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.736280][ T5147] Bluetooth: hci2: command tx timeout [ 86.736658][ T5838] Bluetooth: hci4: command tx timeout [ 86.741749][ T5147] Bluetooth: hci0: command tx timeout [ 86.753598][ T52] Bluetooth: hci3: command tx timeout [ 86.776867][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.784186][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.804261][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.816345][ T5147] Bluetooth: hci1: command tx timeout [ 86.829178][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.836805][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.889679][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.930821][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.938064][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.994125][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.001374][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.093117][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.190255][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.229669][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.284655][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.297249][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.304485][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.322018][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.354504][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.361795][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.408804][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.416027][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.440110][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.447338][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.510836][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.537993][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.642283][ T5846] veth0_vlan: entered promiscuous mode [ 87.738558][ T5846] veth1_vlan: entered promiscuous mode [ 87.759224][ T5842] veth0_vlan: entered promiscuous mode [ 87.810422][ T5842] veth1_vlan: entered promiscuous mode [ 87.820697][ T5843] veth0_vlan: entered promiscuous mode [ 87.847933][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.868381][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.891363][ T5843] veth1_vlan: entered promiscuous mode [ 87.910111][ T5846] veth0_macvtap: entered promiscuous mode [ 87.922082][ T5846] veth1_macvtap: entered promiscuous mode [ 88.012289][ T5842] veth0_macvtap: entered promiscuous mode [ 88.023168][ T5845] veth0_vlan: entered promiscuous mode [ 88.049315][ T5844] veth0_vlan: entered promiscuous mode [ 88.066933][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.080857][ T5845] veth1_vlan: entered promiscuous mode [ 88.089571][ T5843] veth0_macvtap: entered promiscuous mode [ 88.104491][ T5842] veth1_macvtap: entered promiscuous mode [ 88.120458][ T5844] veth1_vlan: entered promiscuous mode [ 88.139963][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.151184][ T5843] veth1_macvtap: entered promiscuous mode [ 88.172396][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.197056][ T65] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.207349][ T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.226210][ T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.255408][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.278533][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.310202][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.321091][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.348199][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.357688][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.382242][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.399297][ T5844] veth0_macvtap: entered promiscuous mode [ 88.419046][ T5845] veth0_macvtap: entered promiscuous mode [ 88.436701][ T5844] veth1_macvtap: entered promiscuous mode [ 88.449158][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.465340][ T5845] veth1_macvtap: entered promiscuous mode [ 88.535987][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.549446][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.568028][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.577596][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.589547][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.596017][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.612919][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.634755][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.647688][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.701305][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.719360][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.749747][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.761410][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.771726][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.780860][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.809002][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.817982][ T5147] Bluetooth: hci0: command tx timeout [ 88.823822][ T5147] Bluetooth: hci3: command tx timeout [ 88.828474][ T5838] Bluetooth: hci4: command tx timeout [ 88.829741][ T5147] Bluetooth: hci2: command tx timeout [ 88.868461][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.895729][ T5147] Bluetooth: hci1: command tx timeout [ 88.896507][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.913426][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.929143][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.939147][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.966423][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.974499][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.992072][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.999861][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.072675][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.081574][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.215761][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.223677][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.308849][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.356589][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.364464][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.366307][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.520682][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.558981][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.674274][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.785641][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.803112][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.943673][ T5925] kvm: pic: single mode not supported [ 89.952124][ T5925] kvm: pic: single mode not supported [ 89.988662][ T5925] kvm: pic: level sensitive irq not supported [ 90.544099][ T5942] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 90.610836][ T5942] kvm: pic: level sensitive irq not supported [ 90.612398][ T5942] kvm: pic: non byte read [ 90.653842][ T5942] kvm: pic: level sensitive irq not supported [ 90.654414][ T5942] kvm: pic: non byte read [ 90.668876][ T5942] kvm: pic: level sensitive irq not supported [ 90.669101][ T5942] kvm: pic: non byte read [ 90.681914][ T5942] kvm: pic: level sensitive irq not supported [ 90.682407][ T5942] kvm: pic: non byte read [ 90.718650][ T5949] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 90.906040][ T5147] Bluetooth: hci2: command tx timeout [ 90.906256][ T52] Bluetooth: hci0: command tx timeout [ 90.913493][ T5147] Bluetooth: hci4: command tx timeout [ 90.918318][ T5835] Bluetooth: hci3: command tx timeout [ 90.976774][ T52] Bluetooth: hci1: command tx timeout [ 91.838270][ T5961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 91.879337][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 91.900752][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 91.921773][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 91.940082][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 91.977364][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 92.018487][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 92.049851][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 92.077816][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 92.203961][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.204055][ T9] cfg80211: failed to load regulatory.db [ 92.251558][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 92.296067][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 92.343608][ T5897] hid-generic 0004:FFFFFFFF:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 92.399346][ T24] usb 5-1: config 0 has no interfaces? [ 92.435557][ T24] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 92.465483][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.567335][ T24] usb 5-1: config 0 descriptor?? [ 92.816767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.154164][ T5897] usb 5-1: USB disconnect, device number 2 [ 94.266530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.577432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.586916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.977053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.105748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.225792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.235864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.266308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 95.516269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 95.886884][ T5986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.903058][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.911780][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.969003][ T5986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.307142][ T5990] sock: sock_set_timeout: `syz.4.20' (pid 5990) tries to set negative timeout [ 96.353675][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.382168][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.090060][ T3528] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.132989][ T3528] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.196488][ T3528] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.248772][ T3528] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.345317][ T6003] loop7: detected capacity change from 0 to 7 [ 98.615272][ T6003] Dev loop7: unable to read RDB block 7 [ 98.626440][ T6003] loop7: unable to read partition table [ 98.633228][ T6003] loop7: partition table beyond EOD, truncated [ 98.645562][ T6003] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 98.770116][ T6009] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.28'. [ 99.197956][ T6021] bridge0: port 3(syz_tun) entered blocking state [ 99.265709][ T6021] bridge0: port 3(syz_tun) entered disabled state [ 99.286740][ T6021] syz_tun: entered allmulticast mode [ 99.307806][ T6021] syz_tun: entered promiscuous mode [ 99.422721][ T6021] bridge0: port 3(syz_tun) entered blocking state [ 99.429753][ T6021] bridge0: port 3(syz_tun) entered forwarding state [ 99.485579][ T5917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.728824][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 99.761673][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 99.816126][ T5917] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 100.315777][ T5917] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.324969][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.441005][ T5917] usb 3-1: Product: syz [ 100.453762][ T5917] usb 3-1: Manufacturer: syz [ 100.471507][ T5917] usb 3-1: SerialNumber: syz [ 100.583471][ T5917] usb 3-1: config 0 descriptor?? [ 100.607501][ T6022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.275508][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.322408][ T6037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.788917][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.035681][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 103.043363][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.061626][ T5917] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.089330][ T5917] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.101979][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.122950][ T5917] usb 4-1: Product: syz [ 103.132857][ T5917] usb 4-1: Manufacturer: syz [ 103.143980][ T5917] usb 4-1: SerialNumber: syz [ 103.167941][ T5917] usb 4-1: config 0 descriptor?? [ 103.238052][ T6062] syzkaller0: entered promiscuous mode [ 103.243961][ T6062] syzkaller0: entered allmulticast mode [ 103.354523][ T6067] openvswitch: netlink: Message has 4 unknown bytes. [ 103.361799][ T6067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.487226][ T5897] usb 3-1: USB disconnect, device number 2 [ 103.554037][ T6075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.662513][ T6075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.703416][ T6075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.783853][ T6088] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 105.356884][ T6075] warning: `syz.3.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.368495][ T6086] netlink: 80 bytes leftover after parsing attributes in process `syz.2.57'. [ 105.405183][ T5917] usb 4-1: USB disconnect, device number 2 [ 105.414000][ T6093] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 105.429479][ T6093] dvmrp1: linktype set to 773 [ 105.595721][ T6095] Zero length message leads to an empty skb [ 105.888481][ T6107] pimreg: tun_chr_ioctl cmd 1074025681 [ 106.464698][ T6127] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 106.481422][ T6121] syzkaller0: entered promiscuous mode [ 106.498490][ T6121] syzkaller0: entered allmulticast mode [ 106.877056][ T6132] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.77'. [ 108.238339][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 108.247973][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 109.197033][ T6164] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.90'. [ 109.461948][ T6167] netlink: 'syz.0.91': attribute type 22 has an invalid length. [ 109.945731][ T5897] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.145532][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 110.195971][ T5897] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 110.206899][ T6188] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.101'. [ 110.227507][ T5897] usb 3-1: config 0 has no interface number 0 [ 110.234900][ T5897] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.283173][ T5897] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 110.461248][ T5897] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.493521][ T5897] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.561081][ T5897] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.622688][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.666046][ T5897] usb 3-1: config 0 descriptor?? [ 110.811251][ T5897] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 111.732662][ T6206] syzkaller0: entered promiscuous mode [ 111.760931][ T6206] syzkaller0: entered allmulticast mode [ 112.199820][ T6217] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 112.260843][ T6217] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.112'. [ 112.773248][ T5897] usb 3-1: USB disconnect, device number 3 [ 112.818155][ T5897] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 113.006635][ T6237] syz.4.122 uses obsolete (PF_INET,SOCK_PACKET) [ 113.405619][ T5917] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.588559][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.599312][ T5917] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 113.611270][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.631863][ T5917] usb 2-1: config 0 descriptor?? [ 113.645208][ T5917] pwc: Askey VC010 type 2 USB webcam detected. [ 113.835769][ T6229] netlink: 15678 bytes leftover after parsing attributes in process `syz.3.119'. [ 113.918290][ T6244] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 114.058701][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00 [ 114.087502][ T5917] pwc: recv_control_msg error -32 req 02 val 2700 [ 114.112302][ T5917] pwc: recv_control_msg error -32 req 02 val 2c00 [ 114.139495][ T6252] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.127'. [ 114.152105][ T5917] pwc: recv_control_msg error -32 req 04 val 1000 [ 114.163034][ T5917] pwc: recv_control_msg error -32 req 04 val 1300 [ 114.183298][ T5917] pwc: recv_control_msg error -32 req 04 val 1400 [ 114.196472][ T5917] pwc: recv_control_msg error -32 req 02 val 2000 [ 114.212656][ T5917] pwc: recv_control_msg error -32 req 02 val 2100 [ 114.231068][ T5917] pwc: recv_control_msg error -32 req 04 val 1500 [ 114.245776][ T5917] pwc: recv_control_msg error -32 req 02 val 2500 [ 114.464281][ T5917] pwc: recv_control_msg error -71 req 02 val 2600 [ 114.471986][ T5917] pwc: recv_control_msg error -71 req 02 val 2900 [ 114.488646][ T5917] pwc: recv_control_msg error -71 req 02 val 2800 [ 114.507303][ T5917] pwc: recv_control_msg error -71 req 04 val 1100 [ 114.520605][ T5917] pwc: recv_control_msg error -71 req 04 val 1200 [ 114.548198][ T5917] pwc: Registered as video103. [ 114.567825][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 114.579777][ T6265] netlink: 15678 bytes leftover after parsing attributes in process `syz.2.135'. [ 114.615834][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.626571][ T5917] usb 2-1: USB disconnect, device number 2 [ 114.772409][ T6268] syzkaller0: entered promiscuous mode [ 114.779265][ T6268] syzkaller0: entered allmulticast mode [ 114.795574][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 114.807381][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 114.825650][ T24] usb 5-1: config 0 has no interface number 0 [ 114.832490][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.850302][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 114.876468][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.892110][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.909708][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 114.919719][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.932365][ T24] usb 5-1: config 0 descriptor?? [ 114.948065][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 114.974819][ T6272] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.615165][ T6291] netlink: 328 bytes leftover after parsing attributes in process `syz.1.147'. [ 115.715230][ T6293] loop2: detected capacity change from 0 to 7 [ 115.761871][ T6042] Dev loop2: unable to read RDB block 7 [ 115.787846][ T6042] loop2: AHDI p1 p2 p3 [ 115.804973][ T6042] loop2: partition table partially beyond EOD, truncated [ 115.823113][ T6042] loop2: p1 start 1818582900 is beyond EOD, truncated [ 115.835310][ T6042] loop2: p3 start 335544320 is beyond EOD, truncated [ 115.852651][ T6293] Dev loop2: unable to read RDB block 7 [ 115.865776][ T6293] loop2: AHDI p1 p2 p3 [ 115.877905][ T6293] loop2: partition table partially beyond EOD, truncated [ 115.891462][ T6293] loop2: p1 start 1818582900 is beyond EOD, truncated [ 115.908358][ T6293] loop2: p3 start 335544320 is beyond EOD, truncated [ 117.350061][ T5897] usb 5-1: USB disconnect, device number 3 [ 117.387591][ T5897] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 117.743797][ T6334] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 117.784155][ T6334] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.167'. [ 119.001269][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.108523][ T5883] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.174073][ T5897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.207963][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.245738][ T5897] usb 2-1: Product: syz [ 119.250060][ T5897] usb 2-1: Manufacturer: syz [ 119.254775][ T5897] usb 2-1: SerialNumber: syz [ 119.329197][ T5883] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.356079][ T5883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.395551][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.440362][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.479741][ T5883] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.489335][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.498360][ T5883] usb 4-1: Product: syz [ 119.502704][ T5883] usb 4-1: Manufacturer: syz [ 119.524805][ T5883] cdc_wdm 4-1:1.0: skipping garbage [ 119.541530][ T5883] cdc_wdm 4-1:1.0: skipping garbage [ 119.562727][ T5883] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 119.575584][ T5883] cdc_wdm 4-1:1.0: Unknown control protocol [ 119.695822][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.712024][ T6394] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 119.855696][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 119.867866][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.879663][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.895754][ T5917] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 119.905968][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.919504][ T5917] usb 1-1: config 0 descriptor?? [ 120.282441][ T6411] loop8: detected capacity change from 0 to 1 [ 120.305756][ T6411] Dev loop8: unable to read RDB block 1 [ 120.315509][ T6411] loop8: unable to read partition table [ 120.321986][ T6411] loop8: partition table beyond EOD, truncated [ 120.339468][ T6411] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 120.364488][ T5917] hid_parser_main: 22 callbacks suppressed [ 120.364540][ T5917] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 120.380051][ T5897] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 120.387530][ T5897] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 120.408320][ T5897] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 120.414197][ T5917] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 120.432492][ T5917] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 120.472104][ T5917] glorious 0003:258A:0033.0002: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.0-1/input0 [ 120.565941][ T5917] usb 1-1: USB disconnect, device number 2 [ 120.593726][ T5897] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 120.611526][ T6412] fido_id[6412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 120.643314][ T5897] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 120.728364][ T5897] usb 2-1: USB disconnect, device number 3 [ 120.752040][ T5897] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 121.779161][ T5917] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.898106][ T9] usb 4-1: USB disconnect, device number 3 [ 121.955528][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 121.977999][ T5917] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 122.008312][ T5917] usb 3-1: config 0 has no interface number 0 [ 122.014572][ T5917] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.065039][ T5917] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 122.105635][ T5917] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.153005][ T5917] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.205524][ T5917] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 122.214727][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.285322][ T5917] usb 3-1: config 0 descriptor?? [ 122.322077][ T5917] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 122.915529][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.115526][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 123.130332][ T9] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 123.142958][ T9] usb 5-1: config 4 has no interface number 0 [ 123.178536][ T9] usb 5-1: config 4 interface 51 has no altsetting 0 [ 123.201970][ T9] usb 5-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 123.228506][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.256913][ T9] usb 5-1: Product: syz [ 123.264526][ T9] usb 5-1: Manufacturer: syz [ 123.284509][ T9] usb 5-1: SerialNumber: syz [ 123.325229][ T9] upd78f0730 5-1:4.51: upd78f0730 converter detected [ 123.339953][ T9] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 123.614994][ T9] usb 5-1: USB disconnect, device number 4 [ 123.637136][ T9] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 123.660208][ T5832] usb 3-1: USB disconnect, device number 4 [ 123.700941][ T9] upd78f0730 5-1:4.51: device disconnected [ 123.734606][ T5832] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 124.518471][ T6490] [U] v3f"S/4:XTzWtlW= [ 124.527776][ T6490] [U] J"e:" [ 124.531515][ T6490] [U] [ 124.534402][ T6490] [U] x?Wìn [ 124.614123][ T6490] [U] UmAO5.t 5?10ͦ1gh/NVQ "Ǎ; mYdÄ/G-l ^\`6N0>!ݯ7}^;;n#BL)@H#/$MVIDHzJ{|ZvJ Y* Fvܪ5']Q̼,jba8Q ְ~0[v}*$E<L/uiu/؞c]H&mrK53oG82zL>Τ4c[XD: b fR :m9oKԌ+3c [ 124.786234][ T6490] [U] g< [ 124.799717][ T6490] [U] /XS#@rIKT]Ն^.tqTIHgcMK"Z-r}oa\T*GU;Pd ;|yeK(6 UX "֙*@OD5`YCa1O||n57vBD9$TfQC֙=$jFÈA&vߊŦv` [ 124.861707][ T6490] [U] Q,״ [%KL{vbar81q>MMl|wYeIUcrq*Gw!~rI׬YLsd8v}*c\! [ 125.391547][ T6511] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 126.370924][ T914] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.555203][ T914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.585644][ T914] usb 1-1: config 0 has no interfaces? [ 126.618308][ T914] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.648209][ T914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.685608][ T914] usb 1-1: Product: syz [ 126.694869][ T914] usb 1-1: Manufacturer: syz [ 126.702604][ T914] usb 1-1: SerialNumber: syz [ 126.765867][ T914] usb 1-1: config 0 descriptor?? [ 127.263552][ T6549] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 127.345606][ T983] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.495578][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 127.505726][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.517182][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.541737][ T983] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 127.556713][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.587061][ T983] usb 4-1: config 0 descriptor?? [ 128.024457][ T983] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 128.036000][ T983] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 128.215971][ T983] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 128.426402][ T983] ft260 0003:0403:6030.0003: failed to retrieve system status [ 128.446522][ T983] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71 [ 128.471016][ T983] usb 4-1: USB disconnect, device number 4 [ 129.118486][ T983] usb 1-1: USB disconnect, device number 3 [ 129.450816][ T6571] netlink: 128 bytes leftover after parsing attributes in process `syz.3.268'. [ 130.636034][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.791663][ T6602] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 130.809386][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 130.820169][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.950623][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.977823][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.977853][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.977866][ T9] usb 1-1: Product: syz [ 130.977874][ T9] usb 1-1: Manufacturer: syz [ 130.977882][ T9] usb 1-1: SerialNumber: syz [ 130.979760][ T9] usb 1-1: config 0 descriptor?? [ 131.308778][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.422012][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.485969][ T6596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.530641][ T914] usb 1-1: USB disconnect, device number 4 [ 131.707439][ T6619] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 133.072890][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.082172][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.430224][ T6653] netlink: 292 bytes leftover after parsing attributes in process `syz.3.303'. [ 133.446239][ T6655] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 133.819254][ T5832] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.895605][ T5897] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.985793][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 133.994260][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.004777][ T5832] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.029621][ T5832] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.047400][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.059234][ T5832] usb 3-1: Product: syz [ 134.063684][ T5832] usb 3-1: Manufacturer: syz [ 134.068854][ T5832] usb 3-1: SerialNumber: syz [ 134.078649][ T5832] usb 3-1: config 0 descriptor?? [ 134.085611][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 134.093686][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.115688][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.141287][ T5897] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 134.154075][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.166647][ T5897] usb 4-1: config 0 descriptor?? [ 134.199211][ T6672] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 134.320740][ T6657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.392515][ T6676] netlink: 128 bytes leftover after parsing attributes in process `syz.4.314'. [ 134.406365][ T6657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.435578][ T6657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.460023][ T983] usb 3-1: USB disconnect, device number 5 [ 134.585936][ T5897] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 134.606126][ T5897] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 134.780741][ T5897] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 135.056996][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 135.188441][ T5832] usb 4-1: USB disconnect, device number 5 [ 135.882940][ T6704] netlink: 128 bytes leftover after parsing attributes in process `syz.0.325'. [ 136.256927][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 137.428817][ T6739] netlink: 128 bytes leftover after parsing attributes in process `syz.4.339'. [ 137.801313][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 138.058819][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.068904][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.085713][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.101676][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.110128][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.861742][ T6756] chnl_net:caif_netlink_parms(): no params data found [ 139.237007][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.285671][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.444955][ T6756] bridge_slave_0: entered allmulticast mode [ 139.458119][ T6756] bridge_slave_0: entered promiscuous mode [ 139.468204][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.475574][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.483056][ T6756] bridge_slave_1: entered allmulticast mode [ 139.577638][ T6756] bridge_slave_1: entered promiscuous mode [ 139.954033][ T6756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.039249][ T6756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.174257][ T6756] team0: Port device team_slave_0 added [ 140.180718][ T52] Bluetooth: hci5: command tx timeout [ 140.240962][ T6756] team0: Port device team_slave_1 added [ 140.421442][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.446880][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.527456][ T6756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.558652][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.567712][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.600796][ T6756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.827309][ T6756] hsr_slave_0: entered promiscuous mode [ 140.834253][ T6756] hsr_slave_1: entered promiscuous mode [ 140.856492][ T6756] debugfs: 'hsr0' already exists in 'hsr' [ 140.872577][ T6756] Cannot create hsr debugfs directory [ 142.052400][ T6756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.135040][ T6756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.211541][ T6756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.265545][ T52] Bluetooth: hci5: command tx timeout [ 142.286225][ T6756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.505516][ T914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.721942][ T6756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.728831][ T914] usb 3-1: Using ep0 maxpacket: 16 [ 142.743959][ T914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.782664][ T914] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.809284][ T6756] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.838157][ T914] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 142.875639][ T914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.883868][ T914] usb 3-1: Product: syz [ 142.918278][ T914] usb 3-1: Manufacturer: syz [ 142.922911][ T914] usb 3-1: SerialNumber: syz [ 142.944553][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.951979][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.968790][ T914] usb 3-1: config 0 descriptor?? [ 143.003258][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.010556][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.201712][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.303222][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.361709][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.368405][ T6756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.430327][ T5897] usb 3-1: USB disconnect, device number 6 [ 143.590881][ T6756] veth0_vlan: entered promiscuous mode [ 143.635198][ T6756] veth1_vlan: entered promiscuous mode [ 143.710649][ T6756] veth0_macvtap: entered promiscuous mode [ 143.734119][ T6756] veth1_macvtap: entered promiscuous mode [ 143.848554][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.890057][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.928113][ T3528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.988023][ T3528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.021646][ T3528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.080468][ T3528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.336274][ T52] Bluetooth: hci5: command tx timeout [ 144.352049][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.400953][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.530866][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.567837][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.425635][ T52] Bluetooth: hci5: command tx timeout [ 146.900181][ T6907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.158694][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 149.618298][ T6942] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.813638][ T6954] syzkaller0: entered promiscuous mode [ 150.820924][ T6954] syzkaller0: entered allmulticast mode [ 150.875605][ T983] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.035550][ T983] usb 4-1: Using ep0 maxpacket: 16 [ 151.072099][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 151.114047][ T983] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.145278][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.170235][ T983] usb 4-1: Product: syz [ 151.196840][ T983] usb 4-1: Manufacturer: syz [ 151.201679][ T983] usb 4-1: SerialNumber: syz [ 151.222784][ T983] usb 4-1: config 0 descriptor?? [ 151.384359][ T983] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 151.403443][ T983] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 152.183963][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 152.405700][ T983] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 153.055142][ T983] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 153.070039][ T6986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.106064][ T983] em28xx 4-1:0.0: board has no eeprom [ 153.284907][ T983] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 153.315538][ T983] em28xx 4-1:0.0: dvb set to bulk mode. [ 153.321463][ T5917] em28xx 4-1:0.0: Binding DVB extension [ 154.075655][ T983] usb 4-1: USB disconnect, device number 6 [ 154.083096][ T983] em28xx 4-1:0.0: Disconnecting em28xx [ 154.259763][ T5917] em28xx 4-1:0.0: Registering input extension [ 154.291327][ T983] em28xx 4-1:0.0: Closing input extension [ 154.388169][ T983] em28xx 4-1:0.0: Freeing device [ 154.541101][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 156.755745][ T7044] netlink: 212332 bytes leftover after parsing attributes in process `syz.2.448'. [ 159.425659][ T7078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.433096][ T7078] IPv6: NLM_F_CREATE should be set when creating new route [ 159.440412][ T7078] IPv6: NLM_F_CREATE should be set when creating new route [ 161.586275][ T983] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 161.759479][ T983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.774388][ T983] usb 1-1: not running at top speed; connect to a high speed hub [ 161.784686][ T983] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 161.795841][ T983] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.817116][ T983] usb 1-1: config 1 interface 0 has no altsetting 0 [ 161.833508][ T983] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.853080][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.866679][ T983] usb 1-1: Product: syz [ 161.873669][ T983] usb 1-1: Manufacturer: syz [ 161.878873][ T983] usb 1-1: SerialNumber: syz [ 161.892992][ T7091] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.237727][ T983] usb 1-1: USB disconnect, device number 5 [ 162.594672][ T7116] syzkaller0: entered promiscuous mode [ 162.605700][ T7116] syzkaller0: entered allmulticast mode [ 163.225959][ T983] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 163.458614][ T983] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.519753][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.551587][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.632085][ T983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.691803][ T983] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.719052][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.763514][ T983] usb 4-1: config 0 descriptor?? [ 164.360422][ T983] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 165.343527][ T7143] netlink: 'syz.0.480': attribute type 1 has an invalid length. [ 166.489718][ T24] usb 4-1: USB disconnect, device number 7 [ 167.383616][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.488'. [ 168.624353][ T7143] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 169.435518][ T5897] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 169.445822][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.595798][ T5917] usb 3-1: device descriptor read/64, error -71 [ 169.626976][ T5897] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 169.635615][ T5897] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 169.647164][ T5897] usb 4-1: config 8 has no interface number 0 [ 169.654196][ T5897] usb 4-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.679746][ T5897] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 169.691723][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.701161][ T5897] usb 4-1: Product: syz [ 169.709631][ T5897] usb 4-1: Manufacturer: syz [ 169.734700][ T5897] usb 4-1: SerialNumber: syz [ 169.778710][ T5897] usb-storage 4-1:8.223: USB Mass Storage device detected [ 169.845603][ T5917] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.985633][ T5917] usb 3-1: device descriptor read/64, error -71 [ 170.003519][ T5954] usb 4-1: USB disconnect, device number 8 [ 170.118534][ T5917] usb usb3-port1: attempt power cycle [ 170.239388][ T7221] syzkaller0: entered promiscuous mode [ 170.245086][ T7221] syzkaller0: entered allmulticast mode [ 170.276602][ T7224] sch_tbf: peakrate 16 is lower than or equals to rate 2225451442729165302 ! [ 170.525533][ T5917] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.566372][ T5917] usb 3-1: device descriptor read/8, error -71 [ 170.788136][ T7239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.799018][ T7239] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 170.818655][ T5917] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 170.870095][ T5917] usb 3-1: device descriptor read/8, error -71 [ 170.879559][ T7239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.892009][ T7239] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 170.914434][ T7239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.920597][ T7239] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 170.944880][ T7239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.951494][ T7239] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 170.987236][ T7239] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 170.993324][ T7239] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 170.996750][ T5917] usb usb3-port1: unable to enumerate USB device [ 171.995818][ T5897] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 172.167455][ T5897] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.185571][ T5897] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.224156][ T5897] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.247764][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.453631][ T7232] syzkaller0: entered promiscuous mode [ 172.459753][ T7232] syzkaller0: entered allmulticast mode [ 172.493526][ T5897] usb 1-1: usb_control_msg returned -32 [ 172.500334][ T5897] usbtmc 1-1:16.0: can't read capabilities [ 172.738910][ T7269] capability: warning: `syz.2.529' uses deprecated v2 capabilities in a way that may be insecure [ 173.069875][ T5917] usb 1-1: USB disconnect, device number 6 [ 173.175506][ T5954] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 173.269889][ T7288] syzkaller0: entered promiscuous mode [ 173.276022][ T7288] syzkaller0: entered allmulticast mode [ 173.287872][ T7291] sch_tbf: peakrate 16 is lower than or equals to rate 2225451442729165302 ! [ 173.335721][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 173.348650][ T5954] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 173.361254][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.372417][ T5954] usb 3-1: config 0 descriptor?? [ 173.600576][ T5917] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.616035][ T5954] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 173.647500][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.667478][ T5954] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 173.696156][ T5954] usb 3-1: media controller created [ 173.740634][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.774880][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 173.785538][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 173.804110][ T5917] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 173.816048][ T5917] usb 6-1: config 0 has no interface number 0 [ 173.840542][ T5917] usb 6-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=86.f0 [ 173.857073][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.865285][ T5917] usb 6-1: Product: syz [ 173.876350][ T5917] usb 6-1: Manufacturer: syz [ 173.887754][ T5917] usb 6-1: SerialNumber: syz [ 173.888939][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 173.909801][ T5917] usb 6-1: config 0 descriptor?? [ 174.155207][ T24] usb 6-1: USB disconnect, device number 2 [ 174.655491][ T5954] stb0899_attach: Driver disabled by Kconfig [ 174.661761][ T5954] az6027: no front-end attached [ 174.661761][ T5954] [ 174.682529][ T5954] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 174.695301][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 174.724261][ T5954] dvb-usb: schedule remote query interval to 400 msecs. [ 174.755556][ T5954] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 174.919351][ T5883] usb 3-1: USB disconnect, device number 11 [ 175.091377][ T5883] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 176.403767][ T30] audit: type=1326 audit(1769390769.337:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.0.554" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73bd539 code=0x0 [ 176.494383][ T7335] netlink: 160 bytes leftover after parsing attributes in process `syz.4.557'. [ 177.871213][ T7359] syzkaller0: entered promiscuous mode [ 177.911493][ T7359] syzkaller0: entered allmulticast mode [ 177.934511][ T7364] sch_tbf: peakrate 16 is lower than or equals to rate 2225451442729165302 ! [ 180.720021][ T7375] netlink: 160 bytes leftover after parsing attributes in process `syz.4.572'. [ 181.309703][ T7436] netlink: 160 bytes leftover after parsing attributes in process `syz.2.598'. [ 181.866751][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.600'. [ 182.855708][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 183.113281][ T7480] syzkaller1: entered promiscuous mode [ 183.147357][ T7480] syzkaller1: entered allmulticast mode [ 183.956173][ T7495] netlink: 'syz.5.623': attribute type 10 has an invalid length. [ 183.964054][ T7495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.623'. [ 184.344463][ T7495] team0: Port device geneve0 added [ 185.260465][ T7523] syzkaller0: entered promiscuous mode [ 185.267744][ T7523] syzkaller0: entered allmulticast mode [ 185.962071][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.645'. [ 186.795517][ T5883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 186.895605][ T5897] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 186.945500][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 186.963532][ T5883] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 186.973558][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.982785][ T5883] usb 1-1: Product: syz [ 186.987365][ T5883] usb 1-1: Manufacturer: syz [ 186.992130][ T5883] usb 1-1: SerialNumber: syz [ 187.000138][ T5883] usb 1-1: config 0 descriptor?? [ 187.057849][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 187.068431][ T5897] usb 3-1: config 1 has an invalid interface number: 87 but max is 1 [ 187.080320][ T5897] usb 3-1: config 1 has an invalid interface number: 166 but max is 1 [ 187.092682][ T5897] usb 3-1: config 1 has no interface number 0 [ 187.105314][ T5897] usb 3-1: config 1 has no interface number 1 [ 187.150058][ T5897] usb 3-1: config 1 interface 166 altsetting 242 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 187.208304][ T5897] usb 3-1: config 1 interface 87 has no altsetting 0 [ 187.257372][ T5897] usb 3-1: config 1 interface 166 has no altsetting 0 [ 187.282236][ T5897] usb 3-1: New USB device found, idVendor=12d1, idProduct=3133, bcdDevice=5b.62 [ 187.314279][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.334690][ T5897] usb 3-1: Product: syz [ 187.347769][ T5897] usb 3-1: Manufacturer: syz [ 187.377859][ T5897] usb 3-1: SerialNumber: syz [ 187.402469][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 187.424092][ T5883] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 187.458910][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.500716][ T5883] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 187.526701][ T5883] usb 1-1: media controller created [ 187.569058][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.611821][ T5897] option 3-1:1.87: GSM modem (1-port) converter detected [ 187.636125][ T7566] ------------[ cut here ]------------ [ 187.641924][ T7566] usb 1-1: BOGUS control dir, pipe 80000780 doesn't match bRequestType c0 [ 187.650790][ T7566] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.0.653/7566 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.661128][ T7566] Modules linked in: [ 187.665551][ T7566] CPU: 0 UID: 0 PID: 7566 Comm: syz.0.653 Not tainted syzkaller #0 PREEMPT(full) [ 187.676423][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.687192][ T7566] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 187.693555][ T7566] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 187.713522][ T7566] RSP: 0000:ffffc900116a76c8 EFLAGS: 00010246 [ 187.719768][ T7566] RAX: 0000000000000000 RBX: ffff88802f36a700 RCX: 0000000080000780 [ 187.727882][ T7566] RDX: ffff88807aecd5a0 RSI: ffffffff8c3dcd80 RDI: ffffffff8fdbb030 [ 187.736221][ T7566] RBP: 1ffff110144c0484 R08: 00000000000000c0 R09: 0000000000000000 [ 187.744256][ T7566] R10: ffffc900116a77c0 R11: fffff520022d4f04 R12: ffff88801fecc100 [ 187.752424][ T7566] R13: ffff8880a2602420 R14: 0000000080000780 R15: ffff88807aecd5a0 [ 187.760694][ T7566] FS: 0000000000000000(0000) GS:ffff888125926000(0063) knlGS:00000000f53e6b40 [ 187.769756][ T7566] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 187.776546][ T7566] CR2: 000000000c3af20b CR3: 00000000a4674000 CR4: 00000000003526f0 [ 187.785574][ T7566] Call Trace: [ 187.788891][ T7566] [ 187.793679][ T7566] ? __init_swait_queue_head+0xa9/0x150 [ 187.799382][ T7566] usb_start_wait_urb+0x12b/0x510 [ 187.804459][ T7566] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 187.810199][ T7566] usb_control_msg+0x232/0x3e0 [ 187.815116][ T7566] dtv5100_i2c_msg+0x231/0x2f0 [ 187.819995][ T7566] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 187.825022][ T7566] __i2c_transfer+0x79a/0x1ee0 [ 187.830087][ T7566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 187.836338][ T7566] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 187.842428][ T7566] ? i2c_transfer+0xc8/0x2d0 [ 187.847182][ T7566] i2c_transfer+0x1cc/0x2d0 [ 187.851815][ T7566] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 187.857553][ T7566] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 187.863927][ T7566] ? _copy_from_user+0x94/0xb0 [ 187.868833][ T7566] i2cdev_write+0x113/0x1e0 [ 187.873396][ T7566] vfs_writev+0x4bd/0x990 [ 187.877865][ T7566] ? __pfx_i2cdev_write+0x10/0x10 [ 187.884034][ T7566] ? __pfx_vfs_writev+0x10/0x10 [ 187.889534][ T7566] ? __fget_files+0x2a/0x420 [ 187.894201][ T7566] ? __fget_files+0x3a0/0x420 [ 187.899165][ T7566] ? __fget_files+0x2a/0x420 [ 187.903802][ T7566] __ia32_compat_sys_pwritev+0x1c6/0x2c0 [ 187.909610][ T7566] ? __pfx___ia32_compat_sys_pwritev+0x10/0x10 [ 187.915896][ T7566] __do_fast_syscall_32+0x1d2/0x540 [ 187.921308][ T7566] ? lockdep_hardirqs_on+0x7a/0x110 [ 187.926756][ T7566] ? do_fast_syscall_32+0x33/0x70 [ 187.932063][ T7566] ? asm_int80_emulation+0x1a/0x20 [ 187.937797][ T7566] ? do_int80_emulation+0x20e/0x400 [ 187.943294][ T7566] do_fast_syscall_32+0x33/0x70 [ 187.948476][ T7566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.954849][ T7566] RIP: 0023:0xf73bd539 [ 187.959038][ T7566] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 187.979027][ T7566] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 000000000000014e [ 187.988531][ T7566] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 187.997260][ T7566] RDX: 0000000000000001 RSI: 000000007c58fc9b RDI: 000000000000000c [ 188.005492][ T7566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.013622][ T7566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 188.021919][ T7566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.030670][ T7566] [ 188.033723][ T7566] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 188.041029][ T7566] CPU: 0 UID: 0 PID: 7566 Comm: syz.0.653 Not tainted syzkaller #0 PREEMPT(full) [ 188.050235][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.060293][ T7566] Call Trace: [ 188.063578][ T7566] [ 188.066516][ T7566] vpanic+0x1e0/0x670 [ 188.070513][ T7566] panic+0xc5/0xd0 [ 188.074677][ T7566] ? __pfx_panic+0x10/0x10 [ 188.079123][ T7566] __warn+0x315/0x4a0 [ 188.083282][ T7566] ? usb_submit_urb+0x1052/0x18b0 [ 188.088331][ T7566] ? usb_submit_urb+0x1052/0x18b0 [ 188.093370][ T7566] __report_bug+0x29a/0x540 [ 188.097894][ T7566] ? usb_submit_urb+0x1052/0x18b0 [ 188.103192][ T7566] ? __pfx___report_bug+0x10/0x10 [ 188.108409][ T7566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 188.114448][ T7566] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.119658][ T7566] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 188.125477][ T7566] ? stack_depot_save_flags+0x3f3/0x810 [ 188.131056][ T7566] report_bug_entry+0x19a/0x290 [ 188.136010][ T7566] ? usb_submit_urb+0x1114/0x18b0 [ 188.141151][ T7566] ? usb_submit_urb+0x1119/0x18b0 [ 188.146219][ T7566] handle_bug+0xca/0x200 [ 188.150587][ T7566] exc_invalid_op+0x1a/0x50 [ 188.155197][ T7566] asm_exc_invalid_op+0x1a/0x20 [ 188.160233][ T7566] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 188.165883][ T7566] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 188.185622][ T7566] RSP: 0000:ffffc900116a76c8 EFLAGS: 00010246 [ 188.191789][ T7566] RAX: 0000000000000000 RBX: ffff88802f36a700 RCX: 0000000080000780 [ 188.200050][ T7566] RDX: ffff88807aecd5a0 RSI: ffffffff8c3dcd80 RDI: ffffffff8fdbb030 [ 188.208036][ T7566] RBP: 1ffff110144c0484 R08: 00000000000000c0 R09: 0000000000000000 [ 188.216011][ T7566] R10: ffffc900116a77c0 R11: fffff520022d4f04 R12: ffff88801fecc100 [ 188.223988][ T7566] R13: ffff8880a2602420 R14: 0000000080000780 R15: ffff88807aecd5a0 [ 188.232073][ T7566] ? usb_submit_urb+0x10a3/0x18b0 [ 188.237304][ T7566] ? __init_swait_queue_head+0xa9/0x150 [ 188.242865][ T7566] usb_start_wait_urb+0x12b/0x510 [ 188.247900][ T7566] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 188.253478][ T7566] usb_control_msg+0x232/0x3e0 [ 188.258338][ T7566] dtv5100_i2c_msg+0x231/0x2f0 [ 188.263472][ T7566] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 188.268512][ T7566] __i2c_transfer+0x79a/0x1ee0 [ 188.273545][ T7566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 188.279665][ T7566] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 188.285499][ T7566] ? i2c_transfer+0xc8/0x2d0 [ 188.290126][ T7566] i2c_transfer+0x1cc/0x2d0 [ 188.294652][ T7566] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 188.300350][ T7566] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 188.306549][ T7566] ? _copy_from_user+0x94/0xb0 [ 188.311557][ T7566] i2cdev_write+0x113/0x1e0 [ 188.316259][ T7566] vfs_writev+0x4bd/0x990 [ 188.320774][ T7566] ? __pfx_i2cdev_write+0x10/0x10 [ 188.326014][ T7566] ? __pfx_vfs_writev+0x10/0x10 [ 188.331154][ T7566] ? __fget_files+0x2a/0x420 [ 188.336329][ T7566] ? __fget_files+0x3a0/0x420 [ 188.341118][ T7566] ? __fget_files+0x2a/0x420 [ 188.345758][ T7566] __ia32_compat_sys_pwritev+0x1c6/0x2c0 [ 188.351592][ T7566] ? __pfx___ia32_compat_sys_pwritev+0x10/0x10 [ 188.358044][ T7566] __do_fast_syscall_32+0x1d2/0x540 [ 188.363368][ T7566] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.368773][ T7566] ? do_fast_syscall_32+0x33/0x70 [ 188.373898][ T7566] ? asm_int80_emulation+0x1a/0x20 [ 188.379199][ T7566] ? do_int80_emulation+0x20e/0x400 [ 188.384503][ T7566] do_fast_syscall_32+0x33/0x70 [ 188.389633][ T7566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.395974][ T7566] RIP: 0023:0xf73bd539 [ 188.400490][ T7566] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 188.420195][ T7566] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 000000000000014e [ 188.428624][ T7566] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 188.436598][ T7566] RDX: 0000000000000001 RSI: 000000007c58fc9b RDI: 000000000000000c [ 188.444578][ T7566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.452643][ T7566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 188.460619][ T7566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.468693][ T7566] [ 188.472229][ T7566] Kernel Offset: disabled [ 188.476549][ T7566] Rebooting in 86400 seconds..